StartTime Dur Proto SrcAddr Sport Dir DstAddr Dport State sTos dTos TotPkts TotBytes Label 1970/01/01 01:00:00.000000 0.000000 llc 00:00:00:00:00:00 0 -> 00:00:00:00:00:00 0 INT 1 60 flow=Background 1970/01/01 01:00:08.993565 3.004389 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 01:00:09.235845 3.217573 arp 10.0.2.22 who 10.0.2.2 CON 6 252 flow=Background-ARP 1970/01/01 01:00:09.454159 1.993066 arp 0.0.0.0 who 10.0.2.22 INT 3 126 flow=Background-ARP 1970/01/01 01:00:09.454243 0.000000 ipv6-icmp :: 135 -> ff02::1:ff01:e8a5 0 NNS 0 1 78 flow=Background 1970/01/01 01:00:09.454271 3.996010 ipv6-icmp fe80::705a:530f:1701:e8a5 133 -> ff02::2 0 NRS 0 2 140 flow=Background 1970/01/01 01:00:09.454315 0.500733 ipv6-icmp fe80::705a:530f:1701:e8a5 143 -> ff02::16 0 UNK 0 2 180 flow=Background 1970/01/01 01:00:11.362014 0.000000 udp 10.0.2.22 52696 -> 8.8.8.8 53 INT 0 1 76 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:00:11.371610 0.000124 arp 10.0.2.2 who 10.0.2.22 CON 2 84 flow=Background-ARP 1970/01/01 01:00:12.358791 0.009332 udp 10.0.2.22 52696 <-> 8.8.4.4 53 CON 0 0 2 168 flow=From-Botnet-V1-DNS 1970/01/01 01:00:12.368534 0.009274 udp 10.0.2.22 51857 <-> 8.8.4.4 53 CON 0 0 2 180 flow=From-Botnet-V1-DNS 1970/01/01 01:00:16.004074 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:00:17.455430 0.000000 ipv6-icmp fe80::705a:530f:1701:e8a5 133 -> ff02::2 0 NRS 0 1 70 flow=Background 1970/01/01 01:00:24.005102 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:00:40.248726 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:01:12.254391 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:02:53.238858 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:02:53.239060 0.009842 udp 10.0.2.22 51858 <-> 8.8.8.8 53 CON 0 0 2 162 flow=From-Botnet-V1-DNS 1970/01/01 01:02:53.249142 0.226450 tcp 10.0.2.22 49158 -> 108.168.255.244 80 FSPA* 0 0 10 1330 flow=From-Botnet-V1-TCP-Established 1970/01/01 01:02:53.475872 0.000000 udp 10.0.2.22 51859 -> 194.165.17.3 53 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:02:53.475961 0.160307 udp 10.0.2.22 51859 <-> 66.85.130.234 53 CON 0 0 2 116 flow=From-Botnet-V1-DNS 1970/01/01 01:02:53.476129 0.000000 udp 10.0.2.22 51860 -> 194.165.17.3 53 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:02:53.476212 0.159375 udp 10.0.2.22 51860 <-> 66.85.130.234 53 CON 0 0 2 116 flow=From-Botnet-V1-DNS 1970/01/01 01:02:53.523294 0.000000 udp 10.0.2.22 51861 -> 194.165.17.3 53 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:02:53.523423 0.160060 udp 10.0.2.22 51861 <-> 66.85.130.234 53 CON 0 0 2 116 flow=From-Botnet-V1-DNS 1970/01/01 01:02:53.524602 0.000000 udp 10.0.2.22 51862 -> 194.165.17.3 53 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:02:53.524693 0.158554 udp 10.0.2.22 51862 <-> 66.85.130.234 53 CON 0 0 2 116 flow=From-Botnet-V1-DNS 1970/01/01 01:02:53.524897 0.000000 udp 10.0.2.22 51863 -> 194.165.17.3 53 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:02:53.524993 0.161339 udp 10.0.2.22 51863 <-> 66.85.130.234 53 CON 0 0 2 116 flow=From-Botnet-V1-DNS 1970/01/01 01:02:53.525287 0.000000 udp 10.0.2.22 51864 -> 194.165.17.3 53 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:02:53.525522 0.161164 udp 10.0.2.22 51864 <-> 66.85.130.234 53 CON 0 0 2 116 flow=From-Botnet-V1-DNS 1970/01/01 01:02:53.635587 0.000000 icmp 10.0.2.22 0x0303 -> 66.85.130.234 0x94ca URP 0 1 82 flow=Background 1970/01/01 01:02:57.526400 0.000000 udp 10.0.2.22 51865 -> 194.165.17.3 53 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:02:57.526521 0.160824 udp 10.0.2.22 51865 <-> 66.85.130.234 53 CON 0 0 2 116 flow=From-Botnet-V1-DNS 1970/01/01 01:02:57.687345 0.000000 icmp 10.0.2.22 0x0303 -> 66.85.130.234 0x99ca URP 0 1 82 flow=Background 1970/01/01 01:03:02.148176 0.000000 udp 10.0.2.22 51866 -> 194.165.17.3 53 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:02.148281 0.160932 udp 10.0.2.22 51866 <-> 66.85.130.234 53 CON 0 0 2 116 flow=From-Botnet-V1-DNS 1970/01/01 01:03:02.148840 0.000000 udp 10.0.2.22 51867 -> 194.165.17.3 53 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:02.148930 0.162532 udp 10.0.2.22 51867 <-> 66.85.130.234 53 CON 0 0 2 116 flow=From-Botnet-V1-DNS 1970/01/01 01:03:02.309213 0.000000 icmp 10.0.2.22 0x0303 -> 66.85.130.234 0x9aca URP 0 1 82 flow=Background 1970/01/01 01:03:02.389962 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:03.384047 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:04.386293 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:05.386945 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:06.388834 0.000000 udp 10.0.2.22 51868 -> 135.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:07.390085 0.000000 udp 10.0.2.22 51868 -> 134.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:08.391632 0.000000 udp 10.0.2.22 51868 -> 117.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:09.383166 0.000000 udp 10.0.2.22 51868 -> 115.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:10.384685 0.000000 udp 10.0.2.22 51868 -> 92.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:11.385612 0.000000 udp 10.0.2.22 51868 -> 88.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:12.387342 0.000000 udp 10.0.2.22 51868 -> 87.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:13.388584 0.000000 udp 10.0.2.22 51868 -> 71.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:17.384900 0.000000 udp 10.0.2.22 51868 -> 89.230.229.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:18.386135 0.000000 udp 10.0.2.22 51868 -> 72.23.217.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:19.388090 0.000000 udp 10.0.2.22 51868 -> 76.184.203.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:20.388496 0.000000 udp 10.0.2.22 51868 -> 67.186.148.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:21.389933 0.381464 udp 10.0.2.22 51868 -> 117.198.87.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:21.771397 0.000000 icmp 117.198.87.254 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 01:03:22.261716 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:03:22.391404 0.000000 udp 10.0.2.22 51868 -> 46.196.238.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:23.383400 0.000000 udp 10.0.2.22 51868 -> 117.212.154.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:24.384560 0.000000 udp 10.0.2.22 51868 -> 183.82.143.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:25.385823 0.000000 udp 10.0.2.22 51868 -> 67.87.148.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:26.387141 0.000000 udp 10.0.2.22 51868 -> 94.244.184.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:27.389075 0.000000 udp 10.0.2.22 51868 -> 125.231.157.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:28.390632 0.000000 udp 10.0.2.22 51868 -> 85.86.238.238 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:29.391966 0.000000 udp 10.0.2.22 51868 -> 5.15.164.237 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:30.382965 0.000000 udp 10.0.2.22 51868 -> 79.132.16.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:31.384960 0.000000 udp 10.0.2.22 51868 -> 180.26.69.233 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:32.386189 0.000000 udp 10.0.2.22 51868 -> 117.235.254.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:33.387412 0.000000 udp 10.0.2.22 51868 -> 98.214.29.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:34.389125 0.000000 udp 10.0.2.22 51868 -> 107.16.232.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:35.390449 0.000000 udp 10.0.2.22 51868 -> 218.166.36.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:36.391702 0.000000 udp 10.0.2.22 51868 -> 178.117.82.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:37.383289 0.000000 udp 10.0.2.22 51868 -> 178.216.97.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:38.385101 0.000000 udp 10.0.2.22 51868 -> 115.241.104.9 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:39.385980 0.000000 udp 10.0.2.22 51868 -> 79.184.135.224 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:40.387732 0.000000 udp 10.0.2.22 51868 -> 95.104.15.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:41.388691 0.000000 udp 10.0.2.22 51868 -> 64.136.198.222 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:42.390248 0.000000 udp 10.0.2.22 51868 -> 78.225.129.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:43.391795 0.000000 udp 10.0.2.22 51868 -> 117.194.125.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:44.383300 0.000000 udp 10.0.2.22 51868 -> 98.165.2.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:45.384887 0.000000 udp 10.0.2.22 51868 -> 50.90.152.221 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:46.386506 0.000000 udp 10.0.2.22 51868 -> 5.28.122.221 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:47.387763 0.000000 udp 10.0.2.22 51868 -> 46.223.85.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:48.389233 0.000000 udp 10.0.2.22 51868 -> 78.204.100.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:49.260006 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:03:49.390197 0.000000 udp 10.0.2.22 51868 -> 79.113.43.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:50.391695 0.000000 udp 10.0.2.22 51868 -> 68.225.165.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:51.383280 0.000000 udp 10.0.2.22 51868 -> 192.168.0.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:52.384763 0.000000 udp 10.0.2.22 51868 -> 184.170.168.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:53.386426 0.000000 udp 10.0.2.22 51868 -> 65.33.176.217 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:54.387370 0.000000 udp 10.0.2.22 51868 -> 178.156.98.25 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:55.388841 0.000000 udp 10.0.2.22 51868 -> 78.230.128.216 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:56.390759 0.000000 udp 10.0.2.22 51868 -> 75.66.197.214 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:57.391980 0.000000 udp 10.0.2.22 51868 -> 75.15.65.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:58.383636 0.000000 udp 10.0.2.22 51868 -> 61.70.109.213 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:03:59.385170 0.000000 udp 10.0.2.22 51868 -> 216.26.114.212 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:00.386424 0.000000 udp 10.0.2.22 51868 -> 79.51.251.211 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:01.387455 0.000000 udp 10.0.2.22 51868 -> 115.136.219.211 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:02.389424 0.000000 udp 10.0.2.22 51868 -> 50.21.205.29 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:03.391001 0.000000 udp 10.0.2.22 51868 -> 116.203.81.209 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:04.392307 0.000000 udp 10.0.2.22 51868 -> 213.141.39.209 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:05.383875 0.000000 udp 10.0.2.22 51868 -> 190.75.90.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:06.385048 0.000000 udp 10.0.2.22 51868 -> 111.91.117.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:07.386688 0.000000 udp 10.0.2.22 51868 -> 24.236.193.31 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:08.387596 0.000000 udp 10.0.2.22 51868 -> 5.14.168.208 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:09.389206 0.000000 udp 10.0.2.22 51868 -> 113.193.42.208 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:10.391111 0.000000 udp 10.0.2.22 51868 -> 46.119.197.31 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:11.392052 0.000000 udp 10.0.2.22 51868 -> 88.161.232.31 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:12.383330 0.000000 udp 10.0.2.22 51868 -> 117.198.228.206 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:13.385247 0.000000 udp 10.0.2.22 51868 -> 66.229.174.32 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:14.386385 0.000000 udp 10.0.2.22 51868 -> 84.237.179.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:15.387789 0.000000 udp 10.0.2.22 51868 -> 1.174.125.206 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:16.258785 0.000093 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:04:16.389191 0.000000 udp 10.0.2.22 51868 -> 68.82.146.204 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:17.390588 0.000000 udp 10.0.2.22 51868 -> 24.187.144.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:18.392211 0.000000 udp 10.0.2.22 51868 -> 112.104.140.203 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:19.383597 0.000000 udp 10.0.2.22 51868 -> 68.45.107.202 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:20.384902 0.000000 udp 10.0.2.22 51868 -> 173.174.74.35 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:21.386242 0.000000 udp 10.0.2.22 51868 -> 97.85.166.35 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:22.388308 0.000000 udp 10.0.2.22 51868 -> 91.146.228.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:23.389618 0.000000 udp 10.0.2.22 51868 -> 108.178.127.39 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:24.390653 0.000000 udp 10.0.2.22 51868 -> 86.56.183.39 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:25.392113 0.000000 udp 10.0.2.22 51868 -> 83.213.44.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:26.383494 0.000000 udp 10.0.2.22 51868 -> 106.186.61.42 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:27.385332 0.000000 udp 10.0.2.22 51868 -> 92.87.69.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:28.386880 0.000000 udp 10.0.2.22 51868 -> 81.183.121.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:29.387749 0.000000 udp 10.0.2.22 51868 -> 206.174.112.47 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:30.389627 0.000000 udp 10.0.2.22 51868 -> 60.42.169.47 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:31.390730 0.000000 udp 10.0.2.22 51868 -> 117.204.148.50 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:32.392235 0.000000 udp 10.0.2.22 51868 -> 118.233.166.52 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:33.383702 0.000000 udp 10.0.2.22 51868 -> 128.163.208.52 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:34.385632 0.000000 udp 10.0.2.22 51868 -> 149.169.235.194 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:35.386442 0.000000 udp 10.0.2.22 51868 -> 70.117.20.194 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:36.388002 0.000000 udp 10.0.2.22 51868 -> 86.107.19.53 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:37.389464 0.000000 udp 10.0.2.22 51868 -> 24.209.204.54 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:38.391021 0.000000 udp 10.0.2.22 51868 -> 180.215.27.193 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:39.392543 0.067195 udp 10.0.2.22 51868 -> 77.230.55.55 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:39.459738 0.000000 icmp 77.230.55.55 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 01:04:40.384202 0.000000 udp 10.0.2.22 51868 -> 210.6.70.56 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:41.385052 0.000000 udp 10.0.2.22 51868 -> 203.192.221.56 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:42.386541 0.000000 udp 10.0.2.22 51868 -> 86.122.232.57 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:43.257636 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:04:43.388338 0.000000 udp 10.0.2.22 51868 -> 70.114.13.62 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:44.390033 0.000000 udp 10.0.2.22 51868 -> 183.82.141.188 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:45.391342 0.000000 udp 10.0.2.22 51868 -> 97.94.166.63 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:46.392375 0.000000 udp 10.0.2.22 51868 -> 66.108.231.66 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:47.383886 0.000000 udp 10.0.2.22 51868 -> 75.210.121.68 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:48.385273 0.000000 udp 10.0.2.22 51868 -> 68.191.101.185 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:49.386647 0.000000 udp 10.0.2.22 51868 -> 190.206.50.75 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:50.388765 0.000000 udp 10.0.2.22 51868 -> 46.47.85.183 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:51.390035 0.000000 udp 10.0.2.22 51868 -> 92.225.22.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:52.391517 0.000000 udp 10.0.2.22 51868 -> 180.160.94.78 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:53.392855 0.000000 udp 10.0.2.22 51868 -> 5.15.7.182 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:54.383643 0.000000 udp 10.0.2.22 51868 -> 111.95.17.181 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:55.385860 0.000000 udp 10.0.2.22 51868 -> 96.35.247.176 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:56.386543 0.000000 udp 10.0.2.22 51868 -> 66.25.71.176 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:57.388109 0.000000 udp 10.0.2.22 51868 -> 190.77.134.172 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:58.390077 0.000000 udp 10.0.2.22 51868 -> 117.201.73.172 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:04:59.391380 0.000000 udp 10.0.2.22 51868 -> 195.67.21.170 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:00.392285 0.000000 udp 10.0.2.22 51868 -> 187.84.75.168 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:01.384416 0.000000 udp 10.0.2.22 51868 -> 186.222.144.167 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:02.385713 0.000000 udp 10.0.2.22 51868 -> 24.89.46.166 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:03.387152 0.000000 udp 10.0.2.22 51868 -> 85.231.172.163 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:04.388253 0.000000 udp 10.0.2.22 51868 -> 95.223.179.162 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:05.389782 0.000000 udp 10.0.2.22 51868 -> 109.228.67.162 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:06.391235 0.000000 udp 10.0.2.22 51868 -> 108.204.198.160 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:07.392347 0.000000 udp 10.0.2.22 51868 -> 46.175.144.159 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:08.384014 0.000000 udp 10.0.2.22 51868 -> 86.125.62.158 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:09.385234 0.000000 udp 10.0.2.22 51868 -> 24.151.17.158 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:10.266642 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:05:10.387048 0.000000 udp 10.0.2.22 51868 -> 68.56.215.157 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:11.388614 0.000000 udp 10.0.2.22 51868 -> 69.251.222.155 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:12.390134 0.000000 udp 10.0.2.22 51868 -> 184.20.157.153 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:13.391406 0.000000 udp 10.0.2.22 51868 -> 67.172.117.152 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:14.393118 0.000000 udp 10.0.2.22 51868 -> 78.90.169.148 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:15.383829 0.000000 udp 10.0.2.22 51868 -> 67.174.109.148 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:16.385671 0.000000 udp 10.0.2.22 51868 -> 117.223.39.146 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:17.387353 0.000000 udp 10.0.2.22 51868 -> 75.146.12.145 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:18.388967 0.000000 udp 10.0.2.22 51868 -> 84.3.182.144 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:19.389706 0.000000 udp 10.0.2.22 51868 -> 76.202.163.144 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:20.391325 0.000000 udp 10.0.2.22 51868 -> 72.47.154.144 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:21.393005 0.000000 udp 10.0.2.22 51868 -> 95.220.247.142 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:22.384473 0.000000 udp 10.0.2.22 51868 -> 189.55.157.140 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:23.385722 0.000000 udp 10.0.2.22 51868 -> 187.63.0.139 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:24.387086 0.000000 udp 10.0.2.22 51868 -> 75.105.197.137 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:25.388844 0.000000 udp 10.0.2.22 51868 -> 67.222.238.136 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:26.389767 0.000000 udp 10.0.2.22 51868 -> 190.72.29.136 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:27.391220 0.000000 udp 10.0.2.22 51868 -> 75.185.214.135 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:28.393202 0.000000 udp 10.0.2.22 51868 -> 68.188.142.134 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:29.384047 0.000000 udp 10.0.2.22 51868 -> 182.171.123.133 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:30.385872 0.000000 udp 10.0.2.22 51868 -> 70.190.5.132 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:31.387418 0.000000 udp 10.0.2.22 51868 -> 188.2.235.131 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:32.388307 0.312121 udp 10.0.2.22 51868 -> 122.218.195.131 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:32.700428 0.000000 icmp 122.218.195.131 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 01:05:33.390502 0.000000 udp 10.0.2.22 51868 -> 123.195.122.127 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:34.391209 0.000000 udp 10.0.2.22 51868 -> 98.244.222.126 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:35.382894 0.000000 udp 10.0.2.22 51868 -> 66.205.100.126 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:36.384724 0.000000 udp 10.0.2.22 51868 -> 95.43.110.123 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:37.265658 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:05:37.386258 0.000000 udp 10.0.2.22 51868 -> 79.116.61.123 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:38.387230 0.000000 udp 10.0.2.22 51868 -> 188.67.198.122 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:39.388880 0.000000 udp 10.0.2.22 51868 -> 200.189.89.122 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:40.389910 0.000000 udp 10.0.2.22 51868 -> 70.81.143.121 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:41.391707 0.000000 udp 10.0.2.22 51868 -> 123.110.96.121 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:42.382806 0.000000 udp 10.0.2.22 51868 -> 120.88.36.120 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:43.384375 0.000000 udp 10.0.2.22 51868 -> 76.107.45.119 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:44.385958 0.000000 udp 10.0.2.22 51868 -> 71.7.230.115 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:45.387603 0.000000 udp 10.0.2.22 51868 -> 62.43.140.114 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:46.388863 0.000000 udp 10.0.2.22 51868 -> 187.105.42.111 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:47.390133 0.000000 udp 10.0.2.22 51868 -> 62.16.241.110 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:48.391790 0.000000 udp 10.0.2.22 51868 -> 27.5.185.78 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:49.383314 0.000000 udp 10.0.2.22 51868 -> 181.51.195.84 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:50.384239 0.000000 udp 10.0.2.22 51868 -> 62.141.210.108 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:51.385803 0.000000 udp 10.0.2.22 51868 -> 97.71.44.106 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:52.387267 0.000000 udp 10.0.2.22 51868 -> 208.124.14.103 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:53.388848 0.000000 udp 10.0.2.22 51868 -> 75.86.252.84 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:54.389913 0.000000 udp 10.0.2.22 51868 -> 24.58.235.85 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:55.391925 0.000000 udp 10.0.2.22 51868 -> 82.151.90.90 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:56.383115 0.000000 udp 10.0.2.22 51868 -> 116.202.108.93 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:57.384244 0.000000 udp 10.0.2.22 51868 -> 50.72.220.94 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:58.386079 0.000000 udp 10.0.2.22 51868 -> 76.30.232.94 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:05:59.387198 0.000000 udp 10.0.2.22 51868 -> 24.176.253.96 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:00.389023 0.000000 udp 10.0.2.22 51868 -> 70.112.198.100 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:01.390546 0.000000 udp 10.0.2.22 51868 -> 95.57.160.98 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:02.391764 0.000000 udp 10.0.2.22 51868 -> 177.172.195.97 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:03.383453 0.341788 udp 10.0.2.22 51868 -> 186.11.55.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:03.725241 0.000000 icmp 186.11.55.2 0x0303 -> 10.0.2.22 0x5040 URP 192 1 70 flow=Background 1970/01/01 01:06:04.264405 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:06:04.385047 0.000000 udp 10.0.2.22 51868 -> 79.117.235.96 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:05.386372 0.000000 udp 10.0.2.22 51868 -> 178.149.163.95 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:06.387683 0.000000 udp 10.0.2.22 51868 -> 212.106.235.94 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:07.388751 0.000000 udp 10.0.2.22 51868 -> 68.34.123.101 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:08.390605 0.000000 udp 10.0.2.22 51868 -> 79.113.53.102 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:09.391666 0.000000 udp 10.0.2.22 51868 -> 14.96.130.93 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:10.383602 0.000000 udp 10.0.2.22 51868 -> 116.73.56.102 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:11.384719 0.000000 udp 10.0.2.22 51868 -> 74.142.195.92 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:12.386509 0.000000 udp 10.0.2.22 51868 -> 159.205.163.91 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:13.387738 0.000000 udp 10.0.2.22 51868 -> 77.175.75.91 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:14.388723 0.091741 udp 10.0.2.22 51868 <-> 87.224.241.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:06:14.538227 3.004969 tcp 10.0.2.22 49168 -> 87.224.241.90 16464 S_ 0 2 132 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:06:14.538780 3.004508 tcp 10.0.2.22 49169 -> 87.224.241.90 16464 S_ 0 2 132 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:06:14.539319 3.004010 tcp 10.0.2.22 49170 -> 87.224.241.90 16464 S_ 0 2 132 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:06:14.549982 3.003209 tcp 10.0.2.22 49171 -> 87.224.241.90 16464 S_ 0 2 132 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:06:14.550635 3.002639 tcp 10.0.2.22 49172 -> 87.224.241.90 16464 S_ 0 2 132 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:06:15.390535 0.000000 udp 10.0.2.22 51868 -> 24.176.253.96 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:16.391969 0.000000 udp 10.0.2.22 51868 -> 70.112.198.100 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:17.383461 0.000000 udp 10.0.2.22 51868 -> 95.57.160.98 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:18.384628 0.000000 udp 10.0.2.22 51868 -> 177.172.195.97 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:19.386507 0.000000 udp 10.0.2.22 51868 -> 186.11.55.2 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:20.387966 0.000000 udp 10.0.2.22 51868 -> 79.117.235.96 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:21.389583 0.000000 udp 10.0.2.22 51868 -> 178.149.163.95 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:22.390218 0.000000 udp 10.0.2.22 51868 -> 212.106.235.94 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:23.392203 0.000000 udp 10.0.2.22 51868 -> 68.34.123.101 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:23.541975 0.000000 tcp 10.0.2.22 49168 -> 87.224.241.90 16464 S_ 0 1 62 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:06:23.542058 0.000000 tcp 10.0.2.22 49169 -> 87.224.241.90 16464 S_ 0 1 62 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:06:23.542093 0.000000 tcp 10.0.2.22 49170 -> 87.224.241.90 16464 S_ 0 1 62 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:06:23.551995 0.000000 tcp 10.0.2.22 49171 -> 87.224.241.90 16464 S_ 0 1 62 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:06:23.552062 0.000000 tcp 10.0.2.22 49172 -> 87.224.241.90 16464 S_ 0 1 62 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:06:24.383057 0.000000 udp 10.0.2.22 51868 -> 79.113.53.102 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:25.384832 0.000000 udp 10.0.2.22 51868 -> 14.96.130.93 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:26.386308 0.000000 udp 10.0.2.22 51868 -> 116.73.56.102 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:27.387640 0.000000 udp 10.0.2.22 51868 -> 74.142.195.92 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:28.389425 0.000000 udp 10.0.2.22 51868 -> 159.205.163.91 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:29.390292 0.000000 udp 10.0.2.22 51868 -> 77.175.75.91 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:30.392356 0.116749 udp 10.0.2.22 51868 <-> 87.224.241.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:06:30.509754 2.996375 tcp 10.0.2.22 49173 -> 87.224.241.90 16464 S_ 0 2 132 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:06:30.510006 2.996215 tcp 10.0.2.22 49174 -> 87.224.241.90 16464 S_ 0 2 132 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:06:30.510246 2.996012 tcp 10.0.2.22 49175 -> 87.224.241.90 16464 S_ 0 2 132 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:06:30.510485 2.995810 tcp 10.0.2.22 49176 -> 87.224.241.90 16464 S_ 0 2 132 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:06:30.510743 2.995587 tcp 10.0.2.22 49177 -> 87.224.241.90 16464 S_ 0 2 132 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:06:31.262948 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:06:31.383253 0.000000 udp 10.0.2.22 51868 -> 24.176.253.96 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:31.556137 0.009771 udp 10.0.2.22 54083 <-> 8.8.8.8 53 CON 0 0 2 168 flow=From-Botnet-V1-DNS 1970/01/01 01:06:31.566293 0.009395 udp 10.0.2.22 59990 <-> 8.8.8.8 53 CON 0 0 2 180 flow=From-Botnet-V1-DNS 1970/01/01 01:06:32.384836 0.000000 udp 10.0.2.22 51868 -> 70.112.198.100 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:33.386617 0.000000 udp 10.0.2.22 51868 -> 95.57.160.98 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:34.387598 0.000000 udp 10.0.2.22 51868 -> 177.172.195.97 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:35.388867 0.000000 udp 10.0.2.22 51868 -> 186.11.55.2 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:36.390715 0.000000 udp 10.0.2.22 51868 -> 79.117.235.96 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:37.392366 0.000000 udp 10.0.2.22 51868 -> 178.149.163.95 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:38.383453 0.000000 udp 10.0.2.22 51868 -> 212.106.235.94 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:39.385086 0.000000 udp 10.0.2.22 51868 -> 68.34.123.101 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:39.505383 0.000000 tcp 10.0.2.22 49173 -> 87.224.241.90 16464 S_ 0 1 62 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:06:39.505473 0.000000 tcp 10.0.2.22 49174 -> 87.224.241.90 16464 S_ 0 1 62 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:06:39.505510 0.000000 tcp 10.0.2.22 49175 -> 87.224.241.90 16464 S_ 0 1 62 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:06:39.505545 0.000000 tcp 10.0.2.22 49176 -> 87.224.241.90 16464 S_ 0 1 62 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:06:39.505582 0.000000 tcp 10.0.2.22 49177 -> 87.224.241.90 16464 S_ 0 1 62 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:06:40.386508 0.000000 udp 10.0.2.22 51868 -> 79.113.53.102 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:41.387906 0.000000 udp 10.0.2.22 51868 -> 14.96.130.93 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:42.389039 0.000000 udp 10.0.2.22 51868 -> 116.73.56.102 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:43.390711 0.000000 udp 10.0.2.22 51868 -> 74.142.195.92 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:44.392549 0.000000 udp 10.0.2.22 51868 -> 159.205.163.91 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:45.383825 0.000000 udp 10.0.2.22 51868 -> 77.175.75.91 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:46.385171 0.000000 udp 10.0.2.22 51868 -> 89.165.189.90 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:47.386523 0.000000 udp 10.0.2.22 51868 -> 116.202.166.90 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:48.387948 0.000000 udp 10.0.2.22 51868 -> 70.177.74.102 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:49.389014 0.000000 udp 10.0.2.22 51868 -> 92.37.84.102 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:50.390855 0.000000 udp 10.0.2.22 51868 -> 200.232.171.102 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:51.392074 0.000000 udp 10.0.2.22 51868 -> 58.88.232.108 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:52.383537 0.000000 udp 10.0.2.22 51868 -> 173.21.184.110 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:53.385281 0.000000 udp 10.0.2.22 51868 -> 24.19.57.182 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:54.386358 0.000000 udp 10.0.2.22 51868 -> 184.162.72.183 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:55.387733 0.000000 udp 10.0.2.22 51868 -> 109.98.99.184 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:56.389407 0.000000 udp 10.0.2.22 51868 -> 5.14.238.185 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:57.391128 0.000000 udp 10.0.2.22 51868 -> 173.80.41.186 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:58.262248 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:06:58.391979 0.000000 udp 10.0.2.22 51868 -> 190.45.108.188 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:06:59.383694 0.000000 udp 10.0.2.22 51868 -> 109.60.21.189 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:00.385348 0.000000 udp 10.0.2.22 51868 -> 187.22.46.190 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:01.386346 0.000000 udp 10.0.2.22 51868 -> 114.25.114.190 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:02.387908 0.000000 udp 10.0.2.22 51868 -> 114.25.164.190 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:03.389566 0.000000 udp 10.0.2.22 51868 -> 114.24.216.191 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:04.391006 0.000000 udp 10.0.2.22 51868 -> 194.215.125.193 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:05.392463 0.000000 udp 10.0.2.22 51868 -> 95.238.138.193 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:06.383579 0.000000 udp 10.0.2.22 51868 -> 59.124.65.196 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:07.385067 0.000000 udp 10.0.2.22 51868 -> 69.246.193.196 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:08.386664 0.000000 udp 10.0.2.22 51868 -> 27.121.103.197 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:09.388137 0.000000 udp 10.0.2.22 51868 -> 50.131.109.198 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:10.389839 0.000000 udp 10.0.2.22 51868 -> 71.238.168.198 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:11.390759 0.000000 udp 10.0.2.22 51868 -> 187.2.213.198 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:12.392642 0.000000 udp 10.0.2.22 51868 -> 31.176.224.198 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:13.383589 0.000000 udp 10.0.2.22 51868 -> 78.61.245.198 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:14.385567 0.000000 udp 10.0.2.22 51868 -> 69.168.34.199 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:15.387082 0.000000 udp 10.0.2.22 51868 -> 119.244.92.199 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:16.388030 0.000000 udp 10.0.2.22 51868 -> 24.251.141.199 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:16.590540 3.002276 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 01:07:17.389651 0.093395 udp 10.0.2.22 51868 <-> 87.224.241.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:07:17.483514 3.000799 tcp 10.0.2.22 49178 -> 87.224.241.90 16464 S_ 0 2 132 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:07:17.483776 3.000610 tcp 10.0.2.22 49179 -> 87.224.241.90 16464 S_ 0 2 132 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:07:17.484018 3.000395 tcp 10.0.2.22 49180 -> 87.224.241.90 16464 S_ 0 2 132 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:07:17.484243 3.000197 tcp 10.0.2.22 49181 -> 87.224.241.90 16464 S_ 0 2 132 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:07:17.484471 2.999997 tcp 10.0.2.22 49182 -> 87.224.241.90 16464 S_ 0 2 132 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:07:18.391113 0.077926 udp 10.0.2.22 51868 <-> 84.125.195.170 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:07:19.392446 0.000000 udp 10.0.2.22 51868 -> 14.98.86.120 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:20.413957 0.172271 udp 10.0.2.22 51868 <-> 62.18.205.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:07:21.415408 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:22.417160 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:23.418722 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:23.679036 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:07:24.420031 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:25.291324 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:07:25.421110 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:26.422246 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:26.492482 0.000000 tcp 10.0.2.22 49178 -> 87.224.241.90 16464 S_ 0 1 62 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:07:26.492566 0.000000 tcp 10.0.2.22 49179 -> 87.224.241.90 16464 S_ 0 1 62 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:07:26.492607 0.000000 tcp 10.0.2.22 49180 -> 87.224.241.90 16464 S_ 0 1 62 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:07:26.492646 0.000000 tcp 10.0.2.22 49181 -> 87.224.241.90 16464 S_ 0 1 62 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:07:26.492688 0.000000 tcp 10.0.2.22 49182 -> 87.224.241.90 16464 S_ 0 1 62 flow=From-Botnet-V1-TCP-Attempt 1970/01/01 01:07:27.414066 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:28.415184 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:29.417243 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:30.418243 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:31.419415 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:31.680142 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:07:32.421361 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:33.422422 0.063478 udp 10.0.2.22 51868 <-> 95.42.254.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:07:33.486303 0.126895 tcp 10.0.2.22 49183 -> 95.42.254.82 16464 FSPA* 0 0 10 1480 flow=From-Botnet-V1-TCP-Established 1970/01/01 01:07:33.486536 0.125251 tcp 10.0.2.22 49184 -> 95.42.254.82 16464 FSPA* 0 0 10 1272 flow=From-Botnet-V1-TCP-Established 1970/01/01 01:07:33.486776 0.258543 tcp 10.0.2.22 49185 -> 95.42.254.82 16464 FSPA* 0 0 28 13316 flow=From-Botnet-V1-TCP-Established 1970/01/01 01:07:33.487007 0.251224 tcp 10.0.2.22 49186 -> 95.42.254.82 16464 FSPA* 0 0 29 15418 flow=From-Botnet-V1-TCP-Established 1970/01/01 01:07:33.487228 0.311536 tcp 10.0.2.22 49187 -> 95.42.254.82 16464 FSPA* 0 0 47 27654 flow=From-Botnet-V1-TCP-Established 1970/01/01 01:07:33.746843 0.011426 udp 10.0.2.22 59991 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 01:07:33.758564 0.000000 udp 10.0.2.22 59992 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:34.414457 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:35.415743 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:36.416824 0.046713 udp 10.0.2.22 51868 <-> 80.80.41.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:07:37.418602 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:38.420241 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:39.421313 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:40.423160 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:41.414294 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:42.415442 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:43.417123 0.000138 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:43.417261 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:07:44.418663 0.127757 udp 10.0.2.22 51868 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:07:45.419820 0.055110 udp 10.0.2.22 51868 <-> 195.222.80.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:07:46.421165 0.128624 udp 10.0.2.22 51868 <-> 24.122.107.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:07:47.422429 0.208497 udp 10.0.2.22 51868 <-> 67.164.82.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:07:47.683149 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:07:48.414096 0.674369 udp 10.0.2.22 51868 <-> 60.246.152.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:07:49.415770 0.062817 udp 10.0.2.22 51868 <-> 85.180.114.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:07:50.416765 0.388289 udp 10.0.2.22 51868 <-> 114.200.31.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:07:51.418559 0.015951 udp 10.0.2.22 51868 <-> 94.113.97.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:07:52.419916 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:53.421170 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:54.422471 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:55.413956 0.000131 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:07:55.414087 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:07:56.415765 0.465851 udp 10.0.2.22 51868 <-> 197.6.89.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:07:57.417017 0.057973 udp 10.0.2.22 51868 <-> 37.146.132.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:07:58.418598 0.908480 udp 10.0.2.22 51868 <-> 117.201.117.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:07:59.420412 0.138738 udp 10.0.2.22 51868 <-> 71.88.102.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:00.421638 0.065244 udp 10.0.2.22 51868 <-> 84.236.148.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:01.292585 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:08:01.423255 0.000000 udp 10.0.2.22 51868 -> 24.184.36.197 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:08:02.414229 0.289623 udp 10.0.2.22 51868 <-> 182.21.140.198 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:03.415715 0.190081 udp 10.0.2.22 51868 <-> 123.236.200.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:04.417190 0.064807 udp 10.0.2.22 51868 <-> 94.190.190.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:05.418902 0.000000 udp 10.0.2.22 51868 -> 72.23.77.29 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:08:06.420109 0.355526 udp 10.0.2.22 51868 <-> 183.178.231.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:07.421976 0.094630 udp 10.0.2.22 51868 <-> 46.159.185.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:08.412911 0.392726 udp 10.0.2.22 51868 <-> 1.22.70.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:09.414274 0.000000 udp 10.0.2.22 51868 -> 76.178.38.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:08:10.415860 0.342971 udp 10.0.2.22 51868 <-> 123.192.49.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:11.417454 0.000000 udp 10.0.2.22 51868 -> 115.241.1.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:08:12.418766 0.231488 udp 10.0.2.22 51868 <-> 123.201.23.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:13.420147 0.176797 udp 10.0.2.22 51868 <-> 106.51.24.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:14.421311 0.145122 udp 10.0.2.22 51868 <-> 71.56.93.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:15.413294 0.097763 udp 10.0.2.22 51868 <-> 77.232.161.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:16.414187 0.000000 udp 10.0.2.22 51868 -> 111.64.199.196 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:08:17.416162 0.145969 udp 10.0.2.22 51868 <-> 65.27.248.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:18.417276 0.063018 udp 10.0.2.22 51868 <-> 151.77.41.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:19.418631 1.056504 udp 10.0.2.22 51868 <-> 85.226.42.21 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:19.689029 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:08:21.421771 0.049021 udp 10.0.2.22 51868 <-> 5.13.128.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:22.413036 0.115819 udp 10.0.2.22 51868 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:23.414828 0.000000 udp 10.0.2.22 51868 -> 14.97.77.95 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:08:24.416270 0.056784 udp 10.0.2.22 51868 <-> 31.19.152.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:25.417431 0.304120 udp 10.0.2.22 51868 <-> 121.131.107.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:26.418612 0.066130 udp 10.0.2.22 51868 <-> 91.112.150.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:27.420147 1.493587 udp 10.0.2.22 51868 <-> 181.166.121.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:28.291534 0.000108 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:08:28.421789 1.992498 udp 10.0.2.22 51868 -> 101.63.180.239 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:08:29.412953 0.000000 udp 10.0.2.22 51868 -> 182.237.168.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:08:31.416240 0.000000 udp 10.0.2.22 51868 -> 180.215.118.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:08:32.417247 0.000000 udp 10.0.2.22 51868 -> 188.6.67.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:08:33.418705 1.819066 udp 10.0.2.22 51868 <-> 181.166.121.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:34.420387 0.045859 udp 10.0.2.22 51868 <-> 188.24.5.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:35.421852 0.310004 udp 10.0.2.22 51868 <-> 180.220.27.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:36.413168 0.062291 udp 10.0.2.22 51868 <-> 91.112.150.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:37.414701 0.000000 udp 10.0.2.22 51868 -> 182.237.168.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:08:38.416362 0.000000 udp 10.0.2.22 51868 -> 188.6.67.253 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:08:39.417829 0.066382 udp 10.0.2.22 51868 <-> 78.136.117.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:40.419227 0.357953 udp 10.0.2.22 51868 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:41.420787 0.000000 udp 10.0.2.22 51868 -> 123.236.167.238 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:08:42.422078 2.994279 udp 10.0.2.22 51868 -> 79.118.210.237 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:08:43.413701 0.041622 udp 10.0.2.22 51868 <-> 188.24.5.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:44.414619 0.037632 udp 10.0.2.22 51868 <-> 5.15.28.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:46.417937 0.000000 udp 10.0.2.22 51868 -> 94.14.89.235 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:08:47.418977 0.000000 udp 10.0.2.22 51868 -> 123.236.167.238 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:08:48.420413 0.000000 udp 10.0.2.22 51868 -> 188.24.5.233 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:08:49.422290 1.106973 udp 10.0.2.22 51868 <-> 181.166.121.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:50.413103 0.000000 udp 10.0.2.22 51868 -> 180.215.118.1 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:08:51.414832 0.134925 udp 10.0.2.22 51868 <-> 98.226.172.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:52.415919 0.000000 udp 10.0.2.22 51868 -> 5.15.28.239 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:08:53.417556 0.000000 udp 10.0.2.22 51868 -> 123.236.167.238 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:08:54.418851 0.000000 udp 10.0.2.22 51868 -> 182.237.168.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:08:55.290542 0.000109 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:08:55.420315 0.000000 udp 10.0.2.22 51868 -> 180.215.118.1 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:08:56.421621 4.997552 udp 10.0.2.22 51868 <-> 79.118.210.237 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:57.413060 0.044881 udp 10.0.2.22 51868 <-> 188.24.5.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:08:58.414532 0.000000 udp 10.0.2.22 51868 -> 101.63.180.239 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:08:59.416547 0.000000 udp 10.0.2.22 51868 -> 5.15.28.239 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:09:00.417606 4.997675 udp 10.0.2.22 51868 -> 123.236.167.238 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:09:02.420839 0.000000 udp 10.0.2.22 51868 -> 94.14.89.235 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:09:03.422366 0.055421 udp 10.0.2.22 51868 <-> 91.112.150.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:04.413774 0.059157 udp 10.0.2.22 51868 <-> 79.118.210.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:06.416086 3.047060 udp 10.0.2.22 51868 <-> 5.15.28.239 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:07.418157 0.197073 udp 10.0.2.22 51868 <-> 79.42.233.130 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:08.419266 0.000000 udp 10.0.2.22 51868 -> 94.14.89.235 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:09:10.422345 0.000000 udp 10.0.2.22 51868 -> 180.215.118.1 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:09:11.413222 0.056547 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:12.414655 0.357944 udp 10.0.2.22 51868 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:13.416656 1.051377 udp 10.0.2.22 51868 <-> 188.24.5.233 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:15.419270 0.381189 udp 10.0.2.22 51868 <-> 118.161.150.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:16.420643 0.307861 udp 10.0.2.22 51868 <-> 121.159.101.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:17.422000 4.061368 udp 10.0.2.22 51868 <-> 78.136.117.245 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:18.413974 0.000000 udp 10.0.2.22 51868 -> 12.154.98.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:09:19.415123 0.000000 udp 10.0.2.22 51868 -> 182.237.168.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:09:20.416568 0.000000 udp 10.0.2.22 51868 -> 188.6.67.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:09:22.288991 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:09:22.419706 2.075880 udp 10.0.2.22 51868 <-> 91.112.150.234 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:23.420488 0.000000 udp 10.0.2.22 51868 -> 94.14.89.235 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:09:25.413681 0.000000 udp 10.0.2.22 51868 -> 123.236.167.238 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:09:26.414778 0.065609 udp 10.0.2.22 51868 <-> 78.136.117.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:27.416182 0.000000 udp 10.0.2.22 51868 -> 12.154.98.2 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:09:28.417838 0.208147 udp 10.0.2.22 51868 <-> 182.237.168.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:29.419813 0.059163 udp 10.0.2.22 51868 <-> 79.118.210.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:30.421113 0.000000 udp 10.0.2.22 51868 -> 188.6.67.253 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:09:31.422609 0.037712 udp 10.0.2.22 51868 <-> 5.15.28.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:32.413389 0.054777 udp 10.0.2.22 51868 <-> 91.112.150.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:33.414926 1.281836 udp 10.0.2.22 51868 <-> 181.166.121.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:34.416837 0.051694 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:35.417954 0.059509 udp 10.0.2.22 51868 <-> 79.118.210.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:36.419418 0.000000 udp 10.0.2.22 51868 -> 101.63.180.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:09:37.421195 0.044519 udp 10.0.2.22 51868 <-> 5.15.28.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:38.422678 0.120822 udp 10.0.2.22 51868 <-> 146.115.58.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:39.414189 0.204093 udp 10.0.2.22 51868 <-> 182.237.168.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:40.414896 0.000000 udp 10.0.2.22 51868 -> 180.215.118.1 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:09:41.417103 0.058672 udp 10.0.2.22 51868 <-> 79.118.210.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:42.418011 0.358073 udp 10.0.2.22 51868 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:43.419382 0.000000 udp 10.0.2.22 51868 -> 188.24.5.233 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:09:44.421182 0.000000 udp 10.0.2.22 51868 -> 12.154.98.2 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:09:45.422643 0.000000 udp 10.0.2.22 51868 -> 123.236.167.238 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:09:46.413554 0.055894 udp 10.0.2.22 51868 <-> 91.112.150.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:47.415008 4.005821 udp 10.0.2.22 51868 -> 94.14.89.235 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:09:48.416568 0.000000 udp 10.0.2.22 51868 -> 5.15.28.239 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:09:49.287974 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:09:49.418037 0.000000 udp 10.0.2.22 51868 -> 182.237.168.254 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:09:50.419428 0.067400 udp 10.0.2.22 51868 <-> 78.136.117.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:52.422742 1.625926 udp 10.0.2.22 51868 <-> 181.166.121.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:53.414131 1.229754 udp 10.0.2.22 51868 <-> 101.63.180.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:54.415244 0.065765 udp 10.0.2.22 51868 <-> 85.84.94.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:55.417038 0.060842 udp 10.0.2.22 51868 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:56.418639 1.377101 udp 10.0.2.22 51868 <-> 181.165.163.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:57.419596 4.997563 udp 10.0.2.22 51868 <-> 130.83.54.17 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:09:58.421170 0.000000 udp 10.0.2.22 51868 -> 89.37.191.146 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:09:59.422973 0.000000 udp 10.0.2.22 51868 -> 65.82.210.114 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:10:00.414481 0.145384 udp 10.0.2.22 51868 <-> 75.86.159.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:01.415657 2.002339 udp 10.0.2.22 51868 -> 79.23.98.47 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:10:02.439415 0.000000 udp 10.0.2.22 51868 <- 130.83.54.17 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:10:04.419767 0.036856 udp 10.0.2.22 51868 <-> 84.194.107.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:05.420923 0.185712 udp 10.0.2.22 51868 <-> 24.19.205.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:06.422869 0.000000 udp 10.0.2.22 51868 -> 108.176.217.52 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:10:07.414084 0.060915 udp 10.0.2.22 51868 <-> 86.123.54.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:08.415243 0.244091 udp 10.0.2.22 51868 <-> 98.27.34.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:09.417207 0.345786 udp 10.0.2.22 51868 <-> 195.191.218.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:10.418040 0.045190 udp 10.0.2.22 51868 <-> 178.118.247.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:11.420345 1.240367 udp 10.0.2.22 51868 <-> 181.166.124.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:12.421127 0.146722 udp 10.0.2.22 51868 <-> 75.131.21.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:13.422997 0.000000 udp 10.0.2.22 51868 -> 59.178.171.7 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:10:14.413986 0.036113 udp 10.0.2.22 51868 <-> 89.73.207.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:15.415361 0.108151 udp 10.0.2.22 51868 <-> 217.10.134.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:16.296996 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:10:16.416984 0.076982 udp 10.0.2.22 51868 <-> 95.43.91.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:17.418522 0.139952 udp 10.0.2.22 51868 <-> 65.185.50.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:18.419767 0.142012 udp 10.0.2.22 51868 <-> 184.57.25.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:19.421554 0.392380 udp 10.0.2.22 51868 <-> 115.241.229.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:20.422624 0.213164 udp 10.0.2.22 51868 <-> 49.207.202.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:21.414641 0.179213 udp 10.0.2.22 51868 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:22.415723 3.089428 udp 10.0.2.22 51868 <-> 46.191.214.12 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:23.417668 0.000000 udp 10.0.2.22 51868 -> 172.16.0.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:10:24.418728 0.966000 udp 10.0.2.22 51868 <-> 59.96.230.37 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:26.421464 0.150601 udp 10.0.2.22 51868 <-> 174.99.98.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:27.423132 0.160416 udp 10.0.2.22 51868 <-> 173.177.19.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:28.414388 0.000000 udp 10.0.2.22 51868 -> 75.64.127.51 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:10:29.415360 0.169334 udp 10.0.2.22 51868 <-> 66.169.204.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:30.416821 0.148275 udp 10.0.2.22 51868 <-> 68.113.165.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:31.418805 0.213916 udp 10.0.2.22 51868 <-> 122.161.236.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:32.419825 1.346768 udp 10.0.2.22 51868 <-> 114.36.82.214 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:34.095087 0.009645 udp 10.0.2.22 59993 <-> 8.8.8.8 53 CON 0 0 2 162 flow=From-Botnet-V1-DNS 1970/01/01 01:10:34.104960 0.217056 tcp 10.0.2.22 49188 -> 108.168.255.244 80 FSPA* 0 0 10 1330 flow=From-Botnet-V1-TCP-Established 1970/01/01 01:10:34.423147 0.301589 udp 10.0.2.22 51868 <-> 84.240.238.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:35.414018 0.000000 udp 10.0.2.22 51868 -> 106.76.70.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:10:36.415671 0.208616 udp 10.0.2.22 51868 <-> 208.84.191.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:37.417186 1.036555 udp 10.0.2.22 51868 <-> 122.100.80.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:38.418399 0.306052 udp 10.0.2.22 51868 <-> 61.46.55.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:39.420497 0.044869 udp 10.0.2.22 51868 <-> 212.3.13.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:40.421179 0.212474 udp 10.0.2.22 51868 <-> 82.254.244.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:41.413129 0.033262 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:42.414356 0.361853 udp 10.0.2.22 51868 <-> 124.244.75.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:43.416073 0.064443 udp 10.0.2.22 51868 <-> 94.190.190.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:44.417115 0.068731 udp 10.0.2.22 51868 <-> 93.72.6.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:45.419092 0.000000 udp 10.0.2.22 51868 -> 115.244.238.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:10:46.420053 0.310509 udp 10.0.2.22 51868 <-> 174.108.49.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:47.421474 0.297073 udp 10.0.2.22 51868 <-> 49.249.182.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:48.413084 0.069764 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:49.414500 2.074008 udp 10.0.2.22 51868 <-> 200.115.248.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:50.415527 0.089693 udp 10.0.2.22 51868 <-> 95.155.30.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:51.417405 0.224275 udp 10.0.2.22 51868 <-> 177.38.33.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:52.418960 0.199561 udp 10.0.2.22 51868 <-> 24.84.178.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:53.419961 2.135562 udp 10.0.2.22 51868 <-> 96.23.154.136 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:54.421631 0.058712 udp 10.0.2.22 51868 <-> 89.40.194.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:56.414428 1.180180 udp 10.0.2.22 51868 <-> 178.7.212.104 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:10:58.417046 0.000000 udp 10.0.2.22 51868 -> 5.15.146.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:10:59.418923 0.221570 udp 10.0.2.22 51868 <-> 24.23.11.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:00.420320 0.358457 udp 10.0.2.22 51868 <-> 140.127.62.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:01.291282 0.000103 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:11:01.421933 0.181094 udp 10.0.2.22 51868 <-> 24.113.136.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:02.413164 0.168258 udp 10.0.2.22 51868 <-> 74.193.110.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:03.414446 1.199614 udp 10.0.2.22 51868 <-> 24.48.173.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:04.415772 0.053896 udp 10.0.2.22 51868 <-> 213.201.97.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:05.417108 0.150841 udp 10.0.2.22 51868 <-> 174.108.102.57 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:06.418982 0.264455 udp 10.0.2.22 51868 <-> 101.62.59.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:07.420422 0.346150 udp 10.0.2.22 51868 <-> 114.36.213.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:08.422079 0.231739 udp 10.0.2.22 51868 <-> 123.238.232.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:09.413510 0.046135 udp 10.0.2.22 51868 <-> 92.109.240.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:10.414466 0.291782 udp 10.0.2.22 51868 <-> 126.36.45.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:11.416027 0.047391 udp 10.0.2.22 51868 <-> 86.125.61.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:12.417263 0.055739 udp 10.0.2.22 51868 <-> 88.161.54.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:13.419066 0.000000 udp 10.0.2.22 51868 -> 90.230.130.113 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:11:14.420566 0.233383 udp 10.0.2.22 51868 <-> 82.254.244.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:15.421519 1.342693 udp 10.0.2.22 51868 <-> 59.96.229.233 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:16.413466 0.057951 udp 10.0.2.22 51868 <-> 212.92.232.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:17.415009 0.226640 udp 10.0.2.22 51868 <-> 49.205.140.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:18.416188 0.000000 udp 10.0.2.22 51868 -> 197.6.53.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:11:19.417742 0.000000 udp 10.0.2.22 51868 -> 135.19.220.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:11:20.419055 0.000000 udp 10.0.2.22 51868 -> 180.215.118.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:11:21.420624 0.000000 udp 10.0.2.22 51868 -> 71.48.171.243 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:11:22.422349 0.138219 udp 10.0.2.22 51868 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:23.413751 0.227884 udp 10.0.2.22 51868 <-> 49.205.140.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:24.414775 0.356631 udp 10.0.2.22 51868 -> 180.183.232.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:11:24.771406 0.000000 icmp 180.183.232.37 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 01:11:25.416184 0.045849 udp 10.0.2.22 51868 <-> 93.105.185.35 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:26.417676 0.046354 udp 10.0.2.22 51868 <-> 62.113.14.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:27.418948 0.000000 udp 10.0.2.22 51868 -> 180.215.118.1 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:11:28.290907 0.000085 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:11:28.420891 0.000000 udp 10.0.2.22 51868 -> 78.218.21.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:11:29.422058 0.307640 udp 10.0.2.22 51868 <-> 119.24.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:30.413576 0.000000 udp 10.0.2.22 51868 -> 109.99.205.231 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:11:31.414638 0.079536 udp 10.0.2.22 51868 <-> 151.50.126.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:32.416497 0.000000 udp 10.0.2.22 51868 -> 135.19.220.28 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:11:34.419181 0.000000 udp 10.0.2.22 51868 -> 192.168.1.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:11:35.420473 0.000094 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:11:35.420567 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:11:36.421689 0.084011 udp 10.0.2.22 51868 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:37.413390 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:11:38.415116 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:11:39.416523 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:11:40.417657 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:11:41.419189 0.129971 udp 10.0.2.22 51868 <-> 95.173.42.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:42.420621 0.299109 udp 10.0.2.22 51868 <-> 120.75.231.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:43.422339 0.143133 udp 10.0.2.22 51868 <-> 202.71.10.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:44.413227 0.040585 udp 10.0.2.22 51868 <-> 188.115.182.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:45.414767 0.081262 udp 10.0.2.22 51868 <-> 151.48.113.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:46.416629 0.186092 udp 10.0.2.22 51868 <-> 24.121.84.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:47.418213 0.149917 udp 10.0.2.22 51868 <-> 68.63.7.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:48.419024 0.884570 udp 10.0.2.22 51868 <-> 151.75.32.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:49.420997 2.090482 udp 10.0.2.22 51868 <-> 88.180.62.182 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:50.422488 4.996621 udp 10.0.2.22 51868 <-> 87.17.27.94 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:52.415428 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:11:53.416900 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:11:54.417947 0.134382 udp 10.0.2.22 51868 <-> 162.17.224.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:55.289477 0.000120 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:11:55.554730 0.000000 udp 10.0.2.22 51868 <- 87.17.27.94 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:11:56.421119 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:11:57.422463 0.034457 udp 10.0.2.22 51868 <-> 151.100.92.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:11:58.413740 0.000000 udp 10.0.2.22 51868 -> 120.61.39.233 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:11:59.414798 2.044091 udp 10.0.2.22 51868 <-> 89.73.207.4 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:12:00.416487 0.076018 udp 10.0.2.22 51868 <-> 78.62.30.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:12:02.419731 4.996945 udp 10.0.2.22 51868 -> 5.15.242.10 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:03.420960 2.115129 udp 10.0.2.22 51868 <-> 71.234.246.13 16464 CON 0 0 4 1616 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:12:04.422463 0.054272 udp 10.0.2.22 51868 <-> 188.173.130.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:12:06.415234 0.000000 udp 10.0.2.22 51868 -> 96.56.91.162 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:07.457053 0.000000 udp 10.0.2.22 51868 <- 5.15.242.10 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:08.418293 0.168985 udp 10.0.2.22 51868 <-> 78.62.30.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:12:09.419446 0.050173 udp 10.0.2.22 51868 <-> 83.166.30.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:12:10.421071 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:11.422384 0.000138 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:11.422522 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:12:12.413945 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:13.415366 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:14.416731 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:15.417831 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:16.419182 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:17.420927 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:18.422648 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:19.413929 4.005918 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:20.415099 2.002737 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:21.416883 0.350291 udp 10.0.2.22 51868 <-> 111.242.5.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:12:22.287883 0.000119 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:12:24.421001 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:25.422898 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:26.413811 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:27.415160 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:28.416941 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:30.419708 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:31.421156 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:32.422707 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:33.413915 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:34.415436 0.000092 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:34.415528 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:12:35.416986 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:36.418145 0.000000 udp 10.0.2.22 51868 -> 83.166.30.59 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:37.419687 0.017407 udp 10.0.2.22 51868 <-> 91.146.185.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:12:38.421312 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:39.422391 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:40.414008 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:41.415203 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:42.417008 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:43.418281 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:44.419914 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:46.422788 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:47.414061 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:48.415449 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:49.297090 0.000116 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:12:49.417059 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:50.418380 0.000116 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:50.418496 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:12:51.420326 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:52.421609 0.045022 udp 10.0.2.22 51868 <-> 83.230.117.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:12:53.422476 0.294397 udp 10.0.2.22 51868 <-> 58.11.253.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:12:54.414379 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:56.417582 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:57.418221 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:58.419701 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:12:59.421763 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:00.422741 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:01.413887 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:02.415366 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:03.416792 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:04.418205 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:05.420189 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:06.421800 0.000071 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:06.421871 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:13:07.422739 3.996081 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:08.414474 0.304919 udp 10.0.2.22 51868 <-> 58.11.253.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:13:09.415401 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:12.420402 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:13.421891 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:14.413289 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:15.414693 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:16.295263 0.000115 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:13:16.416065 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:17.417018 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:18.418341 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:19.420117 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:20.421977 0.000097 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:20.422074 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:13:21.413047 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:22.414446 0.000000 udp 10.0.2.22 51868 -> 83.166.30.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:23.416101 0.349080 udp 10.0.2.22 51868 <-> 111.242.5.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:13:24.417010 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:25.418885 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:26.420168 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:27.421720 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:28.412841 0.000107 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:28.412948 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:13:29.414611 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:30.415848 0.349794 udp 10.0.2.22 51868 <-> 111.242.5.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:13:32.419038 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:33.420650 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:34.421556 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:35.413240 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:36.414776 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:37.415655 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:38.417123 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:39.419059 0.000107 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:39.419166 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:13:40.420228 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:41.421428 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:42.413029 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:43.294172 0.000135 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:13:43.414845 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:44.416089 0.000000 udp 10.0.2.22 51868 -> 83.166.30.59 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:45.417852 0.791003 udp 10.0.2.22 51868 <-> 187.13.223.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:13:46.418911 0.020256 udp 10.0.2.22 51868 <-> 91.146.185.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:13:47.420497 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:48.421810 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:49.412939 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:50.414697 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:51.416276 0.000098 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:51.416374 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:13:52.417248 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:53.419022 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:54.420310 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:55.422037 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:56.412946 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:57.414452 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:13:58.416080 0.312365 udp 10.0.2.22 51868 <-> 58.11.253.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:13:59.417974 0.215085 udp 10.0.2.22 51868 <-> 50.193.233.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:00.418715 0.000000 udp 10.0.2.22 51868 -> 83.250.76.130 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:14:01.420476 0.043762 udp 10.0.2.22 51868 <-> 5.20.72.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:02.421763 0.015499 udp 10.0.2.22 51868 <-> 164.8.108.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:03.413498 0.000000 udp 10.0.2.22 51868 -> 88.204.155.126 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:14:04.415074 0.147626 udp 10.0.2.22 51868 <-> 24.99.237.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:05.415936 4.997433 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:06.417848 0.335568 udp 10.0.2.22 51868 -> 49.249.182.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:14:06.753416 0.000000 icmp 49.249.182.254 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 01:14:07.419415 0.108200 udp 10.0.2.22 51868 <-> 78.70.192.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:08.420500 0.000000 udp 10.0.2.22 51868 -> 173.18.114.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:14:09.421990 0.142790 udp 10.0.2.22 51868 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:10.293362 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:14:11.414547 0.331059 udp 10.0.2.22 51868 <-> 153.135.214.57 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:12.416406 3.306887 udp 10.0.2.22 51868 <-> 81.90.158.50 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:13.418120 0.882330 udp 10.0.2.22 51868 <-> 88.204.155.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:14.419507 0.000000 udp 10.0.2.22 51868 -> 1.22.117.78 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:14:16.422420 0.000000 udp 10.0.2.22 51868 -> 142.136.206.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:14:17.413794 2.002755 udp 10.0.2.22 51868 -> 196.200.100.1 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:14:18.415193 0.385062 udp 10.0.2.22 51868 <-> 180.94.163.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:20.417786 0.000000 udp 10.0.2.22 51868 -> 69.199.30.225 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:14:21.419136 0.045380 udp 10.0.2.22 51868 <-> 5.13.113.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:22.420990 0.123708 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:23.421806 0.000000 udp 10.0.2.22 51868 -> 142.136.206.4 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:14:23.695772 3.001328 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 01:14:24.413436 0.000000 udp 10.0.2.22 51868 -> 182.237.168.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:14:25.415378 0.225588 udp 10.0.2.22 51868 <-> 95.173.42.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:26.416278 0.043418 udp 10.0.2.22 51868 <-> 79.173.36.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:27.418005 2.387570 udp 10.0.2.22 51868 <-> 180.94.163.230 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:28.419160 0.000000 udp 10.0.2.22 51868 -> 5.13.113.229 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:14:30.422366 0.125553 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:30.712630 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:14:31.413609 2.348161 udp 10.0.2.22 51868 <-> 69.180.10.64 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:32.414911 0.059635 udp 10.0.2.22 51868 <-> 31.14.109.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:34.418071 0.056832 udp 10.0.2.22 51868 -> 77.222.128.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:14:34.474903 0.000000 icmp 77.222.128.11 0x0a03 -> 10.0.2.22 0x0000 URHP* 192 1 86 flow=Background 1970/01/01 01:14:35.419300 0.018741 udp 10.0.2.22 51868 <-> 161.53.207.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:36.421091 0.000000 udp 10.0.2.22 51868 -> 182.53.36.123 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:14:37.292143 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:14:37.422283 0.000000 udp 10.0.2.22 51868 -> 14.97.77.95 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:14:38.413442 0.132658 udp 10.0.2.22 51868 <-> 50.157.214.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:38.714291 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:14:39.414944 0.245511 udp 10.0.2.22 51868 <-> 177.227.170.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:40.416752 0.174419 udp 10.0.2.22 51868 <-> 24.233.63.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:41.418044 0.042231 udp 10.0.2.22 51868 <-> 79.119.229.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:42.419334 3.063534 udp 10.0.2.22 51868 <-> 14.98.170.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:43.421110 0.000000 udp 10.0.2.22 51868 -> 182.53.36.123 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:14:44.422060 0.257076 udp 10.0.2.22 51868 <-> 36.86.94.167 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:45.413999 0.804846 udp 10.0.2.22 51868 <-> 14.97.77.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:46.415502 0.272555 udp 10.0.2.22 51868 <-> 200.146.193.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:47.416819 0.153847 udp 10.0.2.22 51868 <-> 68.12.180.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:48.418047 0.152255 udp 10.0.2.22 51868 <-> 70.44.250.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:49.419508 0.069425 udp 10.0.2.22 51868 <-> 87.121.26.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:50.420900 0.000000 udp 10.0.2.22 51868 -> 86.21.149.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:14:51.422412 2.137219 udp 10.0.2.22 51868 <-> 67.184.116.232 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:52.413538 0.000000 udp 10.0.2.22 51868 -> 14.98.140.231 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:14:54.416500 0.000000 udp 10.0.2.22 51868 -> 96.24.34.237 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:14:54.717219 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:14:55.418415 0.000000 udp 10.0.2.22 51868 -> 103.7.151.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:14:56.419430 0.697885 udp 10.0.2.22 51868 <-> 202.29.179.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:14:57.420688 0.000000 udp 10.0.2.22 51868 -> 71.80.71.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:14:58.422308 0.000000 udp 10.0.2.22 51868 -> 79.189.86.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:14:59.413935 0.000000 udp 10.0.2.22 51868 -> 86.21.149.8 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:00.415198 0.000000 udp 10.0.2.22 51868 -> 79.113.38.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:01.416496 4.006359 udp 10.0.2.22 51868 -> 36.225.101.231 16464 INT 0 3 174 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:02.418026 3.996201 udp 10.0.2.22 51868 <-> 14.98.140.231 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:15:03.419511 0.302866 udp 10.0.2.22 51868 <-> 103.7.151.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:15:04.291150 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:15:07.415230 0.150821 udp 10.0.2.22 51868 <-> 67.184.116.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:15:08.417032 0.000000 udp 10.0.2.22 51868 -> 114.24.201.203 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:09.418114 0.000000 udp 10.0.2.22 51868 -> 10.57.98.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:10.419928 0.116199 udp 10.0.2.22 51868 <-> 109.67.249.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:15:11.420817 0.148323 udp 10.0.2.22 51868 <-> 98.102.219.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:15:12.422382 0.282378 udp 10.0.2.22 51868 <-> 58.11.253.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:15:13.413671 0.134858 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:15:14.415559 0.081502 udp 10.0.2.22 51868 <-> 78.136.117.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:15:15.417133 0.000000 udp 10.0.2.22 51868 -> 197.6.53.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:16.418658 0.000000 udp 10.0.2.22 51868 -> 79.23.103.9 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:17.419458 0.000000 udp 10.0.2.22 51868 -> 151.247.220.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:18.421296 0.000000 udp 10.0.2.22 51868 -> 213.231.166.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:19.423089 0.069824 udp 10.0.2.22 51868 <-> 78.136.117.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:15:20.414315 0.000000 udp 10.0.2.22 51868 -> 173.247.187.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:21.415888 0.033109 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:15:22.416992 4.997328 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 5 1954 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:15:23.418797 0.331643 udp 10.0.2.22 51868 <-> 124.96.225.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:15:24.419850 0.000000 udp 10.0.2.22 51868 -> 209.203.200.216 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:25.421145 0.272710 udp 10.0.2.22 51868 <-> 190.153.152.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:15:26.723023 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:15:27.561413 0.000000 udp 10.0.2.22 51868 <- 74.68.63.5 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:28.415270 0.000000 udp 10.0.2.22 51868 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:29.416872 0.000000 udp 10.0.2.22 51868 -> 151.247.220.20 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:30.418427 0.000000 udp 10.0.2.22 51868 -> 77.38.98.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:31.290150 0.209189 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:15:31.500399 0.000000 udp 10.0.2.22 51868 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:32.501543 0.000000 udp 10.0.2.22 51868 -> 173.247.187.250 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:33.503384 0.000000 udp 10.0.2.22 51868 -> 79.23.103.9 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:34.494177 0.000000 udp 10.0.2.22 51868 -> 213.231.166.253 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:35.495477 0.345492 udp 10.0.2.22 51868 <-> 195.191.218.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:15:36.497707 0.298310 udp 10.0.2.22 51868 <-> 157.14.178.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:15:37.498418 0.000000 udp 10.0.2.22 51868 -> 130.204.23.5 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:38.499751 0.000000 udp 10.0.2.22 51868 -> 173.247.187.250 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:39.501865 0.126686 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:15:40.502728 0.047674 udp 10.0.2.22 51868 <-> 150.214.103.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:15:41.494445 0.184831 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:15:42.495964 0.000000 udp 10.0.2.22 51868 -> 79.23.103.9 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:43.497191 0.000000 udp 10.0.2.22 51868 -> 151.247.220.20 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:44.499039 0.000000 udp 10.0.2.22 51868 -> 197.6.53.20 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:45.499926 0.059693 udp 10.0.2.22 51868 <-> 78.136.117.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:15:46.501668 0.068262 udp 10.0.2.22 51868 <-> 188.97.116.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:15:47.493360 0.045560 udp 10.0.2.22 51868 <-> 213.89.225.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:15:48.494447 0.151791 udp 10.0.2.22 51868 <-> 24.99.237.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:15:50.497350 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:51.499078 0.000096 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:51.499174 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:15:52.500346 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:53.501965 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:54.493098 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:55.494482 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:56.495648 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:57.497218 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:58.368864 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:15:58.498796 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:15:59.500598 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:00.501848 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:01.493419 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:02.494497 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:03.495682 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:04.497446 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:05.499220 1.125699 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:16:07.501670 0.407293 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:16:08.493577 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:09.494496 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:10.495877 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:11.497906 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:12.499373 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:13.500128 0.038520 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:16:14.501871 1.197507 udp 10.0.2.22 51868 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:16:15.493542 0.125380 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:16:16.494364 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:17.496264 0.168736 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:16:18.497597 0.051809 udp 10.0.2.22 51868 <-> 46.253.3.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:16:19.499275 2.205696 udp 10.0.2.22 51868 <-> 76.109.136.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:16:20.500348 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:22.493154 0.000104 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:22.493258 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:16:23.494665 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:24.496502 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:25.377766 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:16:25.497301 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:26.499207 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:27.500995 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:28.501960 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:29.493205 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:30.494806 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:31.496177 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:32.497768 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:33.499166 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:35.502234 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:36.493284 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:37.495204 0.000000 udp 10.0.2.22 51868 -> 177.149.127.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:38.496214 0.208000 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:16:39.498146 0.723004 udp 10.0.2.22 51868 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:16:40.499376 0.576923 udp 10.0.2.22 51868 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:16:41.500835 0.363502 udp 10.0.2.22 51868 <-> 61.223.95.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:16:42.502099 1.992827 udp 10.0.2.22 51868 -> 188.214.34.53 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:43.493552 0.121715 udp 10.0.2.22 51868 <-> 84.237.145.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:16:45.496422 4.996873 udp 10.0.2.22 51868 -> 108.176.217.52 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:46.497542 3.192709 udp 10.0.2.22 51868 <-> 190.141.88.104 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:16:47.499200 0.210191 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:16:48.500618 0.031910 udp 10.0.2.22 51868 <-> 80.218.193.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:16:50.643777 0.000000 udp 10.0.2.22 51868 <- 108.176.217.52 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:51.495177 0.180638 udp 10.0.2.22 51868 <-> 178.7.212.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:16:52.375922 0.000181 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:16:52.496644 0.213679 udp 10.0.2.22 51868 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:16:53.498023 0.167038 udp 10.0.2.22 51868 <-> 71.199.218.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:16:54.499808 0.176233 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:16:55.500932 3.995747 udp 10.0.2.22 51868 <-> 68.149.112.104 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:16:56.502556 0.000000 udp 10.0.2.22 51868 -> 5.15.195.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:16:57.493939 0.148951 udp 10.0.2.22 51868 <-> 74.216.190.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:16:58.495501 0.000000 udp 10.0.2.22 51868 -> 87.5.37.63 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:17:00.498292 0.159532 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:01.499219 0.005191 udp 10.0.2.22 51868 <-> 147.229.140.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:02.501179 1.045509 udp 10.0.2.22 51868 <-> 87.0.188.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:03.502384 0.000000 udp 10.0.2.22 51868 -> 41.188.53.72 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:17:04.493565 0.056418 udp 10.0.2.22 51868 <-> 195.238.118.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:05.495284 0.000000 udp 10.0.2.22 51868 -> 203.117.213.136 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:17:06.496962 0.284312 udp 10.0.2.22 51868 <-> 182.156.175.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:07.498230 0.180607 udp 10.0.2.22 51868 <-> 1.186.100.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:08.499649 0.000000 udp 10.0.2.22 51868 -> 78.213.115.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:17:09.500965 0.034637 udp 10.0.2.22 51868 <-> 151.100.92.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:10.502071 0.000000 udp 10.0.2.22 51868 -> 89.132.14.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:17:11.493846 0.000000 udp 10.0.2.22 51868 -> 109.67.249.137 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:17:12.495118 0.305914 udp 10.0.2.22 51868 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:13.496573 0.177644 udp 10.0.2.22 51868 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:14.497995 0.000000 udp 10.0.2.22 51868 -> 173.18.114.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:17:15.499895 0.064194 udp 10.0.2.22 51868 <-> 94.190.190.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:16.501004 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:17:17.502831 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:17:18.493546 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:17:19.375024 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:17:19.495591 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:17:20.497116 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:17:21.498587 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:17:22.499834 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:17:23.501006 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:17:24.502289 0.226655 udp 10.0.2.22 51868 <-> 109.67.249.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:25.493825 0.309683 udp 10.0.2.22 51868 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:26.495137 0.034964 udp 10.0.2.22 51868 <-> 151.100.92.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:27.496860 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:17:28.497957 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:17:29.499753 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:17:30.501144 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:17:31.502413 3.996205 udp 10.0.2.22 51868 <-> 78.213.115.15 16464 CON 0 0 5 1954 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:32.493840 0.000000 udp 10.0.2.22 51868 -> 71.20.174.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:17:33.495781 3.003959 udp 10.0.2.22 51868 -> 69.248.152.15 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:17:37.501436 0.192843 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:38.503474 0.165588 udp 10.0.2.22 51868 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:39.504219 0.060687 udp 10.0.2.22 51868 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:40.506324 0.048503 udp 10.0.2.22 51868 <-> 89.136.104.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:41.506857 0.043868 udp 10.0.2.22 51868 <-> 88.216.52.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:42.508061 0.207028 udp 10.0.2.22 51868 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:43.509822 0.157338 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:44.511247 1.181012 udp 10.0.2.22 51868 <-> 98.177.241.162 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:46.385067 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:17:46.504108 0.295871 udp 10.0.2.22 51868 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:47.505588 0.023098 udp 10.0.2.22 51868 <-> 82.132.101.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:48.506989 0.286410 udp 10.0.2.22 51868 <-> 103.7.151.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:49.508153 0.045511 udp 10.0.2.22 51868 <-> 87.198.109.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:50.509791 2.002938 udp 10.0.2.22 51868 <-> 95.75.16.41 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:51.511280 0.297194 udp 10.0.2.22 51868 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:53.503996 0.024316 udp 10.0.2.22 51868 <-> 82.132.101.37 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:54.505412 0.000000 udp 10.0.2.22 51868 -> 176.200.173.40 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:17:55.517589 0.197711 udp 10.0.2.22 51868 <-> 190.36.162.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:56.518673 0.000000 udp 10.0.2.22 51868 -> 88.57.222.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:17:57.519703 0.156997 udp 10.0.2.22 51868 <-> 135.19.188.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:58.521143 0.097430 udp 10.0.2.22 51868 <-> 78.188.164.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:17:59.533448 0.313836 udp 10.0.2.22 51868 <-> 122.215.8.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:00.524305 0.056516 udp 10.0.2.22 51868 <-> 86.122.152.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:01.525427 0.339677 udp 10.0.2.22 51868 <-> 220.60.160.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:02.527251 0.000000 udp 10.0.2.22 51868 -> 50.134.240.23 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:18:03.528972 0.241879 udp 10.0.2.22 51868 <-> 115.118.25.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:04.529769 0.000000 udp 10.0.2.22 51868 -> 77.77.128.207 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:18:05.531135 0.179994 udp 10.0.2.22 51868 <-> 98.177.241.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:06.532724 3.054519 udp 10.0.2.22 51868 <-> 128.68.67.11 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:07.524246 0.052197 udp 10.0.2.22 51868 <-> 195.80.135.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:08.525830 0.087890 udp 10.0.2.22 51868 <-> 84.55.13.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:10.528334 0.155789 udp 10.0.2.22 51868 <-> 174.108.49.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:11.529984 0.000000 udp 10.0.2.22 51868 -> 147.156.232.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:18:12.531954 0.364501 udp 10.0.2.22 51868 <-> 61.223.95.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:13.402413 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:18:13.532851 0.063434 udp 10.0.2.22 51868 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:14.524418 0.038438 udp 10.0.2.22 51868 <-> 217.197.141.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:15.525517 0.218182 udp 10.0.2.22 51868 <-> 183.83.152.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:16.527269 0.064031 udp 10.0.2.22 51868 <-> 188.24.50.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:17.528742 0.068307 udp 10.0.2.22 51868 <-> 87.121.108.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:18.530326 0.000000 udp 10.0.2.22 51868 -> 87.16.118.103 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:18:19.531732 0.000000 udp 10.0.2.22 51868 -> 151.237.7.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:18:20.522846 0.693587 udp 10.0.2.22 51868 <-> 84.1.20.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:21.524292 2.138146 udp 10.0.2.22 51868 <-> 173.80.197.248 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:22.525995 0.144297 udp 10.0.2.22 51868 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:24.528616 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:18:25.529920 0.000000 udp 10.0.2.22 51868 -> 204.72.189.244 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:18:26.531340 0.421566 udp 10.0.2.22 51868 <-> 173.214.226.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:27.532969 4.006193 udp 10.0.2.22 51868 -> 182.189.0.73 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:18:28.534832 0.624936 udp 10.0.2.22 51868 <-> 86.58.36.89 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:29.535993 0.000000 udp 10.0.2.22 51868 -> 87.121.108.52 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:18:30.537526 0.337139 udp 10.0.2.22 51868 <-> 183.179.33.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:32.540593 0.000000 udp 10.0.2.22 51868 -> 87.16.118.103 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:18:33.541741 0.000000 udp 10.0.2.22 51868 -> 180.215.178.38 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:18:34.532891 0.136830 udp 10.0.2.22 51868 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:35.534724 3.162880 udp 10.0.2.22 51868 <-> 176.201.196.236 16464 CON 0 0 8 5456 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:36.536255 4.005435 udp 10.0.2.22 51868 -> 60.231.84.237 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:18:37.537315 2.003020 udp 10.0.2.22 51868 -> 152.66.219.240 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:18:40.411825 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:18:41.533289 2.157068 udp 10.0.2.22 51868 <-> 71.80.71.242 16464 CON 0 0 9 6346 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:42.534934 0.113966 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:44.537536 0.000000 udp 10.0.2.22 51868 -> 152.66.219.240 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:18:45.538683 0.150437 udp 10.0.2.22 51868 <-> 173.214.226.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:46.540110 3.489818 udp 10.0.2.22 51868 <-> 180.215.178.38 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:47.541854 0.916952 udp 10.0.2.22 51868 <-> 86.58.36.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:48.533811 0.000000 udp 10.0.2.22 51868 -> 115.241.1.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:18:50.536082 0.139806 udp 10.0.2.22 51868 <-> 70.82.157.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:51.537621 1.053279 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:53.540838 0.700126 udp 10.0.2.22 51868 <-> 201.231.197.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:54.542198 0.000000 udp 10.0.2.22 51868 -> 76.24.62.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:18:55.533558 0.056510 udp 10.0.2.22 51868 <-> 79.118.210.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:56.534584 0.000000 udp 10.0.2.22 51868 -> 222.254.9.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:18:57.536137 0.051558 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:18:58.537634 0.000000 udp 10.0.2.22 51868 -> 83.230.237.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:18:59.539250 0.014100 udp 10.0.2.22 51868 <-> 89.102.235.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:00.540903 0.000000 udp 10.0.2.22 51868 -> 88.9.209.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:19:01.542209 0.000000 udp 10.0.2.22 51868 -> 61.62.169.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:19:02.533440 0.034939 udp 10.0.2.22 51868 <-> 151.100.92.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:03.535055 0.122864 udp 10.0.2.22 51868 <-> 90.157.111.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:04.536015 0.299331 udp 10.0.2.22 51868 -> 221.154.140.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:19:04.835346 0.000000 icmp 221.154.140.18 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 01:19:05.537548 0.305166 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:06.539567 0.051661 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:07.410340 0.000123 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:19:07.540867 0.066265 udp 10.0.2.22 51868 <-> 78.136.117.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:08.542008 0.152035 udp 10.0.2.22 51868 <-> 76.97.226.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:09.533812 0.000000 udp 10.0.2.22 51868 -> 88.187.104.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:19:10.534932 0.144501 udp 10.0.2.22 51868 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:11.536124 0.150877 udp 10.0.2.22 51868 <-> 83.230.237.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:12.537732 0.351371 udp 10.0.2.22 51868 <-> 114.39.29.212 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:13.539042 0.374462 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:14.540932 0.302480 udp 10.0.2.22 51868 <-> 59.94.7.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:15.542050 0.063455 udp 10.0.2.22 51868 <-> 81.190.215.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:16.533836 0.000000 udp 10.0.2.22 51868 -> 180.215.118.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:19:17.534978 1.091729 udp 10.0.2.22 51868 <-> 94.41.58.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:19.537948 0.364253 udp 10.0.2.22 51868 <-> 111.242.5.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:20.539699 0.000000 udp 10.0.2.22 51868 -> 83.166.30.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:19:21.540433 0.000000 udp 10.0.2.22 51868 -> 194.212.104.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:19:22.542630 0.362785 udp 10.0.2.22 51868 <-> 88.72.192.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:23.533941 0.058091 udp 10.0.2.22 51868 <-> 37.72.79.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:24.535240 0.113292 udp 10.0.2.22 51868 <-> 69.77.158.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:25.536389 0.838263 udp 10.0.2.22 51868 <-> 87.0.188.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:26.538329 0.179092 udp 10.0.2.22 51868 <-> 210.89.38.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:27.539672 0.029150 udp 10.0.2.22 51868 <-> 78.139.36.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:28.541042 0.000000 udp 10.0.2.22 51868 -> 105.143.139.153 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:19:29.542657 0.202636 udp 10.0.2.22 51868 -> 115.96.16.85 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:19:29.745293 0.000000 icmp 115.96.16.85 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 01:19:30.533742 2.002493 udp 10.0.2.22 51868 <-> 71.88.102.71 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:31.535332 3.151504 udp 10.0.2.22 51868 <-> 174.99.98.125 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:33.538258 0.331729 udp 10.0.2.22 51868 <-> 14.97.120.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:34.409650 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:19:35.541074 0.143210 udp 10.0.2.22 51868 <-> 192.226.149.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:36.542597 0.000000 udp 10.0.2.22 51868 -> 176.201.196.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:19:37.533503 0.041215 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:38.534895 0.188134 udp 10.0.2.22 51868 <-> 210.89.38.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:39.536926 0.029528 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:40.538021 0.000000 udp 10.0.2.22 51868 -> 190.155.70.147 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:19:41.539868 0.000000 udp 10.0.2.22 51868 -> 105.143.139.153 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:19:42.540915 0.143196 udp 10.0.2.22 51868 <-> 24.101.81.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:43.542427 1.045576 udp 10.0.2.22 51868 <-> 141.136.14.36 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:45.535161 0.000000 udp 10.0.2.22 51868 -> 68.59.72.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:19:46.536477 0.000000 udp 10.0.2.22 51868 -> 88.62.140.42 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:19:47.538119 0.000000 udp 10.0.2.22 51868 -> 41.33.182.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:19:48.539267 0.239103 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:49.541032 0.000000 udp 10.0.2.22 51868 -> 141.136.14.36 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:19:50.542532 0.000000 udp 10.0.2.22 51868 -> 81.120.65.55 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:19:51.534105 0.000000 udp 10.0.2.22 51868 -> 68.59.72.41 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:19:52.535078 0.000000 udp 10.0.2.22 51868 -> 88.62.140.42 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:19:53.536587 0.439641 udp 10.0.2.22 51868 <-> 68.122.149.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:54.537966 0.000000 udp 10.0.2.22 51868 -> 105.143.139.153 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:19:55.539612 0.138063 udp 10.0.2.22 51868 <-> 71.88.102.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:56.541090 0.000000 udp 10.0.2.22 51868 -> 94.228.236.50 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:19:57.542662 0.053481 udp 10.0.2.22 51868 <-> 141.136.14.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:58.534201 0.216315 udp 10.0.2.22 51868 <-> 41.33.182.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:19:59.535443 2.156546 udp 10.0.2.22 51868 <-> 174.99.98.125 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:20:00.537259 0.000000 udp 10.0.2.22 51868 -> 1.34.204.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:01.408019 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:20:02.539961 2.140812 udp 10.0.2.22 51868 <-> 71.88.102.71 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:20:03.540805 0.149885 udp 10.0.2.22 51868 <-> 192.226.149.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:20:06.535843 0.000080 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:06.535923 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:20:07.536745 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:08.538266 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:09.539436 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:10.541598 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:11.542367 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:12.624111 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:13.625693 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:14.627394 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:15.628424 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:16.630364 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:17.631418 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:18.633057 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:19.624483 0.032314 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:20:20.625856 0.141887 udp 10.0.2.22 51868 <-> 23.28.66.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:20:21.626801 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:22.628808 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:23.630216 0.137060 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:20:24.631943 0.354716 udp 10.0.2.22 51868 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:20:25.632558 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:26.624109 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:28.507133 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:20:28.627367 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:29.628410 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:30.630205 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:31.631868 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:32.633257 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:33.624176 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:34.625942 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:35.626973 0.000097 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:35.627070 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:20:36.628902 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:37.630581 0.036361 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:20:38.632048 0.139932 udp 10.0.2.22 51868 <-> 23.28.66.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:20:39.633266 0.028109 udp 10.0.2.22 51868 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:20:40.624137 0.194713 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:20:41.645710 0.135682 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:20:42.657149 0.354410 udp 10.0.2.22 51868 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:20:43.658659 0.060426 udp 10.0.2.22 51868 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:20:44.660167 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:45.661423 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:46.662935 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:47.654386 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:48.655732 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:49.657124 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:50.674631 0.053714 udp 10.0.2.22 51868 <-> 188.173.130.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:20:51.670589 0.000000 udp 10.0.2.22 51868 -> 97.126.155.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:52.681786 0.034986 udp 10.0.2.22 51868 <-> 151.100.97.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:20:53.673650 0.000000 udp 10.0.2.22 51868 -> 151.213.186.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:54.674335 0.000000 udp 10.0.2.22 51868 -> 117.207.24.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:55.556298 0.000097 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:20:55.676068 2.133457 udp 10.0.2.22 51868 <-> 85.156.60.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:20:56.677536 0.000000 udp 10.0.2.22 51868 -> 5.238.109.38 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:57.678800 0.000000 udp 10.0.2.22 51868 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:20:58.680661 0.054642 udp 10.0.2.22 51868 <-> 188.173.130.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:20:59.682090 0.446682 udp 10.0.2.22 51868 <-> 117.207.24.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:00.672972 0.301030 udp 10.0.2.22 51868 <-> 124.122.2.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:01.674419 0.005213 udp 10.0.2.22 51868 <-> 147.229.140.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:02.676319 4.136235 udp 10.0.2.22 51868 <-> 24.0.29.18 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:03.677495 1.001329 udp 10.0.2.22 51868 <-> 92.224.68.240 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:05.680270 0.054914 udp 10.0.2.22 51868 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:07.673550 0.000000 udp 10.0.2.22 51868 -> 151.237.7.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:21:08.674815 0.476133 udp 10.0.2.22 51868 <-> 173.87.184.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:09.676697 0.225270 udp 10.0.2.22 51868 <-> 216.45.73.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:10.677955 4.072508 udp 10.0.2.22 51868 <-> 62.99.117.92 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:11.679245 0.353898 udp 10.0.2.22 51868 <-> 146.83.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:12.680731 0.163143 udp 10.0.2.22 51868 <-> 76.107.51.52 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:15.682984 0.000000 udp 10.0.2.22 51868 -> 86.97.139.167 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:21:16.676139 0.119604 udp 10.0.2.22 51868 <-> 62.99.108.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:17.677699 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:21:18.689521 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:21:19.680521 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:21:20.681928 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:21:22.554445 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:21:22.674977 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:21:23.676011 0.000062 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:21:23.676073 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:21:24.678103 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:21:25.679249 0.050814 udp 10.0.2.22 51868 <-> 93.152.154.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:26.686155 0.000000 udp 10.0.2.22 51868 -> 76.206.16.81 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:21:27.713003 0.134050 udp 10.0.2.22 51868 <-> 71.7.230.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:28.673187 0.353686 udp 10.0.2.22 51868 <-> 146.83.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:29.675176 0.310280 udp 10.0.2.22 51868 <-> 119.207.19.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:30.676724 0.044935 udp 10.0.2.22 51868 <-> 78.159.51.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:30.996790 3.004392 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 01:21:31.679986 0.000000 udp 10.0.2.22 51868 -> 2.184.44.205 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:21:32.679242 0.000000 udp 10.0.2.22 51868 -> 70.65.248.65 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:21:33.680884 0.141605 udp 10.0.2.22 51868 <-> 82.224.214.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:34.682561 0.043150 udp 10.0.2.22 51868 <-> 80.97.88.220 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:35.675192 0.211884 udp 10.0.2.22 51868 <-> 49.207.251.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:36.675236 0.250949 udp 10.0.2.22 51868 <-> 2.180.150.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:37.678624 0.140287 udp 10.0.2.22 51868 <-> 203.192.253.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:38.007345 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:21:38.677681 0.340536 udp 10.0.2.22 51868 <-> 115.242.226.27 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:39.701543 3.012084 udp 10.0.2.22 51868 -> 180.215.118.1 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:21:40.711018 3.213645 udp 10.0.2.22 51868 <-> 49.204.104.147 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:41.712270 0.000000 udp 10.0.2.22 51868 -> 142.136.206.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:21:44.716537 0.555968 udp 10.0.2.22 51868 <-> 14.97.58.246 16464 CON 0 0 5 3618 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:45.718449 0.000000 udp 10.0.2.22 51868 -> 114.47.197.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:21:46.048830 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:21:46.562183 0.000000 udp 10.0.2.22 51868 <- 180.215.118.1 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:21:46.719569 0.313518 udp 10.0.2.22 51868 <-> 94.74.144.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:47.720975 0.065719 udp 10.0.2.22 51868 <-> 78.225.90.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:48.722445 0.293237 udp 10.0.2.22 51868 <-> 210.194.250.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:49.593932 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:21:49.713735 2.397793 udp 10.0.2.22 51868 <-> 72.15.127.39 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:50.715246 2.576882 udp 10.0.2.22 51868 <-> 24.154.59.129 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:52.718421 0.365075 udp 10.0.2.22 51868 <-> 211.109.254.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:53.719223 0.000000 udp 10.0.2.22 51868 -> 109.67.249.137 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:21:54.721258 2.059691 udp 10.0.2.22 51868 <-> 87.121.108.52 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:55.722655 0.344890 udp 10.0.2.22 51868 <-> 218.250.127.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:57.715398 0.064838 udp 10.0.2.22 51868 <-> 46.10.153.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:58.716513 0.409678 udp 10.0.2.22 51868 <-> 118.165.157.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:21:59.718193 0.363332 udp 10.0.2.22 51868 <-> 14.96.107.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:00.719678 0.348418 udp 10.0.2.22 51868 <-> 109.182.60.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:01.720901 0.393439 udp 10.0.2.22 51868 <-> 116.193.254.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:02.051247 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:22:02.722406 0.296312 udp 10.0.2.22 51868 <-> 117.200.129.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:03.714282 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:22:04.715094 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:22:05.717216 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:22:06.718256 0.405266 udp 10.0.2.22 51868 <-> 203.73.103.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:07.720130 0.059977 udp 10.0.2.22 51868 <-> 188.214.34.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:08.721171 0.346737 udp 10.0.2.22 51868 <-> 111.243.170.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:09.722910 0.179301 udp 10.0.2.22 51868 <-> 74.199.89.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:10.713846 0.000000 udp 10.0.2.22 51868 -> 141.170.193.187 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:22:11.715427 1.104502 udp 10.0.2.22 51868 <-> 116.75.22.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:12.716604 0.117201 udp 10.0.2.22 51868 <-> 84.228.149.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:13.718353 2.158022 udp 10.0.2.22 51868 <-> 69.125.160.55 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:14.721434 0.000000 udp 10.0.2.22 51868 -> 117.195.58.66 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:22:16.613011 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:22:16.742491 0.244164 udp 10.0.2.22 51868 <-> 88.207.47.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:17.733808 0.212972 udp 10.0.2.22 51868 <-> 97.93.25.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:18.735315 0.000000 udp 10.0.2.22 51868 -> 114.42.65.105 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:22:19.737180 0.143458 udp 10.0.2.22 51868 <-> 68.188.187.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:20.738678 0.140542 udp 10.0.2.22 51868 <-> 75.67.90.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:21.740006 0.000000 udp 10.0.2.22 51868 -> 188.2.105.102 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:22:22.741586 0.334934 udp 10.0.2.22 51868 <-> 124.244.148.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:23.742777 0.450369 udp 10.0.2.22 51868 <-> 61.3.156.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:24.733878 2.040916 udp 10.0.2.22 51868 <-> 188.24.75.70 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:25.735394 2.378033 udp 10.0.2.22 51868 <-> 119.75.186.63 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:28.740193 0.217542 udp 10.0.2.22 51868 <-> 117.219.242.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:29.741264 0.000000 udp 10.0.2.22 51868 -> 98.250.1.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:22:30.742467 0.073454 udp 10.0.2.22 51868 <-> 95.91.31.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:31.734420 0.476855 udp 10.0.2.22 51868 <-> 116.202.199.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:32.735516 0.382180 udp 10.0.2.22 51868 <-> 89.246.6.64 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:33.737600 0.000000 udp 10.0.2.22 51868 -> 116.202.185.107 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:22:34.067478 0.023989 udp 10.0.2.22 59994 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 01:22:34.077584 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:22:34.091738 0.000000 udp 10.0.2.22 59995 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:22:34.738817 0.000000 udp 10.0.2.22 51868 -> 83.166.30.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:22:35.740109 0.084495 udp 10.0.2.22 51868 <-> 86.59.216.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:36.741508 2.994467 udp 10.0.2.22 51868 <-> 1.186.122.93 16464 CON 0 0 8 3792 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:40.736945 0.000000 udp 10.0.2.22 51868 -> 88.180.120.162 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:22:41.738747 0.182501 udp 10.0.2.22 51868 <-> 197.204.128.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:42.740066 0.000000 udp 10.0.2.22 51868 -> 123.205.142.67 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:22:43.611126 0.000111 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:22:43.741556 0.317052 udp 10.0.2.22 51868 <-> 46.225.5.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:44.742586 3.996058 udp 10.0.2.22 51868 -> 83.36.60.3 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:22:45.734187 0.149699 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:46.735569 0.048702 udp 10.0.2.22 51868 <-> 195.80.135.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:47.736925 0.000000 udp 10.0.2.22 51868 -> 5.202.180.243 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:22:49.739886 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:22:49.984201 0.000000 udp 10.0.2.22 51868 <- 88.180.120.162 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:22:50.741954 0.314417 udp 10.0.2.22 51868 <-> 121.181.165.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:51.743339 0.142235 udp 10.0.2.22 51868 <-> 68.58.91.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:52.734264 0.152761 udp 10.0.2.22 51868 <-> 68.59.56.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:53.735536 0.349110 udp 10.0.2.22 51868 <-> 211.76.50.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:54.737758 0.075390 udp 10.0.2.22 51868 <-> 79.56.5.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:55.738372 0.335882 udp 10.0.2.22 51868 <-> 58.64.126.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:56.740193 0.151215 udp 10.0.2.22 51868 <-> 68.194.27.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:57.741627 0.281792 udp 10.0.2.22 51868 <-> 117.196.253.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:58.743157 0.214692 udp 10.0.2.22 51868 <-> 183.82.144.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:22:59.734953 0.050618 udp 10.0.2.22 51868 <-> 5.13.236.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:00.736193 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:23:01.736999 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:23:02.738530 0.000093 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:23:02.738623 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:23:04.741512 0.323598 udp 10.0.2.22 51868 <-> 118.170.163.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:05.742909 0.169719 udp 10.0.2.22 51868 <-> 46.143.217.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:06.734209 0.278760 udp 10.0.2.22 51868 <-> 177.82.176.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:07.736320 0.155522 udp 10.0.2.22 51868 <-> 74.77.32.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:08.737647 0.169369 udp 10.0.2.22 51868 <-> 173.18.114.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:09.738913 0.329755 udp 10.0.2.22 51868 <-> 219.169.100.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:10.610147 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:23:10.740761 0.660586 udp 10.0.2.22 51868 <-> 96.44.92.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:11.741843 0.137880 udp 10.0.2.22 51868 <-> 75.118.20.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:12.743566 0.201915 udp 10.0.2.22 51868 <-> 62.87.129.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:13.734459 0.341546 udp 10.0.2.22 51868 <-> 125.176.223.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:14.736295 0.024271 udp 10.0.2.22 51868 <-> 80.219.71.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:15.737757 0.322083 udp 10.0.2.22 51868 <-> 122.215.8.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:16.739176 0.314255 udp 10.0.2.22 51868 <-> 219.121.216.120 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:17.740100 0.172930 udp 10.0.2.22 51868 <-> 173.177.19.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:18.741463 0.281748 udp 10.0.2.22 51868 <-> 182.167.14.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:19.743271 0.128989 udp 10.0.2.22 51868 <-> 217.202.248.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:20.734446 0.000000 udp 10.0.2.22 51868 -> 5.236.252.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:23:21.735862 0.000000 udp 10.0.2.22 51868 -> 14.97.58.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:23:22.737767 0.095539 udp 10.0.2.22 51868 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:23.739202 0.319946 udp 10.0.2.22 51868 <-> 121.136.43.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:24.740645 0.078204 udp 10.0.2.22 51868 <-> 85.136.45.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:25.742162 2.209939 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:26.733347 0.044971 udp 10.0.2.22 51868 <-> 78.96.210.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:28.736476 0.037072 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:29.737287 0.000000 udp 10.0.2.22 51868 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:23:30.738726 0.322066 udp 10.0.2.22 51868 <-> 114.42.152.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:31.740519 0.037243 udp 10.0.2.22 51868 <-> 84.196.174.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:32.741941 0.170470 udp 10.0.2.22 51868 <-> 207.32.49.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:33.733366 0.195278 udp 10.0.2.22 51868 <-> 67.185.146.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:34.735303 0.288191 udp 10.0.2.22 51868 <-> 125.192.40.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:35.749998 0.380553 udp 10.0.2.22 51868 <-> 118.160.209.238 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:36.747780 0.156350 udp 10.0.2.22 51868 <-> 82.50.173.224 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:37.618565 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:23:37.749183 0.059040 udp 10.0.2.22 51868 <-> 86.121.160.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:38.750829 0.139757 udp 10.0.2.22 51868 <-> 98.27.34.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:39.752206 0.000000 udp 10.0.2.22 51868 -> 173.197.148.136 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:23:40.743080 4.399842 udp 10.0.2.22 51868 <-> 116.72.203.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:41.744656 0.129038 udp 10.0.2.22 51868 <-> 176.201.66.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:42.745992 0.000000 udp 10.0.2.22 51868 -> 76.123.129.230 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:23:43.747624 0.183502 udp 10.0.2.22 51868 <-> 71.237.245.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:44.749065 0.055102 udp 10.0.2.22 51868 <-> 46.49.86.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:45.750986 0.141531 udp 10.0.2.22 51868 <-> 65.60.153.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:46.751967 0.221528 udp 10.0.2.22 51868 <-> 113.193.164.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:47.743322 4.006312 udp 10.0.2.22 51868 -> 80.28.45.3 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:23:48.745107 0.328657 udp 10.0.2.22 51868 <-> 114.40.170.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:49.746941 0.000000 udp 10.0.2.22 51868 -> 81.140.76.40 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:23:50.748197 3.112874 udp 10.0.2.22 51868 <-> 84.228.222.43 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:52.750993 0.000000 udp 10.0.2.22 51868 -> 69.47.17.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:23:54.743911 0.554120 udp 10.0.2.22 51868 <-> 202.29.178.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:55.745227 0.258578 udp 10.0.2.22 51868 <-> 189.110.83.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:56.746243 0.221966 udp 10.0.2.22 51868 <-> 49.204.100.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:57.748165 0.056219 udp 10.0.2.22 51868 <-> 213.201.97.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:58.749424 1.404101 udp 10.0.2.22 51868 <-> 103.251.81.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:23:59.750746 0.211123 udp 10.0.2.22 51868 <-> 50.136.142.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:00.752109 0.073141 udp 10.0.2.22 51868 <-> 85.136.45.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:01.743527 0.154400 udp 10.0.2.22 51868 <-> 98.235.73.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:02.744905 0.312153 udp 10.0.2.22 51868 <-> 220.157.132.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:03.746889 0.100961 udp 10.0.2.22 51868 <-> 90.232.39.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:04.627865 0.000116 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:24:04.748063 0.519552 udp 10.0.2.22 51868 <-> 117.205.248.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:05.749155 0.150387 udp 10.0.2.22 51868 <-> 209.106.45.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:06.750609 0.262179 udp 10.0.2.22 51868 <-> 24.95.94.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:07.752323 0.136623 udp 10.0.2.22 51868 <-> 24.144.193.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:08.744014 0.149488 udp 10.0.2.22 51868 <-> 173.2.9.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:09.745339 0.350660 udp 10.0.2.22 51868 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:10.746728 0.202037 udp 10.0.2.22 51868 <-> 190.252.196.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:11.748329 0.211671 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:12.749594 0.000000 udp 10.0.2.22 51868 -> 178.119.171.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:24:13.750956 0.403810 udp 10.0.2.22 51868 <-> 80.135.44.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:14.752668 0.164831 udp 10.0.2.22 51868 <-> 188.131.102.185 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:15.744148 0.429069 udp 10.0.2.22 51868 <-> 124.125.44.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:16.745493 0.355918 udp 10.0.2.22 51868 <-> 111.246.113.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:17.746961 0.135958 udp 10.0.2.22 51868 <-> 98.253.7.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:18.747796 0.022413 udp 10.0.2.22 51868 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:19.749331 0.169391 udp 10.0.2.22 51868 <-> 207.32.49.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:20.751072 0.000000 udp 10.0.2.22 51868 -> 117.200.12.187 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:24:21.752781 0.055054 udp 10.0.2.22 51868 <-> 94.139.204.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:22.743479 0.162797 udp 10.0.2.22 51868 <-> 207.134.224.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:23.744974 0.141204 udp 10.0.2.22 51868 <-> 79.9.99.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:24.747112 0.130043 udp 10.0.2.22 51868 <-> 81.28.34.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:25.747980 0.082855 udp 10.0.2.22 51868 <-> 88.104.185.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:26.749581 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:24:27.751286 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:24:28.752402 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:24:29.744305 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:24:30.745739 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:24:31.627079 0.000109 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:24:31.746955 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:24:32.748181 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:24:33.749615 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:24:34.751470 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:24:35.752719 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:24:36.743760 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:24:37.745062 0.138992 udp 10.0.2.22 51868 <-> 24.144.193.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:38.746913 0.000000 udp 10.0.2.22 51868 -> 174.100.202.195 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:24:39.748329 0.117429 udp 10.0.2.22 51868 <-> 79.176.4.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:40.749463 0.153650 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:41.750806 0.088585 udp 10.0.2.22 51868 <-> 77.239.189.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:42.752947 0.000046 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:24:42.752993 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:24:43.744123 2.970957 udp 10.0.2.22 51868 <-> 190.142.155.9 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:44.745490 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:24:46.748285 0.223369 udp 10.0.2.22 51868 <-> 124.123.172.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:47.750057 0.128215 udp 10.0.2.22 51868 <-> 209.203.200.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:48.751426 0.313606 udp 10.0.2.22 51868 <-> 125.192.40.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:49.752930 0.374140 udp 10.0.2.22 51868 <-> 122.106.10.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:51.745268 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:24:52.747162 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:24:53.748315 0.328135 udp 10.0.2.22 51868 <-> 116.202.27.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:24:54.749578 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:24:55.750942 4.997952 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:24:56.752971 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:24:57.744337 0.000000 udp 10.0.2.22 51868 -> 115.241.249.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:24:58.625030 0.000140 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:24:58.745302 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:24:59.746956 0.128468 udp 10.0.2.22 51868 <-> 212.251.106.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:01.749933 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:25:02.751097 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:25:03.753116 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:25:04.744119 0.341086 udp 10.0.2.22 51868 <-> 14.96.62.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:05.745666 0.319068 udp 10.0.2.22 51868 <-> 58.68.94.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:06.747189 0.181303 udp 10.0.2.22 51868 <-> 63.142.75.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:07.748504 0.288164 udp 10.0.2.22 51868 <-> 76.14.113.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:08.750180 0.166281 udp 10.0.2.22 51868 <-> 71.45.112.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:09.751552 0.371996 udp 10.0.2.22 51868 <-> 219.171.36.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:10.752999 0.152614 udp 10.0.2.22 51868 <-> 92.126.215.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:11.744497 0.213321 udp 10.0.2.22 51868 <-> 86.107.40.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:12.745678 0.223592 udp 10.0.2.22 51868 <-> 98.127.221.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:13.747080 0.039597 udp 10.0.2.22 51868 <-> 77.22.71.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:14.748841 0.050495 udp 10.0.2.22 51868 <-> 83.142.2.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:15.750064 0.056121 udp 10.0.2.22 51868 <-> 176.14.77.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:16.751428 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:25:17.752579 0.350047 udp 10.0.2.22 51868 <-> 183.178.231.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:18.744055 0.303649 udp 10.0.2.22 51868 <-> 5.200.224.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:19.745814 0.296296 udp 10.0.2.22 51868 <-> 124.33.233.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:20.747304 0.147279 udp 10.0.2.22 51868 <-> 184.56.45.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:21.748315 0.164514 udp 10.0.2.22 51868 <-> 27.106.110.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:22.750120 0.641123 udp 10.0.2.22 51868 <-> 173.16.216.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:23.751336 3.055658 udp 10.0.2.22 51868 <-> 84.55.13.19 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:24.752821 0.000000 udp 10.0.2.22 51868 -> 103.7.151.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:25:25.624319 0.000093 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:25:25.744281 0.151600 udp 10.0.2.22 51868 <-> 76.123.228.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:27.747535 0.317656 udp 10.0.2.22 51868 <-> 119.200.155.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:28.749142 0.414577 udp 10.0.2.22 51868 <-> 201.221.100.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:29.749815 0.038701 udp 10.0.2.22 51868 <-> 5.15.242.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:30.751527 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:25:31.753157 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:25:32.744297 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:25:33.745863 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:25:34.747286 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:25:35.748687 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:25:36.750309 0.000068 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:25:36.750377 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:25:37.752036 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:25:38.753293 0.000000 udp 10.0.2.22 51868 -> 178.131.223.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:25:39.744558 0.035218 udp 10.0.2.22 51868 <-> 151.100.97.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:40.745791 0.304908 udp 10.0.2.22 51868 <-> 58.188.42.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:41.747091 0.000000 udp 10.0.2.22 51868 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:25:42.748633 0.343846 udp 10.0.2.22 51868 <-> 115.242.54.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:43.750505 2.002609 udp 10.0.2.22 51868 -> 188.173.201.207 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:25:44.751791 0.115289 udp 10.0.2.22 51868 <-> 84.108.234.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:46.744928 0.163868 udp 10.0.2.22 51868 <-> 98.197.173.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:47.746355 0.171458 udp 10.0.2.22 51868 <-> 74.197.79.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:48.747216 0.000000 udp 10.0.2.22 51868 -> 59.177.134.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:25:49.748741 0.000000 udp 10.0.2.22 51868 -> 176.193.17.118 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:25:50.750217 0.000000 udp 10.0.2.22 51868 -> 85.204.248.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:25:51.751934 0.000000 udp 10.0.2.22 51868 -> 79.117.168.117 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:25:52.622860 0.000144 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:25:52.753494 0.352751 udp 10.0.2.22 51868 <-> 218.226.32.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:53.744857 0.129758 udp 10.0.2.22 51868 <-> 67.248.215.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:54.745896 0.388269 udp 10.0.2.22 51868 <-> 59.90.203.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:55.747386 1.009459 udp 10.0.2.22 51868 <-> 173.216.251.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:56.749021 0.154925 udp 10.0.2.22 51868 <-> 96.19.238.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:57.750382 0.256691 udp 10.0.2.22 51868 <-> 186.67.39.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:25:58.751838 0.000000 udp 10.0.2.22 51868 -> 115.73.92.168 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:25:59.743670 0.093567 udp 10.0.2.22 51868 <-> 79.23.235.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:00.744558 0.032731 udp 10.0.2.22 51868 <-> 94.231.32.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:01.746040 4.005955 udp 10.0.2.22 51868 <-> 111.246.91.168 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:02.747684 0.000000 udp 10.0.2.22 51868 -> 78.90.170.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:26:03.748921 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:26:04.750168 0.128325 udp 10.0.2.22 51868 <-> 98.223.2.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:06.743672 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:26:07.744529 0.362929 udp 10.0.2.22 51868 <-> 14.97.62.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:08.746640 0.144387 udp 10.0.2.22 51868 <-> 69.138.192.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:09.747808 0.108295 udp 10.0.2.22 51868 <-> 83.24.131.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:10.748758 0.149838 udp 10.0.2.22 51868 <-> 216.186.178.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:11.750497 0.308856 udp 10.0.2.22 51868 <-> 14.42.235.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:12.752027 1.249456 udp 10.0.2.22 51868 <-> 99.230.218.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:13.743637 0.327635 udp 10.0.2.22 51868 <-> 59.1.66.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:14.744663 0.078735 udp 10.0.2.22 51868 <-> 46.10.153.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:15.746345 0.328871 udp 10.0.2.22 51868 <-> 180.215.93.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:16.747556 0.036014 udp 10.0.2.22 51868 <-> 151.100.97.28 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:17.748871 0.195101 udp 10.0.2.22 51868 <-> 76.174.151.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:18.750925 2.993901 udp 10.0.2.22 51868 <-> 92.75.209.23 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:19.621643 0.000112 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:26:19.752225 1.120012 udp 10.0.2.22 51868 <-> 66.103.51.143 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:22.746103 0.048776 udp 10.0.2.22 51868 <-> 78.97.131.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:23.748216 0.120640 udp 10.0.2.22 51868 <-> 80.135.44.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:24.264613 0.000000 udp 10.0.2.22 51868 <- 92.75.209.23 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:26:24.749585 1.156758 udp 10.0.2.22 51868 <-> 78.88.33.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:25.750830 0.028630 udp 10.0.2.22 51868 <-> 85.121.1.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:26.751777 0.144170 udp 10.0.2.22 51868 <-> 70.80.99.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:27.743243 0.290340 udp 10.0.2.22 51868 <-> 190.75.163.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:28.744922 0.232101 udp 10.0.2.22 51868 <-> 63.147.47.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:29.746540 0.337534 udp 10.0.2.22 51868 <-> 183.179.33.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:30.748034 0.000000 udp 10.0.2.22 51868 -> 197.6.53.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:26:31.748986 0.036064 udp 10.0.2.22 51868 <-> 151.100.97.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:32.750919 0.166600 udp 10.0.2.22 51868 <-> 69.62.15.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:33.752711 0.305385 udp 10.0.2.22 51868 <-> 122.27.16.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:34.743683 0.151964 udp 10.0.2.22 51868 <-> 98.209.179.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:35.744829 0.066714 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:36.746598 0.779236 udp 10.0.2.22 51868 <-> 117.213.205.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:37.747753 0.000000 udp 10.0.2.22 51868 -> 67.191.122.185 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:26:38.749601 2.323138 udp 10.0.2.22 51868 <-> 210.203.193.83 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:39.751043 0.327880 udp 10.0.2.22 51868 <-> 111.253.130.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:41.743449 0.137790 udp 10.0.2.22 51868 <-> 75.134.178.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:42.744873 0.048342 udp 10.0.2.22 51868 <-> 150.214.64.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:43.746287 0.000000 udp 10.0.2.22 51868 -> 79.19.101.93 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:26:44.747672 0.037022 udp 10.0.2.22 51868 <-> 178.27.77.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:45.749915 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:26:46.620898 0.000117 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:26:46.750579 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:26:47.752278 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:26:48.743587 3.004513 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:26:49.745163 0.023450 udp 10.0.2.22 51868 <-> 213.222.191.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:50.746647 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:26:52.749713 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:26:53.750698 0.045315 udp 10.0.2.22 51868 <-> 79.119.24.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:54.752462 2.994332 udp 10.0.2.22 51868 -> 92.240.41.5 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:26:55.743796 0.078627 udp 10.0.2.22 51868 <-> 84.1.173.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:56.745320 0.158931 udp 10.0.2.22 51868 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:58.748330 0.330068 udp 10.0.2.22 51868 <-> 14.96.16.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:26:59.749849 0.000000 udp 10.0.2.22 51868 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:27:00.751440 0.302339 udp 10.0.2.22 51868 <-> 189.110.83.29 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:01.752444 0.000000 udp 10.0.2.22 51868 -> 176.200.179.0 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:27:02.744163 0.383350 udp 10.0.2.22 51868 <-> 111.249.249.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:03.745182 0.000000 udp 10.0.2.22 51868 -> 162.210.42.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:27:04.746576 0.165563 udp 10.0.2.22 51868 <-> 50.73.12.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:05.748580 0.063279 udp 10.0.2.22 51868 <-> 178.79.57.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:06.750072 0.000000 udp 10.0.2.22 51868 -> 76.85.171.149 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:27:07.750944 0.049045 udp 10.0.2.22 51868 <-> 195.84.248.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:08.162893 0.000000 udp 10.0.2.22 51868 <- 176.200.179.0 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:27:08.752839 0.101036 udp 10.0.2.22 51868 <-> 92.41.48.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:09.744328 0.095797 udp 10.0.2.22 51868 <-> 37.215.190.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:10.745160 0.000000 udp 10.0.2.22 51868 -> 184.167.18.225 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:27:11.746783 1.361054 udp 10.0.2.22 51868 <-> 173.44.108.11 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:13.619774 0.000123 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:27:13.749764 0.125512 udp 10.0.2.22 51868 <-> 24.138.143.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:14.751186 0.371502 udp 10.0.2.22 51868 <-> 114.40.221.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:15.752628 0.138540 udp 10.0.2.22 51868 <-> 109.105.252.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:16.743676 0.051181 udp 10.0.2.22 51868 <-> 79.114.8.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:17.745414 0.158730 udp 10.0.2.22 51868 <-> 71.80.71.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:18.746754 0.200117 udp 10.0.2.22 51868 <-> 98.210.235.8 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:19.748537 0.365463 udp 10.0.2.22 51868 <-> 211.134.192.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:20.750062 0.158009 udp 10.0.2.22 51868 <-> 188.79.24.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:21.751064 0.323750 udp 10.0.2.22 51868 <-> 175.214.160.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:22.752308 0.000000 udp 10.0.2.22 51868 -> 78.137.60.67 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:27:23.743713 0.153408 udp 10.0.2.22 51868 <-> 72.137.144.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:24.745435 4.290468 udp 10.0.2.22 51868 <-> 116.75.23.119 16464 CON 0 0 2 528 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:25.746735 0.157552 udp 10.0.2.22 51868 <-> 70.185.202.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:26.748169 3.505566 udp 10.0.2.22 51868 <-> 101.63.210.129 16464 CON 0 0 6 4508 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:27.750005 0.000000 udp 10.0.2.22 51868 -> 78.9.145.111 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:27:28.751293 0.000000 udp 10.0.2.22 51868 -> 41.139.101.130 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:27:29.752710 0.000000 udp 10.0.2.22 51868 -> 115.240.3.80 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:27:30.743836 0.148993 udp 10.0.2.22 51868 <-> 24.154.41.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:31.745466 0.051041 udp 10.0.2.22 51868 <-> 147.163.93.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:32.747358 0.368486 udp 10.0.2.22 51868 <-> 123.236.224.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:33.748720 0.147777 udp 10.0.2.22 51868 <-> 68.192.112.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:34.749565 0.165792 udp 10.0.2.22 51868 <-> 75.65.20.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:35.751002 0.178289 udp 10.0.2.22 51868 <-> 103.250.151.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:36.753028 0.129505 udp 10.0.2.22 51868 <-> 107.3.86.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:37.744622 0.215582 udp 10.0.2.22 51868 <-> 124.123.167.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:38.745300 0.114950 udp 10.0.2.22 51868 <-> 88.37.113.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:39.747141 0.398507 udp 10.0.2.22 51868 <-> 14.98.10.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:40.618664 0.000124 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:27:40.748635 0.000000 udp 10.0.2.22 51868 -> 86.63.172.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:27:41.749655 0.389415 udp 10.0.2.22 51868 <-> 39.117.105.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:42.751137 0.364632 udp 10.0.2.22 51868 <-> 1.162.229.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:43.753239 0.143346 udp 10.0.2.22 51868 <-> 98.27.34.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:44.744499 0.037137 udp 10.0.2.22 51868 <-> 84.197.3.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:45.745805 0.072011 udp 10.0.2.22 51868 <-> 87.121.108.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:46.747413 0.358632 udp 10.0.2.22 51868 <-> 140.127.62.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:47.748451 0.070889 udp 10.0.2.22 51868 <-> 77.189.73.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:48.750128 0.000000 udp 10.0.2.22 51868 -> 36.225.131.48 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:27:49.751121 0.000000 udp 10.0.2.22 51868 -> 188.53.70.45 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:27:50.753197 0.143646 udp 10.0.2.22 51868 <-> 24.154.41.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:51.744526 0.227599 udp 10.0.2.22 51868 <-> 24.55.45.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:52.745649 0.000000 udp 10.0.2.22 51868 -> 101.51.95.159 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:27:53.746930 0.145290 udp 10.0.2.22 51868 <-> 70.83.217.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:54.748907 0.163317 udp 10.0.2.22 51868 <-> 173.23.103.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:27:55.750317 0.000000 udp 10.0.2.22 51868 -> 2.2.3.119 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:27:56.751276 0.000000 udp 10.0.2.22 51868 -> 70.65.248.65 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:27:57.753236 0.000000 udp 10.0.2.22 51868 -> 31.223.154.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:27:58.744108 0.000000 udp 10.0.2.22 51868 -> 61.224.81.128 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:27:59.746206 0.140328 udp 10.0.2.22 51868 <-> 98.212.118.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:00.747313 0.117662 udp 10.0.2.22 51868 <-> 98.239.193.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:01.748468 0.024007 udp 10.0.2.22 51868 <-> 95.223.116.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:02.750355 0.361056 udp 10.0.2.22 51868 <-> 5.234.62.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:03.751871 0.089849 udp 10.0.2.22 51868 <-> 83.180.168.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:04.753056 0.160173 udp 10.0.2.22 51868 <-> 98.224.54.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:05.744507 0.315263 udp 10.0.2.22 51868 <-> 211.7.100.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:06.746006 0.000000 udp 10.0.2.22 51868 -> 219.91.211.134 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:28:07.626967 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:28:07.747445 0.314531 udp 10.0.2.22 51868 <-> 58.68.94.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:08.748940 0.358465 udp 10.0.2.22 51868 <-> 211.76.35.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:09.750696 0.072136 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:10.751820 0.149740 udp 10.0.2.22 51868 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:11.753020 0.354372 udp 10.0.2.22 51868 <-> 1.171.26.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:12.744190 0.171326 udp 10.0.2.22 51868 <-> 27.106.80.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:13.746177 0.000000 udp 10.0.2.22 51868 -> 83.180.205.123 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:28:14.747410 0.000000 udp 10.0.2.22 51868 -> 122.170.21.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:28:15.748592 0.318311 udp 10.0.2.22 51868 <-> 182.167.14.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:16.750370 0.153572 udp 10.0.2.22 51868 <-> 97.95.93.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:17.751764 0.197404 udp 10.0.2.22 51868 <-> 67.185.146.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:18.752901 0.181574 udp 10.0.2.22 51868 <-> 173.23.103.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:19.744789 0.028747 udp 10.0.2.22 51868 <-> 80.99.99.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:20.745824 0.178055 udp 10.0.2.22 51868 <-> 206.253.49.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:21.747853 0.071231 udp 10.0.2.22 51868 <-> 109.60.31.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:22.749439 0.000000 udp 10.0.2.22 51868 -> 76.244.152.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:28:23.750605 0.054779 udp 10.0.2.22 51868 <-> 62.221.143.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:24.752131 0.207697 udp 10.0.2.22 51868 <-> 24.119.59.82 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:25.753130 0.037456 udp 10.0.2.22 51868 <-> 92.247.198.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:26.744460 2.158318 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:27.745936 0.000000 udp 10.0.2.22 51868 -> 202.29.178.147 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:28:29.749238 0.295708 udp 10.0.2.22 51868 -> 211.25.3.190 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:28:30.044946 0.000000 icmp 211.25.3.190 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 01:28:30.750419 0.151340 udp 10.0.2.22 51868 <-> 70.26.75.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:31.751812 0.574809 udp 10.0.2.22 51868 <-> 120.139.136.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:32.743411 0.580380 udp 10.0.2.22 51868 <-> 151.16.143.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:33.744796 0.085202 udp 10.0.2.22 51868 <-> 95.67.135.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:34.626138 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:28:34.746141 0.000000 udp 10.0.2.22 51868 -> 49.205.135.213 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:28:35.747878 0.160139 udp 10.0.2.22 51868 <-> 87.111.41.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:36.748995 0.033786 udp 10.0.2.22 51868 <-> 178.79.32.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:37.750271 0.000000 udp 10.0.2.22 51868 -> 201.235.247.205 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:28:38.092809 3.002757 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 01:28:38.752213 0.570799 udp 10.0.2.22 51868 <-> 194.123.75.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:39.743748 0.037989 udp 10.0.2.22 51868 <-> 213.112.230.161 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:40.744873 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:28:41.745931 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:28:42.747300 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:28:43.749075 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:28:44.750443 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:28:45.100739 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:28:45.751920 4.997297 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:28:46.743142 0.000000 udp 10.0.2.22 51868 -> 81.235.142.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:28:47.745082 0.037948 udp 10.0.2.22 51868 <-> 213.112.230.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:48.746072 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:28:49.748055 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:28:51.750529 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:28:52.752305 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:28:53.102483 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:28:53.743477 0.000000 udp 10.0.2.22 51868 -> 77.38.98.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:28:54.745084 0.299340 udp 10.0.2.22 51868 <-> 220.118.181.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:28:55.746206 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:28:56.747670 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:28:57.749084 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:28:58.750988 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:28:59.751994 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:00.743531 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:01.624676 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:29:01.745155 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:02.746773 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:03.747964 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:05.750683 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:06.752429 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:07.743306 0.000098 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:07.743404 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:29:08.745175 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:09.105795 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:29:09.746474 0.032285 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:29:10.747747 0.000000 udp 10.0.2.22 51868 -> 81.235.142.3 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:11.749362 0.039612 udp 10.0.2.22 51868 <-> 213.112.230.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:29:12.751262 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:14.744088 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:15.745403 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:16.746371 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:17.748283 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:18.749631 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:19.750532 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:20.752473 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:21.744094 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:22.745239 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:23.746753 4.005839 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:23.746838 4.005754 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 2 172 flow=Background 1970/01/01 01:29:24.747694 3.996258 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:25.749733 0.040220 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:29:26.750907 0.239424 udp 10.0.2.22 51868 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:29:29.625121 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:29:29.745454 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:30.746673 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:31.747987 0.313859 udp 10.0.2.22 51868 <-> 220.118.181.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:29:32.749385 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:33.751266 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:34.752311 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:35.743705 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:36.745239 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:37.746968 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:38.747999 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:39.750079 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:40.751053 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:41.111256 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:29:41.752561 0.000061 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:41.752622 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:29:42.743646 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:43.745029 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:45.748570 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:46.749729 4.997116 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:29:47.751070 0.000000 udp 10.0.2.22 51868 -> 81.235.142.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:48.752275 4.213376 udp 10.0.2.22 51868 <-> 173.174.0.5 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:29:49.745461 0.000000 udp 10.0.2.22 51868 -> 115.241.210.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:50.745263 0.626961 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:29:51.780185 0.000000 udp 10.0.2.22 51868 <- 130.204.23.5 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:53.750110 0.474051 udp 10.0.2.22 51868 <-> 117.215.224.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:29:54.751049 0.092504 udp 10.0.2.22 51868 <-> 94.197.165.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:29:55.752998 0.331699 udp 10.0.2.22 51868 <-> 114.180.181.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:29:56.624198 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:29:56.744362 0.122908 udp 10.0.2.22 51868 <-> 80.86.237.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:29:57.745145 0.125044 udp 10.0.2.22 51868 <-> 71.206.33.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:29:58.747007 0.000000 udp 10.0.2.22 51868 -> 78.4.89.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:29:59.748521 0.000000 udp 10.0.2.22 51868 -> 112.199.170.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:30:00.749887 0.136358 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:01.751300 0.113691 udp 10.0.2.22 51868 <-> 69.77.158.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:02.752724 0.157175 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:03.744442 2.625346 udp 10.0.2.22 51868 <-> 211.74.239.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:04.745513 0.346105 udp 10.0.2.22 51868 <-> 111.254.125.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:05.746713 0.144505 udp 10.0.2.22 51868 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:06.748305 0.369058 udp 10.0.2.22 51868 <-> 39.117.105.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:07.749846 2.147593 udp 10.0.2.22 51868 <-> 68.113.165.98 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:08.751580 0.000000 udp 10.0.2.22 51868 -> 78.62.30.169 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:30:10.744512 0.046340 udp 10.0.2.22 51868 <-> 130.204.99.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:11.745310 0.000000 udp 10.0.2.22 51868 -> 14.97.160.42 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:30:12.746722 0.000000 udp 10.0.2.22 51868 -> 153.162.40.93 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:30:13.748169 0.000000 udp 10.0.2.22 51868 -> 14.96.172.212 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:30:14.749896 0.288782 udp 10.0.2.22 51868 <-> 61.26.169.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:15.751260 2.174877 udp 10.0.2.22 51868 <-> 68.116.158.67 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:16.753123 0.000000 udp 10.0.2.22 51868 -> 192.168.0.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:30:18.745709 0.303491 udp 10.0.2.22 51868 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:19.747210 0.109755 udp 10.0.2.22 51868 <-> 82.53.102.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:20.748686 0.000000 udp 10.0.2.22 51868 -> 153.135.214.57 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:30:21.750135 0.345009 udp 10.0.2.22 51868 <-> 184.156.20.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:22.751164 0.005126 udp 10.0.2.22 51868 <-> 147.229.140.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:23.622627 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:30:23.753056 0.141650 udp 10.0.2.22 51868 <-> 69.63.41.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:24.744079 0.325194 udp 10.0.2.22 51868 <-> 39.117.82.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:25.745944 2.002891 udp 10.0.2.22 51868 -> 115.244.238.242 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:30:26.746892 0.137964 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:28.750013 0.153748 udp 10.0.2.22 51868 <-> 24.102.154.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:29.751201 0.000000 udp 10.0.2.22 51868 -> 117.196.243.243 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:30:30.753018 0.000000 udp 10.0.2.22 51868 -> 115.244.238.242 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:30:31.744432 1.451216 udp 10.0.2.22 51868 <-> 115.240.44.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:32.745717 0.051908 udp 10.0.2.22 51868 <-> 46.214.189.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:33.747300 0.152195 udp 10.0.2.22 51868 <-> 37.14.140.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:34.748721 0.141578 udp 10.0.2.22 51868 <-> 68.194.18.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:35.749998 0.978729 udp 10.0.2.22 51868 <-> 213.166.215.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:36.751463 0.336147 udp 10.0.2.22 51868 <-> 114.38.157.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:37.753031 0.117256 udp 10.0.2.22 51868 <-> 72.209.212.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:38.744167 0.000000 udp 10.0.2.22 51868 -> 202.71.19.138 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:30:39.745674 0.038935 udp 10.0.2.22 51868 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:40.747110 0.000000 udp 10.0.2.22 51868 -> 188.167.110.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:30:41.748803 0.139499 udp 10.0.2.22 51868 <-> 76.99.198.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:42.750554 0.065089 udp 10.0.2.22 51868 <-> 217.174.48.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:43.751647 0.255950 udp 10.0.2.22 51868 <-> 190.204.17.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:44.753532 0.340890 udp 10.0.2.22 51868 <-> 124.125.44.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:45.744544 0.042718 udp 10.0.2.22 51868 <-> 95.77.177.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:46.745993 0.363847 udp 10.0.2.22 51868 <-> 124.244.60.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:47.747357 0.066640 udp 10.0.2.22 51868 <-> 84.126.6.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:48.748748 0.496086 udp 10.0.2.22 51868 <-> 117.207.52.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:49.750219 0.000000 udp 10.0.2.22 51868 -> 213.166.215.183 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:30:50.621240 0.000186 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:30:50.751946 0.585264 udp 10.0.2.22 51868 <-> 202.29.179.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:51.753120 0.119035 udp 10.0.2.22 51868 <-> 83.213.6.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:52.744912 0.561536 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:53.746181 0.040607 udp 10.0.2.22 51868 <-> 5.15.233.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:54.747175 0.852176 udp 10.0.2.22 51868 <-> 85.30.146.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:55.748899 0.000000 udp 10.0.2.22 51868 -> 101.63.181.146 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:30:56.750073 0.000000 udp 10.0.2.22 51868 -> 172.243.65.147 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:30:57.752154 0.397331 udp 10.0.2.22 51868 <-> 117.207.63.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:58.752844 0.151630 udp 10.0.2.22 51868 <-> 67.240.151.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:30:59.744580 0.270270 udp 10.0.2.22 51868 <-> 187.64.200.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:31:00.746058 0.046940 udp 10.0.2.22 51868 <-> 92.109.240.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:31:01.747322 0.077631 udp 10.0.2.22 51868 <-> 89.134.105.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:31:02.748989 0.121403 udp 10.0.2.22 51868 <-> 130.15.154.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:31:03.750247 0.038714 udp 10.0.2.22 51868 <-> 89.215.95.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:31:04.752140 0.000000 udp 10.0.2.22 51868 -> 37.231.211.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:05.743575 0.335724 udp 10.0.2.22 51868 <-> 14.98.147.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:31:06.744516 0.168019 udp 10.0.2.22 51868 <-> 108.167.33.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:31:07.746393 0.124386 udp 10.0.2.22 51868 <-> 2.71.173.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:31:08.747381 0.000000 udp 10.0.2.22 51868 -> 178.91.154.50 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:09.748666 0.000000 udp 10.0.2.22 51868 -> 173.218.139.49 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:10.750427 0.000000 udp 10.0.2.22 51868 -> 123.220.202.122 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:11.752172 0.000000 udp 10.0.2.22 51868 -> 195.114.155.130 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:12.743476 0.136551 udp 10.0.2.22 51868 <-> 24.45.174.75 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:31:13.744432 0.023066 udp 10.0.2.22 51868 -> 80.98.24.51 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:13.767498 0.000000 icmp 80.98.24.51 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 01:31:14.746153 0.153528 udp 10.0.2.22 51868 -> 178.91.154.50 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:14.899681 0.000000 icmp 178.91.154.50 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 01:31:15.747723 0.000000 udp 10.0.2.22 51868 -> 109.53.1.109 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:16.748880 0.000000 udp 10.0.2.22 51868 -> 113.21.75.104 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:17.620625 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:31:17.750265 0.000000 udp 10.0.2.22 51868 -> 123.220.202.122 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:18.752045 0.000000 udp 10.0.2.22 51868 -> 114.32.5.47 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:19.743626 0.000000 udp 10.0.2.22 51868 -> 95.87.12.65 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:20.745219 0.000000 udp 10.0.2.22 51868 -> 180.221.227.92 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:21.746446 0.000000 udp 10.0.2.22 51868 -> 89.230.126.175 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:22.747676 0.000000 udp 10.0.2.22 51868 -> 94.177.88.97 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:23.749007 0.000000 udp 10.0.2.22 51868 -> 173.218.139.49 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:24.751090 0.000000 udp 10.0.2.22 51868 -> 91.106.94.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:25.752330 0.000000 udp 10.0.2.22 51868 -> 60.44.6.178 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:26.743702 0.000000 udp 10.0.2.22 51868 -> 74.142.126.40 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:27.745099 0.000000 udp 10.0.2.22 51868 -> 195.114.155.130 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:28.746575 0.131831 udp 10.0.2.22 51868 <-> 24.126.32.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:31:29.748155 0.000000 udp 10.0.2.22 51868 -> 94.177.88.97 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:30.749431 0.000000 udp 10.0.2.22 51868 -> 89.230.126.175 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:31.750362 0.000000 udp 10.0.2.22 51868 -> 60.44.6.178 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:32.752327 0.000000 udp 10.0.2.22 51868 -> 180.221.227.92 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:33.743583 0.000000 udp 10.0.2.22 51868 -> 109.53.1.109 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:34.745219 0.000000 udp 10.0.2.22 51868 -> 74.142.126.40 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:35.746818 0.000000 udp 10.0.2.22 51868 -> 66.176.223.40 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:36.747808 0.000000 udp 10.0.2.22 51868 -> 114.32.5.47 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:37.749059 0.000000 udp 10.0.2.22 51868 -> 178.91.154.50 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:38.750847 0.000000 udp 10.0.2.22 51868 -> 95.87.12.65 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:39.752379 0.314479 udp 10.0.2.22 51868 -> 123.220.202.122 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:40.066858 0.000000 icmp 123.220.202.122 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 01:31:40.743615 0.000000 udp 10.0.2.22 51868 -> 173.218.139.49 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:41.745101 0.023820 udp 10.0.2.22 51868 -> 80.98.24.51 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:41.768921 0.000000 icmp 80.98.24.51 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 01:31:42.746277 3.004944 udp 10.0.2.22 51868 -> 195.114.155.130 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:45.804643 0.000000 icmp 195.114.155.130 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 01:31:43.748258 0.203828 udp 10.0.2.22 51868 -> 113.21.75.104 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:43.952086 0.000000 icmp 113.21.75.104 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 01:31:44.618878 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:31:44.749368 0.143900 udp 10.0.2.22 51868 <-> 107.16.6.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:31:46.752468 0.000000 udp 10.0.2.22 51868 -> 178.91.154.50 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:47.743893 0.000000 udp 10.0.2.22 51868 -> 66.176.223.40 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:48.745088 0.000000 udp 10.0.2.22 51868 -> 60.44.6.178 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:49.746346 0.000000 udp 10.0.2.22 51868 -> 173.218.139.49 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:50.747667 0.000000 udp 10.0.2.22 51868 -> 113.21.75.104 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:51.749703 0.000000 udp 10.0.2.22 51868 -> 94.177.88.97 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:52.751065 0.000000 udp 10.0.2.22 51868 -> 91.106.94.76 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:53.752187 0.000000 udp 10.0.2.22 51868 -> 123.220.202.122 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:54.743858 0.000000 udp 10.0.2.22 51868 -> 180.221.227.92 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:55.744831 0.000000 udp 10.0.2.22 51868 -> 80.98.24.51 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:56.746946 0.000000 udp 10.0.2.22 51868 -> 74.142.126.40 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:57.747883 0.000000 udp 10.0.2.22 51868 -> 89.230.126.175 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:58.749103 0.000000 udp 10.0.2.22 51868 -> 114.32.5.47 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:31:59.750746 0.000000 udp 10.0.2.22 51868 -> 109.53.1.109 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:00.751994 0.164104 udp 10.0.2.22 51868 <-> 69.245.165.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:32:01.743947 0.000000 udp 10.0.2.22 51868 -> 66.176.223.40 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:02.745203 0.000000 udp 10.0.2.22 51868 -> 123.220.202.122 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:03.746705 0.000000 udp 10.0.2.22 51868 -> 60.44.6.178 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:04.747860 0.000000 udp 10.0.2.22 51868 -> 74.142.126.40 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:05.749186 0.000000 udp 10.0.2.22 51868 -> 113.21.75.104 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:06.751108 0.151887 udp 10.0.2.22 51868 <-> 202.179.89.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:32:07.752762 0.043273 udp 10.0.2.22 51868 -> 95.87.12.65 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:07.796035 0.000000 icmp 95.87.12.65 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 01:32:08.743741 0.000000 udp 10.0.2.22 51868 -> 109.53.1.109 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:09.745110 0.000000 udp 10.0.2.22 51868 -> 91.106.94.76 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:10.747057 0.166716 udp 10.0.2.22 51868 -> 178.91.154.50 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:10.913773 0.000000 icmp 178.91.154.50 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 01:32:11.617841 0.000093 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:32:11.747815 0.000000 udp 10.0.2.22 51868 -> 123.220.202.122 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:12.749871 0.000000 udp 10.0.2.22 51868 -> 60.44.6.178 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:13.751095 0.000000 udp 10.0.2.22 51868 -> 114.32.5.47 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:14.752420 0.000000 udp 10.0.2.22 51868 -> 89.230.126.175 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:15.743738 0.000000 udp 10.0.2.22 51868 -> 195.114.155.130 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:16.745178 0.000000 udp 10.0.2.22 51868 -> 173.218.139.49 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:17.747062 0.000000 udp 10.0.2.22 51868 -> 113.21.75.104 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:18.748192 0.000000 udp 10.0.2.22 51868 -> 94.177.88.97 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:19.749313 2.994773 udp 10.0.2.22 51868 -> 80.98.24.51 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:20.751390 0.163548 udp 10.0.2.22 51868 <-> 69.245.165.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:32:21.752575 0.000000 udp 10.0.2.22 51868 -> 173.218.139.49 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:23.745170 0.000000 udp 10.0.2.22 51868 -> 91.106.94.76 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:24.747189 0.000000 udp 10.0.2.22 51868 -> 89.230.126.175 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:25.748445 0.000000 udp 10.0.2.22 51868 -> 195.114.155.130 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:26.749955 0.000000 udp 10.0.2.22 51868 -> 180.221.227.92 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:27.751486 0.000000 udp 10.0.2.22 51868 -> 60.44.6.178 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:28.752428 0.000000 udp 10.0.2.22 51868 -> 95.87.12.65 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:29.743934 0.000000 udp 10.0.2.22 51868 -> 94.177.88.97 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:30.745272 0.000000 udp 10.0.2.22 51868 -> 123.220.202.122 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:31.747360 0.000000 udp 10.0.2.22 51868 -> 109.53.1.109 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:32.748497 0.000000 udp 10.0.2.22 51868 -> 66.176.223.40 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:33.749696 0.000000 udp 10.0.2.22 51868 -> 74.142.126.40 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:34.751072 0.329462 udp 10.0.2.22 51868 -> 114.32.5.47 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:35.080534 0.000000 icmp 114.32.5.47 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 01:32:35.752621 0.000000 udp 10.0.2.22 51868 -> 113.21.75.104 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:36.743836 0.209204 udp 10.0.2.22 51868 <-> 108.167.33.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:32:37.745903 0.147533 udp 10.0.2.22 51868 <-> 202.179.89.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:32:38.626964 0.000109 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:32:38.747239 0.000000 udp 10.0.2.22 51868 -> 123.220.202.122 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:39.748280 0.000000 udp 10.0.2.22 51868 -> 89.230.126.175 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:40.749587 0.000000 udp 10.0.2.22 51868 -> 178.91.154.50 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:41.751569 0.000000 udp 10.0.2.22 51868 -> 95.87.12.65 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:42.752635 0.000000 udp 10.0.2.22 51868 -> 94.177.88.97 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:43.744145 0.000000 udp 10.0.2.22 51868 -> 60.44.6.178 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:44.745263 0.000000 udp 10.0.2.22 51868 -> 114.32.5.47 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:45.747220 0.000000 udp 10.0.2.22 51868 -> 180.221.227.92 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:46.748513 0.000000 udp 10.0.2.22 51868 -> 173.218.139.49 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:47.749793 0.000000 udp 10.0.2.22 51868 -> 113.21.75.104 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:48.751803 0.000000 udp 10.0.2.22 51868 -> 109.53.1.109 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:49.753062 0.000000 udp 10.0.2.22 51868 -> 91.106.94.76 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:50.744291 0.137184 udp 10.0.2.22 51868 <-> 24.45.174.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:32:51.745385 0.000000 udp 10.0.2.22 51868 -> 74.142.126.40 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:52.747339 0.000000 udp 10.0.2.22 51868 -> 114.32.5.47 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:53.748625 3.146087 udp 10.0.2.22 51868 <-> 24.148.4.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:32:54.750443 0.000000 udp 10.0.2.22 51868 -> 41.254.1.192 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:55.751066 0.000000 udp 10.0.2.22 51868 -> 65.188.38.194 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:32:57.744581 1.374637 udp 10.0.2.22 51868 <-> 115.253.236.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:32:58.745529 0.307729 udp 10.0.2.22 51868 <-> 121.171.242.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:32:59.746977 0.000000 udp 10.0.2.22 51868 -> 71.92.129.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:33:00.748349 0.165207 udp 10.0.2.22 51868 <-> 120.138.105.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:01.750363 0.131991 udp 10.0.2.22 51868 <-> 79.12.187.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:02.751345 0.151602 udp 10.0.2.22 51868 <-> 69.250.40.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:03.753232 0.336744 udp 10.0.2.22 51868 <-> 113.252.190.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:04.744589 0.000000 udp 10.0.2.22 51868 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:33:05.625783 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:33:05.745544 0.000000 udp 10.0.2.22 51868 -> 108.230.246.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:33:06.747008 0.169574 udp 10.0.2.22 51868 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:07.748866 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:33:08.750286 0.362555 udp 10.0.2.22 51868 <-> 124.244.75.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:09.751477 0.000000 udp 10.0.2.22 51868 -> 75.151.153.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:33:10.752868 0.000135 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:33:10.753003 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:33:11.744541 0.059291 udp 10.0.2.22 51868 <-> 94.52.120.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:12.746127 0.233726 udp 10.0.2.22 51868 <-> 158.108.48.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:13.747203 4.213933 udp 10.0.2.22 51868 <-> 24.9.113.237 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:14.748499 0.000000 udp 10.0.2.22 51868 -> 62.98.45.142 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:33:15.750581 0.479166 udp 10.0.2.22 51868 <-> 190.155.70.147 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:16.751340 0.054080 udp 10.0.2.22 51868 <-> 94.240.170.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:18.744547 0.000000 udp 10.0.2.22 51868 -> 84.1.20.244 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:33:19.745843 0.097351 udp 10.0.2.22 51868 <-> 178.122.31.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:21.748741 0.175074 udp 10.0.2.22 51868 <-> 75.111.219.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:22.750476 0.000000 udp 10.0.2.22 51868 -> 5.237.137.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:33:23.751910 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:33:24.753159 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:33:25.744640 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:33:26.746035 1.392147 udp 10.0.2.22 51868 <-> 181.165.163.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:27.747305 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:33:28.748819 0.176060 udp 10.0.2.22 51868 <-> 75.111.219.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:29.750457 0.355750 udp 10.0.2.22 51868 <-> 190.48.108.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:30.752076 0.062657 udp 10.0.2.22 51868 <-> 79.112.23.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:31.753353 1.434665 udp 10.0.2.22 51868 <-> 68.217.244.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:32.624275 0.000097 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:33:32.744569 0.473825 udp 10.0.2.22 51868 <-> 190.179.177.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:33.745742 0.041239 udp 10.0.2.22 51868 <-> 212.233.239.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:34.747234 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:33:35.748784 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:33:36.750458 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:33:38.743451 0.179732 udp 10.0.2.22 51868 <-> 24.49.203.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:39.744362 0.000000 udp 10.0.2.22 51868 -> 187.70.105.206 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:33:40.746354 0.039837 udp 10.0.2.22 51868 <-> 5.15.140.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:41.747332 0.000000 udp 10.0.2.22 51868 -> 118.179.243.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:33:42.748654 0.353361 udp 10.0.2.22 51868 <-> 116.49.140.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:43.750300 0.156055 udp 10.0.2.22 51868 <-> 96.19.238.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:44.752180 0.499538 udp 10.0.2.22 51868 <-> 98.69.141.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:45.743369 0.069920 udp 10.0.2.22 51868 <-> 85.85.71.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:46.744890 0.000000 udp 10.0.2.22 51868 -> 190.51.66.112 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:33:47.746150 0.161224 udp 10.0.2.22 51868 <-> 71.203.98.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:48.747709 0.000000 udp 10.0.2.22 51868 -> 101.51.185.55 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:33:49.749171 0.128777 udp 10.0.2.22 51868 <-> 82.130.231.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:50.750705 0.000042 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:33:50.750747 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:33:51.752135 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:33:52.743655 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:33:53.744702 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:33:54.745936 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:33:55.747884 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:33:56.748792 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:33:57.750954 0.445984 udp 10.0.2.22 51868 <-> 114.76.142.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:58.752062 0.398591 udp 10.0.2.22 51868 <-> 219.171.36.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:33:59.623003 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:33:59.743576 0.177159 udp 10.0.2.22 51868 <-> 75.65.20.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:00.744567 0.134212 udp 10.0.2.22 51868 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:01.746443 0.162339 udp 10.0.2.22 51868 <-> 50.158.209.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:02.748013 0.000000 udp 10.0.2.22 51868 -> 2.28.17.119 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:03.749510 0.041252 udp 10.0.2.22 51868 <-> 94.156.86.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:04.750922 0.061558 udp 10.0.2.22 51868 <-> 79.116.248.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:05.751722 1.091047 udp 10.0.2.22 51868 <-> 117.207.62.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:06.743736 0.355064 udp 10.0.2.22 51868 <-> 114.46.215.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:07.745048 0.000000 udp 10.0.2.22 51868 -> 151.241.2.99 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:08.746142 0.138150 udp 10.0.2.22 51868 <-> 69.116.161.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:09.748242 0.435359 udp 10.0.2.22 51868 <-> 122.116.20.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:10.749193 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:11.750625 0.000095 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:11.750720 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:34:12.751928 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:13.743330 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:14.745121 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:15.746284 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:16.747627 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:17.748965 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:18.750977 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:19.752439 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:20.743444 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:22.746673 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:23.748286 0.000000 udp 10.0.2.22 51868 -> 69.8.46.202 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:24.749481 0.000000 udp 10.0.2.22 51868 -> 83.200.49.100 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:25.750951 0.377763 udp 10.0.2.22 51868 <-> 122.116.20.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:26.752455 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:27.623843 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:34:27.743701 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:28.744957 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:29.746249 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:30.747660 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:31.749649 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:32.237727 0.000000 udp 10.0.2.22 51868 <- 69.8.46.202 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:32.750953 0.000000 udp 10.0.2.22 51868 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:33.752682 1.992618 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:34.743844 0.049084 udp 10.0.2.22 51868 <-> 37.8.220.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:36.746444 0.048245 udp 10.0.2.22 51868 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:37.748465 0.000000 udp 10.0.2.22 51868 -> 151.246.111.146 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:38.749312 0.364236 udp 10.0.2.22 51868 <-> 112.119.99.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:39.750787 4.980955 udp 10.0.2.22 51868 <-> 211.128.83.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:40.752266 0.305547 udp 10.0.2.22 51868 <-> 222.144.110.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:41.743717 0.222728 udp 10.0.2.22 51868 <-> 68.207.92.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:42.744983 0.072970 udp 10.0.2.22 51868 <-> 176.8.141.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:43.746970 0.349219 udp 10.0.2.22 51868 <-> 211.72.66.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:44.747823 1.496415 udp 10.0.2.22 51868 <-> 67.210.55.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:45.749523 0.000000 udp 10.0.2.22 51868 -> 88.37.51.42 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:46.751208 1.000463 udp 10.0.2.22 51868 <-> 109.60.87.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:47.752536 0.512273 udp 10.0.2.22 51868 <-> 204.16.10.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:48.743827 0.000000 udp 10.0.2.22 51868 -> 79.117.40.72 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:49.745212 1.061511 udp 10.0.2.22 51868 <-> 24.135.86.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:50.746483 0.156348 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:51.747879 4.997595 udp 10.0.2.22 51868 <-> 50.157.214.135 16464 CON 0 0 5 1954 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:52.749412 0.174692 udp 10.0.2.22 51868 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:53.750985 0.041548 udp 10.0.2.22 51868 <-> 95.77.141.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:54.622037 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:34:54.752710 0.000000 udp 10.0.2.22 51868 -> 71.89.50.92 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:34:56.879130 3.004480 udp 10.0.2.22 51868 <-> 50.157.214.135 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:57.746962 0.150714 udp 10.0.2.22 51868 <-> 69.55.254.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:34:58.748214 0.000000 udp 10.0.2.22 51868 -> 130.204.169.49 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:00.751338 0.296830 udp 10.0.2.22 51868 <-> 187.39.52.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:35:01.752305 0.063381 udp 10.0.2.22 51868 <-> 85.84.242.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:35:02.744213 0.000000 udp 10.0.2.22 51868 -> 87.0.188.78 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:03.745202 0.000000 udp 10.0.2.22 51868 -> 78.48.164.81 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:04.747342 0.150541 udp 10.0.2.22 51868 <-> 96.20.43.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:35:05.748127 0.047926 udp 10.0.2.22 51868 <-> 150.214.63.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:35:06.749851 0.147985 udp 10.0.2.22 51868 <-> 174.96.111.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:35:07.751396 0.074010 udp 10.0.2.22 51868 <-> 109.110.18.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:35:08.752559 0.030802 udp 10.0.2.22 51868 <-> 77.70.44.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:35:09.743986 0.313566 udp 10.0.2.22 51868 <-> 121.185.98.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:35:10.745221 0.026010 udp 10.0.2.22 51868 <-> 85.130.45.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:35:11.747318 0.000000 udp 10.0.2.22 51868 -> 14.98.83.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:12.748407 0.000000 udp 10.0.2.22 51868 -> 81.7.86.40 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:13.749768 0.298882 udp 10.0.2.22 51868 <-> 59.190.46.251 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:35:14.750959 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:15.753144 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:16.744115 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:17.745841 3.003924 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:18.747161 0.300509 udp 10.0.2.22 51868 <-> 218.47.116.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:35:19.748643 0.140858 udp 10.0.2.22 51868 <-> 68.189.177.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:35:21.621143 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:35:21.751184 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:22.752490 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:23.744052 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:24.745655 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:25.747246 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:26.748824 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:27.750334 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:28.751184 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:29.752962 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:30.744167 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:31.745637 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:32.747352 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:33.748472 0.000000 udp 10.0.2.22 51868 -> 81.7.86.40 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:34.750215 0.297434 udp 10.0.2.22 51868 <-> 218.47.116.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:35:36.753121 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:37.744570 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:38.745725 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:39.747257 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:40.749069 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:41.750049 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:42.751247 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:43.753315 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:44.744217 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:45.157418 3.001690 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 01:35:45.746047 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:46.747228 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:47.749006 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:48.620118 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:35:48.750218 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:49.751561 1.992647 udp 10.0.2.22 51868 <-> 201.223.227.25 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:35:50.752723 4.086045 udp 10.0.2.22 51868 <-> 78.188.164.28 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:35:52.165272 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:35:52.746251 0.000000 udp 10.0.2.22 51868 -> 59.190.46.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:53.747623 0.000000 udp 10.0.2.22 51868 -> 106.1.41.31 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:35:55.750154 3.172681 udp 10.0.2.22 51868 <-> 182.189.0.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:35:56.751858 0.182578 udp 10.0.2.22 51868 <-> 68.179.181.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:35:57.753387 0.033643 udp 10.0.2.22 51868 <-> 84.252.22.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:35:58.744199 0.107830 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:35:59.746111 0.291119 udp 10.0.2.22 51868 <-> 60.62.66.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:00.166465 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:36:00.747340 0.364161 udp 10.0.2.22 51868 <-> 112.197.242.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:01.748909 0.399649 udp 10.0.2.22 51868 <-> 220.60.160.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:02.750518 0.224632 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:03.752025 0.521319 udp 10.0.2.22 51868 <-> 79.121.110.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:04.753177 0.067498 udp 10.0.2.22 51868 <-> 85.87.142.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:05.744871 0.139415 udp 10.0.2.22 51868 <-> 24.182.92.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:06.746176 0.220727 udp 10.0.2.22 51868 <-> 200.93.52.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:07.747296 2.473847 udp 10.0.2.22 51868 <-> 92.75.209.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:08.748805 0.291352 udp 10.0.2.22 51868 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:09.750361 0.337718 udp 10.0.2.22 51868 <-> 218.164.93.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:10.751958 0.369481 udp 10.0.2.22 51868 <-> 27.3.191.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:11.743033 1.357039 udp 10.0.2.22 51868 <-> 114.47.209.84 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:13.745890 1.929022 udp 10.0.2.22 51868 <-> 58.152.190.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:14.747592 0.052309 udp 10.0.2.22 51868 <-> 84.0.176.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:15.618950 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:36:15.748829 0.057823 udp 10.0.2.22 51868 <-> 79.118.210.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:16.169979 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:36:16.750297 0.366487 udp 10.0.2.22 51868 <-> 117.200.69.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:17.751788 1.154638 udp 10.0.2.22 51868 <-> 98.227.62.250 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:19.744807 0.392393 udp 10.0.2.22 51868 <-> 62.177.243.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:20.745854 1.962775 udp 10.0.2.22 51868 <-> 68.170.235.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:21.747279 0.000000 udp 10.0.2.22 51868 -> 86.121.142.140 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:36:22.748771 0.000000 udp 10.0.2.22 51868 -> 183.83.6.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:36:23.750143 0.000000 udp 10.0.2.22 51868 -> 93.100.170.72 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:36:24.751890 0.182341 udp 10.0.2.22 51868 <-> 95.173.42.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:25.743557 0.113336 udp 10.0.2.22 51868 <-> 37.112.212.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:26.744538 0.330186 udp 10.0.2.22 51868 <-> 116.203.137.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:27.746369 0.309005 udp 10.0.2.22 51868 <-> 183.97.151.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:28.747493 0.303449 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:29.749017 0.139665 udp 10.0.2.22 51868 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:30.750676 0.318621 udp 10.0.2.22 51868 <-> 158.46.108.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:31.752236 0.347798 udp 10.0.2.22 51868 <-> 122.100.81.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:32.743660 0.296901 udp 10.0.2.22 51868 <-> 27.127.165.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:33.745122 0.390472 udp 10.0.2.22 51868 <-> 204.16.10.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:34.746312 0.000000 udp 10.0.2.22 51868 -> 199.87.205.80 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:36:35.747557 0.000000 udp 10.0.2.22 51868 -> 178.79.11.31 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:36:36.749443 0.793125 udp 10.0.2.22 51868 <-> 213.233.178.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:37.750279 0.067447 udp 10.0.2.22 51868 <-> 82.77.68.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:38.752201 0.139875 udp 10.0.2.22 51868 <-> 184.56.26.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:39.743641 0.051582 udp 10.0.2.22 51868 <-> 84.0.176.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:40.744991 0.409961 udp 10.0.2.22 51868 <-> 117.220.3.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:41.746638 0.070326 udp 10.0.2.22 51868 <-> 188.214.34.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:42.627732 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:36:42.747458 0.738234 udp 10.0.2.22 51868 <-> 117.218.93.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:43.748997 0.000000 udp 10.0.2.22 51868 -> 96.20.43.35 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:36:44.750680 0.000000 udp 10.0.2.22 51868 -> 188.97.116.35 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:36:45.752468 0.000000 udp 10.0.2.22 51868 -> 109.220.144.38 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:36:46.743760 0.000000 udp 10.0.2.22 51868 -> 5.15.146.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:36:47.745129 0.386028 udp 10.0.2.22 51868 <-> 123.110.11.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:48.175704 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:36:48.746090 0.000000 udp 10.0.2.22 51868 -> 176.200.171.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:36:49.748301 0.150052 udp 10.0.2.22 51868 <-> 96.20.43.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:50.749330 0.157583 udp 10.0.2.22 51868 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:51.750618 0.071958 udp 10.0.2.22 51868 <-> 213.64.226.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:52.751843 0.113768 udp 10.0.2.22 51868 <-> 85.84.94.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:53.744013 0.000000 udp 10.0.2.22 51868 -> 190.51.66.112 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:36:54.745099 0.016371 udp 10.0.2.22 51868 <-> 94.112.175.198 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:55.746457 0.358468 udp 10.0.2.22 51868 <-> 111.250.219.184 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:56.748110 0.000000 udp 10.0.2.22 51868 -> 14.96.39.227 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:36:57.749418 0.118048 udp 10.0.2.22 51868 <-> 68.14.146.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:58.750684 0.282379 udp 10.0.2.22 51868 <-> 121.80.163.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:36:59.752335 0.163851 udp 10.0.2.22 51868 <-> 74.192.176.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:37:00.743420 0.273922 udp 10.0.2.22 51868 <-> 119.230.147.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:37:01.744938 0.354454 udp 10.0.2.22 51868 <-> 218.211.65.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:37:02.746221 0.154440 udp 10.0.2.22 51868 <-> 68.185.149.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:37:03.747970 0.136112 udp 10.0.2.22 51868 <-> 24.149.57.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:37:04.749250 0.171746 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:37:05.751103 0.183777 udp 10.0.2.22 51868 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:37:06.752384 0.000000 udp 10.0.2.22 51868 -> 85.100.240.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:07.743922 0.000000 udp 10.0.2.22 51868 -> 212.16.181.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:08.745358 0.321947 udp 10.0.2.22 51868 <-> 122.215.8.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:37:09.626043 0.000092 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:37:10.748015 0.000068 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:10.748083 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:37:11.749141 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:12.750685 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:13.752325 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:14.744101 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:15.745340 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:16.746545 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:17.748029 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:18.749920 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:19.750813 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:20.752481 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:21.743685 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:22.745908 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:23.746609 4.997081 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:24.748078 4.997095 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:25.749308 0.067705 udp 10.0.2.22 51868 <-> 151.48.113.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:37:26.751313 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:27.752904 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:30.746686 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:31.748608 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:32.749336 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:34.081483 0.021402 udp 10.0.2.22 59996 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 01:37:34.103202 0.000000 udp 10.0.2.22 59997 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:34.752225 0.000094 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:34.752319 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:37:35.744215 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:36.625089 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:37:36.745412 0.000000 udp 10.0.2.22 51868 -> 178.122.189.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:37.746627 0.159656 udp 10.0.2.22 51868 <-> 96.28.143.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:37:38.747989 0.046425 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:37:39.750177 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:40.751337 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:41.752841 0.085246 udp 10.0.2.22 51868 <-> 151.48.113.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:37:42.743880 0.188208 udp 10.0.2.22 51868 <-> 123.201.53.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:37:43.745174 1.324019 udp 10.0.2.22 51868 <-> 72.242.83.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:37:44.747078 0.264845 udp 10.0.2.22 51868 <-> 186.67.39.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:37:45.748654 0.050024 udp 10.0.2.22 51868 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:37:46.750041 0.073824 udp 10.0.2.22 51868 <-> 83.97.238.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:37:47.750967 0.140376 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:37:48.752846 0.051282 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:37:49.744360 0.335931 udp 10.0.2.22 51868 <-> 124.244.75.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:37:50.745831 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:51.747185 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:52.748581 3.004485 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:54.751137 0.053701 udp 10.0.2.22 51868 <-> 82.240.144.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:37:56.744109 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:57.745345 0.000000 udp 10.0.2.22 51868 -> 14.96.188.45 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:37:58.746943 0.048222 udp 10.0.2.22 51868 <-> 31.176.241.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:37:59.748562 0.000000 udp 10.0.2.22 51868 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:00.749767 0.000000 udp 10.0.2.22 51868 -> 68.117.189.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:01.751099 3.896107 udp 10.0.2.22 51868 <-> 219.162.195.22 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:02.752593 2.128534 udp 10.0.2.22 51868 <-> 68.83.113.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:03.623683 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:38:05.747215 0.592535 udp 10.0.2.22 51868 <-> 122.121.6.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:06.748381 0.363830 udp 10.0.2.22 51868 <-> 180.215.136.181 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:07.750161 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:08.751105 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:09.752790 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:10.744470 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:11.745409 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:12.747001 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:13.749012 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:14.750011 0.095630 udp 10.0.2.22 51868 <-> 82.240.144.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:15.751586 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:16.752749 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:17.744031 0.000048 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:17.744079 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:38:19.747437 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:20.748367 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:21.750257 0.768003 udp 10.0.2.22 51868 <-> 201.88.196.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:22.751253 0.148787 udp 10.0.2.22 51868 <-> 82.242.39.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:23.752656 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:24.744744 0.000000 udp 10.0.2.22 51868 -> 98.183.15.44 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:25.746386 0.210412 udp 10.0.2.22 51868 <-> 76.115.145.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:26.747163 0.000000 udp 10.0.2.22 51868 -> 105.152.153.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:27.748432 0.000000 udp 10.0.2.22 51868 -> 151.247.34.112 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:28.750037 0.125330 udp 10.0.2.22 51868 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:29.751440 2.350020 udp 10.0.2.22 51868 <-> 2.28.17.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:30.623170 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:38:30.752933 0.191990 udp 10.0.2.22 51868 <-> 109.193.154.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:31.744400 0.057495 udp 10.0.2.22 51868 <-> 79.118.210.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:32.746127 0.273957 udp 10.0.2.22 51868 <-> 116.202.159.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:33.747187 0.314265 udp 10.0.2.22 51868 <-> 114.180.118.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:34.749027 0.000000 udp 10.0.2.22 51868 -> 101.210.87.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:35.750714 0.049279 udp 10.0.2.22 51868 <-> 88.135.143.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:36.751958 4.996738 udp 10.0.2.22 51868 <-> 89.134.105.163 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:37.753219 0.000000 udp 10.0.2.22 51868 -> 79.117.217.88 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:38.744503 0.000000 udp 10.0.2.22 51868 -> 77.211.57.96 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:39.745858 0.000000 udp 10.0.2.22 51868 -> 79.119.229.118 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:40.747780 0.136090 udp 10.0.2.22 51868 <-> 151.77.168.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:41.835053 0.000000 udp 10.0.2.22 51868 <- 89.134.105.163 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:42.750528 0.114656 udp 10.0.2.22 51868 <-> 46.37.84.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:43.751816 0.124841 udp 10.0.2.22 51868 <-> 95.192.53.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:44.743445 0.043625 udp 10.0.2.22 51868 <-> 5.20.72.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:45.744292 0.060555 udp 10.0.2.22 51868 <-> 84.55.13.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:46.746564 0.000000 udp 10.0.2.22 51868 -> 85.112.213.104 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:47.747205 0.265080 udp 10.0.2.22 51868 <-> 202.71.19.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:48.748613 0.158587 udp 10.0.2.22 51868 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:49.750200 0.000000 udp 10.0.2.22 51868 -> 5.12.249.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:50.751801 0.064811 udp 10.0.2.22 51868 <-> 85.85.45.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:51.743447 0.142708 udp 10.0.2.22 51868 <-> 107.16.6.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:52.744520 0.061888 udp 10.0.2.22 51868 <-> 79.112.118.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:53.745891 0.000000 udp 10.0.2.22 51868 -> 24.45.80.150 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:54.747644 0.689001 udp 10.0.2.22 51868 <-> 115.241.182.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:55.748746 0.206424 udp 10.0.2.22 51868 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:56.750119 0.117745 udp 10.0.2.22 51868 <-> 176.201.196.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:38:57.621949 0.000085 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:38:57.751952 0.000000 udp 10.0.2.22 51868 -> 70.112.193.107 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:58.743585 0.000000 udp 10.0.2.22 51868 -> 71.63.13.85 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:38:59.744523 0.333411 udp 10.0.2.22 51868 <-> 1.164.153.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:00.746376 0.826248 udp 10.0.2.22 51868 <-> 76.119.125.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:01.747301 2.003226 udp 10.0.2.22 51868 -> 50.65.129.43 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:39:02.748986 4.159511 udp 10.0.2.22 51868 <-> 107.15.192.60 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:04.751619 0.000000 udp 10.0.2.22 51868 -> 14.97.207.137 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:39:07.746324 0.302386 udp 10.0.2.22 51868 <-> 111.185.49.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:08.747767 0.216572 udp 10.0.2.22 51868 <-> 192.222.24.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:09.749268 0.103884 udp 10.0.2.22 51868 <-> 197.204.128.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:10.750964 0.028502 udp 10.0.2.22 51868 <-> 78.83.103.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:11.752202 0.060434 udp 10.0.2.22 51868 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:12.743758 0.000000 udp 10.0.2.22 51868 -> 37.57.58.177 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:39:13.745025 0.041875 udp 10.0.2.22 51868 <-> 147.156.162.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:14.746144 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:39:15.748004 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:39:16.748875 0.000000 udp 10.0.2.22 51868 -> 108.81.18.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:39:17.750943 0.138078 udp 10.0.2.22 51868 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:18.752300 0.100260 udp 10.0.2.22 51868 <-> 87.16.84.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:19.743625 0.225975 udp 10.0.2.22 51868 <-> 70.82.157.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:20.744972 0.000000 udp 10.0.2.22 51868 -> 78.190.252.60 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:39:21.746316 0.000000 udp 10.0.2.22 51868 -> 212.98.191.56 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:39:22.747755 0.834664 udp 10.0.2.22 51868 <-> 50.27.74.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:23.749341 0.158603 udp 10.0.2.22 51868 <-> 98.250.16.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:24.620723 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:39:24.751110 0.024566 udp 10.0.2.22 51868 <-> 46.150.38.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:25.752537 0.313134 udp 10.0.2.22 51868 <-> 14.98.170.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:26.743414 0.546352 udp 10.0.2.22 51868 <-> 188.158.66.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:27.745344 0.021819 udp 10.0.2.22 51868 <-> 62.44.118.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:28.746134 0.368704 udp 10.0.2.22 51868 <-> 46.5.112.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:29.747781 0.037086 udp 10.0.2.22 51868 <-> 88.129.222.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:30.749786 0.017141 udp 10.0.2.22 51868 <-> 94.112.175.198 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:31.750490 2.130281 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:32.752607 0.083360 udp 10.0.2.22 51868 <-> 78.186.207.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:34.745224 1.043092 udp 10.0.2.22 51868 <-> 147.156.153.105 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:36.748180 0.160669 udp 10.0.2.22 51868 <-> 76.107.155.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:37.749559 0.000000 udp 10.0.2.22 51868 -> 24.150.162.210 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:39:38.750781 0.049519 udp 10.0.2.22 51868 <-> 5.14.212.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:39.752066 0.149369 udp 10.0.2.22 51868 <-> 24.214.81.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:40.743616 0.334321 udp 10.0.2.22 51868 <-> 14.96.107.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:41.745408 0.046870 udp 10.0.2.22 51868 <-> 89.29.182.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:42.746291 0.156383 udp 10.0.2.22 51868 <-> 68.46.230.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:43.748457 0.000000 udp 10.0.2.22 51868 -> 186.92.60.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:39:44.749770 0.000000 udp 10.0.2.22 51868 -> 27.6.149.235 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:39:45.751294 0.423015 udp 10.0.2.22 51868 <-> 203.218.171.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:46.752127 0.000000 udp 10.0.2.22 51868 -> 117.211.128.42 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:39:47.743469 0.449320 udp 10.0.2.22 51868 <-> 180.148.49.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:48.744880 0.166594 udp 10.0.2.22 51868 <-> 50.129.144.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:49.746608 0.055146 udp 10.0.2.22 51868 <-> 91.112.150.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:50.748435 0.000000 udp 10.0.2.22 51868 -> 50.141.134.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:39:51.618945 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:39:51.749791 3.244336 udp 10.0.2.22 51868 <-> 76.178.38.26 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:52.751079 0.143208 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:53.752533 0.000000 udp 10.0.2.22 51868 -> 103.7.151.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:39:55.745613 0.177747 udp 10.0.2.22 51868 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:56.746491 0.000000 udp 10.0.2.22 51868 -> 1.172.59.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:39:57.748506 3.004417 udp 10.0.2.22 51868 <-> 114.36.70.1 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:58.749298 4.997613 udp 10.0.2.22 51868 <-> 31.44.194.248 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:39:59.751097 0.139211 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:01.743664 1.224945 udp 10.0.2.22 51868 <-> 76.178.38.26 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:03.806157 2.002387 udp 10.0.2.22 51868 <-> 31.44.194.248 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:04.748533 0.327176 udp 10.0.2.22 51868 <-> 114.40.25.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:06.751362 0.331303 udp 10.0.2.22 51868 <-> 114.36.70.1 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:07.752575 0.335366 udp 10.0.2.22 51868 <-> 124.96.225.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:08.744234 0.000000 udp 10.0.2.22 51868 -> 103.7.151.18 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:40:09.745275 0.347574 udp 10.0.2.22 51868 <-> 123.192.193.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:10.747030 0.062861 udp 10.0.2.22 51868 <-> 91.112.150.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:11.748449 0.000000 udp 10.0.2.22 51868 -> 114.40.25.22 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:40:12.749954 0.000000 udp 10.0.2.22 51868 -> 1.172.59.34 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:40:13.750842 0.000000 udp 10.0.2.22 51868 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:40:14.752289 0.404417 udp 10.0.2.22 51868 <-> 81.190.215.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:15.743974 0.138688 udp 10.0.2.22 51868 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:16.745709 0.423284 udp 10.0.2.22 51868 <-> 204.16.10.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:17.747100 0.138503 udp 10.0.2.22 51868 <-> 98.221.57.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:18.618351 0.000097 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:40:18.748073 0.330144 udp 10.0.2.22 51868 <-> 124.5.147.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:19.750025 0.374610 udp 10.0.2.22 51868 <-> 221.23.132.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:20.751056 0.306793 udp 10.0.2.22 51868 <-> 182.234.35.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:21.752786 0.326933 udp 10.0.2.22 51868 <-> 180.215.105.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:22.743774 0.000000 udp 10.0.2.22 51868 -> 90.20.102.63 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:40:23.745694 0.000000 udp 10.0.2.22 51868 -> 95.63.76.198 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:40:24.746939 0.714176 udp 10.0.2.22 51868 <-> 200.84.242.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:25.748457 0.053900 udp 10.0.2.22 51868 <-> 94.240.170.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:26.749525 0.000000 udp 10.0.2.22 51868 -> 27.62.40.87 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:40:27.751599 0.000000 udp 10.0.2.22 51868 -> 202.78.237.75 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:40:28.752661 0.107972 udp 10.0.2.22 51868 <-> 188.18.132.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:29.743938 0.905934 udp 10.0.2.22 51868 <-> 24.133.35.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:30.745283 0.000000 udp 10.0.2.22 51868 -> 76.11.73.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:40:31.747384 0.198717 udp 10.0.2.22 51868 <-> 72.175.79.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:32.748646 0.091595 udp 10.0.2.22 51868 <-> 188.47.235.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:33.749610 0.000000 udp 10.0.2.22 51868 -> 86.123.213.157 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:40:34.751590 0.128100 udp 10.0.2.22 51868 <-> 85.100.124.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:35.752726 1.079924 udp 10.0.2.22 51868 <-> 189.103.208.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:36.744001 0.051132 udp 10.0.2.22 51868 <-> 188.173.77.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:37.745559 0.133542 udp 10.0.2.22 51868 <-> 50.157.214.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:38.746934 0.156026 udp 10.0.2.22 51868 <-> 50.129.144.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:39.748593 0.186892 udp 10.0.2.22 51868 <-> 190.141.88.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:40.750403 0.010048 udp 10.0.2.22 51868 <-> 188.175.96.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:41.751556 0.039666 udp 10.0.2.22 51868 <-> 87.198.109.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:42.753101 2.993848 udp 10.0.2.22 51868 <-> 112.119.99.3 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:43.743981 0.154903 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:44.745514 0.122582 udp 10.0.2.22 51868 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:45.627241 0.000104 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:40:46.748667 0.298982 udp 10.0.2.22 51868 <-> 203.202.216.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:47.750203 0.061841 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:48.751691 0.250945 udp 10.0.2.22 51868 <-> 190.75.86.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:49.752576 0.365369 udp 10.0.2.22 51868 <-> 219.19.32.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:50.744874 0.311579 udp 10.0.2.22 51868 <-> 119.26.185.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:51.745828 0.415814 udp 10.0.2.22 51868 <-> 115.241.53.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:52.747430 0.168799 udp 10.0.2.22 51868 <-> 98.100.135.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:53.748686 1.153396 udp 10.0.2.22 51868 <-> 173.23.62.83 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:55.751218 0.153304 udp 10.0.2.22 51868 <-> 69.73.42.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:56.752976 0.159641 udp 10.0.2.22 51868 <-> 50.143.57.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:57.744262 0.163420 udp 10.0.2.22 51868 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:58.745905 0.011652 udp 10.0.2.22 51868 <-> 212.59.229.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:40:59.747280 0.000000 udp 10.0.2.22 51868 -> 128.68.67.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:41:00.748529 0.342996 udp 10.0.2.22 51868 <-> 41.70.151.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:01.750071 0.000000 udp 10.0.2.22 51868 -> 195.244.210.61 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:41:02.751265 2.307849 udp 10.0.2.22 51868 <-> 221.241.78.102 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:03.753067 0.372810 udp 10.0.2.22 51868 <-> 117.215.1.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:05.746090 0.275219 udp 10.0.2.22 51868 <-> 75.25.21.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:06.747401 0.166739 udp 10.0.2.22 51868 <-> 50.129.144.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:07.748651 0.051222 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:08.749908 0.362544 udp 10.0.2.22 51868 <-> 124.244.75.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:09.751360 0.000000 udp 10.0.2.22 51868 -> 74.216.190.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:41:10.752876 0.213897 udp 10.0.2.22 51868 <-> 24.7.146.40 16464 CON 0 0 2 668 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:11.744731 1.282240 udp 10.0.2.22 51868 <-> 108.176.217.52 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:12.625917 0.000090 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:41:13.747733 0.066722 udp 10.0.2.22 51868 <-> 82.130.171.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:14.749025 4.997479 udp 10.0.2.22 51868 <-> 175.211.29.15 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:15.750356 0.000000 udp 10.0.2.22 51868 -> 173.87.184.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:41:16.752063 0.217791 udp 10.0.2.22 51868 <-> 24.7.146.40 16464 CON 0 0 2 668 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:17.742955 0.162916 udp 10.0.2.22 51868 <-> 71.16.80.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:18.744526 0.000000 udp 10.0.2.22 51868 -> 79.15.198.31 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:41:20.064915 0.000000 udp 10.0.2.22 51868 <- 175.211.29.15 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:41:20.747758 0.176809 udp 10.0.2.22 51868 <-> 108.176.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:21.749179 0.104466 udp 10.0.2.22 51868 <-> 77.78.239.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:22.750440 0.000000 udp 10.0.2.22 51868 -> 78.8.65.60 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:41:23.751688 0.326295 udp 10.0.2.22 51868 <-> 153.135.214.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:24.743178 0.064990 udp 10.0.2.22 51868 <-> 193.68.211.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:25.744761 0.454409 udp 10.0.2.22 51868 <-> 119.24.43.12 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:26.746166 0.325720 udp 10.0.2.22 51868 <-> 200.63.39.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:27.747227 4.997759 udp 10.0.2.22 51868 -> 145.236.152.241 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:41:28.748693 4.997806 udp 10.0.2.22 51868 <-> 190.252.196.242 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:29.750299 0.291815 udp 10.0.2.22 51868 <-> 201.214.63.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:30.752001 0.000000 udp 10.0.2.22 51868 -> 5.15.28.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:41:31.743346 0.000000 udp 10.0.2.22 51868 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:41:33.969738 2.998247 udp 10.0.2.22 51868 <-> 190.252.196.242 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:34.747470 0.203232 udp 10.0.2.22 51868 <-> 95.245.217.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:35.749038 0.000000 udp 10.0.2.22 51868 -> 145.236.152.241 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:41:37.751799 0.064860 udp 10.0.2.22 51868 <-> 95.46.217.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:38.743734 0.163924 udp 10.0.2.22 51868 <-> 114.79.166.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:39.624567 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:41:39.744856 0.000000 udp 10.0.2.22 51868 -> 98.222.5.147 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:41:40.746762 0.139345 udp 10.0.2.22 51868 <-> 68.42.12.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:41.747705 0.074241 udp 10.0.2.22 51868 <-> 85.152.226.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:42.749435 0.325830 udp 10.0.2.22 51868 <-> 182.155.52.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:43.750818 0.000000 udp 10.0.2.22 51868 -> 111.254.146.115 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:41:44.751929 0.000000 udp 10.0.2.22 51868 -> 41.217.236.39 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:41:45.743589 0.000000 udp 10.0.2.22 51868 -> 184.70.11.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:41:46.745203 0.359694 udp 10.0.2.22 51868 <-> 39.117.105.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:47.746016 4.005994 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:41:48.334627 0.000000 udp 10.0.2.22 51868 <- 98.222.5.147 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:41:48.748064 0.155808 udp 10.0.2.22 51868 <-> 24.250.78.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:49.749267 0.048252 udp 10.0.2.22 51868 <-> 87.99.81.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:50.750678 0.371042 udp 10.0.2.22 51868 <-> 115.241.194.33 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:52.743541 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:41:54.746541 0.096578 udp 10.0.2.22 51868 <-> 80.86.237.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:55.747828 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:41:56.748966 0.000060 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:41:56.749026 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:41:57.750519 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:41:58.751785 0.052049 udp 10.0.2.22 51868 <-> 46.214.189.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:41:59.743798 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:00.745379 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:01.746691 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:02.748175 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:03.749549 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:04.750933 0.000087 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:04.751020 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:42:05.752116 0.086746 udp 10.0.2.22 51868 <-> 80.86.237.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:42:06.623715 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:42:06.743590 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:07.745095 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:08.746814 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:09.747598 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:10.749427 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:11.750853 0.000072 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:11.750925 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:42:12.752634 4.996513 udp 10.0.2.22 51868 <-> 80.86.237.121 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:42:13.743359 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:14.745102 0.052070 udp 10.0.2.22 51868 <-> 62.165.227.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:42:15.746909 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:16.748554 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:17.853011 0.000000 udp 10.0.2.22 51868 <- 80.86.237.121 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:18.751214 0.038704 udp 10.0.2.22 51868 <-> 144.122.47.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:42:19.752701 0.144501 udp 10.0.2.22 51868 <-> 24.75.169.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:42:20.743446 0.224362 udp 10.0.2.22 51868 <-> 178.79.11.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:42:21.745329 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:22.746652 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:23.747940 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:24.749464 0.000000 udp 10.0.2.22 51868 -> 113.193.64.120 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:25.750680 0.000000 udp 10.0.2.22 51868 -> 108.93.25.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:26.752529 0.000000 udp 10.0.2.22 51868 -> 75.241.130.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:27.744131 0.000000 udp 10.0.2.22 51868 -> 188.24.50.244 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:28.745058 0.153463 udp 10.0.2.22 51868 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:42:29.746582 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:30.748346 0.077102 udp 10.0.2.22 51868 <-> 213.167.1.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:42:31.749251 0.000000 udp 10.0.2.22 51868 -> 205.240.139.167 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:32.751292 0.156047 udp 10.0.2.22 51868 <-> 76.188.30.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:42:33.622062 0.000099 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:42:33.752728 0.000000 udp 10.0.2.22 51868 -> 120.141.151.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:34.743765 0.051414 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:42:35.745147 0.000000 udp 10.0.2.22 51868 -> 114.36.70.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:36.746420 0.000000 udp 10.0.2.22 51868 -> 70.94.206.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:37.748135 0.672249 udp 10.0.2.22 51868 <-> 202.29.179.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:42:38.749801 1.802851 udp 10.0.2.22 51868 <-> 205.240.139.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:42:39.751355 0.305065 udp 10.0.2.22 51868 <-> 153.130.52.200 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:42:40.752828 0.000000 udp 10.0.2.22 51868 -> 49.206.155.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:41.744219 0.048146 udp 10.0.2.22 51868 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:42:42.745060 3.004438 udp 10.0.2.22 51868 -> 87.19.151.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:43.746958 0.000000 udp 10.0.2.22 51868 -> 114.36.70.1 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:44.748216 0.185090 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:42:46.750994 1.130885 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:42:48.744356 0.000000 udp 10.0.2.22 51868 -> 120.141.151.253 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:49.745209 0.000000 udp 10.0.2.22 51868 -> 95.133.91.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:50.746544 0.051421 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:42:51.748251 0.000000 udp 10.0.2.22 51868 -> 94.41.58.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:42:52.181763 3.001492 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 01:42:52.749464 3.996251 udp 10.0.2.22 51868 <-> 213.231.137.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:42:53.751508 0.674399 udp 10.0.2.22 51868 <-> 202.29.179.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:42:54.752442 0.075385 udp 10.0.2.22 51868 <-> 85.87.14.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:42:55.743749 0.247958 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:42:57.746938 0.051034 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:42:58.748360 0.048557 udp 10.0.2.22 51868 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:42:59.189258 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:42:59.749622 0.000000 udp 10.0.2.22 51868 -> 49.206.155.6 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:43:00.621344 0.000128 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:43:00.751167 2.077406 udp 10.0.2.22 51868 <-> 94.41.58.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:01.753000 2.994399 udp 10.0.2.22 51868 -> 114.36.70.1 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:43:03.745237 0.051601 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:05.748618 0.186407 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:06.749807 0.149214 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:07.190651 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:43:07.751301 0.000000 udp 10.0.2.22 51868 -> 213.231.137.6 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:43:08.752960 0.133342 udp 10.0.2.22 51868 <-> 87.19.151.254 16464 CON 0 0 2 668 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:09.743931 0.000000 udp 10.0.2.22 51868 -> 70.233.97.220 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:43:10.745478 3.004488 udp 10.0.2.22 51868 -> 122.167.43.86 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:43:11.746800 0.043077 udp 10.0.2.22 51868 <-> 80.97.88.220 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:12.748727 0.000000 udp 10.0.2.22 51868 -> 213.171.242.218 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:43:14.751272 0.000000 udp 10.0.2.22 51868 -> 65.27.248.211 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:43:15.752648 0.000000 udp 10.0.2.22 51868 -> 79.42.57.105 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:43:16.744107 0.381737 udp 10.0.2.22 51868 <-> 203.172.237.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:17.745636 0.000000 udp 10.0.2.22 51868 -> 213.231.137.6 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:43:18.746898 0.154661 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:19.748619 0.243518 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:20.750140 0.333588 udp 10.0.2.22 51868 <-> 114.36.70.1 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:21.751546 0.084128 udp 10.0.2.22 51868 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:22.752577 0.000000 udp 10.0.2.22 51868 -> 49.206.155.6 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:43:23.193514 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:43:23.744021 0.048119 udp 10.0.2.22 51868 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:24.745895 0.156406 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:25.747415 0.000000 udp 10.0.2.22 51868 -> 90.80.85.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:43:26.748313 0.184640 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:27.619754 0.000159 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:43:27.750316 0.000000 udp 10.0.2.22 51868 -> 95.133.91.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:43:28.751234 0.052355 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:29.752806 0.000000 udp 10.0.2.22 51868 -> 213.231.137.6 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:43:30.744375 0.702400 udp 10.0.2.22 51868 <-> 202.29.179.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:31.746141 0.332219 udp 10.0.2.22 51868 <-> 122.145.172.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:32.747286 2.703151 udp 10.0.2.22 51868 <-> 79.133.238.86 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:33.748718 0.000000 udp 10.0.2.22 51868 -> 122.167.43.86 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:43:35.751923 0.170980 udp 10.0.2.22 51868 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:36.752935 0.532989 udp 10.0.2.22 51868 <-> 109.91.102.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:37.744428 0.000000 udp 10.0.2.22 51868 -> 161.6.244.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:43:38.745610 0.000000 udp 10.0.2.22 51868 -> 112.201.169.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:43:39.747218 0.040628 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:40.748903 0.101812 udp 10.0.2.22 51868 <-> 78.70.192.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:41.750090 0.062541 udp 10.0.2.22 51868 <-> 109.60.87.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:42.751699 0.000000 udp 10.0.2.22 51868 -> 201.241.29.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:43:43.752780 0.034188 udp 10.0.2.22 51868 <-> 151.100.92.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:44.744688 0.000000 udp 10.0.2.22 51868 -> 74.243.166.110 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:43:45.745663 0.351388 udp 10.0.2.22 51868 <-> 124.244.75.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:46.747783 0.000000 udp 10.0.2.22 51868 -> 177.149.127.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:43:47.748662 0.067656 udp 10.0.2.22 51868 <-> 85.87.14.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:48.750686 0.000000 udp 10.0.2.22 51868 -> 192.0.3.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:43:49.752117 0.044741 udp 10.0.2.22 51868 <-> 176.37.230.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:50.742899 0.000000 udp 10.0.2.22 51868 -> 96.225.54.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:43:51.744310 0.000000 udp 10.0.2.22 51868 -> 103.7.151.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:43:52.745857 0.060772 udp 10.0.2.22 51868 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:53.747370 0.000000 udp 10.0.2.22 51868 -> 86.176.246.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:43:54.618709 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:43:54.749027 0.151360 udp 10.0.2.22 51868 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:55.199552 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:43:55.750488 0.047723 udp 10.0.2.22 51868 <-> 150.214.66.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:56.752025 0.122025 udp 10.0.2.22 51868 <-> 37.215.190.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:57.743392 0.055513 udp 10.0.2.22 51868 <-> 78.61.221.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:58.744598 0.145397 udp 10.0.2.22 51868 <-> 77.21.184.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:43:59.745766 0.307137 udp 10.0.2.22 51868 <-> 61.26.178.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:44:00.747877 0.167466 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:44:01.749018 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:44:02.750142 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:44:03.751624 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:44:04.743575 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:44:05.744562 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:44:06.746352 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:44:07.747500 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:44:08.749098 0.000068 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:44:08.749166 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:44:09.750776 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:44:11.743269 4.005490 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:44:12.744721 0.068061 udp 10.0.2.22 51868 <-> 86.121.18.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:44:13.746677 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:44:14.747610 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:44:16.750679 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:44:17.752207 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:44:19.745082 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:44:20.746627 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:44:21.627167 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:44:21.747927 0.000068 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:44:21.747995 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:44:22.749151 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:44:23.750838 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:44:24.751913 1.295092 udp 10.0.2.22 51868 <-> 61.26.178.46 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:44:26.744784 0.000000 udp 10.0.2.22 51868 -> 86.121.18.55 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:44:27.746691 0.033508 udp 10.0.2.22 51868 <-> 31.19.152.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:44:28.747913 1.016732 udp 10.0.2.22 51868 <-> 164.8.204.62 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:44:30.750782 0.000000 udp 10.0.2.22 51868 -> 86.121.41.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:44:31.751795 0.057694 udp 10.0.2.22 51868 <-> 37.72.79.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:44:32.743750 0.273219 udp 10.0.2.22 51868 <-> 105.227.253.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:44:33.745071 2.146385 udp 10.0.2.22 51868 <-> 78.70.192.18 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:44:34.746833 0.549764 udp 10.0.2.22 51868 <-> 24.49.211.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:44:36.749011 0.147174 udp 10.0.2.22 51868 <-> 176.201.73.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:44:37.751062 0.000000 udp 10.0.2.22 51868 -> 110.142.148.49 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:44:38.751838 0.334354 udp 10.0.2.22 51868 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:44:39.743635 0.000000 udp 10.0.2.22 51868 -> 151.71.19.68 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:44:40.744927 0.092331 udp 10.0.2.22 51868 <-> 62.117.137.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:44:41.746483 0.062035 udp 10.0.2.22 51868 <-> 82.79.126.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:44:42.747900 0.000000 udp 10.0.2.22 51868 -> 173.15.222.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:44:43.749414 0.113290 udp 10.0.2.22 51868 <-> 90.157.111.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:44:44.750680 0.373309 udp 10.0.2.22 51868 <-> 61.227.54.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:44:45.752296 0.366019 udp 10.0.2.22 51868 <-> 96.2.150.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:44:46.743639 4.005454 udp 10.0.2.22 51868 -> 82.91.77.46 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:44:47.745190 0.468198 udp 10.0.2.22 51868 <-> 60.246.83.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:44:48.626006 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:44:48.746504 0.042615 udp 10.0.2.22 51868 <-> 83.166.2.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:44:49.748049 1.029790 udp 10.0.2.22 51868 <-> 200.63.39.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:44:51.751226 0.000000 udp 10.0.2.22 51868 -> 91.233.114.70 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:44:52.752587 0.283639 udp 10.0.2.22 51868 <-> 79.2.136.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:44:53.743708 0.000000 udp 10.0.2.22 51868 -> 188.246.81.79 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:44:54.745038 0.173407 udp 10.0.2.22 51868 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:44:55.746422 0.305506 udp 10.0.2.22 51868 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:44:56.747738 0.465995 udp 10.0.2.22 51868 <-> 78.218.21.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:44:57.749550 0.215306 udp 10.0.2.22 51868 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:44:58.751016 0.359647 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:44:59.752040 0.330163 udp 10.0.2.22 51868 <-> 122.145.172.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:45:00.743464 0.158527 udp 10.0.2.22 51868 <-> 66.61.104.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:45:01.745229 0.000000 udp 10.0.2.22 51868 -> 65.8.167.109 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:45:02.746438 0.000000 udp 10.0.2.22 51868 -> 91.51.248.54 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:45:03.748198 0.184285 udp 10.0.2.22 51868 <-> 41.33.182.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:45:04.749509 1.377588 udp 10.0.2.22 51868 <-> 201.19.246.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:45:05.751142 0.177747 udp 10.0.2.22 51868 <-> 76.92.155.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:45:06.752106 0.159399 udp 10.0.2.22 51868 <-> 66.61.104.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:45:07.744108 0.000000 udp 10.0.2.22 51868 -> 186.134.228.127 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:45:08.745095 2.003427 udp 10.0.2.22 51868 -> 69.117.111.135 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:45:09.746386 0.040494 udp 10.0.2.22 51868 <-> 5.15.195.36 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:45:11.749589 0.283002 udp 10.0.2.22 51868 <-> 117.220.115.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:45:12.750992 0.159839 udp 10.0.2.22 51868 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:45:13.752328 0.340434 udp 10.0.2.22 51868 <-> 14.97.126.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:45:14.744105 0.032773 udp 10.0.2.22 51868 <-> 31.19.152.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:45:15.624980 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:45:15.745060 0.000000 udp 10.0.2.22 51868 -> 115.241.1.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:45:16.746634 0.132357 udp 10.0.2.22 51868 <-> 62.113.14.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:45:17.748517 0.083097 udp 10.0.2.22 51868 <-> 80.135.44.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:45:18.749686 0.338465 udp 10.0.2.22 51868 <-> 14.99.127.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:45:19.751118 1.128390 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:45:21.743912 0.000000 udp 10.0.2.22 51868 -> 69.227.121.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:45:22.745133 0.220581 udp 10.0.2.22 51868 <-> 75.18.223.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:45:23.747205 2.343287 udp 10.0.2.22 51868 <-> 118.170.163.135 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:45:24.748289 2.158777 udp 10.0.2.22 51868 <-> 74.65.173.72 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:45:27.752605 4.997329 udp 10.0.2.22 51868 -> 36.86.167.85 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:45:28.744185 0.049945 udp 10.0.2.22 51868 <-> 5.14.121.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:45:29.745235 0.000000 udp 10.0.2.22 51868 -> 77.21.184.128 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:45:30.747334 0.152560 udp 10.0.2.22 51868 <-> 24.231.152.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:45:31.748162 0.000000 udp 10.0.2.22 51868 -> 95.42.254.82 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:45:33.751081 0.345188 udp 10.0.2.22 51868 <-> 123.192.193.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:45:34.752356 3.995974 udp 10.0.2.22 51868 -> 60.40.220.246 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:45:35.744569 1.168565 udp 10.0.2.22 51868 <-> 173.188.107.246 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:45:37.746870 0.000000 udp 10.0.2.22 51868 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:45:39.750250 0.157547 udp 10.0.2.22 51868 <-> 74.65.173.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:45:40.751211 0.163260 udp 10.0.2.22 51868 <-> 108.183.125.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:45:41.752923 0.143769 udp 10.0.2.22 51868 <-> 24.95.94.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:45:42.624070 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:45:42.744364 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:45:43.746022 0.000093 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:45:43.746115 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:45:44.746874 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:45:45.748619 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:45:46.749974 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:45:47.751425 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:45:48.752973 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:45:49.744483 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:45:50.745421 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:45:51.747017 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:45:52.748835 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:45:53.749737 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:45:54.751407 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:45:55.752910 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:45:56.744028 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:45:57.745748 0.343219 udp 10.0.2.22 51868 <-> 220.129.41.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:45:58.747424 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:45:59.748667 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:00.750209 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:01.751337 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:02.752604 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:03.744586 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:04.745649 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:05.747157 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:06.748548 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:07.749778 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:09.622915 0.000090 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:46:09.752677 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:10.744217 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:11.746020 0.000085 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:11.746105 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:46:12.747060 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:13.748855 0.144345 udp 10.0.2.22 51868 <-> 69.115.199.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:46:14.750378 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:15.751800 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:16.753135 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:17.744483 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:18.745728 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:19.747826 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:20.748574 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:21.750331 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:22.751823 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:23.743458 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:24.744903 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:25.745998 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:26.747298 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:27.749017 0.000090 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:27.749107 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:46:28.750565 1.992625 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:29.752051 0.143442 udp 10.0.2.22 51868 <-> 24.95.94.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:46:31.744869 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:32.745962 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:33.747325 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:34.748958 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:35.750061 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:36.621717 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:46:36.751588 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:37.743577 1.058083 udp 10.0.2.22 51868 <-> 86.127.163.5 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:46:39.746572 0.316954 udp 10.0.2.22 51868 <-> 121.152.3.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:46:40.747269 0.000000 udp 10.0.2.22 51868 -> 197.204.128.121 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:41.749392 0.341743 udp 10.0.2.22 51868 <-> 175.211.29.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:46:42.750375 0.000000 udp 10.0.2.22 51868 -> 151.16.143.96 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:43.751719 0.358993 udp 10.0.2.22 51868 <-> 36.232.100.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:46:45.744710 0.126837 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:46:46.746425 0.158379 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:46:47.747316 0.312758 udp 10.0.2.22 51868 <-> 27.143.12.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:46:48.749127 0.062604 udp 10.0.2.22 51868 <-> 79.112.118.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:46:49.750197 1.899404 udp 10.0.2.22 51868 <-> 116.73.64.247 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:46:50.751864 0.861284 udp 10.0.2.22 51868 <-> 105.227.44.67 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:46:51.743309 0.399511 udp 10.0.2.22 51868 <-> 117.206.64.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:46:52.744548 0.000098 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:52.744646 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:46:53.746678 3.587456 udp 10.0.2.22 51868 <-> 72.42.149.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:46:54.747782 0.000000 udp 10.0.2.22 51868 -> 173.174.0.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:55.749207 0.206540 udp 10.0.2.22 51868 <-> 71.93.103.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:46:56.750710 0.000000 udp 10.0.2.22 51868 -> 83.17.217.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:57.751909 0.000000 udp 10.0.2.22 51868 -> 152.179.26.202 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:46:58.743115 0.549513 udp 10.0.2.22 51868 <-> 117.201.115.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:46:59.745110 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:47:00.746511 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:47:01.747695 0.000000 udp 10.0.2.22 51868 -> 105.227.44.67 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:47:02.749592 0.322090 udp 10.0.2.22 51868 <-> 183.97.44.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:03.620546 0.000037 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:47:03.751124 0.231575 udp 10.0.2.22 51868 <-> 186.93.5.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:04.751762 0.342574 udp 10.0.2.22 51868 <-> 182.233.71.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:05.743345 0.157035 udp 10.0.2.22 51868 <-> 74.88.126.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:06.745094 0.000000 udp 10.0.2.22 51868 -> 199.16.56.81 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:47:07.746345 0.326069 udp 10.0.2.22 51868 <-> 94.74.144.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:08.747658 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:47:09.749484 0.342542 udp 10.0.2.22 51868 <-> 123.192.49.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:10.751092 0.543163 udp 10.0.2.22 51868 <-> 115.242.167.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:11.752215 0.019235 udp 10.0.2.22 51868 <-> 161.53.202.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:12.743605 0.037587 udp 10.0.2.22 51868 <-> 213.119.25.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:13.745266 0.117673 udp 10.0.2.22 51868 <-> 68.107.150.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:14.746450 0.087681 udp 10.0.2.22 51868 <-> 83.213.6.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:15.747719 0.789814 udp 10.0.2.22 51868 <-> 111.91.82.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:16.749647 0.112132 udp 10.0.2.22 51868 <-> 208.88.5.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:17.750544 1.067241 udp 10.0.2.22 51868 <-> 79.112.23.1 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:19.743555 0.063797 udp 10.0.2.22 51868 <-> 109.104.184.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:20.745415 0.000000 udp 10.0.2.22 51868 -> 161.6.244.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:47:21.746411 0.272355 udp 10.0.2.22 51868 <-> 67.103.179.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:22.747854 0.048449 udp 10.0.2.22 51868 <-> 5.14.145.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:23.749362 0.255601 udp 10.0.2.22 51868 <-> 190.153.152.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:24.750854 0.000000 udp 10.0.2.22 51868 -> 151.244.22.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:47:25.752284 0.000000 udp 10.0.2.22 51868 -> 68.16.236.90 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:47:26.744141 0.349850 udp 10.0.2.22 51868 <-> 114.27.249.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:27.745133 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:47:28.746457 0.019304 udp 10.0.2.22 51868 <-> 161.53.202.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:29.747917 0.126972 udp 10.0.2.22 51868 <-> 176.201.196.236 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:30.619385 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:47:30.749473 0.327887 udp 10.0.2.22 51868 <-> 121.181.165.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:31.750640 4.114589 udp 10.0.2.22 51868 <-> 24.140.90.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:32.752694 0.157973 udp 10.0.2.22 51868 <-> 173.23.110.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:33.743739 0.206478 udp 10.0.2.22 51868 <-> 67.185.164.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:34.745041 0.078639 udp 10.0.2.22 51868 <-> 83.97.238.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:35.746441 0.271030 udp 10.0.2.22 51868 <-> 70.70.162.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:36.748030 0.047830 udp 10.0.2.22 51868 <-> 80.56.160.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:37.749804 0.116458 udp 10.0.2.22 51868 <-> 46.191.234.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:38.751019 0.204620 udp 10.0.2.22 51868 <-> 124.123.223.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:39.752711 0.033762 udp 10.0.2.22 51868 <-> 178.27.77.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:40.743877 0.351074 udp 10.0.2.22 51868 <-> 14.46.114.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:41.745159 0.592514 udp 10.0.2.22 51868 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:42.747084 0.140816 udp 10.0.2.22 51868 <-> 98.239.193.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:43.748549 4.717865 udp 10.0.2.22 51868 <-> 83.30.160.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:44.749255 0.355118 udp 10.0.2.22 51868 <-> 106.1.58.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:45.751089 0.335646 udp 10.0.2.22 51868 <-> 61.227.71.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:46.752653 0.301011 udp 10.0.2.22 51868 <-> 202.91.51.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:47.743646 0.275352 udp 10.0.2.22 51868 <-> 189.39.150.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:48.745756 0.335603 udp 10.0.2.22 51868 <-> 111.249.165.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:49.746818 0.163842 udp 10.0.2.22 51868 <-> 75.149.216.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:50.748208 0.290301 udp 10.0.2.22 51868 <-> 190.217.162.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:51.750188 0.391064 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:52.750842 0.048246 udp 10.0.2.22 51868 <-> 79.101.3.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:53.752545 0.302912 udp 10.0.2.22 51868 <-> 92.36.49.170 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:54.744316 0.338068 udp 10.0.2.22 51868 <-> 87.17.252.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:55.745241 0.055885 udp 10.0.2.22 51868 <-> 88.170.196.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:56.746654 0.281515 udp 10.0.2.22 51868 <-> 126.12.122.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:47:57.618003 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:47:57.747972 0.000000 udp 10.0.2.22 51868 -> 151.241.62.180 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:47:58.749890 0.000000 udp 10.0.2.22 51868 -> 122.50.160.216 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:47:59.751005 4.155997 udp 10.0.2.22 51868 <-> 75.143.122.221 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:00.752393 4.117605 udp 10.0.2.22 51868 <-> 62.18.147.112 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:01.743840 0.188914 udp 10.0.2.22 51868 <-> 74.199.89.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:02.745490 0.000000 udp 10.0.2.22 51868 -> 83.58.110.109 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:48:05.749469 0.053376 udp 10.0.2.22 51868 <-> 46.108.227.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:06.751039 0.223611 udp 10.0.2.22 51868 <-> 75.85.120.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:07.753059 0.334119 udp 10.0.2.22 51868 <-> 1.161.56.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:08.743883 0.050531 udp 10.0.2.22 51868 <-> 82.139.22.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:09.745204 0.000000 udp 10.0.2.22 51868 -> 201.250.99.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:48:10.747122 1.076641 udp 10.0.2.22 51868 <-> 85.152.226.249 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:12.750300 0.314321 udp 10.0.2.22 51868 <-> 115.162.37.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:13.751344 1.229689 udp 10.0.2.22 51868 <-> 117.236.214.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:14.753090 0.166993 udp 10.0.2.22 51868 <-> 24.203.38.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:15.743896 0.144204 udp 10.0.2.22 51868 <-> 24.164.171.64 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:16.745529 0.000000 udp 10.0.2.22 51868 -> 77.238.195.53 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:48:17.746743 0.000000 udp 10.0.2.22 51868 -> 111.249.6.102 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:48:18.748490 4.997361 udp 10.0.2.22 51868 <-> 24.159.153.108 16464 CON 0 0 5 1954 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:19.749873 0.095081 udp 10.0.2.22 51868 <-> 95.107.216.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:21.753007 0.136547 udp 10.0.2.22 51868 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:22.744100 0.369329 udp 10.0.2.22 51868 <-> 182.155.52.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:23.892245 0.000000 udp 10.0.2.22 51868 <- 24.159.153.108 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:48:24.627027 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:48:24.747303 0.149374 udp 10.0.2.22 51868 <-> 24.144.193.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:25.748534 1.114097 udp 10.0.2.22 51868 <-> 178.129.93.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:27.751427 0.312516 udp 10.0.2.22 51868 <-> 119.24.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:28.753185 4.811125 udp 10.0.2.22 51868 <-> 59.161.102.235 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:29.744226 0.000000 udp 10.0.2.22 51868 -> 95.231.122.102 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:48:30.745408 2.003482 udp 10.0.2.22 51868 -> 50.72.91.127 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:48:31.747383 0.117695 udp 10.0.2.22 51868 <-> 84.228.222.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:33.750131 1.096029 udp 10.0.2.22 51868 <-> 187.41.64.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:34.751154 0.000000 udp 10.0.2.22 51868 -> 94.123.184.209 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:48:35.752593 0.472263 udp 10.0.2.22 51868 <-> 221.40.85.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:36.744010 0.075858 udp 10.0.2.22 51868 <-> 188.2.105.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:37.745542 0.042628 udp 10.0.2.22 51868 <-> 85.231.33.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:38.747412 0.524092 udp 10.0.2.22 51868 <-> 117.230.193.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:39.748635 0.209711 udp 10.0.2.22 51868 <-> 124.123.160.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:40.749958 0.215630 udp 10.0.2.22 51868 <-> 72.21.68.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:41.751607 0.062928 udp 10.0.2.22 51868 <-> 79.132.162.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:42.752992 0.135686 udp 10.0.2.22 51868 <-> 98.229.0.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:43.744497 0.349486 udp 10.0.2.22 51868 <-> 111.243.170.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:44.746225 2.066478 udp 10.0.2.22 51868 <-> 95.42.254.82 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:45.747285 0.311791 udp 10.0.2.22 51868 <-> 180.18.8.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:47.749966 0.125592 udp 10.0.2.22 51868 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:48.751501 0.365751 udp 10.0.2.22 51868 <-> 1.172.101.198 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:49.753115 0.273203 udp 10.0.2.22 51868 <-> 187.41.64.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:50.744358 0.312981 udp 10.0.2.22 51868 <-> 125.128.173.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:51.626063 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:48:51.745891 0.000000 udp 10.0.2.22 51868 -> 117.220.69.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:48:52.747845 2.068213 udp 10.0.2.22 51868 <-> 187.21.207.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:53.748849 0.000000 udp 10.0.2.22 51868 -> 94.240.211.162 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:48:54.750192 0.149598 udp 10.0.2.22 51868 <-> 67.248.209.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:55.751994 0.162816 udp 10.0.2.22 51868 <-> 83.230.237.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:56.743029 0.188362 udp 10.0.2.22 51868 <-> 95.58.196.223 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:57.744495 0.085770 udp 10.0.2.22 51868 <-> 95.51.31.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:58.746502 0.028956 udp 10.0.2.22 51868 <-> 95.168.37.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:48:59.747090 0.130103 udp 10.0.2.22 51868 <-> 216.145.87.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:00.749057 0.000000 udp 10.0.2.22 51868 -> 213.166.211.72 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:49:01.750002 0.380727 udp 10.0.2.22 51868 <-> 114.38.164.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:02.751709 4.641091 udp 10.0.2.22 51868 <-> 14.97.237.254 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:03.743150 0.134397 udp 10.0.2.22 51868 <-> 98.229.0.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:04.744883 0.054975 udp 10.0.2.22 51868 <-> 92.52.156.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:05.746339 0.146992 udp 10.0.2.22 51868 <-> 66.26.224.223 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:06.747421 0.155671 udp 10.0.2.22 51868 <-> 24.144.87.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:07.748586 0.303815 udp 10.0.2.22 51868 <-> 221.113.39.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:08.750245 0.165626 udp 10.0.2.22 51868 <-> 123.238.129.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:09.751728 0.035176 udp 10.0.2.22 51868 <-> 77.22.71.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:10.743049 0.118995 udp 10.0.2.22 51868 <-> 68.231.252.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:11.744492 0.000000 udp 10.0.2.22 51868 -> 76.24.62.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:49:12.746429 0.000000 udp 10.0.2.22 51868 -> 197.6.63.148 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:49:13.748003 0.142325 udp 10.0.2.22 51868 <-> 71.7.230.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:14.749007 0.303196 udp 10.0.2.22 51868 <-> 126.123.91.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:15.750727 0.171796 udp 10.0.2.22 51868 -> 123.201.175.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:49:15.922523 0.000000 icmp 123.201.175.21 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 01:49:16.752218 3.126887 udp 10.0.2.22 51868 <-> 209.102.248.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:17.743196 0.029695 udp 10.0.2.22 51868 <-> 83.166.192.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:18.624397 0.000082 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:49:18.744632 0.000000 udp 10.0.2.22 51868 -> 188.175.96.90 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:49:19.746189 0.288589 udp 10.0.2.22 51868 <-> 180.215.229.0 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:20.747880 0.352590 udp 10.0.2.22 51868 <-> 221.23.132.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:21.749498 0.000000 udp 10.0.2.22 51868 -> 220.210.107.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:49:22.750344 0.274716 udp 10.0.2.22 51868 <-> 187.66.17.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:23.752061 0.000000 udp 10.0.2.22 51868 -> 183.82.171.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:49:24.743011 0.082954 udp 10.0.2.22 51868 <-> 95.192.53.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:25.744545 0.347425 udp 10.0.2.22 51868 <-> 180.176.22.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:26.745977 2.344935 udp 10.0.2.22 51868 <-> 123.241.118.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:27.747334 0.000000 udp 10.0.2.22 51868 -> 216.188.238.125 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:49:28.749371 0.189468 udp 10.0.2.22 51868 <-> 75.111.95.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:29.750397 0.055025 udp 10.0.2.22 51868 <-> 94.253.87.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:30.752372 0.047871 udp 10.0.2.22 51868 <-> 150.214.219.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:31.743828 0.033988 udp 10.0.2.22 51868 <-> 87.97.132.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:32.745069 0.057552 udp 10.0.2.22 51868 <-> 178.149.181.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:33.746655 0.290316 udp 10.0.2.22 51868 <-> 200.104.188.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:34.748078 0.000000 udp 10.0.2.22 51868 -> 221.113.39.221 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:49:35.749260 0.148662 udp 10.0.2.22 51868 <-> 176.201.73.124 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:36.750946 0.412016 udp 10.0.2.22 51868 <-> 115.244.226.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:37.752010 0.302691 udp 10.0.2.22 51868 <-> 125.197.59.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:38.743839 0.139163 udp 10.0.2.22 51868 <-> 75.102.177.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:39.744742 0.027702 udp 10.0.2.22 51868 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:40.746389 0.223414 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:41.748038 0.000000 udp 10.0.2.22 51868 -> 213.182.86.50 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:49:42.749617 0.241943 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:43.750666 0.357799 udp 10.0.2.22 51868 <-> 183.179.33.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:44.752291 0.057525 udp 10.0.2.22 51868 <-> 89.99.86.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:45.622986 0.000097 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:49:45.743569 0.296758 udp 10.0.2.22 51868 <-> 60.62.200.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:46.744820 0.162242 udp 10.0.2.22 51868 <-> 70.83.116.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:47.746735 0.062727 udp 10.0.2.22 51868 <-> 79.116.248.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:48.748151 2.450376 udp 10.0.2.22 51868 <-> 24.152.221.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:49.749335 0.155351 udp 10.0.2.22 51868 <-> 85.86.78.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:50.750425 0.303065 udp 10.0.2.22 51868 <-> 14.43.147.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:51.752331 0.000000 udp 10.0.2.22 51868 -> 78.102.174.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:49:52.743277 0.292535 udp 10.0.2.22 51868 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:53.745107 0.000000 udp 10.0.2.22 51868 -> 83.165.172.90 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:49:54.746630 0.000000 udp 10.0.2.22 51868 -> 216.110.251.115 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:49:55.747884 0.016307 udp 10.0.2.22 51868 <-> 5.146.147.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:56.749177 0.000000 udp 10.0.2.22 51868 -> 31.176.252.92 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:49:57.750724 0.361966 udp 10.0.2.22 51868 <-> 112.119.99.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:49:59.205177 3.002181 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 01:49:59.743959 0.344424 udp 10.0.2.22 51868 <-> 183.179.33.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:00.745250 0.095401 udp 10.0.2.22 51868 <-> 83.147.167.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:01.746359 1.061107 udp 10.0.2.22 51868 <-> 80.80.41.121 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:03.749456 0.000000 udp 10.0.2.22 51868 -> 114.151.110.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:50:04.750789 0.153855 udp 10.0.2.22 51868 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:05.752286 0.000000 udp 10.0.2.22 51868 -> 77.23.213.9 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:50:06.212777 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:50:06.744067 0.000000 udp 10.0.2.22 51868 -> 5.15.242.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:50:07.745160 0.340183 udp 10.0.2.22 51868 <-> 87.123.22.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:08.746887 0.036976 udp 10.0.2.22 51868 <-> 130.204.33.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:09.748502 0.000000 udp 10.0.2.22 51868 -> 2.35.134.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:50:10.749538 3.212770 udp 10.0.2.22 51868 <-> 78.8.126.23 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:11.751085 0.000000 udp 10.0.2.22 51868 -> 188.196.187.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:50:12.622110 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:50:13.743640 0.450529 udp 10.0.2.22 51868 <-> 219.109.128.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:14.214793 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:50:14.745055 0.000000 udp 10.0.2.22 51868 -> 188.254.149.146 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:50:15.746407 0.069449 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:16.748433 0.156646 udp 10.0.2.22 51868 <-> 50.158.209.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:17.749415 0.124550 udp 10.0.2.22 51868 <-> 90.157.111.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:18.751063 0.290578 udp 10.0.2.22 51868 <-> 98.235.61.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:19.752459 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:50:20.744391 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:50:21.745191 0.036140 udp 10.0.2.22 51868 <-> 188.254.136.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:22.746641 0.000000 udp 10.0.2.22 51868 -> 2.35.134.5 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:50:23.748030 0.000000 udp 10.0.2.22 51868 -> 108.185.229.164 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:50:24.749790 1.732803 udp 10.0.2.22 51868 <-> 14.98.226.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:25.750822 0.363692 udp 10.0.2.22 51868 <-> 14.96.50.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:26.752479 0.138747 udp 10.0.2.22 51868 <-> 71.88.102.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:27.744332 0.148742 udp 10.0.2.22 51868 <-> 146.163.172.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:28.745645 0.128835 udp 10.0.2.22 51868 <-> 81.28.34.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:29.746865 0.000000 udp 10.0.2.22 51868 -> 80.80.41.121 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:50:30.217308 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:50:30.748536 0.310455 udp 10.0.2.22 51868 <-> 115.43.1.198 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:31.749657 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:50:32.751216 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:50:33.752885 0.713787 udp 10.0.2.22 51868 <-> 211.74.92.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:34.744316 0.308501 udp 10.0.2.22 51868 <-> 117.204.245.131 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:35.745161 0.113491 udp 10.0.2.22 51868 <-> 79.40.188.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:36.746579 0.028212 udp 10.0.2.22 51868 <-> 84.107.67.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:37.748161 0.052309 udp 10.0.2.22 51868 <-> 83.141.175.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:38.750006 1.277755 udp 10.0.2.22 51868 <-> 31.185.126.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:39.621237 0.000103 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:50:39.751151 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:50:40.752703 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:50:41.744188 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:50:42.745445 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:50:43.747110 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:50:44.748648 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:50:45.750347 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:50:46.751737 0.352846 udp 10.0.2.22 51868 <-> 216.21.193.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:47.752999 0.476306 udp 10.0.2.22 51868 <-> 210.119.21.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:48.743948 0.177346 udp 10.0.2.22 51868 <-> 76.107.65.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:49.745838 0.182611 udp 10.0.2.22 51868 <-> 66.69.187.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:50.747010 0.166385 udp 10.0.2.22 51868 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:51.748357 0.197564 udp 10.0.2.22 51868 <-> 71.227.148.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:52.749706 0.154263 udp 10.0.2.22 51868 <-> 98.240.160.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:53.751730 0.000000 udp 10.0.2.22 51868 -> 79.28.145.189 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:50:54.752809 0.188653 udp 10.0.2.22 51868 <-> 107.213.251.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:55.744500 0.042794 udp 10.0.2.22 51868 <-> 188.254.158.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:56.746045 0.194770 udp 10.0.2.22 51868 <-> 98.247.242.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:57.746739 0.156818 udp 10.0.2.22 51868 <-> 76.16.185.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:58.748569 0.053262 udp 10.0.2.22 51868 <-> 89.29.182.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:50:59.749660 0.000000 udp 10.0.2.22 51868 -> 5.165.88.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:51:00.751310 0.454684 udp 10.0.2.22 51868 <-> 78.38.103.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:01.753100 0.295416 udp 10.0.2.22 51868 <-> 126.12.122.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:02.223939 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:51:02.744511 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:51:03.745932 4.005226 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:51:04.747440 0.291956 udp 10.0.2.22 51868 <-> 220.100.40.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:05.748574 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:51:06.620126 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:51:06.750278 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:51:08.753097 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:51:09.744360 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:51:10.745719 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:51:11.747334 1.183310 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:14.751325 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:51:15.752741 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:51:16.744787 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:51:17.746146 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:51:18.747290 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:51:19.749009 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:51:20.750000 0.000047 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:51:20.750047 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:51:21.751571 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:51:22.753441 0.000000 udp 10.0.2.22 51868 -> 37.57.58.177 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:51:23.744668 0.344893 udp 10.0.2.22 51868 <-> 123.192.49.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:24.746025 0.235172 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:25.747317 0.353703 udp 10.0.2.22 51868 <-> 111.242.143.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:26.748704 0.518493 udp 10.0.2.22 51868 <-> 79.40.73.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:27.750203 0.235697 udp 10.0.2.22 51868 <-> 200.93.52.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:28.751385 0.874102 udp 10.0.2.22 51868 <-> 5.237.137.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:29.742864 0.065468 udp 10.0.2.22 51868 <-> 93.155.151.163 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:30.744571 0.110677 udp 10.0.2.22 51868 <-> 79.13.181.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:31.745773 1.063542 udp 10.0.2.22 51868 <-> 89.228.127.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:32.747063 0.346671 udp 10.0.2.22 51868 <-> 24.99.237.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:33.618836 0.000099 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:51:33.749254 0.168859 udp 10.0.2.22 51868 <-> 71.199.218.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:34.749987 0.036502 udp 10.0.2.22 51868 <-> 89.74.113.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:35.752002 0.068415 udp 10.0.2.22 51868 <-> 213.167.1.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:36.743395 0.084339 udp 10.0.2.22 51868 <-> 79.0.16.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:37.744761 1.050599 udp 10.0.2.22 51868 <-> 88.222.170.133 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:39.747347 0.000000 udp 10.0.2.22 51868 -> 115.242.37.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:51:40.748750 0.167931 udp 10.0.2.22 51868 <-> 68.56.21.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:41.750057 0.000000 udp 10.0.2.22 51868 -> 92.139.126.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:51:42.751689 0.050611 udp 10.0.2.22 51868 <-> 89.216.39.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:43.743221 0.000000 udp 10.0.2.22 51868 -> 78.188.19.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:51:44.744918 0.050646 udp 10.0.2.22 51868 <-> 46.253.3.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:45.746419 0.022998 udp 10.0.2.22 51868 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:46.747712 0.160109 udp 10.0.2.22 51868 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:47.748895 1.510182 udp 10.0.2.22 51868 <-> 87.0.188.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:48.750225 2.428549 udp 10.0.2.22 51868 <-> 92.75.209.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:49.752013 0.000000 udp 10.0.2.22 51868 -> 121.93.46.211 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:51:50.743453 0.000000 udp 10.0.2.22 51868 -> 82.59.63.225 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:51:51.744513 0.050109 udp 10.0.2.22 51868 <-> 46.253.3.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:52.746653 0.000000 udp 10.0.2.22 51868 -> 119.242.89.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:51:53.747862 0.059753 udp 10.0.2.22 51868 <-> 86.124.236.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:54.749071 0.000000 udp 10.0.2.22 51868 -> 80.99.71.252 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:51:55.750336 2.675264 udp 10.0.2.22 51868 <-> 92.75.209.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:56.752108 0.000000 udp 10.0.2.22 51868 -> 108.91.81.167 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:51:57.743069 0.373539 udp 10.0.2.22 51868 <-> 137.166.125.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:58.745200 0.029828 udp 10.0.2.22 51868 <-> 95.85.182.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:51:59.746064 0.000000 udp 10.0.2.22 51868 -> 109.91.102.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:52:00.627371 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:52:00.747997 0.000000 udp 10.0.2.22 51868 -> 78.188.19.17 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:52:01.749221 0.000000 udp 10.0.2.22 51868 -> 76.24.62.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:52:02.750381 4.997712 udp 10.0.2.22 51868 <-> 24.0.29.18 16464 CON 0 0 5 1954 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:03.751942 0.000000 udp 10.0.2.22 51868 -> 119.242.89.27 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:52:04.743533 0.027743 udp 10.0.2.22 51868 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:05.744707 0.488927 udp 10.0.2.22 51868 <-> 108.230.246.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:07.884300 0.000000 udp 10.0.2.22 51868 <- 24.0.29.18 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:52:08.749134 0.067425 udp 10.0.2.22 51868 <-> 91.112.150.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:09.750387 0.000000 udp 10.0.2.22 51868 -> 92.139.126.18 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:52:10.752039 0.000000 udp 10.0.2.22 51868 -> 108.91.81.167 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:52:11.743316 0.057854 udp 10.0.2.22 51868 <-> 86.124.236.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:12.745161 0.490054 udp 10.0.2.22 51868 <-> 219.19.32.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:13.746521 0.050537 udp 10.0.2.22 51868 <-> 46.253.3.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:14.748140 0.000000 udp 10.0.2.22 51868 -> 82.59.63.225 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:52:15.749131 0.000000 udp 10.0.2.22 51868 -> 92.139.126.18 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:52:16.750901 0.024011 udp 10.0.2.22 51868 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:17.752257 2.645320 udp 10.0.2.22 51868 <-> 108.230.246.250 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:18.743804 0.033139 udp 10.0.2.22 51868 <-> 89.133.113.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:20.746128 0.146856 udp 10.0.2.22 51868 <-> 71.75.221.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:21.747813 0.448164 udp 10.0.2.22 51868 <-> 189.6.137.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:22.749106 0.355370 udp 10.0.2.22 51868 <-> 1.168.96.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:23.750973 0.357396 udp 10.0.2.22 51868 <-> 114.45.53.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:24.752395 0.150561 udp 10.0.2.22 51868 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:25.743913 0.268537 udp 10.0.2.22 51868 <-> 201.235.247.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:26.744813 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:52:27.626182 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:52:27.746735 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:52:28.747755 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:52:29.749703 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:52:30.750707 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:52:31.752421 0.000000 udp 10.0.2.22 51868 -> 1.172.59.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:52:32.743984 0.055527 udp 10.0.2.22 51868 <-> 85.226.42.21 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:33.745314 0.190752 udp 10.0.2.22 51868 <-> 70.173.84.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:34.075983 0.011483 udp 10.0.2.22 59998 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 01:52:34.087756 0.000000 udp 10.0.2.22 59999 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:52:34.746369 0.169201 udp 10.0.2.22 51868 <-> 208.107.200.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:35.747874 0.000000 udp 10.0.2.22 51868 -> 218.157.111.135 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:52:36.749214 0.637171 udp 10.0.2.22 51868 <-> 173.218.51.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:37.750810 0.389357 udp 10.0.2.22 51868 <-> 173.87.184.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:38.752499 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:52:39.743752 2.002577 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:52:40.745540 0.129824 udp 10.0.2.22 51868 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:42.748400 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:52:43.749326 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:52:44.750609 0.000054 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:52:44.750663 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:52:45.752340 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:52:46.743674 0.140977 udp 10.0.2.22 51868 <-> 95.252.121.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:47.745374 0.550341 udp 10.0.2.22 51868 <-> 173.87.184.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:48.746490 0.156278 udp 10.0.2.22 51868 <-> 50.158.209.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:49.748553 1.119864 udp 10.0.2.22 51868 <-> 70.184.172.70 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:51.751297 1.992627 udp 10.0.2.22 51868 -> 98.67.228.85 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:52:52.752585 0.052580 udp 10.0.2.22 51868 <-> 90.231.187.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:54.624947 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:52:54.745346 0.000000 udp 10.0.2.22 51868 -> 111.92.80.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:52:55.746764 0.000000 udp 10.0.2.22 51868 -> 192.168.1.100 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:52:56.748597 0.188776 udp 10.0.2.22 51868 <-> 68.149.112.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:57.749735 0.132039 udp 10.0.2.22 51868 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:58.751085 0.066420 udp 10.0.2.22 51868 <-> 78.136.117.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:52:59.752762 0.000000 udp 10.0.2.22 51868 -> 220.129.2.53 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:53:00.743651 0.205669 udp 10.0.2.22 51868 <-> 70.66.226.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:01.745040 0.432834 udp 10.0.2.22 51868 <-> 115.187.52.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:02.746664 0.105104 udp 10.0.2.22 51868 <-> 95.252.143.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:03.748194 0.000000 udp 10.0.2.22 51868 -> 69.47.17.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:53:04.749786 0.359916 udp 10.0.2.22 51868 <-> 111.252.28.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:05.750794 0.000000 udp 10.0.2.22 51868 -> 70.112.193.107 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:53:06.753701 0.000000 udp 10.0.2.22 51868 -> 89.143.49.111 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:53:07.744001 0.039796 udp 10.0.2.22 51868 <-> 109.87.128.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:08.745678 0.277826 udp 10.0.2.22 51868 <-> 124.122.2.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:09.747009 0.000000 udp 10.0.2.22 51868 -> 173.180.203.114 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:53:10.748447 0.153991 udp 10.0.2.22 51868 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:11.750150 0.000000 udp 10.0.2.22 51868 -> 183.89.104.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:53:12.751266 0.144553 udp 10.0.2.22 51868 <-> 67.33.161.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:13.753016 0.079261 udp 10.0.2.22 51868 <-> 79.186.22.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:14.744053 0.618423 udp 10.0.2.22 51868 <-> 117.226.175.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:15.745330 0.044668 udp 10.0.2.22 51868 <-> 193.150.231.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:16.746753 0.028031 udp 10.0.2.22 51868 <-> 78.83.103.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:17.748253 0.000000 udp 10.0.2.22 51868 -> 92.224.68.240 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:53:18.750032 0.044104 udp 10.0.2.22 51868 <-> 178.254.239.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:19.751586 0.042167 udp 10.0.2.22 51868 <-> 147.156.24.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:20.752493 0.189781 udp 10.0.2.22 51868 <-> 68.149.112.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:21.623801 0.000099 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:53:21.744296 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:53:22.745249 0.059512 udp 10.0.2.22 51868 <-> 31.44.194.248 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:23.746702 0.000000 udp 10.0.2.22 51868 -> 95.77.71.117 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:53:24.748707 0.064486 udp 10.0.2.22 51868 <-> 85.193.238.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:25.749542 0.042036 udp 10.0.2.22 51868 <-> 147.156.24.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:26.751631 0.000000 udp 10.0.2.22 51868 -> 49.206.147.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:53:27.752792 2.125840 udp 10.0.2.22 51868 <-> 24.0.29.18 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:28.744189 0.211028 udp 10.0.2.22 51868 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:30.747358 1.087600 udp 10.0.2.22 51868 <-> 213.233.178.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:31.748833 0.306750 udp 10.0.2.22 51868 <-> 58.140.164.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:32.749789 0.207147 udp 10.0.2.22 51868 <-> 50.150.82.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:33.751460 1.025038 udp 10.0.2.22 51868 <-> 190.203.224.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:34.752758 0.086086 udp 10.0.2.22 51868 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:35.744683 0.294549 udp 10.0.2.22 51868 <-> 219.115.86.160 16464 CON 0 0 5 3058 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:36.745736 0.072371 udp 10.0.2.22 51868 <-> 178.158.103.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:37.747429 0.344898 udp 10.0.2.22 51868 <-> 190.177.200.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:38.748470 0.065530 udp 10.0.2.22 51868 <-> 78.227.210.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:39.750393 0.000000 udp 10.0.2.22 51868 -> 117.200.6.68 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:53:40.751771 0.000000 udp 10.0.2.22 51868 -> 197.6.63.148 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:53:41.752968 0.000000 udp 10.0.2.22 51868 -> 68.9.106.143 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:53:42.744167 2.711953 udp 10.0.2.22 51868 <-> 84.123.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:43.746166 0.263318 udp 10.0.2.22 51868 <-> 223.176.93.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:44.747353 0.400327 udp 10.0.2.22 51868 <-> 119.201.78.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:45.748523 0.093126 udp 10.0.2.22 51868 <-> 95.86.77.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:46.749989 0.050463 udp 10.0.2.22 51868 <-> 81.16.172.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:47.751329 0.313397 udp 10.0.2.22 51868 <-> 81.90.158.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:48.622976 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:53:48.753279 0.000000 udp 10.0.2.22 51868 -> 201.253.221.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:53:49.744490 0.000000 udp 10.0.2.22 51868 -> 41.251.194.244 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:53:50.745827 0.000000 udp 10.0.2.22 51868 -> 89.73.207.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:53:51.746904 0.065069 udp 10.0.2.22 51868 <-> 86.16.234.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:52.748695 0.000000 udp 10.0.2.22 51868 -> 192.95.207.73 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:53:53.750142 0.259821 udp 10.0.2.22 51868 <-> 181.167.199.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:54.751922 0.000000 udp 10.0.2.22 51868 -> 121.6.123.72 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:53:55.753013 0.013902 udp 10.0.2.22 51868 <-> 89.212.87.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:56.744631 0.399328 udp 10.0.2.22 51868 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:57.745574 0.185813 udp 10.0.2.22 51868 <-> 68.149.112.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:58.747474 0.176905 udp 10.0.2.22 51868 <-> 63.142.75.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:53:59.748917 0.209283 udp 10.0.2.22 51868 <-> 103.250.151.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:54:00.750566 0.275948 udp 10.0.2.22 51868 <-> 103.7.150.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:54:01.751677 0.029040 udp 10.0.2.22 51868 <-> 77.70.44.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:54:02.743467 0.285740 udp 10.0.2.22 51868 <-> 27.140.82.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:54:03.744821 0.144673 udp 10.0.2.22 51868 <-> 24.161.48.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:54:04.746408 0.032397 udp 10.0.2.22 51868 <-> 178.79.25.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:54:05.747171 0.123264 udp 10.0.2.22 51868 <-> 146.115.58.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:54:06.748487 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:07.750331 0.331665 udp 10.0.2.22 51868 <-> 114.32.65.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:54:08.751837 0.218505 udp 10.0.2.22 51868 <-> 183.83.91.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:54:09.742939 0.343991 udp 10.0.2.22 51868 <-> 114.40.25.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:54:10.744303 0.022164 udp 10.0.2.22 51868 <-> 83.83.126.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:54:11.745981 0.088199 udp 10.0.2.22 51868 <-> 79.133.148.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:54:12.747620 0.000000 udp 10.0.2.22 51868 -> 114.40.170.48 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:13.749017 0.000000 udp 10.0.2.22 51868 -> 114.24.22.131 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:14.750025 0.029110 udp 10.0.2.22 51868 <-> 95.111.72.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:54:15.621198 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:54:15.751916 0.218817 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:54:16.742859 0.034487 udp 10.0.2.22 51868 <-> 178.79.32.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:54:17.745000 0.229411 udp 10.0.2.22 51868 <-> 98.184.128.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:54:18.745772 0.000000 udp 10.0.2.22 51868 -> 203.81.201.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:19.747863 0.163464 udp 10.0.2.22 51868 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:54:20.749158 0.000000 udp 10.0.2.22 51868 -> 117.233.51.51 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:21.750932 1.039806 udp 10.0.2.22 51868 <-> 117.230.193.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:54:22.752059 0.000000 udp 10.0.2.22 51868 -> 91.120.99.47 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:23.743448 0.202631 udp 10.0.2.22 51868 <-> 123.201.207.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:54:24.744774 0.000000 udp 10.0.2.22 51868 -> 116.72.250.73 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:25.746170 0.166854 udp 10.0.2.22 51868 <-> 27.106.30.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:54:26.747664 0.000000 udp 10.0.2.22 51868 -> 78.179.243.113 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:27.749266 0.170488 udp 10.0.2.22 51868 <-> 72.23.74.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:54:28.750509 0.044103 udp 10.0.2.22 51868 <-> 5.20.66.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:54:29.752136 0.087593 udp 10.0.2.22 51868 <-> 85.155.41.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:54:30.743054 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:31.745011 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:32.746281 0.000047 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:32.746328 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:54:33.747590 0.240240 udp 10.0.2.22 51868 <-> 128.171.120.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:54:34.748959 0.153799 udp 10.0.2.22 51868 <-> 76.16.25.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:54:35.750481 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:36.751642 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:38.744844 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:39.746339 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:40.747776 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:41.749127 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:42.750295 4.997558 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:43.621990 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:54:43.751701 2.994714 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:43.751821 2.994594 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 2 172 flow=Background 1970/01/01 01:54:44.743657 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:45.745161 0.389533 udp 10.0.2.22 51868 <-> 112.197.242.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:54:48.749451 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:49.750816 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:50.751741 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:51.743203 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:52.744726 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:53.746276 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:54.748090 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:55.749260 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:56.750900 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:57.752207 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:54:59.744784 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:00.746742 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:01.748103 0.160542 udp 10.0.2.22 51868 <-> 50.90.85.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:55:02.749391 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:03.750600 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:04.752249 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:05.743510 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:06.744761 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:07.746848 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:08.747961 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:09.749136 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:10.620753 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:55:10.751016 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:11.752333 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:12.743368 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:13.745174 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:14.746402 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:15.747972 3.995760 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:15.748064 3.995668 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 2 172 flow=Background 1970/01/01 01:55:17.750770 0.154918 udp 10.0.2.22 51868 <-> 50.90.85.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:55:18.752267 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:20.745116 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:21.746659 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:22.748342 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:23.749314 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:24.751395 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:25.752681 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:26.744110 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:27.745176 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:28.746629 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:29.747829 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:30.750023 3.995145 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:31.751090 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:33.743605 0.155762 udp 10.0.2.22 51868 <-> 50.90.85.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:55:35.746644 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:36.748254 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:37.749352 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:38.620520 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:55:38.751144 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:39.752896 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:40.744110 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:41.745524 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:42.746724 0.000061 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:42.746785 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:55:43.748066 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:44.750066 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:45.751391 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:47.743980 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:48.745154 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:55:49.747460 0.103813 udp 10.0.2.22 51868 <-> 79.23.235.210 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:55:50.748710 0.186049 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:55:51.750019 0.142533 udp 10.0.2.22 51868 <-> 69.126.154.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:55:52.751410 0.042191 udp 10.0.2.22 51868 <-> 147.156.24.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:55:53.752605 0.175589 udp 10.0.2.22 51868 <-> 46.143.217.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:55:54.744016 0.290899 udp 10.0.2.22 51868 <-> 190.163.19.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:55:55.745254 0.222818 udp 10.0.2.22 51868 <-> 190.204.17.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:55:56.747236 0.310885 udp 10.0.2.22 51868 <-> 183.97.151.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:55:57.748170 0.326214 udp 10.0.2.22 51868 <-> 83.230.239.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:55:58.749816 0.085914 udp 10.0.2.22 51868 <-> 85.176.34.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:55:59.751631 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:56:00.752956 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:56:01.743815 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:56:02.745896 0.000000 udp 10.0.2.22 51868 -> 96.31.10.230 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:56:03.747124 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:56:04.748182 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:56:05.619596 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:56:05.749634 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:56:06.751250 0.054093 udp 10.0.2.22 51868 <-> 91.210.108.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:07.752801 0.378060 udp 10.0.2.22 51868 <-> 111.252.202.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:08.743945 0.000000 udp 10.0.2.22 51868 -> 87.19.151.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:56:09.745864 0.049699 udp 10.0.2.22 51868 <-> 94.52.120.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:10.747137 0.000000 udp 10.0.2.22 51868 -> 176.240.109.130 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:56:11.748354 0.000000 udp 10.0.2.22 51868 -> 2.37.154.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:56:12.749833 0.031208 udp 10.0.2.22 51868 <-> 77.236.190.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:13.751093 0.166545 udp 10.0.2.22 51868 <-> 72.177.63.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:14.753053 0.074356 udp 10.0.2.22 51868 <-> 82.254.207.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:15.744248 0.156472 udp 10.0.2.22 51868 <-> 24.250.78.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:16.745595 0.181286 udp 10.0.2.22 51868 <-> 201.174.223.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:17.747343 0.125401 udp 10.0.2.22 51868 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:18.748419 0.000000 udp 10.0.2.22 51868 -> 85.87.240.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:56:19.750222 0.823289 udp 10.0.2.22 51868 <-> 201.11.80.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:20.751143 2.097558 udp 10.0.2.22 51868 <-> 95.192.53.125 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:23.746179 0.498954 udp 10.0.2.22 51868 <-> 117.217.209.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:24.747191 0.000000 udp 10.0.2.22 51868 -> 31.63.129.74 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:56:25.748770 0.083929 udp 10.0.2.22 51868 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:26.749955 0.320859 udp 10.0.2.22 51868 <-> 211.230.32.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:27.751751 0.067645 udp 10.0.2.22 51868 <-> 79.165.237.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:28.743129 0.034980 udp 10.0.2.22 51868 <-> 188.193.197.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:29.744634 0.056943 udp 10.0.2.22 51868 <-> 109.87.252.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:30.745529 0.202583 udp 10.0.2.22 51868 <-> 123.238.137.224 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:31.747308 1.997081 udp 10.0.2.22 51868 <-> 46.35.110.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:32.618276 0.000101 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:56:32.748653 0.036598 udp 10.0.2.22 51868 <-> 84.196.174.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:33.750497 0.048837 udp 10.0.2.22 51868 <-> 77.244.207.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:34.751404 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:56:35.742894 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:56:36.744837 0.356606 udp 10.0.2.22 51868 <-> 1.168.26.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:37.746100 0.949870 udp 10.0.2.22 51868 <-> 216.45.40.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:38.747564 1.067546 udp 10.0.2.22 51868 <-> 93.74.103.177 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:40.750207 0.045021 udp 10.0.2.22 51868 <-> 193.68.132.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:41.751631 0.354324 udp 10.0.2.22 51868 <-> 2.184.57.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:42.742811 0.301579 udp 10.0.2.22 51868 <-> 60.47.220.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:43.744334 0.161183 udp 10.0.2.22 51868 <-> 76.177.76.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:44.746195 0.000000 udp 10.0.2.22 51868 -> 68.69.36.107 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:56:45.747090 0.145287 udp 10.0.2.22 51868 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:46.749255 0.000000 udp 10.0.2.22 51868 -> 151.52.90.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:56:47.750561 0.311447 udp 10.0.2.22 51868 <-> 202.91.51.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:48.751422 0.070244 udp 10.0.2.22 51868 <-> 83.173.181.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:49.742843 0.000000 udp 10.0.2.22 51868 -> 223.235.220.196 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:56:50.744365 0.336623 udp 10.0.2.22 51868 <-> 223.16.38.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:51.746046 0.310692 udp 10.0.2.22 51868 <-> 150.162.192.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:52.747727 0.048279 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:53.749014 0.327447 udp 10.0.2.22 51868 <-> 119.70.34.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:54.750448 3.177908 udp 10.0.2.22 51868 <-> 202.235.233.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:55.351286 0.000000 udp 10.0.2.22 51868 <- 223.235.220.196 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:56:55.751677 0.307065 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:56.743490 0.368123 udp 10.0.2.22 51868 <-> 75.56.205.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:57.744699 0.272209 udp 10.0.2.22 51868 <-> 187.104.168.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:58.746670 0.086306 udp 10.0.2.22 51868 <-> 78.58.198.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:56:59.627646 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:56:59.747656 0.000000 udp 10.0.2.22 51868 -> 114.25.138.159 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:57:00.748873 0.131910 udp 10.0.2.22 51868 <-> 107.3.86.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:01.750560 0.000000 udp 10.0.2.22 51868 -> 180.215.165.146 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:57:02.752277 0.403562 udp 10.0.2.22 51868 <-> 117.220.240.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:03.743728 0.078773 udp 10.0.2.22 51868 <-> 95.178.112.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:04.744771 0.139521 udp 10.0.2.22 51868 <-> 75.178.77.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:05.745840 0.054015 udp 10.0.2.22 51868 <-> 82.211.182.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:06.229567 3.001517 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 01:57:06.747293 0.648542 udp 10.0.2.22 51868 <-> 213.133.17.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:07.749030 0.000000 udp 10.0.2.22 51868 -> 84.236.122.221 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:57:08.750755 0.415695 udp 10.0.2.22 51868 <-> 41.174.24.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:09.752057 0.324211 udp 10.0.2.22 51868 <-> 58.115.17.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:10.743614 1.882121 arp 10.0.2.22 who 169.254.197.2 INT 3 126 flow=Background-ARP 1970/01/01 01:57:11.745018 0.637257 udp 10.0.2.22 51868 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:12.746254 0.149988 udp 10.0.2.22 51868 <-> 67.240.133.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:13.237184 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:57:13.747916 0.143223 udp 10.0.2.22 51868 <-> 208.53.224.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:14.749417 0.154870 udp 10.0.2.22 51868 <-> 24.148.135.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:15.750744 0.000000 udp 10.0.2.22 51868 -> 114.129.167.174 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:57:16.752221 1.294559 udp 10.0.2.22 51868 <-> 190.134.154.207 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:18.745046 0.078211 udp 10.0.2.22 51868 <-> 95.74.64.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:19.746118 0.336227 udp 10.0.2.22 51868 <-> 118.166.237.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:20.747464 0.406705 udp 10.0.2.22 51868 <-> 117.198.83.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:21.238350 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:57:21.749001 0.339542 udp 10.0.2.22 51868 <-> 49.158.158.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:22.750475 0.206768 udp 10.0.2.22 51868 <-> 76.115.116.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:23.752015 0.329587 udp 10.0.2.22 51868 <-> 14.46.114.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:24.743597 1.168903 udp 10.0.2.22 51868 <-> 173.18.114.28 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:26.626544 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:57:26.746244 0.061465 udp 10.0.2.22 51868 <-> 79.112.23.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:27.748113 3.255698 udp 10.0.2.22 51868 <-> 2.180.150.143 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:28.749062 0.000000 udp 10.0.2.22 51868 -> 116.73.59.221 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:57:29.750540 0.000000 udp 10.0.2.22 51868 -> 187.56.212.106 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:57:31.743816 0.024794 udp 10.0.2.22 51868 <-> 158.58.228.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:32.745148 0.149409 udp 10.0.2.22 51868 <-> 79.55.118.40 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:33.746113 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:57:34.747969 1.096131 udp 10.0.2.22 51868 <-> 85.225.6.120 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:36.750764 0.164788 udp 10.0.2.22 51868 <-> 174.49.49.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:37.241851 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:57:37.751930 0.069575 udp 10.0.2.22 51868 <-> 77.179.32.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:38.743954 0.371290 udp 10.0.2.22 51868 <-> 116.49.205.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:39.745378 0.069703 udp 10.0.2.22 51868 <-> 85.84.168.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:40.746476 0.000000 udp 10.0.2.22 51868 -> 159.146.5.235 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:57:41.747808 0.036932 udp 10.0.2.22 51868 <-> 188.246.71.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:42.749533 0.331302 udp 10.0.2.22 51868 <-> 220.109.234.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:43.750496 0.150571 udp 10.0.2.22 51868 <-> 65.185.50.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:44.752109 0.112585 udp 10.0.2.22 51868 <-> 86.38.180.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:45.743710 0.061496 udp 10.0.2.22 51868 <-> 188.214.34.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:46.745240 1.558298 udp 10.0.2.22 51868 <-> 1.23.85.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:47.746661 0.177835 udp 10.0.2.22 51868 <-> 62.5.202.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:48.748096 0.118106 udp 10.0.2.22 51868 <-> 95.133.169.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:49.749578 0.209364 udp 10.0.2.22 51868 <-> 50.168.18.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:50.751264 0.043466 udp 10.0.2.22 51868 <-> 94.189.149.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:51.752177 0.048713 udp 10.0.2.22 51868 <-> 5.14.33.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:52.743863 0.055258 udp 10.0.2.22 51868 <-> 178.150.130.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:53.624958 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:57:53.745438 0.000000 udp 10.0.2.22 51868 -> 101.63.6.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:57:54.746485 0.168613 udp 10.0.2.22 51868 <-> 50.152.72.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:55.748222 0.000000 udp 10.0.2.22 51868 -> 111.125.203.113 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:57:56.749235 0.352585 udp 10.0.2.22 51868 <-> 114.46.103.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:57.751240 0.404609 udp 10.0.2.22 51868 <-> 112.161.17.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:58.752371 0.162171 udp 10.0.2.22 51868 <-> 66.227.200.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:57:59.744215 0.196181 udp 10.0.2.22 51868 <-> 75.50.92.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:00.745124 0.160871 udp 10.0.2.22 51868 <-> 74.77.223.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:01.746963 0.167375 udp 10.0.2.22 51868 <-> 103.29.158.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:02.748146 0.181747 udp 10.0.2.22 51868 <-> 116.73.33.141 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:03.749525 1.190573 udp 10.0.2.22 51868 <-> 190.219.0.107 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:05.752798 0.346916 udp 10.0.2.22 51868 <-> 201.93.44.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:06.744258 1.057023 udp 10.0.2.22 51868 <-> 79.173.35.28 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:08.746988 0.000000 udp 10.0.2.22 51868 -> 1.164.153.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:58:09.247875 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 01:58:09.748187 0.000000 udp 10.0.2.22 51868 -> 119.234.140.32 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:58:10.749846 0.000000 udp 10.0.2.22 51868 -> 161.6.244.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:58:11.751337 1.888956 udp 10.0.2.22 51868 <-> 219.162.195.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:12.752882 0.265808 udp 10.0.2.22 51868 <-> 36.86.156.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:13.743617 0.214317 udp 10.0.2.22 51868 <-> 76.94.114.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:14.745413 4.212661 udp 10.0.2.22 51868 <-> 115.117.81.42 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:15.746913 0.000000 udp 10.0.2.22 51868 -> 119.225.245.122 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:58:16.748267 0.091877 udp 10.0.2.22 51868 -> 83.58.129.147 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:58:16.840144 0.000000 icmp 83.58.129.147 0x0303 -> 10.0.2.22 0x5040 URP 192 1 70 flow=Background 1970/01/01 01:58:17.749688 0.375241 udp 10.0.2.22 51868 <-> 1.161.106.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:19.752520 0.044668 udp 10.0.2.22 51868 -> 217.22.234.137 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:58:19.797188 0.000000 icmp 217.22.234.137 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 01:58:20.623684 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:58:20.744151 0.136426 udp 10.0.2.22 51868 <-> 64.147.212.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:21.745232 0.000000 udp 10.0.2.22 51868 -> 182.221.176.162 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:58:22.746655 0.382775 udp 10.0.2.22 51868 <-> 36.230.82.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:23.748602 0.175025 udp 10.0.2.22 51868 <-> 173.23.12.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:24.749792 0.372034 udp 10.0.2.22 51868 <-> 111.188.25.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:25.751312 0.000000 udp 10.0.2.22 51868 -> 103.29.119.61 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:58:26.752907 0.309300 udp 10.0.2.22 51868 <-> 180.220.28.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:27.743765 0.285247 udp 10.0.2.22 51868 <-> 190.163.19.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:28.745222 0.042407 udp 10.0.2.22 51868 <-> 77.105.193.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:29.746893 0.000000 udp 10.0.2.22 51868 -> 97.67.248.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:58:30.748071 0.304290 udp 10.0.2.22 51868 <-> 211.135.100.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:31.750114 0.136865 udp 10.0.2.22 51868 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:32.751395 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:58:33.752978 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:58:34.743913 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:58:35.745327 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:58:36.747046 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:58:37.748647 0.244621 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:38.749780 0.000000 udp 10.0.2.22 51868 -> 99.161.76.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:58:39.751492 0.040201 udp 10.0.2.22 51868 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:40.752846 0.000000 udp 10.0.2.22 51868 -> 59.95.32.83 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:58:41.744577 0.061318 udp 10.0.2.22 51868 <-> 89.36.92.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:42.745638 0.000000 udp 10.0.2.22 51868 -> 106.1.58.161 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:58:43.747622 0.000000 udp 10.0.2.22 51868 -> 14.96.168.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:58:44.748676 0.068862 udp 10.0.2.22 51868 <-> 81.233.18.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:45.750206 0.157547 udp 10.0.2.22 51868 <-> 50.142.135.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:46.751333 0.000000 udp 10.0.2.22 51868 -> 85.53.64.244 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:58:47.622627 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:58:47.752538 0.370118 udp 10.0.2.22 51868 <-> 180.94.163.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:48.744060 0.028764 udp 10.0.2.22 51868 <-> 78.90.215.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:49.745621 0.289132 udp 10.0.2.22 51868 <-> 27.141.56.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:50.747028 0.000000 udp 10.0.2.22 51868 -> 82.179.135.74 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:58:51.748247 0.139345 udp 10.0.2.22 51868 <-> 213.222.46.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:52.749946 0.065993 udp 10.0.2.22 51868 <-> 188.32.59.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:53.751235 4.762486 udp 10.0.2.22 51868 <-> 190.94.222.17 16464 CON 0 0 2 668 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:54.753006 0.171137 udp 10.0.2.22 51868 <-> 97.66.100.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:55.744427 0.063310 udp 10.0.2.22 51868 <-> 80.164.97.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:56.745862 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:58:57.747081 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:58:58.748635 0.153945 udp 10.0.2.22 51868 <-> 65.60.153.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:58:59.750396 0.108877 udp 10.0.2.22 51868 <-> 178.129.93.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:00.751438 0.138037 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:01.743086 0.000000 udp 10.0.2.22 51868 -> 151.246.103.116 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:59:02.744050 0.119149 udp 10.0.2.22 51868 <-> 151.48.113.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:03.746159 1.381025 udp 10.0.2.22 51868 <-> 202.55.203.230 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:05.748889 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:59:06.750527 0.000109 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:59:06.750636 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 01:59:07.751286 0.000000 udp 10.0.2.22 51868 -> 117.226.254.156 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:59:08.743031 3.348843 udp 10.0.2.22 51868 <-> 14.97.58.246 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:09.744472 0.315184 udp 10.0.2.22 51868 <-> 220.129.77.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:10.745724 0.156407 udp 10.0.2.22 51868 <-> 71.80.71.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:12.749171 0.000000 udp 10.0.2.22 51868 -> 186.18.88.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:59:13.749894 0.560685 udp 10.0.2.22 51868 <-> 60.231.84.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:14.621249 0.000216 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:59:14.751641 0.315419 udp 10.0.2.22 51868 <-> 220.129.77.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:15.743341 2.317305 udp 10.0.2.22 51868 <-> 115.20.162.46 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:16.744243 0.146828 udp 10.0.2.22 51868 <-> 174.108.102.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:18.747654 0.095770 udp 10.0.2.22 51868 <-> 151.48.113.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:19.748792 0.124651 udp 10.0.2.22 51868 <-> 41.33.182.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:20.750421 0.337814 udp 10.0.2.22 51868 <-> 36.232.204.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:21.752010 0.200941 udp 10.0.2.22 51868 <-> 190.146.36.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:22.743254 0.318202 udp 10.0.2.22 51868 <-> 221.80.185.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:23.745043 2.486664 udp 10.0.2.22 51868 <-> 92.75.209.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:24.746460 0.297970 udp 10.0.2.22 51868 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:25.747304 0.169382 udp 10.0.2.22 51868 <-> 174.64.165.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:26.749211 0.154371 udp 10.0.2.22 51868 <-> 98.212.63.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:27.750445 0.000000 udp 10.0.2.22 51868 -> 151.239.254.177 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:59:28.751547 1.014370 udp 10.0.2.22 51868 <-> 46.223.92.40 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:30.744994 0.145726 udp 10.0.2.22 51868 <-> 93.49.20.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:31.746056 0.291125 udp 10.0.2.22 51868 <-> 121.84.48.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:32.747228 0.060748 udp 10.0.2.22 51868 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:33.749031 0.210111 udp 10.0.2.22 51868 <-> 183.82.191.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:34.750396 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:59:35.752168 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:59:36.743350 0.298412 udp 10.0.2.22 51868 <-> 58.9.13.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:37.744565 0.178017 udp 10.0.2.22 51868 <-> 64.207.73.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:38.746170 0.000000 udp 10.0.2.22 51868 -> 76.100.207.108 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:59:39.747969 0.000000 udp 10.0.2.22 51868 -> 66.41.191.140 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:59:40.749182 0.000000 udp 10.0.2.22 51868 -> 115.242.160.63 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:59:41.620562 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:59:41.750174 0.049726 udp 10.0.2.22 51868 <-> 217.77.28.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:42.751719 0.359790 udp 10.0.2.22 51868 <-> 124.244.75.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:43.743564 0.050129 udp 10.0.2.22 51868 <-> 178.75.230.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:44.744589 0.000000 udp 10.0.2.22 51868 -> 203.67.210.216 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:59:45.746475 0.450332 udp 10.0.2.22 51868 <-> 95.236.42.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:46.748076 0.050876 udp 10.0.2.22 51868 <-> 78.61.221.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:47.748761 0.382708 udp 10.0.2.22 51868 <-> 14.98.226.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:48.750608 0.000000 udp 10.0.2.22 51868 -> 180.215.136.181 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:59:49.751809 0.051454 udp 10.0.2.22 51868 <-> 86.100.74.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:50.743470 0.000000 udp 10.0.2.22 51868 -> 219.205.248.55 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:59:51.744932 0.058869 udp 10.0.2.22 51868 <-> 89.32.153.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:52.746271 0.000000 udp 10.0.2.22 51868 -> 87.111.51.7 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:59:53.747684 0.153677 udp 10.0.2.22 51868 <-> 76.188.30.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:54.749525 0.064433 udp 10.0.2.22 51868 <-> 82.242.39.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:55.750370 0.000000 udp 10.0.2.22 51868 -> 219.205.248.55 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:59:56.752045 0.047989 udp 10.0.2.22 51868 <-> 86.125.188.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:57.460990 0.000000 udp 10.0.2.22 51868 <- 66.41.191.140 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:59:57.743826 0.214442 udp 10.0.2.22 51868 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:58.744952 0.372967 udp 10.0.2.22 51868 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 01:59:59.746029 0.054020 udp 10.0.2.22 51868 <-> 188.173.130.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:00.748146 4.766292 udp 10.0.2.22 51868 <-> 117.226.254.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:01.749598 0.000000 udp 10.0.2.22 51868 -> 1.23.85.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:00:02.750791 0.060720 udp 10.0.2.22 51868 <-> 93.72.244.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:03.752490 0.000000 udp 10.0.2.22 51868 -> 89.132.14.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:00:04.743646 0.340037 udp 10.0.2.22 51868 <-> 220.60.160.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:05.744965 0.155554 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:06.746373 2.422473 udp 10.0.2.22 51868 <-> 221.39.55.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:07.747861 0.370030 udp 10.0.2.22 51868 <-> 180.94.163.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:08.618721 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:00:09.751139 0.320763 udp 10.0.2.22 51868 <-> 187.10.81.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:10.751865 0.534676 udp 10.0.2.22 51868 <-> 90.227.35.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:11.744026 0.427874 udp 10.0.2.22 51868 <-> 175.35.18.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:12.745289 0.222290 udp 10.0.2.22 51868 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:13.747040 0.303023 udp 10.0.2.22 51868 <-> 202.91.51.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:14.747639 0.223027 udp 10.0.2.22 51868 <-> 122.167.101.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:15.749437 0.209468 udp 10.0.2.22 51868 <-> 183.82.191.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:16.751222 0.025073 udp 10.0.2.22 51868 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:17.752331 0.352783 udp 10.0.2.22 51868 <-> 221.39.55.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:18.744031 0.000000 udp 10.0.2.22 51868 -> 70.65.248.65 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:00:19.745111 0.047539 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:20.746378 0.070936 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:21.747879 0.000000 udp 10.0.2.22 51868 -> 208.126.149.154 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:00:22.749614 0.319151 udp 10.0.2.22 51868 <-> 122.209.168.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:23.750688 0.166555 udp 10.0.2.22 51868 <-> 82.225.160.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:24.752759 0.209991 udp 10.0.2.22 51868 <-> 66.103.51.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:25.743527 0.309681 udp 10.0.2.22 51868 <-> 179.57.42.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:26.745148 0.165914 udp 10.0.2.22 51868 <-> 66.68.188.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:27.746795 0.041807 udp 10.0.2.22 51868 <-> 80.238.103.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:28.748143 0.058612 udp 10.0.2.22 51868 <-> 91.210.108.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:29.749188 0.708203 udp 10.0.2.22 51868 <-> 98.70.75.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:30.751004 0.251749 udp 10.0.2.22 51868 <-> 220.102.146.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:31.752605 0.033355 udp 10.0.2.22 51868 <-> 79.113.218.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:32.744214 0.000000 udp 10.0.2.22 51868 -> 89.77.192.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:00:33.745197 0.055144 udp 10.0.2.22 51868 <-> 62.20.124.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:34.747171 0.169050 udp 10.0.2.22 51868 <-> 66.69.28.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:35.618193 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:00:35.748061 0.347554 udp 10.0.2.22 51868 <-> 125.230.129.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:36.749497 0.524103 udp 10.0.2.22 51868 <-> 77.184.160.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:37.751139 0.029855 udp 10.0.2.22 51868 <-> 77.70.44.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:38.752108 0.121628 udp 10.0.2.22 51868 <-> 24.204.248.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:39.743518 0.000000 udp 10.0.2.22 51868 -> 68.217.244.67 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:00:40.745033 0.000000 udp 10.0.2.22 51868 -> 199.167.165.34 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:00:41.746435 0.300664 udp 10.0.2.22 51868 <-> 189.79.76.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:42.748397 0.329958 udp 10.0.2.22 51868 <-> 115.242.244.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:43.749425 1.027660 udp 10.0.2.22 51868 <-> 94.47.18.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:44.751049 0.201118 udp 10.0.2.22 51868 <-> 124.123.87.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:45.752815 0.000000 udp 10.0.2.22 51868 -> 61.231.38.154 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:00:46.744292 0.223374 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:47.745122 0.022289 udp 10.0.2.22 51868 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:48.746487 0.047188 udp 10.0.2.22 51868 <-> 62.20.193.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:49.748824 0.095848 udp 10.0.2.22 51868 <-> 178.126.183.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:50.749648 2.003141 udp 10.0.2.22 51868 -> 75.243.16.247 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:00:51.750936 0.382154 udp 10.0.2.22 51868 <-> 111.188.25.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:53.744088 0.000000 udp 10.0.2.22 51868 -> 37.55.119.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:00:54.745331 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:00:55.747201 0.000000 udp 10.0.2.22 51868 -> 79.118.192.9 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:00:56.748013 0.000000 udp 10.0.2.22 51868 -> 67.83.118.7 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:00:57.749587 0.087380 udp 10.0.2.22 51868 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:58.751092 0.304583 udp 10.0.2.22 51868 <-> 151.64.37.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:00:59.752919 0.412294 udp 10.0.2.22 51868 <-> 201.250.99.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:00.743992 0.000000 udp 10.0.2.22 51868 -> 81.226.243.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:01:01.745290 2.158340 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:02.626449 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:01:02.747010 0.000000 udp 10.0.2.22 51868 -> 87.111.51.7 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:01:04.749627 0.122525 udp 10.0.2.22 51868 <-> 92.241.136.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:05.751160 0.000000 udp 10.0.2.22 51868 -> 78.193.52.203 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:01:06.753026 1.920335 udp 10.0.2.22 51868 <-> 2.184.44.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:07.743986 0.238253 udp 10.0.2.22 51868 <-> 84.2.200.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:08.745465 0.064643 udp 10.0.2.22 51868 <-> 95.46.217.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:09.746762 0.000000 udp 10.0.2.22 51868 -> 117.222.79.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:01:10.748456 0.213400 udp 10.0.2.22 51868 <-> 97.93.25.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:11.749786 0.000000 udp 10.0.2.22 51868 -> 78.162.123.160 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:01:12.751338 0.315988 udp 10.0.2.22 51868 <-> 220.96.151.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:13.752662 0.045360 udp 10.0.2.22 51868 <-> 5.13.113.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:14.744178 1.216753 udp 10.0.2.22 51868 <-> 24.232.19.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:15.745590 0.000000 udp 10.0.2.22 51868 -> 1.172.239.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:01:16.746885 1.364515 udp 10.0.2.22 51868 <-> 186.191.29.30 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:18.749899 0.264307 udp 10.0.2.22 51868 <-> 190.208.103.70 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:19.751582 0.097786 udp 10.0.2.22 51868 <-> 178.126.183.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:20.752981 0.143118 udp 10.0.2.22 51868 <-> 67.80.216.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:21.744609 0.084784 udp 10.0.2.22 51868 <-> 62.99.40.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:22.745729 0.162026 udp 10.0.2.22 51868 <-> 174.64.165.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:23.746809 2.154037 udp 10.0.2.22 51868 <-> 23.28.66.127 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:24.748642 0.159571 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:26.751307 0.000000 udp 10.0.2.22 51868 -> 85.130.45.29 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:01:27.752973 0.000000 udp 10.0.2.22 51868 -> 87.20.151.163 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:01:28.744245 0.367910 udp 10.0.2.22 51868 <-> 60.40.218.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:29.625920 0.000165 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:01:29.745790 3.319124 udp 10.0.2.22 51868 <-> 201.26.213.123 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:30.747020 0.218807 udp 10.0.2.22 51868 <-> 50.30.116.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:31.749079 0.336857 udp 10.0.2.22 51868 <-> 219.124.195.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:33.751662 0.000000 udp 10.0.2.22 51868 -> 14.97.184.44 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:01:34.743182 0.144819 udp 10.0.2.22 51868 <-> 31.70.5.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:35.744547 0.405849 udp 10.0.2.22 51868 <-> 175.215.45.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:36.745948 0.074261 udp 10.0.2.22 51868 <-> 85.152.248.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:37.747725 0.062251 udp 10.0.2.22 51868 <-> 95.42.254.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:38.748658 0.000000 udp 10.0.2.22 51868 -> 180.19.158.116 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:01:39.750476 0.051847 udp 10.0.2.22 51868 <-> 46.214.189.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:40.751286 0.185936 udp 10.0.2.22 51868 <-> 123.201.53.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:41.743455 0.172371 udp 10.0.2.22 51868 <-> 69.244.18.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:42.744774 0.026815 udp 10.0.2.22 51868 <-> 213.109.121.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:43.746027 0.054411 udp 10.0.2.22 51868 <-> 90.230.252.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:44.747235 1.001496 udp 10.0.2.22 51868 <-> 180.147.116.143 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:46.750053 0.771429 udp 10.0.2.22 51868 <-> 117.200.215.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:47.751582 0.152786 udp 10.0.2.22 51868 <-> 67.251.77.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:48.743113 0.940088 udp 10.0.2.22 51868 <-> 91.240.43.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:49.744734 0.626127 udp 10.0.2.22 51868 <-> 77.184.160.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:50.745959 0.000000 udp 10.0.2.22 51868 -> 14.97.126.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:01:51.747644 0.000000 udp 10.0.2.22 51868 -> 63.147.47.73 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:01:52.748718 0.000000 udp 10.0.2.22 51868 -> 5.15.146.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:01:53.750498 0.000000 udp 10.0.2.22 51868 -> 78.8.65.60 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:01:54.751777 0.146039 udp 10.0.2.22 51868 <-> 70.15.122.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:55.742859 0.000000 udp 10.0.2.22 51868 -> 177.107.236.39 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:01:56.624206 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:01:56.744651 0.151537 udp 10.0.2.22 51868 <-> 24.231.152.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:57.746234 0.147330 udp 10.0.2.22 51868 <-> 178.126.183.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:58.747323 0.139705 udp 10.0.2.22 51868 <-> 67.80.216.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:01:59.749085 3.130096 udp 10.0.2.22 51868 <-> 68.39.158.43 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:00.750559 0.000000 udp 10.0.2.22 51868 -> 180.215.178.38 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:02:01.751882 0.124198 udp 10.0.2.22 51868 <-> 84.228.222.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:03.744566 0.143268 udp 10.0.2.22 51868 <-> 67.85.150.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:04.746357 0.125734 udp 10.0.2.22 51868 <-> 87.5.121.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:05.747186 0.372501 udp 10.0.2.22 51868 <-> 60.40.218.226 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:06.748627 0.329184 udp 10.0.2.22 51868 <-> 110.134.54.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:07.750698 0.160363 udp 10.0.2.22 51868 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:08.751505 0.045977 udp 10.0.2.22 51868 <-> 213.222.46.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:09.743238 0.104170 udp 10.0.2.22 51868 <-> 85.56.52.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:10.744941 0.325901 udp 10.0.2.22 51868 <-> 180.56.125.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:11.746272 0.432700 udp 10.0.2.22 51868 <-> 88.37.113.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:12.747328 0.079649 udp 10.0.2.22 51868 <-> 90.23.92.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:13.750897 0.187726 udp 10.0.2.22 51868 <-> 210.89.38.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:14.750594 0.592543 udp 10.0.2.22 51868 <-> 83.230.237.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:15.751768 0.051371 udp 10.0.2.22 51868 <-> 89.34.99.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:16.743671 0.051398 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:17.745082 0.062096 udp 10.0.2.22 51868 <-> 78.136.117.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:18.745938 0.333864 udp 10.0.2.22 51868 <-> 14.97.60.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:19.747413 0.403133 udp 10.0.2.22 51868 <-> 88.48.221.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:20.749328 0.000000 udp 10.0.2.22 51868 -> 24.59.225.47 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:02:21.750758 0.125691 udp 10.0.2.22 51868 <-> 79.132.162.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:22.752284 1.040698 udp 10.0.2.22 51868 <-> 5.14.33.148 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:23.623096 0.000121 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:02:24.745159 0.287334 udp 10.0.2.22 51868 <-> 181.177.210.16 16464 CON 0 0 2 528 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:25.746597 0.347309 udp 10.0.2.22 51868 <-> 125.1.93.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:26.747393 0.167426 udp 10.0.2.22 51868 <-> 72.190.7.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:27.749563 0.046949 udp 10.0.2.22 51868 <-> 212.83.78.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:28.750268 0.280139 udp 10.0.2.22 51868 <-> 103.250.17.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:29.752296 0.065110 udp 10.0.2.22 51868 <-> 77.179.32.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:30.743611 0.497176 udp 10.0.2.22 51868 <-> 76.87.85.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:31.745021 0.117031 udp 10.0.2.22 51868 <-> 157.252.96.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:32.746385 0.150035 udp 10.0.2.22 51868 <-> 71.71.254.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:33.747636 0.000000 udp 10.0.2.22 51868 -> 62.233.160.137 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:02:34.749361 0.155719 udp 10.0.2.22 51868 <-> 69.250.40.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:35.750550 3.246942 udp 10.0.2.22 51868 <-> 190.107.103.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:36.752231 0.065373 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:37.743884 0.305700 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:38.745138 0.154827 udp 10.0.2.22 51868 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:39.746784 0.425155 udp 10.0.2.22 51868 <-> 109.91.102.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:40.747872 0.000000 udp 10.0.2.22 51868 -> 71.221.79.146 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:02:41.749216 0.164663 udp 10.0.2.22 51868 <-> 50.80.10.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:42.750632 0.413049 udp 10.0.2.22 51868 <-> 24.123.44.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:43.752415 0.176601 udp 10.0.2.22 51868 <-> 184.49.10.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:44.743236 0.233141 udp 10.0.2.22 51868 <-> 158.108.48.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:02:46.746311 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:02:47.747694 0.000100 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:02:47.747794 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:02:48.749193 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:02:49.751134 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:02:50.752491 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:02:51.623752 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:02:51.743481 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:02:52.745153 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:02:53.746814 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:02:54.748316 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:02:55.749493 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:02:56.750654 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:02:57.752181 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:02:58.743907 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:02:59.745201 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:03:00.746640 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:03:01.747827 3.996314 udp 10.0.2.22 51868 -> 213.231.137.6 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:03:02.749397 4.997765 udp 10.0.2.22 51868 <-> 61.223.95.11 16464 CON 0 0 4 1064 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:03.751360 0.402233 udp 10.0.2.22 51868 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:04.752666 0.087933 udp 10.0.2.22 51868 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:08.110676 0.000000 udp 10.0.2.22 51868 <- 61.223.95.11 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:03:08.747939 0.023572 udp 10.0.2.22 51868 <-> 194.94.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:09.749859 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:03:10.751387 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:03:11.752360 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:03:12.744104 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:03:14.746471 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:03:15.748384 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:03:16.749345 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:03:17.750741 0.000000 udp 10.0.2.22 51868 -> 95.39.162.109 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:03:18.752294 1.110912 udp 10.0.2.22 51868 <-> 84.90.96.164 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:19.623724 0.000151 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:03:20.745680 0.067981 udp 10.0.2.22 51868 <-> 178.149.208.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:21.746674 0.046942 udp 10.0.2.22 51868 <-> 84.40.72.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:22.748563 0.958414 udp 10.0.2.22 51868 <-> 109.91.102.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:23.749619 0.000000 udp 10.0.2.22 51868 -> 194.94.79.240 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:03:24.751479 0.291670 udp 10.0.2.22 51868 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:25.752354 0.127347 udp 10.0.2.22 51868 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:26.743989 4.005682 udp 10.0.2.22 51868 -> 46.241.233.237 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:03:27.745229 0.000000 udp 10.0.2.22 51868 -> 81.147.68.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:03:28.746656 0.274594 udp 10.0.2.22 51868 <-> 81.190.215.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:29.748020 0.213027 udp 10.0.2.22 51868 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:31.751124 0.295427 udp 10.0.2.22 51868 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:32.752293 0.392535 udp 10.0.2.22 51868 <-> 61.223.95.11 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:33.743792 0.000000 udp 10.0.2.22 51868 -> 216.115.131.145 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:03:34.746000 2.083253 udp 10.0.2.22 51868 <-> 84.90.96.164 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:35.746618 3.135010 udp 10.0.2.22 51868 <-> 178.149.208.176 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:37.749778 0.087517 udp 10.0.2.22 51868 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:39.752612 0.152233 udp 10.0.2.22 51868 <-> 216.115.131.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:40.744263 0.237896 udp 10.0.2.22 51868 <-> 81.190.215.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:41.745217 0.412867 udp 10.0.2.22 51868 <-> 177.59.72.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:42.747196 0.000000 udp 10.0.2.22 51868 -> 2.37.10.173 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:03:43.748636 2.373975 udp 10.0.2.22 51868 <-> 190.74.241.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:44.749828 0.211165 udp 10.0.2.22 51868 <-> 189.192.237.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:45.751139 0.355271 udp 10.0.2.22 51868 <-> 122.121.39.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:46.622830 0.000148 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:03:46.752717 0.314737 udp 10.0.2.22 51868 <-> 81.191.116.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:47.744199 0.320013 udp 10.0.2.22 51868 <-> 93.184.81.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:48.745723 0.075781 udp 10.0.2.22 51868 <-> 85.86.78.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:49.747351 0.000000 udp 10.0.2.22 51868 -> 206.132.61.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:03:50.748697 0.000000 udp 10.0.2.22 51868 -> 72.26.130.61 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:03:51.749988 0.042706 udp 10.0.2.22 51868 <-> 80.3.188.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:52.751080 2.994859 udp 10.0.2.22 51868 -> 87.14.65.142 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:03:53.752999 0.380755 udp 10.0.2.22 51868 <-> 113.252.190.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:54.744197 0.049303 udp 10.0.2.22 51868 <-> 79.173.36.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:56.747253 3.004337 udp 10.0.2.22 51868 <-> 72.26.130.61 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:03:57.748607 0.000000 udp 10.0.2.22 51868 -> 68.48.58.156 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:03:58.749937 0.042948 udp 10.0.2.22 51868 <-> 80.3.188.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:00.752525 0.355745 udp 10.0.2.22 51868 <-> 93.184.81.132 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:01.744605 0.369759 udp 10.0.2.22 51868 <-> 220.127.161.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:02.745482 0.149602 udp 10.0.2.22 51868 <-> 67.61.188.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:03.747013 0.141532 udp 10.0.2.22 51868 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:04.748675 2.226796 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:07.743302 0.138270 udp 10.0.2.22 51868 <-> 66.108.161.151 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:08.744497 0.034962 udp 10.0.2.22 51868 <-> 151.100.97.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:09.745832 0.239855 udp 10.0.2.22 51868 <-> 50.55.237.122 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:10.747464 1.222388 udp 10.0.2.22 51868 <-> 200.93.52.205 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:12.749932 0.028288 udp 10.0.2.22 51868 <-> 82.192.233.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:13.252827 3.002444 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 02:04:13.621018 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:04:13.751391 0.143460 udp 10.0.2.22 51868 <-> 71.77.141.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:14.743369 0.108826 udp 10.0.2.22 51868 <-> 94.196.143.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:15.744082 0.000000 udp 10.0.2.22 51868 -> 111.254.125.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:04:16.746157 0.576982 udp 10.0.2.22 51868 <-> 59.94.122.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:17.747373 0.061141 udp 10.0.2.22 51868 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:18.748537 0.199916 udp 10.0.2.22 51868 <-> 76.172.91.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:19.750077 0.095518 udp 10.0.2.22 51868 <-> 87.222.107.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:20.261288 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:04:20.751628 0.148123 udp 10.0.2.22 51868 <-> 98.229.185.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:21.742727 1.486441 udp 10.0.2.22 51868 <-> 91.243.161.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:22.744431 0.000000 udp 10.0.2.22 51868 -> 14.99.127.48 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:04:23.746022 4.996931 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:04:24.747711 0.000076 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:04:24.747787 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:04:26.750434 0.042076 udp 10.0.2.22 51868 <-> 147.156.23.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:28.262074 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:04:29.744700 0.032862 udp 10.0.2.22 51868 <-> 94.231.32.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:30.746334 0.067902 udp 10.0.2.22 51868 <-> 88.174.60.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:31.747257 0.157359 udp 10.0.2.22 51868 <-> 68.117.189.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:32.748567 0.000000 udp 10.0.2.22 51868 -> 86.121.160.230 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:04:33.750766 0.279449 udp 10.0.2.22 51868 <-> 58.8.166.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:34.752093 0.682932 udp 10.0.2.22 51868 <-> 1.23.85.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:35.743430 0.165382 udp 10.0.2.22 51868 <-> 98.240.160.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:36.744359 0.165157 udp 10.0.2.22 51868 <-> 68.102.125.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:37.746135 0.000000 udp 10.0.2.22 51868 -> 67.78.29.162 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:04:38.747216 2.100826 udp 10.0.2.22 51868 <-> 95.91.31.14 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:39.749468 4.071230 udp 10.0.2.22 51868 <-> 109.60.31.97 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:40.620211 0.000099 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:04:41.752198 0.527576 udp 10.0.2.22 51868 <-> 60.231.84.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:44.265277 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:04:44.746175 0.065583 udp 10.0.2.22 51868 <-> 93.100.170.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:45.747362 0.064801 udp 10.0.2.22 51868 <-> 109.60.31.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:46.749061 0.352634 udp 10.0.2.22 51868 <-> 111.254.125.242 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:47.750574 0.000000 udp 10.0.2.22 51868 -> 192.95.207.73 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:04:48.752146 0.454638 udp 10.0.2.22 51868 <-> 60.231.84.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:49.743583 0.000000 udp 10.0.2.22 51868 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:04:50.744865 0.126272 udp 10.0.2.22 51868 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:51.746260 0.164658 udp 10.0.2.22 51868 <-> 68.102.16.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:52.747310 0.039933 udp 10.0.2.22 51868 <-> 46.237.64.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:53.749128 4.049252 udp 10.0.2.22 51868 <-> 95.91.31.14 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:54.751010 0.054671 udp 10.0.2.22 51868 <-> 109.60.31.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:55.751616 0.000000 udp 10.0.2.22 51868 -> 192.95.207.73 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:04:56.743181 0.000000 udp 10.0.2.22 51868 -> 67.78.29.162 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:04:58.746629 0.177084 udp 10.0.2.22 51868 <-> 206.253.49.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:04:59.747618 0.173280 udp 10.0.2.22 51868 <-> 70.115.72.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:00.749059 0.288800 udp 10.0.2.22 51868 <-> 200.104.188.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:01.750217 0.000000 udp 10.0.2.22 51868 -> 203.218.171.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:05:02.752308 0.295944 udp 10.0.2.22 51868 <-> 58.11.136.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:03.743674 0.000000 udp 10.0.2.22 51868 -> 188.214.34.53 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:05:04.745082 1.344882 udp 10.0.2.22 51868 <-> 218.250.127.56 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:06.748125 0.000000 udp 10.0.2.22 51868 -> 184.89.182.202 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:05:07.619232 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:05:07.749242 0.255198 udp 10.0.2.22 51868 <-> 49.238.38.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:08.750970 0.157131 udp 10.0.2.22 51868 <-> 68.11.163.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:09.751831 0.347316 udp 10.0.2.22 51868 <-> 111.253.66.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:10.743412 0.156328 udp 10.0.2.22 51868 <-> 68.117.189.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:11.745185 0.000000 udp 10.0.2.22 51868 -> 123.201.45.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:05:12.746583 0.000000 udp 10.0.2.22 51868 -> 114.36.70.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:05:13.748185 0.321845 udp 10.0.2.22 51868 <-> 210.113.35.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:14.749080 0.000000 udp 10.0.2.22 51868 -> 95.125.8.63 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:05:15.751111 0.000000 udp 10.0.2.22 51868 -> 95.247.105.32 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:05:16.271806 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:05:16.751851 0.335207 udp 10.0.2.22 51868 <-> 14.97.18.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:17.743721 1.077512 udp 10.0.2.22 51868 <-> 210.115.47.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:18.744700 0.323839 udp 10.0.2.22 51868 <-> 114.40.25.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:19.746888 1.226475 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:21.749486 2.305671 udp 10.0.2.22 51868 <-> 83.9.100.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:22.750702 0.308058 udp 10.0.2.22 51868 <-> 49.249.53.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:23.751869 0.053922 udp 10.0.2.22 51868 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:24.743917 0.032850 udp 10.0.2.22 51868 <-> 188.254.174.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:25.745209 0.053591 udp 10.0.2.22 51868 <-> 79.113.103.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:26.746302 0.000000 udp 10.0.2.22 51868 -> 14.99.58.98 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:05:27.748160 0.285520 udp 10.0.2.22 51868 <-> 175.177.220.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:28.749426 0.156253 udp 10.0.2.22 51868 <-> 68.11.235.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:29.751020 0.352070 udp 10.0.2.22 51868 <-> 211.76.37.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:30.752603 0.229887 udp 10.0.2.22 51868 -> 122.174.82.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:05:30.982490 0.000000 icmp 122.174.82.16 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 02:05:31.744066 0.173845 udp 10.0.2.22 51868 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:32.745444 0.126943 udp 10.0.2.22 51868 <-> 89.77.192.242 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:33.746717 0.066128 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:34.617623 0.000092 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:05:34.748320 0.433777 udp 10.0.2.22 51868 <-> 115.244.230.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:35.749570 0.143497 udp 10.0.2.22 51868 <-> 203.192.207.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:36.750662 0.413215 udp 10.0.2.22 51868 <-> 211.41.207.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:37.752271 0.161958 udp 10.0.2.22 51868 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:38.743566 0.000000 udp 10.0.2.22 51868 -> 188.27.218.244 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:05:39.744899 0.665816 udp 10.0.2.22 51868 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:40.747180 0.281921 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:41.748366 0.022365 udp 10.0.2.22 51868 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:42.749431 0.052485 udp 10.0.2.22 51868 <-> 46.214.189.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:43.750799 0.027050 udp 10.0.2.22 51868 <-> 78.193.52.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:44.752032 0.304620 udp 10.0.2.22 51868 <-> 59.147.239.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:45.743654 0.000000 udp 10.0.2.22 51868 -> 151.73.140.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:05:46.745216 1.449999 udp 10.0.2.22 51868 <-> 77.211.42.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:47.746426 0.000000 udp 10.0.2.22 51868 -> 117.222.179.170 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:05:48.748161 0.062688 udp 10.0.2.22 51868 <-> 90.23.92.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:49.750005 0.027071 udp 10.0.2.22 51868 <-> 84.26.131.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:50.751273 0.047306 udp 10.0.2.22 51868 <-> 46.237.118.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:51.752346 0.381517 udp 10.0.2.22 51868 <-> 222.166.66.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:52.744273 0.156651 udp 10.0.2.22 51868 <-> 24.63.83.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:53.745263 0.189848 udp 10.0.2.22 51868 <-> 178.79.11.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:54.746539 4.005666 udp 10.0.2.22 51868 -> 69.249.42.35 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:05:55.748247 2.002904 udp 10.0.2.22 51868 <-> 183.179.33.29 16464 CON 0 0 5 1954 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:05:59.744073 0.055476 udp 10.0.2.22 51868 <-> 91.211.110.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:00.745302 0.338200 udp 10.0.2.22 51868 <-> 36.232.204.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:01.626708 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:06:01.747229 0.179623 udp 10.0.2.22 51868 <-> 178.79.11.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:02.748065 0.256521 udp 10.0.2.22 51868 <-> 177.107.236.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:03.750092 0.000000 udp 10.0.2.22 51868 -> 188.27.204.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:06:04.750822 0.051047 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:05.752965 0.146150 udp 10.0.2.22 51868 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:06.744242 0.177233 udp 10.0.2.22 51868 <-> 88.37.113.50 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:07.745252 0.000000 udp 10.0.2.22 51868 -> 68.150.142.201 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:06:08.746815 0.304985 udp 10.0.2.22 51868 <-> 182.235.120.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:09.748165 0.000000 udp 10.0.2.22 51868 -> 5.14.170.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:06:10.749843 0.159216 udp 10.0.2.22 51868 <-> 93.49.20.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:11.750872 0.339012 udp 10.0.2.22 51868 <-> 123.205.144.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:12.752880 0.301782 udp 10.0.2.22 51868 <-> 69.180.10.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:13.744269 0.587865 udp 10.0.2.22 51868 <-> 117.217.80.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:14.745606 0.060719 udp 10.0.2.22 51868 <-> 82.137.57.187 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:15.747105 0.807283 udp 10.0.2.22 51868 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:16.748740 0.221068 udp 10.0.2.22 51868 <-> 103.250.139.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:17.749689 0.188806 udp 10.0.2.22 51868 <-> 24.139.142.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:18.751523 0.000000 udp 10.0.2.22 51868 -> 178.129.93.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:06:19.752828 0.310713 udp 10.0.2.22 51868 <-> 150.162.192.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:20.743994 0.352703 udp 10.0.2.22 51868 <-> 114.40.25.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:21.745252 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:06:22.746930 0.000000 udp 10.0.2.22 51868 -> 87.208.50.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:06:23.748699 0.232835 udp 10.0.2.22 51868 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:24.750236 0.308782 udp 10.0.2.22 51868 <-> 116.203.199.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:25.751416 0.208297 udp 10.0.2.22 51868 -> 69.105.65.166 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:06:25.959713 0.000000 icmp 69.105.65.166 0x0303 -> 10.0.2.22 0x5040 URP 192 1 70 flow=Background 1970/01/01 02:06:26.752882 0.140816 udp 10.0.2.22 51868 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:27.744256 0.046645 udp 10.0.2.22 51868 <-> 95.77.177.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:28.625414 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:06:28.745721 0.396411 udp 10.0.2.22 51868 <-> 119.24.148.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:29.747340 0.000000 udp 10.0.2.22 51868 -> 117.196.231.61 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:06:30.748378 0.065963 udp 10.0.2.22 51868 <-> 82.247.203.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:31.750170 0.221760 udp 10.0.2.22 51868 <-> 223.239.201.235 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:32.751115 0.316031 udp 10.0.2.22 51868 <-> 180.147.116.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:33.752772 0.347264 udp 10.0.2.22 51868 <-> 198.179.118.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:34.744017 1.476087 udp 10.0.2.22 51868 <-> 190.204.12.77 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:35.745949 0.030793 udp 10.0.2.22 51868 <-> 77.81.147.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:36.747103 0.136628 udp 10.0.2.22 51868 <-> 72.226.86.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:37.748892 0.000000 udp 10.0.2.22 51868 -> 213.43.145.50 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:06:38.750130 0.175615 udp 10.0.2.22 51868 <-> 63.142.75.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:39.751574 0.000000 udp 10.0.2.22 51868 -> 36.236.22.90 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:06:40.742796 1.157464 udp 10.0.2.22 51868 <-> 71.61.202.210 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:42.745859 0.579177 udp 10.0.2.22 51868 <-> 177.80.161.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:43.747000 3.513934 udp 10.0.2.22 51868 <-> 125.209.132.171 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:45.750042 0.160466 udp 10.0.2.22 51868 <-> 66.131.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:47.743323 0.052706 udp 10.0.2.22 51868 <-> 78.225.90.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:48.744049 0.028244 udp 10.0.2.22 51868 <-> 80.218.193.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:49.745977 0.226180 udp 10.0.2.22 51868 <-> 142.129.132.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:50.747677 0.167572 udp 10.0.2.22 51868 <-> 50.165.123.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:51.748654 0.231067 udp 10.0.2.22 51868 <-> 81.190.215.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:52.750044 0.345724 udp 10.0.2.22 51868 <-> 180.176.22.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:53.751674 0.000000 udp 10.0.2.22 51868 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:06:54.742893 0.220301 udp 10.0.2.22 51868 <-> 87.19.151.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:55.623929 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:06:55.744578 0.000000 udp 10.0.2.22 51868 -> 117.222.99.243 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:06:56.746145 0.348810 udp 10.0.2.22 51868 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:57.747326 0.331819 udp 10.0.2.22 51868 <-> 117.194.248.178 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:06:58.749040 0.000000 udp 10.0.2.22 51868 -> 180.215.213.84 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:06:59.750463 1.059968 udp 10.0.2.22 51868 <-> 89.32.153.43 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:07:01.743284 0.330147 udp 10.0.2.22 51868 <-> 183.96.40.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:07:02.744346 0.335601 udp 10.0.2.22 51868 <-> 115.242.26.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:07:03.746263 0.332833 udp 10.0.2.22 51868 <-> 49.249.11.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:07:04.747530 0.295293 udp 10.0.2.22 51868 <-> 61.74.206.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:07:05.748742 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:06.750314 0.146262 udp 10.0.2.22 51868 <-> 24.159.153.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:07:07.751720 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:08.743015 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:09.744857 0.123239 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:07:10.745926 0.075546 udp 10.0.2.22 51868 <-> 81.190.215.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:07:11.747271 0.141900 udp 10.0.2.22 51868 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:07:12.748580 0.341950 udp 10.0.2.22 51868 <-> 218.226.32.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:07:13.750175 0.000000 udp 10.0.2.22 51868 -> 195.101.91.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:14.751796 0.356848 udp 10.0.2.22 51868 <-> 186.191.29.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:07:15.743031 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:16.744633 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:17.745871 0.155589 udp 10.0.2.22 51868 <-> 95.250.98.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:07:18.747781 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:19.748804 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:20.750646 0.000121 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:20.750767 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:07:21.752105 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:22.622923 0.000115 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:07:22.743351 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:23.744545 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:24.746155 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:25.748138 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:26.748722 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:27.750772 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:28.752201 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:29.743395 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:30.744868 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:31.746422 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:33.748869 0.995213 udp 10.0.2.22 51868 <-> 14.97.160.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:07:34.079933 0.011571 udp 10.0.2.22 60000 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 02:07:34.091777 0.000000 udp 10.0.2.22 60001 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:34.750922 0.241408 udp 10.0.2.22 51868 <-> 81.190.215.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:07:35.752290 4.996774 udp 10.0.2.22 51868 <-> 24.89.222.123 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:07:36.743145 0.000000 udp 10.0.2.22 51868 -> 211.49.134.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:37.745099 0.050293 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:07:38.746635 0.000000 udp 10.0.2.22 51868 -> 116.202.23.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:39.747514 0.142532 udp 10.0.2.22 51868 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:07:41.012958 0.000000 udp 10.0.2.22 51868 <- 24.89.222.123 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:41.750433 0.155356 udp 10.0.2.22 51868 <-> 68.11.235.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:07:43.743605 4.072417 udp 10.0.2.22 51868 <-> 109.163.149.97 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:07:44.745082 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:45.746334 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:46.748125 0.000095 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:46.748220 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:07:49.622264 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:07:49.752328 0.150412 udp 10.0.2.22 51868 <-> 24.89.222.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:07:50.743504 0.336340 udp 10.0.2.22 51868 <-> 61.62.169.19 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:07:51.745037 0.353231 udp 10.0.2.22 51868 <-> 186.191.29.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:07:52.746284 1.834478 udp 10.0.2.22 51868 <-> 139.0.190.28 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:07:53.748223 0.035318 udp 10.0.2.22 51868 <-> 151.100.97.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:07:54.749533 0.000000 udp 10.0.2.22 51868 -> 208.101.81.78 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:55.750541 0.434763 udp 10.0.2.22 51868 <-> 189.103.208.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:07:56.752209 0.135125 udp 10.0.2.22 51868 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:07:57.743340 0.158322 udp 10.0.2.22 51868 <-> 69.138.192.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:07:58.744720 0.000000 udp 10.0.2.22 51868 -> 220.225.247.118 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:07:59.746551 0.325908 udp 10.0.2.22 51868 <-> 118.169.110.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:00.747827 0.000000 udp 10.0.2.22 51868 -> 89.102.235.54 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:08:01.749257 3.424590 udp 10.0.2.22 51868 <-> 72.242.83.72 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:02.750935 0.357793 udp 10.0.2.22 51868 <-> 49.159.227.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:04.743591 0.471750 udp 10.0.2.22 51868 <-> 117.208.11.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:05.745165 0.000000 udp 10.0.2.22 51868 -> 68.192.3.101 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:08:06.746709 0.046888 udp 10.0.2.22 51868 <-> 88.196.202.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:07.748358 0.000000 udp 10.0.2.22 51868 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:08:08.749289 0.266178 udp 10.0.2.22 51868 <-> 181.166.240.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:09.750639 0.831251 udp 10.0.2.22 51868 <-> 122.151.71.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:10.752699 0.000000 udp 10.0.2.22 51868 -> 220.225.247.118 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:08:11.743961 0.015416 udp 10.0.2.22 51868 <-> 89.102.235.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:12.745141 0.345239 udp 10.0.2.22 51868 <-> 36.232.204.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:13.746877 0.324689 udp 10.0.2.22 51868 <-> 88.72.192.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:14.748010 3.004037 udp 10.0.2.22 51868 -> 50.160.143.166 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:08:15.749763 0.323685 udp 10.0.2.22 51868 <-> 60.238.176.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:16.620603 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:08:16.751230 0.000000 udp 10.0.2.22 51868 -> 62.221.143.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:08:18.743637 0.166261 udp 10.0.2.22 51868 <-> 74.192.176.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:19.744885 0.666948 udp 10.0.2.22 51868 <-> 108.230.246.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:20.746408 0.000000 udp 10.0.2.22 51868 -> 58.105.43.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:08:21.748429 0.146989 udp 10.0.2.22 51868 <-> 68.194.18.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:22.749831 0.000000 udp 10.0.2.22 51868 -> 86.122.145.73 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:08:23.751206 0.160942 udp 10.0.2.22 51868 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:24.752211 0.000000 udp 10.0.2.22 51868 -> 108.176.217.52 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:08:25.744257 0.000000 udp 10.0.2.22 51868 -> 124.171.169.86 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:08:26.745105 0.159128 udp 10.0.2.22 51868 <-> 24.59.225.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:27.746873 0.170080 udp 10.0.2.22 51868 <-> 178.25.74.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:28.748328 0.363670 udp 10.0.2.22 51868 <-> 111.242.5.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:29.749425 0.000000 udp 10.0.2.22 51868 -> 178.254.239.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:08:30.751388 0.147148 udp 10.0.2.22 51868 <-> 24.209.250.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:31.752173 0.186827 udp 10.0.2.22 51868 <-> 190.141.88.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:32.744360 0.337636 udp 10.0.2.22 51868 <-> 114.27.79.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:33.745150 0.221753 udp 10.0.2.22 51868 <-> 71.197.74.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:34.747005 0.000000 udp 10.0.2.22 51868 -> 2.184.44.205 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:08:35.748587 0.266331 udp 10.0.2.22 51868 <-> 181.165.238.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:36.749593 0.000000 udp 10.0.2.22 51868 -> 88.229.127.189 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:08:37.751351 0.233110 udp 10.0.2.22 51868 <-> 158.108.48.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:38.752411 0.195888 udp 10.0.2.22 51868 <-> 71.227.148.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:39.743733 0.149413 udp 10.0.2.22 51868 <-> 74.216.190.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:40.745201 0.344140 udp 10.0.2.22 51868 <-> 114.25.138.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:41.746972 0.000000 udp 10.0.2.22 51868 -> 78.96.164.201 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:08:42.748589 0.205075 udp 10.0.2.22 51868 <-> 123.237.104.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:43.619916 0.000132 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:08:43.749767 1.001798 udp 10.0.2.22 51868 <-> 68.84.213.147 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:45.752333 0.153470 udp 10.0.2.22 51868 <-> 173.20.220.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:46.744371 0.293699 udp 10.0.2.22 51868 <-> 184.167.18.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:47.745319 0.084220 udp 10.0.2.22 51868 <-> 79.165.97.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:48.746641 0.000000 udp 10.0.2.22 51868 -> 122.151.71.119 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:08:49.748533 0.000000 udp 10.0.2.22 51868 -> 178.42.72.128 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:08:50.750182 0.142112 udp 10.0.2.22 51868 <-> 23.28.66.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:51.751408 0.059719 udp 10.0.2.22 51868 <-> 85.66.114.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:52.752957 0.119346 udp 10.0.2.22 51868 <-> 84.225.79.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:53.744334 0.144058 udp 10.0.2.22 51868 <-> 70.44.250.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:54.745737 2.002404 udp 10.0.2.22 51868 -> 108.14.188.30 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:08:55.747528 0.063678 udp 10.0.2.22 51868 <-> 80.164.97.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:08:57.750204 0.000000 udp 10.0.2.22 51868 -> 62.240.163.54 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:08:58.751160 0.000000 udp 10.0.2.22 51868 -> 98.215.30.230 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:08:59.752879 1.003269 udp 10.0.2.22 51868 <-> 212.59.229.78 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:01.745550 0.159447 udp 10.0.2.22 51868 <-> 174.101.11.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:02.746828 0.141063 udp 10.0.2.22 51868 <-> 70.80.21.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:03.748879 0.034339 udp 10.0.2.22 51868 <-> 151.100.92.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:04.749656 0.000000 udp 10.0.2.22 51868 -> 114.36.70.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:09:05.751693 0.327292 udp 10.0.2.22 51868 <-> 220.92.174.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:06.752526 1.134314 udp 10.0.2.22 51868 <-> 71.75.119.96 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:08.745411 0.042392 udp 10.0.2.22 51868 <-> 89.216.146.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:09.747046 0.265209 udp 10.0.2.22 51868 <-> 90.232.194.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:10.618560 0.000121 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:09:10.748404 0.039670 udp 10.0.2.22 51868 <-> 5.15.146.41 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:11.750335 0.000000 udp 10.0.2.22 51868 -> 81.147.68.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:09:12.751377 0.132156 udp 10.0.2.22 51868 <-> 72.241.245.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:13.742565 0.148184 udp 10.0.2.22 51868 <-> 76.179.191.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:14.744686 0.169413 udp 10.0.2.22 51868 <-> 98.243.242.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:15.745807 0.036065 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:16.747416 0.000000 udp 10.0.2.22 51868 -> 95.223.45.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:09:17.749079 0.000000 udp 10.0.2.22 51868 -> 116.202.23.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:09:18.750170 0.196433 udp 10.0.2.22 51868 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:19.751873 0.145232 udp 10.0.2.22 51868 <-> 75.185.186.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:20.742748 2.294047 udp 10.0.2.22 51868 <-> 179.216.199.28 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:21.744248 0.000000 udp 10.0.2.22 51868 -> 74.216.190.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:09:23.747589 0.103596 udp 10.0.2.22 51868 <-> 79.21.217.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:24.748404 0.000000 udp 10.0.2.22 51868 -> 124.123.92.158 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:09:25.750391 0.648689 udp 10.0.2.22 51868 <-> 117.214.218.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:26.751227 0.419525 udp 10.0.2.22 51868 <-> 188.6.67.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:27.743142 0.000000 udp 10.0.2.22 51868 -> 115.240.63.115 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:09:28.744133 0.383110 udp 10.0.2.22 51868 <-> 1.232.66.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:29.745952 0.034300 udp 10.0.2.22 51868 <-> 84.26.131.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:30.746990 0.154843 udp 10.0.2.22 51868 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:31.749110 0.311473 udp 10.0.2.22 51868 <-> 61.4.170.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:32.750441 0.268267 udp 10.0.2.22 51868 <-> 96.2.150.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:32.978230 0.000000 udp 10.0.2.22 51868 <- 115.240.63.115 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:09:33.751478 0.055289 udp 10.0.2.22 51868 <-> 94.53.96.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:34.742770 0.133471 udp 10.0.2.22 51868 <-> 65.96.181.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:35.744675 0.022914 udp 10.0.2.22 51868 <-> 83.80.245.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:36.746227 0.055239 udp 10.0.2.22 51868 <-> 188.123.202.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:37.627349 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:09:37.747205 0.319757 udp 10.0.2.22 51868 <-> 219.210.12.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:38.749009 0.137232 udp 10.0.2.22 51868 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:39.750385 4.154684 udp 10.0.2.22 51868 <-> 76.16.13.14 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:40.751459 0.515328 udp 10.0.2.22 51868 <-> 111.91.82.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:41.743188 0.145429 udp 10.0.2.22 51868 <-> 24.193.20.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:42.744741 0.163214 udp 10.0.2.22 51868 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:44.747168 0.219603 udp 10.0.2.22 51868 <-> 180.151.28.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:45.749167 2.171425 udp 10.0.2.22 51868 <-> 98.27.139.65 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:46.750560 0.088126 udp 10.0.2.22 51868 <-> 84.125.195.170 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:48.743242 0.353733 udp 10.0.2.22 51868 <-> 146.83.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:49.744310 0.879399 udp 10.0.2.22 51868 <-> 27.4.9.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:50.745858 0.000000 udp 10.0.2.22 51868 -> 36.232.204.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:09:51.747179 1.049201 udp 10.0.2.22 51868 <-> 84.238.229.190 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:53.750507 4.171040 udp 10.0.2.22 51868 <-> 76.85.171.149 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:55.742938 0.000000 udp 10.0.2.22 51868 -> 188.219.126.218 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:09:56.744461 0.434296 udp 10.0.2.22 51868 <-> 111.254.48.188 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:58.747781 3.003908 udp 10.0.2.22 51868 <-> 27.142.3.108 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:09:59.748690 0.174744 udp 10.0.2.22 51868 <-> 76.85.171.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:00.750958 3.129503 udp 10.0.2.22 51868 <-> 76.116.162.197 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:02.743169 0.028616 udp 10.0.2.22 51868 <-> 94.155.231.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:04.626113 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:10:04.746066 0.130723 udp 10.0.2.22 51868 <-> 84.238.229.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:05.747314 0.000000 udp 10.0.2.22 51868 -> 36.232.204.18 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:10:06.749035 0.406988 udp 10.0.2.22 51868 <-> 111.254.48.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:07.750191 0.175738 udp 10.0.2.22 51868 <-> 76.85.171.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:08.751931 0.000000 udp 10.0.2.22 51868 -> 98.154.166.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:10:09.743096 0.000000 udp 10.0.2.22 51868 -> 188.219.126.218 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:10:10.745176 0.437046 udp 10.0.2.22 51868 <-> 27.142.3.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:11.746058 0.000000 udp 10.0.2.22 51868 -> 151.232.5.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:10:12.747877 0.215198 udp 10.0.2.22 51868 <-> 124.123.102.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:13.748879 0.049648 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:14.750776 0.388956 udp 10.0.2.22 51868 <-> 14.96.209.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:15.751718 0.045432 udp 10.0.2.22 51868 <-> 89.66.178.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:16.743667 0.120959 udp 10.0.2.22 51868 <-> 79.13.181.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:17.745252 0.278599 udp 10.0.2.22 51868 <-> 151.74.151.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:18.746723 3.285540 udp 10.0.2.22 51868 <-> 200.175.212.99 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:19.747791 0.036695 udp 10.0.2.22 51868 <-> 89.73.207.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:22.752238 0.434052 udp 10.0.2.22 51868 <-> 151.233.128.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:23.743781 3.302983 udp 10.0.2.22 51868 <-> 180.199.144.137 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:24.745364 0.103394 udp 10.0.2.22 51868 <-> 87.8.241.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:27.749847 0.371579 udp 10.0.2.22 51868 <-> 218.226.32.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:28.750843 1.285876 udp 10.0.2.22 51868 <-> 70.189.102.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:29.752372 0.135748 udp 10.0.2.22 51868 <-> 87.8.241.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:30.743565 0.159592 udp 10.0.2.22 51868 <-> 71.16.80.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:31.624757 0.000092 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:10:31.745177 0.000000 udp 10.0.2.22 51868 -> 117.199.221.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:10:32.746432 2.699760 udp 10.0.2.22 51868 <-> 90.236.21.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:33.748159 0.171422 udp 10.0.2.22 51868 <-> 90.137.158.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:34.749531 0.361210 udp 10.0.2.22 51868 <-> 112.118.56.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:35.751143 0.205898 udp 10.0.2.22 51868 <-> 49.205.122.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:36.752500 0.410215 udp 10.0.2.22 51868 <-> 190.201.123.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:37.743887 0.294190 udp 10.0.2.22 51868 <-> 119.47.20.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:38.745228 0.044314 udp 10.0.2.22 51868 <-> 188.115.182.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:39.746852 0.222911 udp 10.0.2.22 51868 <-> 64.250.220.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:40.747830 0.577452 udp 10.0.2.22 51868 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:41.749088 0.085807 udp 10.0.2.22 51868 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:42.751208 0.143819 udp 10.0.2.22 51868 <-> 67.242.84.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:43.752264 0.138010 udp 10.0.2.22 51868 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:44.743737 0.047165 udp 10.0.2.22 51868 <-> 78.158.4.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:45.745193 0.329607 udp 10.0.2.22 51868 <-> 121.147.28.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:46.746545 0.000000 udp 10.0.2.22 51868 -> 183.82.178.122 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:10:47.747696 0.098930 udp 10.0.2.22 51868 <-> 128.143.29.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:48.749519 0.195734 udp 10.0.2.22 51868 <-> 178.79.11.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:49.750953 0.176412 udp 10.0.2.22 51868 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:50.752768 0.090948 udp 10.0.2.22 51868 <-> 85.241.249.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:51.743947 0.000000 udp 10.0.2.22 51868 -> 113.254.247.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:10:52.745507 0.891535 udp 10.0.2.22 51868 <-> 27.4.9.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:53.746841 0.000000 udp 10.0.2.22 51868 -> 113.179.82.240 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:10:54.748211 3.535879 udp 10.0.2.22 51868 <-> 92.229.124.245 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:55.749906 3.340763 udp 10.0.2.22 51868 <-> 123.192.49.11 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:56.750649 2.994566 udp 10.0.2.22 51868 <-> 69.244.18.241 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:10:58.623527 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:11:00.746994 0.000000 udp 10.0.2.22 51868 -> 113.179.82.240 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:01.748282 0.000000 udp 10.0.2.22 51868 -> 2.190.135.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:02.749623 0.138376 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:03.751105 0.000000 udp 10.0.2.22 51868 -> 192.168.1.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:04.752840 0.433823 udp 10.0.2.22 51868 <-> 92.229.124.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:05.744014 0.119112 udp 10.0.2.22 51868 <-> 87.111.51.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:06.745630 0.155363 udp 10.0.2.22 51868 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:07.747259 0.000000 udp 10.0.2.22 51868 -> 62.10.137.186 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:08.748370 0.000000 udp 10.0.2.22 51868 -> 71.80.71.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:09.750123 0.087529 udp 10.0.2.22 51868 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:10.751300 0.057712 udp 10.0.2.22 51868 <-> 5.13.236.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:11.752655 0.381555 udp 10.0.2.22 51868 <-> 1.172.101.198 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:12.743621 0.000000 udp 10.0.2.22 51868 -> 93.155.184.106 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:13.745209 1.208023 udp 10.0.2.22 51868 <-> 24.19.205.110 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:15.748002 0.073087 udp 10.0.2.22 51868 <-> 151.70.20.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:16.750126 0.207093 udp 10.0.2.22 51868 <-> 49.207.202.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:18.752747 0.166054 udp 10.0.2.22 51868 <-> 50.142.111.179 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:19.744132 0.318635 udp 10.0.2.22 51868 <-> 210.170.30.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:20.277359 3.001871 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 02:11:20.745260 0.162434 udp 10.0.2.22 51868 <-> 68.187.152.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:21.747321 0.024332 udp 10.0.2.22 51868 <-> 83.80.245.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:22.748237 0.155980 udp 10.0.2.22 51868 <-> 96.19.238.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:23.749469 0.302017 udp 10.0.2.22 51868 <-> 59.2.41.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:24.751558 0.157112 udp 10.0.2.22 51868 <-> 97.84.210.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:25.622593 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:11:25.752451 0.000000 udp 10.0.2.22 51868 -> 24.55.45.218 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:26.744247 0.341510 udp 10.0.2.22 51868 <-> 106.215.15.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:27.285196 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:11:27.745604 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:28.747277 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:29.748836 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:30.749810 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:31.751276 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:32.752630 3.996025 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:33.744360 0.000000 udp 10.0.2.22 51868 -> 173.197.148.136 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:34.745261 0.047421 udp 10.0.2.22 51868 <-> 150.214.29.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:35.286297 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:11:35.747404 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:37.749635 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:38.751742 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:39.752610 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:40.744448 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:41.745342 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:42.747020 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:43.748764 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:44.749700 0.047749 udp 10.0.2.22 51868 <-> 150.214.29.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:45.751475 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:46.743025 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:47.744126 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:48.745856 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:49.747241 0.068760 udp 10.0.2.22 51868 <-> 84.125.117.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:50.748850 0.000000 udp 10.0.2.22 51868 -> 76.226.213.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:51.289311 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:11:51.750245 0.073918 udp 10.0.2.22 51868 <-> 188.32.59.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:52.621024 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:11:52.751609 0.470427 udp 10.0.2.22 51868 <-> 14.97.9.149 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:53.742979 0.314591 udp 10.0.2.22 51868 <-> 218.152.217.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:54.744553 0.000000 udp 10.0.2.22 51868 -> 5.15.195.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:11:55.745683 0.159897 udp 10.0.2.22 51868 <-> 173.217.91.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:56.747003 0.206725 udp 10.0.2.22 51868 <-> 71.95.216.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:57.748617 0.312102 udp 10.0.2.22 51868 <-> 59.0.9.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:58.750259 0.347919 udp 10.0.2.22 51868 <-> 113.254.247.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:11:59.751580 0.239157 udp 10.0.2.22 51868 <-> 161.200.212.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:00.742666 0.146875 udp 10.0.2.22 51868 <-> 24.89.222.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:01.744273 0.301303 udp 10.0.2.22 51868 <-> 61.21.52.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:02.746159 0.000000 udp 10.0.2.22 51868 -> 14.99.203.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:12:03.747646 0.041000 udp 10.0.2.22 51868 <-> 5.15.146.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:04.748603 0.324906 udp 10.0.2.22 51868 <-> 114.180.181.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:05.750504 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:12:06.751623 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:12:07.813401 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:12:08.814348 2.003173 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:12:09.816428 0.049537 udp 10.0.2.22 51868 <-> 89.65.112.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:11.819022 2.994131 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:12:12.820463 0.064757 udp 10.0.2.22 51868 <-> 37.25.100.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:13.822159 0.000153 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:12:13.822312 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:12:15.814575 0.084465 udp 10.0.2.22 51868 <-> 145.236.151.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:16.816399 0.154911 udp 10.0.2.22 51868 <-> 24.31.217.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:17.817510 0.000000 udp 10.0.2.22 51868 -> 187.69.61.47 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:12:18.818941 0.000000 udp 10.0.2.22 51868 -> 117.211.128.42 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:12:19.690130 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:12:19.820113 0.000000 udp 10.0.2.22 51868 -> 68.229.150.145 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:12:20.821566 0.155776 udp 10.0.2.22 51868 <-> 75.115.10.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:21.813551 0.164379 udp 10.0.2.22 51868 <-> 50.162.123.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:22.814621 0.066266 udp 10.0.2.22 51868 <-> 86.126.187.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:23.209004 0.000000 udp 10.0.2.22 51868 <- 187.69.61.47 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:12:23.365357 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:12:23.815918 1.682980 udp 10.0.2.22 51868 <-> 50.29.153.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:24.817323 0.773114 udp 10.0.2.22 51868 <-> 69.151.57.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:25.818891 0.155578 udp 10.0.2.22 51868 <-> 71.91.40.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:26.820759 0.091284 udp 10.0.2.22 51868 <-> 83.9.179.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:27.821850 0.000000 udp 10.0.2.22 51868 -> 78.54.126.203 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:12:28.813002 0.039646 udp 10.0.2.22 51868 <-> 89.65.132.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:29.814997 0.208298 udp 10.0.2.22 51868 <-> 66.68.188.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:30.816431 4.996783 udp 10.0.2.22 51868 <-> 200.127.30.16 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:31.817732 0.000000 udp 10.0.2.22 51868 -> 124.123.102.188 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:12:32.819056 0.741784 udp 10.0.2.22 51868 <-> 88.204.155.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:33.820213 0.000000 udp 10.0.2.22 51868 -> 68.48.58.156 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:12:34.821743 0.141703 udp 10.0.2.22 51868 <-> 24.151.86.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:36.076598 0.000000 udp 10.0.2.22 51868 <- 200.127.30.16 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:12:36.814911 1.140278 udp 10.0.2.22 51868 <-> 71.224.28.226 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:38.817724 0.152399 udp 10.0.2.22 51868 <-> 71.91.40.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:39.819105 0.308998 udp 10.0.2.22 51868 <-> 221.150.202.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:40.820872 0.020327 udp 10.0.2.22 51868 <-> 95.208.68.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:41.822345 0.261829 udp 10.0.2.22 51868 <-> 183.82.241.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:42.813903 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:12:43.815327 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:12:44.816535 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:12:45.817622 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:12:46.689053 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:12:46.819026 0.000000 udp 10.0.2.22 51868 -> 49.139.144.124 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:12:47.821004 0.000000 udp 10.0.2.22 51868 -> 123.201.121.62 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:12:48.822058 0.022633 udp 10.0.2.22 51868 <-> 86.101.156.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:49.813227 0.382433 udp 10.0.2.22 51868 <-> 111.248.97.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:50.814748 0.066194 udp 10.0.2.22 51868 <-> 78.136.73.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:51.816094 0.155346 udp 10.0.2.22 51868 <-> 24.179.39.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:52.817669 0.172845 udp 10.0.2.22 51868 <-> 2.193.214.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:53.819387 0.136973 udp 10.0.2.22 51868 <-> 68.194.253.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:54.820746 0.137620 udp 10.0.2.22 51868 <-> 71.224.28.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:55.821865 0.024869 udp 10.0.2.22 51868 <-> 213.222.191.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:56.814021 0.166474 udp 10.0.2.22 51868 <-> 71.61.44.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:57.815199 0.000000 udp 10.0.2.22 51868 -> 116.202.23.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:12:58.816719 0.263968 udp 10.0.2.22 51868 <-> 117.242.108.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:12:59.817590 0.145376 udp 10.0.2.22 51868 <-> 24.154.53.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:00.819577 0.054100 udp 10.0.2.22 51868 <-> 136.169.21.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:01.820947 0.096990 udp 10.0.2.22 51868 <-> 93.49.20.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:02.822569 0.044675 udp 10.0.2.22 51868 <-> 88.135.210.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:03.813603 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:13:04.815276 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:13:05.816214 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:13:06.817793 0.000000 udp 10.0.2.22 51868 -> 197.205.97.68 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:13:07.819892 0.205443 udp 10.0.2.22 51868 <-> 151.16.143.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:08.820831 0.311853 udp 10.0.2.22 51868 <-> 58.3.144.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:09.822363 0.038467 udp 10.0.2.22 51868 <-> 195.70.108.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:10.813467 0.822508 udp 10.0.2.22 51868 <-> 103.20.66.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:11.815514 0.000000 udp 10.0.2.22 51868 -> 216.211.122.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:13:12.816280 0.299263 udp 10.0.2.22 51868 <-> 42.147.5.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:13.688053 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:13:13.818318 0.307013 udp 10.0.2.22 51868 <-> 180.147.116.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:14.819120 0.165523 udp 10.0.2.22 51868 <-> 72.191.109.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:15.821035 0.000000 udp 10.0.2.22 51868 -> 115.242.94.213 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:13:16.822713 0.039234 udp 10.0.2.22 51868 <-> 83.251.38.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:17.813764 0.154908 udp 10.0.2.22 51868 <-> 68.63.7.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:18.815098 0.266955 udp 10.0.2.22 51868 <-> 186.244.216.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:19.816484 0.044763 udp 10.0.2.22 51868 <-> 84.192.201.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:20.818304 0.198896 udp 10.0.2.22 51868 <-> 67.174.109.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:21.819866 0.024006 udp 10.0.2.22 51868 <-> 84.26.131.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:22.821462 0.756581 udp 10.0.2.22 51868 <-> 103.20.66.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:23.822530 0.305411 udp 10.0.2.22 51868 <-> 210.115.47.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:24.813954 0.335121 udp 10.0.2.22 51868 <-> 42.83.20.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:25.815242 0.000000 udp 10.0.2.22 51868 -> 1.23.90.72 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:13:26.816629 0.340940 udp 10.0.2.22 51868 <-> 112.120.210.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:27.818051 0.000000 udp 10.0.2.22 51868 -> 89.142.152.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:13:28.819950 0.347065 udp 10.0.2.22 51868 <-> 1.168.26.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:29.821238 0.304687 udp 10.0.2.22 51868 <-> 218.231.58.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:30.822318 0.246169 udp 10.0.2.22 51868 <-> 124.123.102.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:31.814045 0.057591 udp 10.0.2.22 51868 <-> 94.253.231.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:32.815251 0.335857 udp 10.0.2.22 51868 <-> 219.126.246.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:33.816850 0.315058 udp 10.0.2.22 51868 <-> 218.152.217.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:34.818301 0.000000 udp 10.0.2.22 51868 -> 180.149.23.231 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:13:35.819610 0.395994 udp 10.0.2.22 51868 <-> 117.198.231.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:36.820946 0.022210 udp 10.0.2.22 51868 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:37.822499 0.307563 udp 10.0.2.22 51868 <-> 60.62.100.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:38.814181 0.175951 udp 10.0.2.22 51868 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:39.815251 0.049400 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:40.696904 0.000108 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:13:40.816569 0.389456 udp 10.0.2.22 51868 <-> 27.199.100.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:41.818432 0.414102 udp 10.0.2.22 51868 <-> 111.248.97.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:42.819687 0.152534 udp 10.0.2.22 51868 <-> 216.186.178.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:43.821258 0.339613 udp 10.0.2.22 51868 <-> 114.25.138.159 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:44.822562 0.260989 udp 10.0.2.22 51868 <-> 200.7.146.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:45.813733 0.108781 udp 10.0.2.22 51868 <-> 213.27.51.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:46.815387 0.301073 udp 10.0.2.22 51868 <-> 211.124.168.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:47.816607 0.050846 udp 10.0.2.22 51868 <-> 46.102.30.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:48.818505 1.932771 udp 10.0.2.22 51868 <-> 5.237.6.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:49.819778 0.039548 udp 10.0.2.22 51868 <-> 91.146.185.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:50.821412 0.132247 udp 10.0.2.22 51868 <-> 80.25.215.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:51.822593 0.114601 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:52.814361 0.051188 udp 10.0.2.22 51868 <-> 89.34.99.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:53.815358 1.002075 udp 10.0.2.22 51868 <-> 93.63.109.5 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:55.818897 0.000000 udp 10.0.2.22 51868 -> 92.86.49.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:13:56.819910 0.000000 udp 10.0.2.22 51868 -> 14.96.169.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:13:57.821270 0.383667 udp 10.0.2.22 51868 <-> 14.97.169.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:58.823109 0.337232 udp 10.0.2.22 51868 <-> 124.96.225.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:13:59.814605 0.072590 udp 10.0.2.22 51868 <-> 85.84.168.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:00.815491 0.350181 udp 10.0.2.22 51868 <-> 106.1.36.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:01.817585 0.034704 udp 10.0.2.22 51868 <-> 95.85.176.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:02.818198 0.387589 udp 10.0.2.22 51868 <-> 113.184.4.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:03.820153 1.067738 udp 10.0.2.22 51868 <-> 85.84.94.19 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:05.822755 0.275638 udp 10.0.2.22 51868 <-> 115.250.114.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:06.814178 0.069279 udp 10.0.2.22 51868 <-> 84.50.131.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:07.695145 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:14:07.815935 0.299288 udp 10.0.2.22 51868 <-> 84.55.13.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:08.817357 0.212615 udp 10.0.2.22 51868 <-> 71.84.134.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:09.818681 0.324846 udp 10.0.2.22 51868 <-> 14.99.13.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:10.820340 0.075997 udp 10.0.2.22 51868 <-> 178.148.145.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:11.821841 0.157105 udp 10.0.2.22 51868 <-> 75.149.216.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:12.823080 0.165046 udp 10.0.2.22 51868 <-> 69.204.114.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:13.814042 0.040455 udp 10.0.2.22 51868 <-> 195.178.240.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:14.816336 0.493481 udp 10.0.2.22 51868 <-> 58.105.43.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:15.817338 0.314553 udp 10.0.2.22 51868 <-> 59.0.9.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:16.818433 3.037913 udp 10.0.2.22 51868 <-> 86.18.63.38 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:17.819847 0.156673 udp 10.0.2.22 51868 <-> 98.243.242.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:18.821654 0.136084 udp 10.0.2.22 51868 <-> 69.127.160.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:20.814873 0.045428 udp 10.0.2.22 51868 <-> 93.105.185.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:21.815917 0.000000 udp 10.0.2.22 51868 -> 173.163.78.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:14:22.817599 0.346925 udp 10.0.2.22 51868 <-> 125.230.129.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:23.818413 0.000000 udp 10.0.2.22 51868 -> 61.62.169.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:14:24.820427 0.052421 udp 10.0.2.22 51868 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:25.821671 0.333325 udp 10.0.2.22 51868 <-> 121.136.22.224 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:26.813575 0.137931 udp 10.0.2.22 51868 <-> 67.162.240.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:27.814596 0.000000 udp 10.0.2.22 51868 -> 219.205.248.55 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:14:28.816120 0.000000 udp 10.0.2.22 51868 -> 222.166.66.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:14:29.817395 0.157397 udp 10.0.2.22 51868 <-> 97.102.123.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:30.818458 0.000000 udp 10.0.2.22 51868 -> 78.50.110.160 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:14:31.820383 0.204428 udp 10.0.2.22 51868 <-> 71.92.68.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:32.822051 0.000000 udp 10.0.2.22 51868 -> 50.72.198.106 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:14:33.813155 0.259420 udp 10.0.2.22 51868 <-> 201.80.212.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:34.694308 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:14:34.814355 0.296463 udp 10.0.2.22 51868 <-> 115.242.41.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:35.816119 0.340226 udp 10.0.2.22 51868 <-> 111.254.241.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:36.817316 0.129390 udp 10.0.2.22 51868 <-> 72.241.66.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:37.818594 0.165155 udp 10.0.2.22 51868 <-> 68.226.220.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:38.820558 0.277303 udp 10.0.2.22 51868 <-> 117.196.231.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:39.821505 0.166728 udp 10.0.2.22 51868 <-> 74.67.107.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:40.813210 1.467575 udp 10.0.2.22 51868 <-> 24.246.239.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:41.814992 0.000000 udp 10.0.2.22 51868 -> 190.51.66.112 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:14:42.815922 0.173013 udp 10.0.2.22 51868 <-> 98.194.123.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:43.817462 0.049543 udp 10.0.2.22 51868 <-> 77.103.126.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:44.818564 0.045212 udp 10.0.2.22 51868 <-> 78.159.51.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:45.820263 0.169451 udp 10.0.2.22 51868 <-> 66.169.204.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:46.821771 0.281025 udp 10.0.2.22 51868 <-> 103.7.150.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:47.813144 0.000000 udp 10.0.2.22 51868 -> 14.97.207.137 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:14:48.814531 0.388159 udp 10.0.2.22 51868 <-> 151.77.168.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:49.815985 1.671328 udp 10.0.2.22 51868 <-> 27.4.3.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:50.817400 0.312332 udp 10.0.2.22 51868 <-> 121.185.98.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:51.818778 0.153914 udp 10.0.2.22 51868 <-> 173.22.96.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:52.820499 0.063503 udp 10.0.2.22 51868 <-> 78.206.76.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:53.821701 0.127965 udp 10.0.2.22 51868 <-> 72.241.66.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:54.813004 0.403114 udp 10.0.2.22 51868 <-> 175.193.196.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:55.814656 0.000000 udp 10.0.2.22 51868 -> 69.24.115.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:14:56.816378 0.000000 udp 10.0.2.22 51868 -> 116.73.58.148 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:14:57.817522 0.408360 udp 10.0.2.22 51868 <-> 175.193.63.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:58.818950 0.146472 udp 10.0.2.22 51868 <-> 184.162.123.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:14:59.820488 0.209119 udp 10.0.2.22 51868 <-> 128.123.234.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:00.821731 0.369565 udp 10.0.2.22 51868 <-> 63.230.209.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:01.692981 0.000106 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:15:01.813046 0.176541 udp 10.0.2.22 51868 <-> 75.111.219.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:02.815149 0.161102 udp 10.0.2.22 51868 <-> 75.115.165.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:03.816215 0.060358 udp 10.0.2.22 51868 <-> 79.117.157.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:04.817967 0.149138 udp 10.0.2.22 51868 <-> 174.108.78.50 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:05.818920 0.066849 udp 10.0.2.22 51868 <-> 79.109.106.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:06.820810 0.408657 udp 10.0.2.22 51868 <-> 175.211.29.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:07.821630 0.422130 udp 10.0.2.22 51868 <-> 27.2.203.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:08.813744 0.000000 udp 10.0.2.22 51868 -> 115.86.61.74 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:09.814763 2.127631 udp 10.0.2.22 51868 <-> 46.120.207.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:10.815944 0.214715 udp 10.0.2.22 51868 <-> 98.242.27.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:11.817428 0.136201 udp 10.0.2.22 51868 <-> 5.43.104.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:12.819139 0.368139 udp 10.0.2.22 51868 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:13.820314 0.292039 udp 10.0.2.22 51868 <-> 119.171.47.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:14.822264 0.362003 udp 10.0.2.22 51868 <-> 124.96.225.9 16464 CON 0 0 5 3618 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:15.181112 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:15.181202 0.000000 udp 10.0.2.22 51868 -> 213.109.121.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:15.181282 0.000000 udp 10.0.2.22 51868 -> 98.243.238.45 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:15.181361 0.000000 udp 10.0.2.22 51868 -> 49.158.158.158 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:15.181464 0.000000 udp 10.0.2.22 51868 -> 81.253.5.154 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:15.181544 0.000000 udp 10.0.2.22 51868 -> 95.42.254.82 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:15.181624 0.000000 udp 10.0.2.22 51868 -> 88.72.192.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:15.181703 0.000000 udp 10.0.2.22 51868 -> 187.56.28.231 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:15.181782 0.000000 udp 10.0.2.22 51868 -> 94.156.153.244 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:15.181864 0.000000 udp 10.0.2.22 51868 -> 106.210.250.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:15.181944 0.000000 udp 10.0.2.22 51868 -> 91.146.185.62 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:15.182025 0.000000 udp 10.0.2.22 51868 -> 84.252.22.95 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:15.182105 0.000000 udp 10.0.2.22 51868 -> 82.239.45.91 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:15.182186 0.000000 udp 10.0.2.22 51868 -> 211.135.100.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:15.182279 0.000000 udp 10.0.2.22 51868 -> 201.235.95.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:15.182360 0.000000 udp 10.0.2.22 51868 -> 85.228.144.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:15.813317 0.143860 udp 10.0.2.22 51868 <-> 70.83.135.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:16.815080 0.000000 udp 10.0.2.22 51868 -> 14.99.75.208 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:17.816614 0.160520 udp 10.0.2.22 51868 <-> 98.253.7.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:18.817834 0.317285 udp 10.0.2.22 51868 <-> 110.133.134.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:19.819264 0.000000 udp 10.0.2.22 51868 -> 76.116.162.197 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:20.820635 0.165932 udp 10.0.2.22 51868 <-> 66.168.73.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:21.600599 0.000000 udp 10.0.2.22 51868 <- 98.243.238.45 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:21.822272 0.000000 udp 10.0.2.22 51868 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:22.813632 0.056622 udp 10.0.2.22 51868 <-> 77.77.31.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:23.815371 0.051921 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:24.816393 0.000000 udp 10.0.2.22 51868 -> 201.223.227.25 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:25.818011 0.000000 udp 10.0.2.22 51868 -> 82.251.98.212 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:26.819038 0.034179 udp 10.0.2.22 51868 <-> 79.117.40.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:27.820389 0.242317 udp 10.0.2.22 51868 <-> 27.251.231.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:28.692247 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:15:28.822182 0.147261 udp 10.0.2.22 51868 <-> 68.192.112.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:29.813429 0.067042 udp 10.0.2.22 51868 <-> 85.87.145.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:30.815220 0.000000 udp 10.0.2.22 51868 -> 111.249.165.119 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:31.816292 0.212195 udp 10.0.2.22 51868 <-> 97.93.25.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:32.818251 0.351938 udp 10.0.2.22 51868 <-> 114.41.96.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:33.819650 0.279194 udp 10.0.2.22 51868 <-> 187.33.158.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:34.820926 0.015160 udp 10.0.2.22 51868 <-> 95.222.234.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:35.821970 1.039538 udp 10.0.2.22 51868 <-> 150.214.29.127 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:37.814856 0.162008 udp 10.0.2.22 51868 <-> 74.65.45.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:38.816686 0.000000 udp 10.0.2.22 51868 -> 2.185.2.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:39.817655 0.206753 udp 10.0.2.22 51868 <-> 50.149.114.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:40.819355 0.173218 udp 10.0.2.22 51868 <-> 24.48.169.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:41.820967 0.148042 udp 10.0.2.22 51868 <-> 174.101.8.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:42.822519 0.345405 udp 10.0.2.22 51868 <-> 1.172.166.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:43.813439 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:44.815193 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:45.816265 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:46.818023 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:47.819620 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:48.820970 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:49.822095 0.155921 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:15:50.813860 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:51.814880 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:52.816657 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:53.818404 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:54.819343 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:55.690847 0.000120 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:15:55.821285 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:56.822503 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:57.814091 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:58.815257 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:15:59.816898 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:00.818461 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:02.821234 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:03.822804 0.000114 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:03.822918 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:16:04.814084 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:05.815508 0.159954 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:16:06.816643 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:07.818756 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:08.819703 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:09.820902 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:10.822951 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:11.814301 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:12.815731 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:13.816735 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:15.820001 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:16.821057 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:17.822830 4.997213 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:18.814094 3.004069 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:18.814227 3.003936 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 2 172 flow=Background 1970/01/01 02:16:19.815124 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:20.817201 0.264526 udp 10.0.2.22 51868 <-> 179.209.89.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:16:22.689785 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:16:23.820927 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:24.823061 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:25.814396 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:26.815215 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:27.816947 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:28.818225 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:29.819927 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:30.821485 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:31.822791 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:32.814265 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:34.816957 3.004193 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:35.818158 3.996201 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:36.819579 0.067784 udp 10.0.2.22 51868 <-> 77.78.227.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:16:38.822460 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:40.815875 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:41.816862 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:42.818787 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:43.821212 0.000000 udp 10.0.2.22 51868 -> 177.149.127.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:44.821151 0.315828 udp 10.0.2.22 51868 <-> 183.100.235.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:16:45.823263 0.065200 udp 10.0.2.22 51868 <-> 89.143.76.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:16:46.813997 0.703119 udp 10.0.2.22 51868 <-> 201.21.179.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:16:47.815687 0.000000 udp 10.0.2.22 51868 -> 84.225.79.57 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:48.816996 0.163950 udp 10.0.2.22 51868 <-> 71.235.63.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:16:49.688258 0.000121 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:16:49.818795 0.349410 udp 10.0.2.22 51868 <-> 1.172.69.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:16:50.819922 0.045649 udp 10.0.2.22 51868 <-> 89.2.226.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:16:51.821770 0.664374 udp 10.0.2.22 51868 <-> 46.35.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:16:52.812575 0.000000 udp 10.0.2.22 51868 -> 76.125.64.235 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:16:53.814109 1.366442 udp 10.0.2.22 51868 <-> 14.96.2.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:16:54.816031 0.349329 udp 10.0.2.22 51868 <-> 111.240.96.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:16:55.817243 0.132529 udp 10.0.2.22 51868 <-> 65.96.181.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:16:56.818921 0.050023 udp 10.0.2.22 51868 <-> 89.2.226.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:16:57.820132 0.368468 udp 10.0.2.22 51868 <-> 223.19.173.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:16:58.821973 0.172779 udp 10.0.2.22 51868 <-> 76.125.64.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:16:59.812874 0.091822 udp 10.0.2.22 51868 <-> 178.77.18.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:00.814532 0.089690 udp 10.0.2.22 51868 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:01.816212 0.000000 udp 10.0.2.22 51868 -> 50.72.184.244 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:17:02.817421 1.345947 udp 10.0.2.22 51868 <-> 46.35.110.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:04.820618 0.000000 udp 10.0.2.22 51868 -> 79.176.4.56 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:17:05.822009 0.343702 udp 10.0.2.22 51868 <-> 220.129.41.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:06.813268 0.189989 udp 10.0.2.22 51868 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:07.814274 0.000000 udp 10.0.2.22 51868 -> 68.84.151.222 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:17:08.816291 0.055775 udp 10.0.2.22 51868 <-> 94.253.231.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:09.817555 4.355021 udp 10.0.2.22 51868 <-> 137.166.125.116 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:10.819046 3.004037 udp 10.0.2.22 51868 <-> 187.107.15.245 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:11.819936 0.283202 udp 10.0.2.22 51868 <-> 126.36.45.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:14.814739 0.000000 udp 10.0.2.22 51868 -> 150.140.164.166 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:17:15.816330 0.068418 udp 10.0.2.22 51868 <-> 81.227.139.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:16.697553 0.000118 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:17:16.817578 0.044797 udp 10.0.2.22 51868 <-> 84.232.245.161 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:17.819116 2.826154 udp 10.0.2.22 51868 <-> 202.235.233.165 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:18.820353 0.099284 udp 10.0.2.22 51868 <-> 178.172.245.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:19.821592 0.285291 udp 10.0.2.22 51868 <-> 101.59.116.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:20.813524 0.332961 udp 10.0.2.22 51868 <-> 1.164.153.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:21.814986 0.332194 udp 10.0.2.22 51868 <-> 111.253.130.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:22.816340 2.002290 udp 10.0.2.22 51868 <-> 74.216.44.76 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:23.817839 0.000000 udp 10.0.2.22 51868 -> 85.14.9.104 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:17:25.820567 0.000000 udp 10.0.2.22 51868 -> 180.215.92.106 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:17:26.822071 0.000000 udp 10.0.2.22 51868 -> 1.164.153.33 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:17:27.813024 0.057601 udp 10.0.2.22 51868 <-> 37.72.79.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:28.814672 0.353160 udp 10.0.2.22 51868 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:29.816506 0.371231 udp 10.0.2.22 51868 <-> 124.244.60.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:30.817939 0.181018 udp 10.0.2.22 51868 <-> 24.49.203.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:31.819262 0.074274 udp 10.0.2.22 51868 <-> 81.9.181.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:32.820520 0.070604 udp 10.0.2.22 51868 <-> 94.253.231.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:33.821854 0.000000 udp 10.0.2.22 51868 -> 50.150.148.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:17:34.812984 1.739377 udp 10.0.2.22 51868 <-> 189.54.173.8 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:35.814717 0.000000 udp 10.0.2.22 51868 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:17:36.816166 0.127311 udp 10.0.2.22 51868 <-> 173.81.172.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:37.817942 0.000000 udp 10.0.2.22 51868 -> 114.36.213.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:17:38.818883 0.154244 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:39.820405 3.132826 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:40.821622 1.140006 udp 10.0.2.22 51868 <-> 187.107.15.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:41.813061 1.714851 udp 10.0.2.22 51868 <-> 178.149.14.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:43.696383 0.000082 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:17:43.816467 0.157971 udp 10.0.2.22 51868 <-> 70.185.202.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:44.817699 0.037149 udp 10.0.2.22 51868 <-> 31.220.225.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:45.819057 2.161679 udp 10.0.2.22 51868 <-> 75.86.159.42 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:46.820577 0.616489 udp 10.0.2.22 51868 <-> 188.167.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:48.813200 0.000000 udp 10.0.2.22 51868 -> 111.119.245.60 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:17:49.814942 0.000000 udp 10.0.2.22 51868 -> 88.149.252.83 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:17:50.816299 0.165496 udp 10.0.2.22 51868 <-> 69.204.114.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:51.817786 0.122450 udp 10.0.2.22 51868 <-> 82.244.99.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:52.819045 0.000000 udp 10.0.2.22 51868 -> 71.45.42.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:17:53.820887 0.000000 udp 10.0.2.22 51868 -> 212.233.239.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:17:54.822429 0.000000 udp 10.0.2.22 51868 -> 89.77.192.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:17:55.813252 0.000000 udp 10.0.2.22 51868 -> 83.166.30.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:17:56.815069 0.000000 udp 10.0.2.22 51868 -> 88.149.252.83 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:17:57.816737 0.248932 udp 10.0.2.22 51868 <-> 24.193.20.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:58.818038 0.116914 udp 10.0.2.22 51868 <-> 82.244.99.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:17:59.819693 0.427327 udp 10.0.2.22 51868 <-> 190.176.231.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:00.820755 0.000000 udp 10.0.2.22 51868 -> 158.181.242.169 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:18:01.822356 0.615954 udp 10.0.2.22 51868 <-> 124.247.112.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:02.813694 0.000000 udp 10.0.2.22 51868 -> 209.207.117.49 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:18:03.814754 0.149056 udp 10.0.2.22 51868 <-> 68.194.18.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:04.816390 0.198279 udp 10.0.2.22 51868 <-> 72.129.64.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:05.817837 0.146780 udp 10.0.2.22 51868 <-> 98.229.185.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:06.819219 1.607216 udp 10.0.2.22 51868 <-> 98.100.21.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:07.821282 0.165146 udp 10.0.2.22 51868 <-> 98.209.179.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:08.822587 0.249116 udp 10.0.2.22 51868 <-> 124.125.148.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:09.813629 0.893436 udp 10.0.2.22 51868 <-> 122.121.6.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:10.694764 0.000167 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:18:10.815274 0.448998 udp 10.0.2.22 51868 <-> 75.197.131.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:11.816400 0.043310 udp 10.0.2.22 51868 <-> 147.156.106.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:12.818186 0.000000 udp 10.0.2.22 51868 -> 194.63.235.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:18:13.819160 0.186254 udp 10.0.2.22 51868 <-> 75.86.159.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:14.821208 0.072443 udp 10.0.2.22 51868 <-> 81.9.181.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:15.822430 0.062080 udp 10.0.2.22 51868 <-> 95.42.254.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:16.813349 0.231797 udp 10.0.2.22 51868 <-> 24.55.45.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:17.815535 0.000000 udp 10.0.2.22 51868 -> 114.36.213.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:18:18.816814 0.053160 udp 10.0.2.22 51868 <-> 94.53.96.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:19.818548 0.041989 udp 10.0.2.22 51868 <-> 147.156.24.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:20.819116 0.178588 udp 10.0.2.22 51868 <-> 69.246.172.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:21.820623 0.162904 udp 10.0.2.22 51868 <-> 98.212.118.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:22.822080 0.000000 udp 10.0.2.22 51868 -> 77.81.147.82 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:18:23.814083 0.179015 udp 10.0.2.22 51868 <-> 123.238.11.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:24.815090 0.050663 udp 10.0.2.22 51868 <-> 77.105.193.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:25.816603 0.147224 udp 10.0.2.22 51868 <-> 97.89.76.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:26.818090 0.174090 udp 10.0.2.22 51868 <-> 78.249.211.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:27.371162 3.001980 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 02:18:27.819186 0.000000 udp 10.0.2.22 51868 -> 203.218.171.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:18:28.820764 0.310836 udp 10.0.2.22 51868 <-> 150.162.192.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:29.822377 0.991623 udp 10.0.2.22 51868 <-> 79.183.172.249 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:31.815349 0.290579 udp 10.0.2.22 51868 <-> 201.231.197.241 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:32.816803 0.000000 udp 10.0.2.22 51868 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:18:33.818359 0.000000 udp 10.0.2.22 51868 -> 89.142.152.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:18:34.379036 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:18:34.820003 0.383846 udp 10.0.2.22 51868 <-> 180.94.163.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:35.821028 0.030151 udp 10.0.2.22 51868 <-> 95.111.72.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:36.822952 0.036212 udp 10.0.2.22 51868 <-> 188.254.136.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:37.693851 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:18:37.813564 0.121878 udp 10.0.2.22 51868 <-> 98.166.225.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:38.815222 0.045297 udp 10.0.2.22 51868 <-> 89.25.112.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:39.816671 0.000000 udp 10.0.2.22 51868 -> 98.70.42.141 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:18:40.818337 3.995723 udp 10.0.2.22 51868 <-> 89.40.194.89 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:41.819639 0.000000 udp 10.0.2.22 51868 -> 195.38.112.168 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:18:42.380148 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:18:42.820742 0.359762 udp 10.0.2.22 51868 <-> 137.166.125.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:43.822896 0.170332 udp 10.0.2.22 51868 <-> 71.63.13.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:45.815147 4.456052 udp 10.0.2.22 51868 <-> 190.128.117.25 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:46.816863 0.000000 udp 10.0.2.22 51868 -> 114.27.79.169 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:18:47.818185 0.322567 udp 10.0.2.22 51868 <-> 182.235.179.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:48.819661 0.354642 udp 10.0.2.22 51868 <-> 115.165.236.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:50.822268 0.990047 udp 10.0.2.22 51868 <-> 187.127.252.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:51.813842 0.000000 udp 10.0.2.22 51868 -> 76.110.194.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:18:52.815370 0.000000 udp 10.0.2.22 51868 -> 61.223.95.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:18:53.817019 0.000000 udp 10.0.2.22 51868 -> 5.8.83.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:18:54.818728 0.437364 udp 10.0.2.22 51868 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:55.819572 0.207422 udp 10.0.2.22 51868 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:56.820861 0.967606 udp 10.0.2.22 51868 <-> 187.127.252.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:57.822969 0.119363 udp 10.0.2.22 51868 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:18:58.383228 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:18:58.814133 1.440389 udp 10.0.2.22 51868 <-> 204.16.10.14 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:00.817307 0.050592 udp 10.0.2.22 51868 <-> 46.253.3.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:01.818398 0.573314 udp 10.0.2.22 51868 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:02.820143 0.137352 udp 10.0.2.22 51868 <-> 41.33.182.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:03.821565 0.053752 udp 10.0.2.22 51868 <-> 94.21.66.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:04.692411 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:19:04.822934 0.265594 udp 10.0.2.22 51868 <-> 96.26.211.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:05.814473 0.000000 udp 10.0.2.22 51868 -> 101.99.36.124 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:19:06.815918 0.310936 udp 10.0.2.22 51868 <-> 126.123.91.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:07.816706 0.030393 udp 10.0.2.22 51868 <-> 131.114.121.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:08.818831 0.166596 udp 10.0.2.22 51868 <-> 68.200.12.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:09.819693 0.000000 udp 10.0.2.22 51868 -> 50.150.148.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:19:10.821699 0.226256 udp 10.0.2.22 51868 <-> 87.19.151.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:11.822638 0.342815 udp 10.0.2.22 51868 <-> 123.192.49.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:12.814163 0.170757 udp 10.0.2.22 51868 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:13.815806 2.002662 udp 10.0.2.22 51868 -> 14.194.54.247 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:19:14.817157 0.092839 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:16.820311 0.000000 udp 10.0.2.22 51868 -> 89.77.192.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:19:17.821671 0.136663 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:18.823202 0.000000 udp 10.0.2.22 51868 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:19:19.813930 3.042663 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:20.815558 4.997269 udp 10.0.2.22 51868 <-> 50.150.148.5 16464 CON 0 0 6 3676 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:21.817304 0.434413 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:23.819720 0.000000 udp 10.0.2.22 51868 -> 178.129.93.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:19:24.821503 0.000000 udp 10.0.2.22 51868 -> 81.190.155.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:19:25.982706 0.000000 udp 10.0.2.22 51868 <- 50.150.148.5 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:19:26.814658 0.000000 udp 10.0.2.22 51868 -> 78.160.204.44 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:19:27.816056 0.358209 udp 10.0.2.22 51868 <-> 186.191.29.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:28.817649 0.025838 udp 10.0.2.22 51868 <-> 91.146.185.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:29.818874 0.206909 udp 10.0.2.22 51868 <-> 76.115.116.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:30.390032 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:19:30.820063 0.000000 udp 10.0.2.22 51868 -> 186.90.22.102 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:19:31.691069 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:19:31.821925 0.000000 udp 10.0.2.22 51868 -> 24.23.11.39 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:19:32.813179 0.000000 udp 10.0.2.22 51868 -> 188.6.67.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:19:33.814774 0.144613 udp 10.0.2.22 51868 <-> 68.49.199.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:34.816188 0.000000 udp 10.0.2.22 51868 -> 50.150.148.5 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:19:35.817299 0.140205 udp 10.0.2.22 51868 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:36.818534 2.174479 udp 10.0.2.22 51868 <-> 24.178.45.245 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:37.819934 0.079267 udp 10.0.2.22 51868 <-> 213.231.137.6 16464 CON 0 0 5 3618 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:39.812932 0.034720 udp 10.0.2.22 51868 <-> 151.100.92.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:40.814766 0.129922 udp 10.0.2.22 51868 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:41.815924 0.362726 udp 10.0.2.22 51868 <-> 61.62.169.19 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:42.817653 0.158516 udp 10.0.2.22 51868 <-> 69.140.208.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:43.818558 0.064252 udp 10.0.2.22 51868 <-> 188.246.71.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:44.820206 0.416559 udp 10.0.2.22 51868 <-> 59.90.203.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:45.821563 1.993377 udp 10.0.2.22 51868 -> 182.189.101.118 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:19:46.813267 0.170401 udp 10.0.2.22 51868 <-> 71.89.50.92 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:48.816210 0.318930 udp 10.0.2.22 51868 <-> 60.56.154.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:19:50.818839 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:19:51.820295 0.000044 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:19:51.820339 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:19:52.821448 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:19:53.812977 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:19:54.814427 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:19:55.815952 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:19:56.817555 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:19:57.818894 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:19:58.690328 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:19:58.820472 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:19:59.822040 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:00.813251 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:01.814371 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:02.816097 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:03.817262 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:04.819456 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:05.820654 0.175179 udp 10.0.2.22 51868 <-> 75.111.219.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:20:06.822214 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:07.813197 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:08.814787 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:09.816196 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:10.817884 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:11.818756 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:13.822070 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:14.813218 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:15.815225 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:16.816170 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:17.817631 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:18.819038 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:19.820825 0.000138 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:19.820963 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:20:20.822082 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:21.813101 0.154004 udp 10.0.2.22 51868 <-> 91.97.165.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:20:22.814752 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:23.816446 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:24.818148 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:25.689289 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:20:25.819125 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:26.820639 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:27.821943 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:28.813956 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:29.815195 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:30.816709 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:31.817889 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:32.818914 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:33.820740 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:35.813525 0.000050 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:35.813575 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:20:36.815123 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:37.816565 0.038234 udp 10.0.2.22 51868 <-> 217.16.136.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:20:38.818214 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:39.819249 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:40.820762 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:41.822442 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:42.813810 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:43.815280 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:45.817937 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:46.819749 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:47.820629 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:48.822223 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:49.814048 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:50.815222 0.000073 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:50.815295 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:20:51.816674 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:52.687904 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:20:52.817762 0.054629 udp 10.0.2.22 51868 <-> 94.139.204.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:20:53.819402 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:55.822348 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:56.814041 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:57.815427 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:58.816929 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:20:59.818178 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:00.819317 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:01.821139 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:02.822438 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:03.813770 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:04.814912 0.000115 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:04.815027 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:21:05.816991 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:06.818222 3.995851 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:07.819394 0.180732 udp 10.0.2.22 51868 <-> 75.111.219.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:21:08.821091 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:09.822551 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:11.815213 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:12.816412 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:13.818347 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:14.819299 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:15.821027 0.040353 udp 10.0.2.22 51868 <-> 188.246.71.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:21:16.822884 0.000000 udp 10.0.2.22 51868 -> 27.3.90.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:17.814303 0.022719 udp 10.0.2.22 51868 <-> 194.94.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:21:18.815107 0.161462 udp 10.0.2.22 51868 <-> 98.209.179.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:21:19.696270 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:21:19.816616 0.000000 udp 10.0.2.22 51868 -> 195.137.40.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:20.818376 0.349581 udp 10.0.2.22 51868 <-> 125.230.129.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:21:21.819809 3.184956 udp 10.0.2.22 51868 <-> 24.137.128.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:21:22.820933 0.000000 udp 10.0.2.22 51868 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:23.822271 0.044683 udp 10.0.2.22 51868 <-> 176.37.230.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:21:24.814286 0.150652 udp 10.0.2.22 51868 <-> 174.108.49.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:21:25.815153 0.315626 udp 10.0.2.22 51868 <-> 122.27.16.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:21:26.816783 0.158183 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:21:27.818659 0.430060 udp 10.0.2.22 51868 <-> 69.151.57.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:21:28.819560 0.613799 udp 10.0.2.22 51868 <-> 111.119.245.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:21:29.821326 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:30.822681 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:31.813731 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:32.815201 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:33.816870 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:34.818734 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:35.819904 0.309368 udp 10.0.2.22 51868 <-> 218.152.217.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:21:36.821268 4.996932 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:37.822484 0.048645 udp 10.0.2.22 51868 <-> 82.17.168.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:21:38.814197 0.155060 udp 10.0.2.22 51868 <-> 71.203.98.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:21:39.815517 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:40.817202 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:42.819873 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:43.821565 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:44.822770 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:45.813883 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:46.695679 0.000104 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:21:46.815646 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:47.816867 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:48.818534 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:49.819914 0.000000 udp 10.0.2.22 51868 -> 218.152.217.44 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:50.821273 0.000000 udp 10.0.2.22 51868 -> 71.63.13.85 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:51.823167 0.000000 udp 10.0.2.22 51868 -> 94.228.236.50 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:52.814050 0.051056 udp 10.0.2.22 51868 <-> 94.21.204.126 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:21:53.815770 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:54.816943 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:55.818922 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:56.819674 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:57.821581 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:58.813032 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:21:59.814744 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:00.816168 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:01.817829 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:02.818935 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:03.819762 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:04.821703 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:05.812978 0.304415 udp 10.0.2.22 51868 <-> 61.26.178.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:22:06.814794 0.000000 udp 10.0.2.22 51868 -> 78.8.65.60 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:07.815631 0.048944 udp 10.0.2.22 51868 <-> 31.18.241.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:22:08.817656 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:09.818587 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:10.820085 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:11.821347 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:12.812907 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:13.694425 0.000099 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:22:13.814344 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:14.816241 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:15.817461 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:16.818926 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:17.820225 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:18.822156 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:19.812722 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:20.814890 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:21.815617 0.235207 udp 10.0.2.22 51868 <-> 31.18.241.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:22:22.817219 0.318613 udp 10.0.2.22 51868 <-> 61.26.178.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:22:23.818498 0.050686 udp 10.0.2.22 51868 <-> 94.21.204.126 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:22:24.819922 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:25.821587 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:26.813050 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:27.814656 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:28.816431 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:29.817790 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:30.819091 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:31.820001 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:32.821769 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:33.813553 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:34.143925 0.022367 udp 10.0.2.22 60002 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 02:22:34.166588 0.000000 udp 10.0.2.22 60003 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:34.814476 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:35.816112 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:36.817539 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:37.819308 0.279708 udp 10.0.2.22 51868 <-> 180.147.116.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:22:38.820083 0.170570 udp 10.0.2.22 51868 <-> 71.63.13.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:22:39.822022 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:40.692709 0.000152 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:22:40.813179 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:41.814479 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:42.816573 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:43.818113 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:44.819233 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:45.820454 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:46.822184 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:47.813477 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:48.815047 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:49.816035 0.048564 udp 10.0.2.22 51868 <-> 82.17.168.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:22:50.817554 0.170674 udp 10.0.2.22 51868 <-> 71.63.13.85 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:22:51.819192 0.000000 udp 10.0.2.22 51868 -> 178.149.14.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:52.820927 0.000000 udp 10.0.2.22 51868 -> 85.130.45.29 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:53.821887 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:54.813044 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:55.814506 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:56.815976 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:57.817645 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:58.819173 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:22:59.820770 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:23:00.822548 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:23:01.813601 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:23:02.814601 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:23:03.816191 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:23:04.817717 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:23:05.819000 1.170951 udp 10.0.2.22 51868 <-> 71.63.13.85 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:07.691891 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:23:07.822055 0.000000 udp 10.0.2.22 51868 -> 24.164.171.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:23:08.813180 0.149420 udp 10.0.2.22 51868 <-> 71.203.98.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:09.815181 3.623360 udp 10.0.2.22 51868 <-> 178.149.14.242 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:10.816122 0.000000 udp 10.0.2.22 51868 -> 85.130.45.29 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:23:12.818941 0.000000 udp 10.0.2.22 51868 -> 94.123.126.136 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:23:13.820951 0.000000 udp 10.0.2.22 51868 -> 78.8.65.60 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:23:14.822234 0.000000 udp 10.0.2.22 51868 -> 94.228.236.50 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:23:15.813821 0.051999 udp 10.0.2.22 51868 <-> 94.21.204.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:16.815328 0.068100 udp 10.0.2.22 51868 <-> 79.115.110.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:17.816883 0.000000 udp 10.0.2.22 51868 -> 98.216.121.231 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:23:18.818183 0.025353 udp 10.0.2.22 51868 <-> 213.222.191.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:19.819364 0.053725 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:20.820793 0.169462 udp 10.0.2.22 51868 <-> 74.193.135.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:21.822430 0.000000 udp 10.0.2.22 51868 -> 88.80.117.113 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:23:22.813319 0.675220 udp 10.0.2.22 51868 <-> 46.35.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:23.815213 0.052392 udp 10.0.2.22 51868 <-> 89.253.170.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:24.816933 0.152195 udp 10.0.2.22 51868 <-> 67.184.116.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:25.818017 0.054046 udp 10.0.2.22 51868 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:26.819225 0.022296 udp 10.0.2.22 51868 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:27.821216 1.728671 udp 10.0.2.22 51868 <-> 181.166.121.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:28.822557 0.000000 udp 10.0.2.22 51868 -> 189.13.49.9 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:23:29.814232 0.359783 udp 10.0.2.22 51868 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:30.815196 0.158498 udp 10.0.2.22 51868 <-> 67.184.116.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:31.816728 0.000000 udp 10.0.2.22 51868 -> 94.253.231.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:23:32.817780 0.084252 udp 10.0.2.22 51868 <-> 188.2.163.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:33.819136 0.347623 udp 10.0.2.22 51868 <-> 125.230.129.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:34.690610 0.000180 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:23:34.821156 0.293567 udp 10.0.2.22 51868 <-> 203.202.216.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:35.822588 0.282590 udp 10.0.2.22 51868 <-> 183.83.74.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:36.813477 0.197301 udp 10.0.2.22 51868 <-> 31.15.132.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:37.815585 0.393771 udp 10.0.2.22 51868 <-> 211.109.216.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:38.817021 0.247141 udp 10.0.2.22 51868 <-> 74.129.39.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:39.818141 0.307347 udp 10.0.2.22 51868 <-> 223.223.102.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:40.819386 0.211883 udp 10.0.2.22 51868 <-> 107.15.192.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:41.821180 0.023990 udp 10.0.2.22 51868 <-> 83.80.245.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:42.822775 4.997205 udp 10.0.2.22 51868 <-> 71.199.218.37 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:43.813868 0.039387 udp 10.0.2.22 51868 <-> 89.66.178.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:44.814987 0.374828 udp 10.0.2.22 51868 <-> 187.70.105.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:45.816578 0.285174 udp 10.0.2.22 51868 <-> 124.144.206.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:46.818270 0.052198 udp 10.0.2.22 51868 <-> 195.38.112.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:47.986149 0.000000 udp 10.0.2.22 51868 <- 71.199.218.37 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:23:48.820700 0.148200 udp 10.0.2.22 51868 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:49.822470 0.138302 udp 10.0.2.22 51868 <-> 68.49.199.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:50.814240 4.264012 udp 10.0.2.22 51868 <-> 115.187.62.123 16464 CON 0 0 5 1394 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:51.815136 0.189239 udp 10.0.2.22 51868 <-> 203.88.154.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:53.818241 2.380821 udp 10.0.2.22 51868 <-> 187.70.105.206 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:56.822382 0.289260 udp 10.0.2.22 51868 <-> 124.144.206.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:57.813663 0.100099 udp 10.0.2.22 51868 <-> 2.199.26.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:58.815666 0.047248 udp 10.0.2.22 51868 <-> 84.40.72.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:23:59.816556 0.081972 udp 10.0.2.22 51868 <-> 84.125.195.170 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:24:00.818120 0.000000 udp 10.0.2.22 51868 -> 68.44.131.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:01.689880 0.000122 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:24:01.819869 1.051894 udp 10.0.2.22 51868 <-> 147.163.93.48 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:24:03.822466 0.141012 udp 10.0.2.22 51868 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:24:04.813800 0.000000 udp 10.0.2.22 51868 -> 103.1.109.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:06.817197 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:07.818633 0.000106 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:07.818739 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:24:08.819736 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:09.821467 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:10.822337 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:11.814174 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:12.815389 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:13.817503 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:14.818094 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:15.819884 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:16.821218 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:17.823001 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:18.813914 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:19.815610 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:20.816945 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:21.818152 0.000000 udp 10.0.2.22 51868 -> 31.63.129.74 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:22.820487 0.000000 udp 10.0.2.22 51868 -> 62.82.81.35 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:23.821425 0.038204 udp 10.0.2.22 51868 <-> 89.69.212.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:24:24.823123 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:25.814198 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:26.815483 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:27.816804 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:28.688652 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:24:28.818833 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:30.821103 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:31.813269 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:32.814682 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:33.815671 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:34.817117 4.997375 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:35.818760 2.993963 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:35.818802 2.993921 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 2 172 flow=Background 1970/01/01 02:24:36.819946 3.995501 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:37.821730 0.181003 udp 10.0.2.22 51868 <-> 173.17.3.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:24:41.816925 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:42.819072 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:43.820198 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:44.821291 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:45.813222 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:46.814550 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:47.815820 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:48.817303 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:49.819171 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:50.819859 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:51.821846 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:52.813586 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:53.815122 0.000000 udp 10.0.2.22 51868 -> 31.63.129.74 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:54.816172 0.000000 udp 10.0.2.22 51868 -> 217.21.46.67 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:55.696848 0.000107 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:24:55.817763 0.000000 udp 10.0.2.22 51868 -> 1.36.118.97 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:56.819013 0.047874 udp 10.0.2.22 51868 <-> 150.214.66.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:24:57.820224 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:58.821940 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:24:59.812801 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:25:00.814535 0.000000 udp 10.0.2.22 51868 -> 31.63.129.74 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:25:01.816267 0.000000 udp 10.0.2.22 51868 -> 217.21.46.67 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:25:02.817461 3.004565 udp 10.0.2.22 51868 <-> 14.97.207.137 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:03.818932 0.608556 udp 10.0.2.22 51868 <-> 190.36.123.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:04.820029 0.000000 udp 10.0.2.22 51868 -> 1.36.118.97 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:25:06.813602 0.158329 udp 10.0.2.22 51868 <-> 50.88.67.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:07.814352 0.316150 udp 10.0.2.22 51868 <-> 14.96.116.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:08.816193 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:25:09.817762 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:25:10.818949 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:25:11.820370 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:25:12.821611 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:25:13.813033 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:25:14.815052 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:25:15.816464 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:25:16.817510 4.062884 udp 10.0.2.22 51868 -> 62.82.81.35 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:25:20.880394 0.000000 icmp 62.82.81.35 0x0303 -> 10.0.2.22 0x5040 URP 192 1 70 flow=Background 1970/01/01 02:25:17.819420 4.150571 udp 10.0.2.22 51868 <-> 50.88.67.44 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:18.820387 0.036820 udp 10.0.2.22 51868 <-> 89.69.212.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:19.821875 0.496260 udp 10.0.2.22 51868 <-> 190.36.123.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:22.695619 0.000114 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:25:22.816369 0.000000 udp 10.0.2.22 51868 -> 50.26.127.53 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:25:23.817395 0.000000 udp 10.0.2.22 51868 -> 31.63.129.74 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:25:24.819333 0.183651 udp 10.0.2.22 51868 <-> 174.102.72.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:25.820285 4.997065 udp 10.0.2.22 51868 <-> 50.88.67.44 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:26.821688 2.013947 udp 10.0.2.22 51868 <-> 46.223.215.46 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:27.813178 0.000000 udp 10.0.2.22 51868 -> 14.97.207.137 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:25:29.816289 0.000000 udp 10.0.2.22 51868 -> 31.63.129.74 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:25:30.971154 0.000000 udp 10.0.2.22 51868 <- 50.88.67.44 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:25:31.818828 0.036402 udp 10.0.2.22 51868 <-> 89.69.212.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:32.820630 0.000000 udp 10.0.2.22 51868 -> 217.21.46.67 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:25:33.822533 0.352478 udp 10.0.2.22 51868 <-> 14.96.116.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:34.395464 3.002017 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 02:25:34.813334 0.060727 udp 10.0.2.22 51868 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:35.814997 0.000000 udp 10.0.2.22 51868 -> 66.44.222.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:25:36.816027 0.590585 udp 10.0.2.22 51868 <-> 190.36.123.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:37.818205 0.351527 udp 10.0.2.22 51868 <-> 124.244.75.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:38.819358 0.399984 udp 10.0.2.22 51868 <-> 219.107.166.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:39.820976 0.126136 udp 10.0.2.22 51868 <-> 66.108.161.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:40.822091 4.996987 udp 10.0.2.22 51868 <-> 86.126.127.7 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:41.402867 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:25:41.813509 2.125406 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:42.814643 0.187216 udp 10.0.2.22 51868 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:44.818236 0.037355 udp 10.0.2.22 51868 <-> 188.143.29.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:45.860696 0.000000 udp 10.0.2.22 51868 <- 86.126.127.7 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:25:46.821085 0.103339 udp 10.0.2.22 51868 <-> 93.84.100.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:47.822546 0.000000 udp 10.0.2.22 51868 -> 77.238.195.53 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:25:48.813798 0.330343 udp 10.0.2.22 51868 <-> 14.46.114.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:49.404086 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:25:49.694780 0.000142 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:25:49.815266 0.302443 udp 10.0.2.22 51868 <-> 190.247.155.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:50.816683 0.162902 udp 10.0.2.22 51868 <-> 24.203.38.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:51.817555 0.366548 udp 10.0.2.22 51868 <-> 111.254.125.242 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:52.819679 0.319693 udp 10.0.2.22 51868 <-> 121.176.122.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:53.820939 0.145440 udp 10.0.2.22 51868 <-> 67.242.95.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:54.822481 0.000000 udp 10.0.2.22 51868 -> 79.239.184.39 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:25:55.813884 3.153624 udp 10.0.2.22 51868 <-> 68.12.154.110 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:56.815159 0.091458 udp 10.0.2.22 51868 <-> 77.242.54.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:25:57.816920 2.002147 udp 10.0.2.22 51868 -> 115.242.188.203 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:26:00.820496 0.349307 udp 10.0.2.22 51868 <-> 123.195.215.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:01.822103 0.045053 udp 10.0.2.22 51868 <-> 5.13.214.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:02.813525 0.084000 udp 10.0.2.22 51868 <-> 46.191.234.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:03.814792 0.161787 udp 10.0.2.22 51868 <-> 174.64.165.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:04.816742 0.101131 udp 10.0.2.22 51868 <-> 217.217.142.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:05.407297 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:26:05.818376 0.344847 udp 10.0.2.22 51868 <-> 218.250.127.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:06.819170 0.057872 udp 10.0.2.22 51868 <-> 78.8.65.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:07.820709 4.997709 udp 10.0.2.22 51868 <-> 218.226.32.36 16464 CON 0 0 5 1954 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:09.813958 0.216557 udp 10.0.2.22 51868 <-> 67.187.191.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:10.815148 0.401629 udp 10.0.2.22 51868 <-> 121.124.80.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:11.816619 0.151688 udp 10.0.2.22 51868 <-> 75.149.216.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:13.208057 0.000000 udp 10.0.2.22 51868 <- 218.226.32.36 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:26:13.819585 0.209520 udp 10.0.2.22 51868 <-> 123.201.191.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:14.820904 0.136089 udp 10.0.2.22 51868 <-> 91.243.161.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:15.822586 0.159626 udp 10.0.2.22 51868 <-> 114.79.166.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:16.693265 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:26:16.814079 0.028364 udp 10.0.2.22 51868 <-> 95.85.182.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:17.815200 0.511641 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:18.816835 0.236516 udp 10.0.2.22 51868 <-> 200.93.52.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:19.818315 0.163821 udp 10.0.2.22 51868 <-> 76.179.191.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:20.819535 2.994631 udp 10.0.2.22 51868 <-> 68.217.244.67 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:21.821077 0.000000 udp 10.0.2.22 51868 -> 188.173.128.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:26:22.822217 0.000000 udp 10.0.2.22 51868 -> 86.122.145.68 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:26:24.815148 0.000000 udp 10.0.2.22 51868 -> 147.156.24.77 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:26:25.816931 0.359694 udp 10.0.2.22 51868 <-> 61.223.208.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:26.818341 0.357979 udp 10.0.2.22 51868 <-> 118.165.202.64 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:27.819674 0.210442 udp 10.0.2.22 51868 <-> 183.82.241.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:28.821212 0.000000 udp 10.0.2.22 51868 -> 92.19.229.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:26:29.822575 0.233266 udp 10.0.2.22 51868 <-> 161.200.26.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:30.814171 0.000000 udp 10.0.2.22 51868 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:26:31.815157 0.071914 udp 10.0.2.22 51868 <-> 151.66.223.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:32.817025 0.336781 udp 10.0.2.22 51868 <-> 219.171.36.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:33.817935 0.349397 udp 10.0.2.22 51868 <-> 221.23.132.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:34.820182 0.324617 udp 10.0.2.22 51868 <-> 210.222.222.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:35.820834 0.048305 udp 10.0.2.22 51868 <-> 188.173.249.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:36.822914 0.046977 udp 10.0.2.22 51868 <-> 46.160.101.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:37.413655 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:26:37.814089 0.060120 udp 10.0.2.22 51868 <-> 92.37.126.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:38.815126 3.390315 udp 10.0.2.22 51868 <-> 37.19.155.236 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:39.816915 0.144483 udp 10.0.2.22 51868 <-> 82.225.160.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:40.818607 3.004107 udp 10.0.2.22 51868 -> 92.241.140.221 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:26:42.821534 0.000000 udp 10.0.2.22 51868 -> 24.177.207.221 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:26:43.692680 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:26:44.814362 0.069452 udp 10.0.2.22 51868 <-> 86.121.142.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:45.815777 0.141138 udp 10.0.2.22 51868 <-> 75.138.193.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:46.816856 0.601689 udp 10.0.2.22 51868 <-> 117.214.188.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:47.818088 0.198545 udp 10.0.2.22 51868 <-> 188.6.58.25 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:48.820117 0.128227 udp 10.0.2.22 51868 <-> 69.63.41.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:49.821528 0.149152 udp 10.0.2.22 51868 <-> 75.134.178.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:50.822599 2.476620 udp 10.0.2.22 51868 <-> 180.215.207.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:51.814010 0.000000 udp 10.0.2.22 51868 -> 93.150.192.70 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:26:52.815620 0.000000 udp 10.0.2.22 51868 -> 71.197.28.72 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:26:53.817396 0.148392 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:54.818188 0.136749 udp 10.0.2.22 51868 <-> 98.204.79.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:55.820318 0.328976 udp 10.0.2.22 51868 <-> 14.46.114.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:56.821534 0.326337 udp 10.0.2.22 51868 <-> 114.45.22.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:57.823319 0.124213 udp 10.0.2.22 51868 <-> 66.65.121.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:58.813965 0.359652 udp 10.0.2.22 51868 <-> 1.168.251.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:26:59.815688 0.000000 udp 10.0.2.22 51868 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:27:00.816746 0.046911 udp 10.0.2.22 51868 <-> 46.160.101.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:01.818468 0.210434 udp 10.0.2.22 51868 <-> 24.21.31.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:02.820055 0.407179 udp 10.0.2.22 51868 <-> 175.199.55.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:03.821478 0.042901 udp 10.0.2.22 51868 <-> 195.14.221.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:04.813028 0.174334 udp 10.0.2.22 51868 <-> 24.27.70.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:05.814839 0.000000 udp 10.0.2.22 51868 -> 96.31.10.230 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:27:06.815765 0.000000 udp 10.0.2.22 51868 -> 14.96.205.214 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:27:07.817446 0.512557 udp 10.0.2.22 51868 <-> 187.26.47.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:08.818314 0.058520 udp 10.0.2.22 51868 <-> 193.254.233.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:09.820057 0.212847 udp 10.0.2.22 51868 <-> 98.150.103.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:10.690921 0.000099 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:27:10.821409 0.154033 udp 10.0.2.22 51868 <-> 184.74.129.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:11.812553 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:27:12.472478 0.000000 udp 10.0.2.22 51868 <- 96.31.10.230 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:27:12.814246 0.045612 udp 10.0.2.22 51868 <-> 178.150.200.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:13.815472 0.086407 udp 10.0.2.22 51868 <-> 151.56.243.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:14.817100 1.042058 udp 10.0.2.22 51868 <-> 83.103.159.79 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:16.819855 0.000000 udp 10.0.2.22 51868 -> 71.80.71.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:27:17.821832 2.993914 udp 10.0.2.22 51868 -> 115.241.146.241 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:27:18.813397 0.145014 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:19.814746 1.091575 udp 10.0.2.22 51868 <-> 177.191.57.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:21.817083 1.028054 udp 10.0.2.22 51868 <-> 174.113.145.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:22.819049 0.254084 udp 10.0.2.22 51868 <-> 124.123.223.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:23.820377 0.120444 udp 10.0.2.22 51868 <-> 24.150.162.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:24.821957 0.000000 udp 10.0.2.22 51868 -> 95.237.40.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:27:25.812750 0.167772 udp 10.0.2.22 51868 <-> 71.45.74.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:26.814683 0.000000 udp 10.0.2.22 51868 -> 113.19.198.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:27:27.816212 0.265239 udp 10.0.2.22 51868 <-> 49.204.136.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:28.817818 0.047766 udp 10.0.2.22 51868 <-> 150.214.66.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:29.819052 0.000000 udp 10.0.2.22 51868 -> 213.198.227.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:27:30.820459 0.183086 udp 10.0.2.22 51868 <-> 201.174.223.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:31.821868 0.058013 udp 10.0.2.22 51868 <-> 81.225.87.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:32.812957 0.000000 udp 10.0.2.22 51868 -> 188.104.141.219 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:27:33.814323 0.176688 udp 10.0.2.22 51868 <-> 75.65.20.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:34.815903 0.391669 udp 10.0.2.22 51868 <-> 177.137.187.125 16464 CON 0 0 7 5398 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:35.817425 0.058938 udp 10.0.2.22 51868 <-> 86.126.127.7 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:36.818994 0.342074 udp 10.0.2.22 51868 <-> 190.74.80.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:37.690107 0.000133 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:27:37.820260 0.491867 udp 10.0.2.22 51868 <-> 190.176.231.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:38.821441 0.000000 udp 10.0.2.22 51868 -> 186.136.213.188 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:27:39.813267 0.057283 udp 10.0.2.22 51868 <-> 178.149.181.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:40.814775 0.585397 udp 10.0.2.22 51868 <-> 202.29.178.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:41.815973 0.472769 udp 10.0.2.22 51868 <-> 117.225.140.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:42.817195 0.021987 udp 10.0.2.22 51868 <-> 62.44.118.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:43.819328 0.244731 udp 10.0.2.22 51868 <-> 107.35.58.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:44.820286 0.000000 udp 10.0.2.22 51868 -> 42.144.74.103 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:27:45.822199 0.198776 udp 10.0.2.22 51868 <-> 223.29.198.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:46.812909 0.376739 udp 10.0.2.22 51868 <-> 115.240.99.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:47.814741 0.000000 udp 10.0.2.22 51868 -> 95.77.135.212 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:27:48.816190 0.115263 udp 10.0.2.22 51868 <-> 24.150.162.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:49.817518 0.157593 udp 10.0.2.22 51868 <-> 50.158.209.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:50.819509 3.154438 udp 10.0.2.22 51868 <-> 174.64.165.44 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:51.820088 0.000000 udp 10.0.2.22 51868 -> 114.41.91.237 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:27:52.821824 0.156267 udp 10.0.2.22 51868 <-> 71.235.63.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:54.814945 0.000000 udp 10.0.2.22 51868 -> 14.99.3.47 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:27:55.816303 0.000000 udp 10.0.2.22 51868 -> 68.57.136.125 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:27:56.817380 0.390308 udp 10.0.2.22 51868 <-> 112.158.196.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:57.819390 0.552221 udp 10.0.2.22 51868 <-> 117.201.115.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:58.820566 0.405793 udp 10.0.2.22 51868 <-> 116.73.206.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:27:59.821858 0.040947 udp 10.0.2.22 51868 <-> 79.118.33.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:00.813371 0.023587 udp 10.0.2.22 51868 <-> 95.208.68.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:01.814719 0.160973 udp 10.0.2.22 51868 <-> 98.226.172.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:02.816193 0.471496 udp 10.0.2.22 51868 <-> 95.251.35.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:03.817604 0.326495 udp 10.0.2.22 51868 <-> 65.191.163.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:04.689104 0.000127 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:28:04.818946 0.373615 udp 10.0.2.22 51868 <-> 124.244.75.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:05.820954 0.280712 udp 10.0.2.22 51868 <-> 177.42.27.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:06.821995 0.053420 udp 10.0.2.22 51868 <-> 85.14.74.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:07.813759 0.127692 udp 10.0.2.22 51868 <-> 68.39.15.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:08.815061 0.233502 udp 10.0.2.22 51868 <-> 200.93.93.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:09.816507 0.140769 udp 10.0.2.22 51868 <-> 209.203.200.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:10.817687 0.144631 udp 10.0.2.22 51868 <-> 97.95.228.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:11.818828 0.249812 udp 10.0.2.22 51868 <-> 103.25.168.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:12.820271 0.071017 udp 10.0.2.22 51868 <-> 62.99.40.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:13.821870 0.063828 udp 10.0.2.22 51868 <-> 88.161.48.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:14.813855 0.000000 udp 10.0.2.22 51868 -> 113.193.86.195 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:28:15.815104 0.400683 udp 10.0.2.22 51868 <-> 201.26.213.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:16.816087 0.000000 udp 10.0.2.22 51868 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:28:17.817557 0.219130 udp 10.0.2.22 51868 <-> 58.68.21.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:18.819623 0.344280 udp 10.0.2.22 51868 <-> 114.24.22.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:19.820553 0.157380 udp 10.0.2.22 51868 <-> 107.5.244.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:20.822412 0.062680 udp 10.0.2.22 51868 <-> 95.42.254.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:21.813478 0.162220 udp 10.0.2.22 51868 <-> 66.61.104.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:22.815231 0.000000 udp 10.0.2.22 51868 -> 176.227.142.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:28:23.816765 0.000000 udp 10.0.2.22 51868 -> 37.121.124.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:28:24.817874 0.049510 udp 10.0.2.22 51868 <-> 91.126.97.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:25.819452 0.000000 udp 10.0.2.22 51868 -> 182.18.177.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:28:26.821026 0.143760 udp 10.0.2.22 51868 <-> 97.95.228.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:27.822442 0.000000 udp 10.0.2.22 51868 -> 116.72.201.113 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:28:28.813899 0.372835 udp 10.0.2.22 51868 <-> 59.128.198.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:29.815233 0.199683 udp 10.0.2.22 51868 <-> 68.179.181.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:30.816188 0.000000 udp 10.0.2.22 51868 -> 71.63.13.85 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:28:31.687942 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:28:31.818095 1.008124 udp 10.0.2.22 51868 <-> 115.245.180.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:32.819042 0.322805 udp 10.0.2.22 51868 <-> 220.96.151.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:33.821036 0.143855 udp 10.0.2.22 51868 <-> 87.17.229.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:34.822159 0.000000 udp 10.0.2.22 51868 -> 14.97.126.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:28:35.813663 0.324575 udp 10.0.2.22 51868 <-> 115.242.244.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:36.815368 0.304734 udp 10.0.2.22 51868 <-> 119.230.147.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:37.816390 0.000000 udp 10.0.2.22 51868 -> 115.241.31.141 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:28:38.818174 0.311935 udp 10.0.2.22 51868 <-> 125.4.4.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:39.819843 0.132146 udp 10.0.2.22 51868 <-> 75.109.236.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:40.821107 0.312358 udp 10.0.2.22 51868 <-> 61.46.106.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:41.822072 0.085013 udp 10.0.2.22 51868 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:42.813665 0.168729 udp 10.0.2.22 51868 <-> 113.20.16.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:43.815292 0.000000 udp 10.0.2.22 51868 -> 118.20.34.38 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:28:44.816645 0.000000 udp 10.0.2.22 51868 -> 5.237.22.113 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:28:45.818097 0.000000 udp 10.0.2.22 51868 -> 49.205.154.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:28:46.819243 0.338400 udp 10.0.2.22 51868 <-> 175.200.141.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:47.820776 0.026675 udp 10.0.2.22 51868 <-> 85.130.81.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:48.822565 0.272948 udp 10.0.2.22 51868 <-> 75.225.70.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:49.813828 0.000000 udp 10.0.2.22 51868 -> 78.96.210.121 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:28:50.815206 0.083597 udp 10.0.2.22 51868 <-> 85.85.71.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:51.816697 0.186929 udp 10.0.2.22 51868 <-> 24.139.142.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:52.818325 0.205761 udp 10.0.2.22 51868 <-> 71.197.165.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:53.819798 1.052917 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:55.822582 0.171715 udp 10.0.2.22 51868 <-> 188.136.153.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:28:56.814345 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:28:57.815680 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:28:58.696181 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:28:58.816965 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:28:59.817866 0.166915 udp 10.0.2.22 51868 <-> 24.113.7.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:29:00.819501 0.217642 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:29:01.821231 0.000000 udp 10.0.2.22 51868 -> 24.244.127.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:02.822572 0.051954 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:29:03.814339 0.069560 udp 10.0.2.22 51868 <-> 92.225.34.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:29:04.815292 0.324836 udp 10.0.2.22 51868 <-> 220.96.151.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:29:05.816637 0.050931 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:29:06.818533 0.159229 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:29:07.819504 0.000000 udp 10.0.2.22 51868 -> 83.192.115.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:08.820809 0.000000 udp 10.0.2.22 51868 -> 76.79.188.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:09.822715 0.072786 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:29:10.813755 0.152209 udp 10.0.2.22 51868 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:29:11.815961 1.788600 udp 10.0.2.22 51868 <-> 2.185.124.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:29:12.816716 0.000000 udp 10.0.2.22 51868 -> 117.208.53.228 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:13.818471 4.997093 udp 10.0.2.22 51868 <-> 124.123.108.50 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:29:14.819746 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:15.821477 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:16.822842 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:17.814313 0.324960 udp 10.0.2.22 51868 <-> 220.96.151.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:29:19.816619 0.047250 udp 10.0.2.22 51868 <-> 213.159.45.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:29:20.818446 0.051812 udp 10.0.2.22 51868 <-> 46.214.189.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:29:21.819478 0.167787 udp 10.0.2.22 51868 <-> 24.203.38.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:29:22.821194 0.000055 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:22.821249 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:29:23.823109 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:24.813932 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:25.695301 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:29:25.815226 0.255755 udp 10.0.2.22 51868 <-> 50.113.56.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:29:26.816703 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:27.818162 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:29.821599 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:30.822698 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:31.814082 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:32.815385 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:33.817431 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:34.818532 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:35.820114 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:36.821638 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:37.812858 0.000061 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:37.812919 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:29:38.814422 4.005241 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:39.816056 0.355354 udp 10.0.2.22 51868 <-> 93.184.81.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:29:40.817211 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:41.818247 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:43.821123 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:44.813100 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:45.814147 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:46.815424 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:48.818404 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:49.820215 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:50.821829 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:51.812842 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:52.814658 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:53.695361 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:29:53.816172 0.000060 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:53.816232 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:29:54.816944 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:29:55.818864 2.148413 udp 10.0.2.22 51868 <-> 66.168.86.72 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:29:56.820405 0.281095 udp 10.0.2.22 51868 <-> 50.113.56.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:29:58.812974 0.139267 udp 10.0.2.22 51868 <-> 69.206.137.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:29:59.814502 0.156392 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:00.815947 0.036720 udp 10.0.2.22 51868 <-> 89.133.113.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:01.817860 0.158895 udp 10.0.2.22 51868 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:02.819019 0.347738 udp 10.0.2.22 51868 <-> 113.254.247.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:03.820133 0.040060 udp 10.0.2.22 51868 <-> 91.67.136.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:04.821650 0.068036 udp 10.0.2.22 51868 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:05.812738 0.160013 udp 10.0.2.22 51868 <-> 24.63.83.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:06.814658 0.047909 udp 10.0.2.22 51868 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:07.815964 3.004423 udp 10.0.2.22 51868 <-> 180.146.156.15 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:08.817352 0.058065 udp 10.0.2.22 51868 <-> 94.253.231.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:09.818952 0.000000 udp 10.0.2.22 51868 -> 173.174.0.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:30:11.821612 0.067963 udp 10.0.2.22 51868 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:12.812985 0.000000 udp 10.0.2.22 51868 -> 115.244.227.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:30:13.814241 0.000000 udp 10.0.2.22 51868 -> 61.201.224.96 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:30:14.815794 0.038092 udp 10.0.2.22 51868 <-> 94.253.202.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:15.817194 0.153565 udp 10.0.2.22 51868 <-> 24.63.83.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:16.818642 0.181579 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:17.820072 0.141808 udp 10.0.2.22 51868 <-> 203.192.205.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:18.821584 0.163428 udp 10.0.2.22 51868 <-> 68.59.56.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:19.813232 0.145190 udp 10.0.2.22 51868 <-> 24.154.53.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:20.694195 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:30:20.814854 0.149743 udp 10.0.2.22 51868 <-> 70.82.157.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:21.816192 0.054563 udp 10.0.2.22 51868 <-> 188.173.130.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:22.817504 4.997364 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:30:23.819199 3.019032 udp 10.0.2.22 51868 <-> 83.83.126.95 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:24.820126 0.000000 udp 10.0.2.22 51868 -> 92.86.74.152 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:30:25.821513 0.156994 udp 10.0.2.22 51868 <-> 68.59.56.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:28.816199 4.053067 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:29.817589 1.315937 udp 10.0.2.22 51868 <-> 82.245.78.248 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:31.820384 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:30:33.813180 0.179797 udp 10.0.2.22 51868 <-> 203.115.94.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:34.814881 0.000000 udp 10.0.2.22 51868 -> 93.156.11.162 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:30:35.816027 0.146879 udp 10.0.2.22 51868 <-> 24.239.220.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:36.818097 0.000000 udp 10.0.2.22 51868 -> 117.194.243.75 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:30:37.819595 0.164137 udp 10.0.2.22 51868 <-> 74.131.91.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:38.820703 0.144731 udp 10.0.2.22 51868 <-> 71.71.254.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:39.822028 0.000000 udp 10.0.2.22 51868 -> 76.206.16.81 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:30:40.813410 0.000000 udp 10.0.2.22 51868 -> 66.130.9.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:30:41.815114 0.000000 udp 10.0.2.22 51868 -> 46.108.227.86 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:30:42.816127 0.138456 udp 10.0.2.22 51868 <-> 174.106.129.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:43.817591 0.186186 udp 10.0.2.22 51868 <-> 68.149.112.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:44.818831 0.035895 udp 10.0.2.22 51868 <-> 79.117.40.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:45.820478 0.047688 udp 10.0.2.22 51868 <-> 80.167.147.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:46.822370 0.497788 udp 10.0.2.22 51868 <-> 114.42.85.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:47.693532 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:30:47.813417 0.268381 udp 10.0.2.22 51868 <-> 190.206.89.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:48.815134 0.351928 udp 10.0.2.22 51868 <-> 114.47.2.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:49.816423 0.149816 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:50.817544 0.282199 udp 10.0.2.22 51868 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:51.819303 0.147081 udp 10.0.2.22 51868 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:52.820583 0.296154 udp 10.0.2.22 51868 <-> 61.21.68.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:53.822371 0.153896 udp 10.0.2.22 51868 <-> 71.80.71.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:54.813273 0.000000 udp 10.0.2.22 51868 -> 217.211.215.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:30:55.814639 0.000000 udp 10.0.2.22 51868 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:30:56.816199 0.000000 udp 10.0.2.22 51868 -> 79.118.210.237 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:30:57.817538 2.003142 udp 10.0.2.22 51868 <-> 69.244.18.241 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:30:58.819357 0.363596 udp 10.0.2.22 51868 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:00.822414 0.000000 udp 10.0.2.22 51868 -> 84.54.171.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:31:01.813960 0.100146 udp 10.0.2.22 51868 <-> 62.113.14.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:02.814977 0.000000 udp 10.0.2.22 51868 -> 217.174.48.38 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:31:03.816300 4.997313 udp 10.0.2.22 51868 <-> 5.13.135.39 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:04.818133 0.292970 udp 10.0.2.22 51868 <-> 61.21.68.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:05.819751 0.000000 udp 10.0.2.22 51868 -> 178.25.74.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:31:06.821049 0.000000 udp 10.0.2.22 51868 -> 84.54.171.18 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:31:07.822445 0.000000 udp 10.0.2.22 51868 -> 217.211.215.16 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:31:08.861662 0.000000 udp 10.0.2.22 51868 <- 5.13.135.39 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:31:09.815334 4.408818 udp 10.0.2.22 51868 <-> 220.102.212.234 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:10.816412 0.000000 udp 10.0.2.22 51868 -> 203.202.216.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:31:11.817797 0.173996 udp 10.0.2.22 51868 <-> 62.113.14.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:12.819184 1.439182 udp 10.0.2.22 51868 <-> 75.243.16.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:14.692239 0.000103 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:31:14.822053 0.224073 udp 10.0.2.22 51868 <-> 78.249.211.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:15.813410 0.116424 udp 10.0.2.22 51868 <-> 64.121.147.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:16.815039 0.149024 udp 10.0.2.22 51868 <-> 69.122.5.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:17.816598 0.364926 udp 10.0.2.22 51868 <-> 116.203.137.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:18.818381 0.157612 udp 10.0.2.22 51868 <-> 31.7.124.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:19.819869 3.086932 udp 10.0.2.22 51868 <-> 24.137.128.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:20.821172 0.000000 udp 10.0.2.22 51868 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:31:21.822255 0.420338 udp 10.0.2.22 51868 <-> 112.133.130.91 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:22.813458 0.000000 udp 10.0.2.22 51868 -> 79.153.167.153 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:31:23.815316 0.169444 udp 10.0.2.22 51868 <-> 69.243.233.159 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:24.816412 0.051196 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:25.818475 0.056836 udp 10.0.2.22 51868 <-> 212.104.169.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:26.819240 0.129044 udp 10.0.2.22 51868 <-> 98.229.254.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:27.821252 0.008522 udp 10.0.2.22 51868 <-> 152.66.15.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:28.822427 0.146530 udp 10.0.2.22 51868 <-> 67.83.216.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:29.813687 0.270865 udp 10.0.2.22 51868 <-> 115.242.96.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:30.815367 0.335139 udp 10.0.2.22 51868 <-> 180.176.104.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:31.816531 0.153793 udp 10.0.2.22 51868 <-> 98.214.215.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:32.818481 0.182374 udp 10.0.2.22 51868 <-> 64.207.73.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:33.819935 0.174753 udp 10.0.2.22 51868 <-> 184.156.13.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:34.821329 0.242794 udp 10.0.2.22 51868 <-> 75.246.135.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:35.822709 0.305696 udp 10.0.2.22 51868 <-> 111.185.49.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:36.813766 0.387999 udp 10.0.2.22 51868 <-> 27.3.106.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:37.815203 0.000000 udp 10.0.2.22 51868 -> 31.44.194.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:31:38.817170 0.088595 udp 10.0.2.22 51868 <-> 87.122.138.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:39.818447 0.310267 udp 10.0.2.22 51868 <-> 122.27.16.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:40.819744 0.043202 udp 10.0.2.22 51868 <-> 213.89.197.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:41.690538 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:31:41.821258 0.322920 udp 10.0.2.22 51868 <-> 61.70.94.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:42.822779 0.057814 udp 10.0.2.22 51868 <-> 81.61.202.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:43.814245 0.161483 udp 10.0.2.22 51868 <-> 71.200.230.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:44.815157 0.169931 udp 10.0.2.22 51868 <-> 98.194.123.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:45.817132 0.000000 udp 10.0.2.22 51868 -> 98.229.254.243 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:31:46.818548 0.316479 udp 10.0.2.22 51868 <-> 115.242.119.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:47.819524 0.144823 udp 10.0.2.22 51868 <-> 67.83.216.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:48.820856 0.336253 udp 10.0.2.22 51868 <-> 14.96.172.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:49.822920 0.046684 udp 10.0.2.22 51868 <-> 89.29.182.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:50.814430 0.151238 udp 10.0.2.22 51868 <-> 68.97.115.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:51.815151 0.195441 udp 10.0.2.22 51868 <-> 50.27.74.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:52.816764 0.000000 udp 10.0.2.22 51868 -> 96.10.91.141 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:31:53.818362 0.406301 udp 10.0.2.22 51868 <-> 183.109.37.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:54.819725 0.000000 udp 10.0.2.22 51868 -> 192.226.149.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:31:55.821009 0.186024 udp 10.0.2.22 51868 <-> 75.54.70.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:56.822516 0.112436 udp 10.0.2.22 51868 <-> 82.61.20.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:57.814411 0.413140 udp 10.0.2.22 51868 <-> 186.89.101.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:58.815580 0.013049 udp 10.0.2.22 51868 <-> 89.103.128.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:31:59.816979 0.142281 udp 10.0.2.22 51868 <-> 24.182.94.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:00.818574 0.298501 udp 10.0.2.22 51868 <-> 124.144.206.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:01.819739 0.049107 udp 10.0.2.22 51868 <-> 88.135.143.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:02.821447 1.872440 arp 10.0.2.22 who 169.254.99.11 INT 3 126 flow=Background-ARP 1970/01/01 02:32:03.823021 0.161314 udp 10.0.2.22 51868 <-> 66.229.143.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:04.813908 0.518153 udp 10.0.2.22 51868 <-> 58.164.238.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:05.815405 0.041971 udp 10.0.2.22 51868 <-> 147.156.153.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:06.817227 0.000000 udp 10.0.2.22 51868 -> 31.63.129.74 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:32:07.818318 0.153485 udp 10.0.2.22 51868 <-> 74.65.173.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:08.689714 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:32:08.819676 0.051430 udp 10.0.2.22 51868 <-> 178.79.32.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:09.821451 0.000000 udp 10.0.2.22 51868 -> 71.80.71.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:32:10.812572 0.000000 udp 10.0.2.22 51868 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:32:11.814494 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:32:12.815328 0.191764 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:13.817083 0.000000 udp 10.0.2.22 51868 -> 90.230.7.90 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:32:14.818930 0.160877 udp 10.0.2.22 51868 <-> 114.79.151.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:15.820221 0.309286 udp 10.0.2.22 51868 <-> 66.115.88.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:16.821297 0.213360 udp 10.0.2.22 51868 <-> 71.199.58.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:17.812828 0.344070 udp 10.0.2.22 51868 <-> 211.76.37.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:18.814605 0.142381 udp 10.0.2.22 51868 <-> 96.37.226.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:19.815703 0.322451 udp 10.0.2.22 51868 <-> 1.175.123.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:20.817004 0.150046 udp 10.0.2.22 51868 <-> 24.212.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:21.818458 0.340061 udp 10.0.2.22 51868 <-> 1.175.44.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:22.820456 0.391466 udp 10.0.2.22 51868 <-> 111.242.159.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:23.821627 0.169399 udp 10.0.2.22 51868 <-> 68.206.10.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:24.813103 0.081198 udp 10.0.2.22 51868 <-> 79.42.54.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:25.814120 0.100536 udp 10.0.2.22 51868 <-> 78.50.238.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:26.815832 0.342676 udp 10.0.2.22 51868 <-> 180.177.186.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:27.816951 0.828827 udp 10.0.2.22 51868 <-> 117.218.93.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:28.818697 0.033910 udp 10.0.2.22 51868 <-> 89.132.241.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:29.820014 1.726115 udp 10.0.2.22 51868 <-> 24.152.221.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:30.821783 0.151027 udp 10.0.2.22 51868 <-> 74.69.234.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:31.812677 1.165186 udp 10.0.2.22 51868 <-> 95.233.87.84 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:33.815644 0.174547 udp 10.0.2.22 51868 <-> 71.63.13.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:34.817226 0.036394 udp 10.0.2.22 51868 <-> 89.69.212.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:35.688620 0.000037 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:32:35.818527 0.078457 udp 10.0.2.22 51868 <-> 62.99.117.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:36.819875 0.416282 udp 10.0.2.22 51868 <-> 175.211.29.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:38.813584 0.000101 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:32:38.813685 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:32:39.814237 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:32:40.816213 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:32:41.419470 3.001475 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 02:32:41.817057 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:32:42.819233 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:32:43.820445 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:32:44.821645 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:32:45.812789 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:32:46.814429 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:32:47.816127 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:32:48.427204 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:32:48.817821 0.000000 udp 10.0.2.22 51868 -> 117.213.68.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:32:49.819388 0.389953 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:50.820337 0.814635 udp 10.0.2.22 51868 <-> 27.4.8.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:51.822261 0.334959 udp 10.0.2.22 51868 <-> 14.96.169.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:52.813404 0.000000 udp 10.0.2.22 51868 -> 95.107.216.55 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:32:53.815140 0.135453 udp 10.0.2.22 51868 <-> 68.192.3.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:54.815996 0.044165 udp 10.0.2.22 51868 <-> 147.156.106.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:55.817742 0.051498 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:56.428201 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:32:56.819215 0.067666 udp 10.0.2.22 51868 <-> 84.0.31.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:57.820292 0.155284 udp 10.0.2.22 51868 <-> 24.89.222.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:58.821971 0.038807 udp 10.0.2.22 51868 <-> 91.67.136.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:32:59.812939 0.000000 udp 10.0.2.22 51868 -> 118.165.202.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:00.814445 0.162450 udp 10.0.2.22 51868 <-> 68.226.220.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:33:01.816372 0.345977 udp 10.0.2.22 51868 <-> 36.232.204.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:33:02.687698 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:33:02.817734 0.040574 udp 10.0.2.22 51868 <-> 212.43.50.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:33:03.818761 0.222706 udp 10.0.2.22 51868 <-> 82.225.160.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:33:04.820535 0.033702 udp 10.0.2.22 51868 <-> 77.238.195.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:33:05.822067 0.000000 udp 10.0.2.22 51868 -> 178.173.226.167 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:06.813110 0.389712 udp 10.0.2.22 51868 <-> 66.115.88.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:33:07.815055 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:08.816190 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:09.817314 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:10.819177 0.000055 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:10.819232 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:33:12.431044 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:33:12.821734 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:13.813352 0.000000 udp 10.0.2.22 51868 -> 111.254.48.188 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:14.814694 0.052168 udp 10.0.2.22 51868 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:33:15.816328 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:16.817552 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:17.818955 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:18.820537 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:19.821967 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:20.813367 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:21.815130 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:22.816392 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:23.817845 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:24.819127 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:25.821007 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:26.822517 0.000044 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:26.822561 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:33:27.813311 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:29.696172 0.000126 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:33:29.816757 0.030180 udp 10.0.2.22 51868 <-> 87.97.132.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:33:30.818127 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:31.819278 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:32.820649 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:33.822576 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:34.813661 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:35.815238 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:36.816395 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:37.818321 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:39.820909 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:40.821967 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:41.814109 0.000063 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:41.814172 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:33:42.815357 4.005184 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:43.816814 0.021065 udp 10.0.2.22 51868 <-> 161.53.166.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:33:44.437225 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:33:44.818343 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:45.819155 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:47.822114 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:49.814798 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:50.816577 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:51.818007 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:52.819327 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:53.820970 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:54.822746 0.000089 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:54.822835 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:33:55.813436 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:56.695145 0.000097 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:33:56.815324 0.058702 udp 10.0.2.22 51868 <-> 79.115.66.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:33:57.817037 0.000000 udp 10.0.2.22 51868 -> 197.7.6.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:58.818027 0.051771 udp 10.0.2.22 51868 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:33:59.819359 0.264259 udp 10.0.2.22 51868 <-> 178.173.226.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:00.820984 0.182405 udp 10.0.2.22 51868 <-> 183.87.217.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:01.822274 0.050658 udp 10.0.2.22 51868 <-> 95.180.65.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:02.813620 0.000000 udp 10.0.2.22 51868 -> 81.147.68.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:34:03.815101 0.253253 udp 10.0.2.22 51868 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:04.816775 2.002867 udp 10.0.2.22 51868 <-> 89.246.6.64 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:05.818111 0.000000 udp 10.0.2.22 51868 -> 68.38.34.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:34:07.820762 1.915076 udp 10.0.2.22 51868 <-> 121.215.21.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:08.822367 0.076852 udp 10.0.2.22 51868 <-> 82.247.95.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:09.813572 0.755892 udp 10.0.2.22 51868 <-> 90.227.35.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:10.815594 0.241156 udp 10.0.2.22 51868 <-> 71.45.42.26 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:11.816986 0.116998 udp 10.0.2.22 51868 <-> 89.132.14.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:12.817894 0.000000 udp 10.0.2.22 51868 -> 116.203.234.40 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:34:13.819847 0.113698 udp 10.0.2.22 51868 <-> 109.182.53.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:14.820939 0.125189 udp 10.0.2.22 51868 <-> 79.173.35.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:15.822867 0.145505 udp 10.0.2.22 51868 <-> 66.173.32.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:16.813828 0.190859 udp 10.0.2.22 51868 <-> 68.107.129.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:17.815182 1.076552 udp 10.0.2.22 51868 <-> 85.85.71.52 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:19.818810 0.207458 udp 10.0.2.22 51868 <-> 50.26.127.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:20.819652 0.000000 udp 10.0.2.22 51868 -> 14.97.102.93 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:34:21.821264 0.528596 udp 10.0.2.22 51868 <-> 78.42.218.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:22.822737 4.996720 udp 10.0.2.22 51868 <-> 108.176.96.62 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:23.693900 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:34:23.814406 0.000000 udp 10.0.2.22 51868 -> 69.47.17.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:34:24.815164 0.022188 udp 10.0.2.22 51868 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:25.816946 0.000000 udp 10.0.2.22 51868 -> 190.146.36.60 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:34:26.818623 1.304758 udp 10.0.2.22 51868 <-> 183.87.73.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:27.966609 0.000000 udp 10.0.2.22 51868 <- 108.176.96.62 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:34:28.821526 0.043463 udp 10.0.2.22 51868 <-> 5.20.72.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:29.822336 0.299007 udp 10.0.2.22 51868 <-> 61.21.68.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:30.814422 0.000000 udp 10.0.2.22 51868 -> 183.83.107.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:34:31.815325 0.000000 udp 10.0.2.22 51868 -> 66.237.94.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:34:32.816842 3.004776 udp 10.0.2.22 51868 <-> 211.36.185.195 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:33.818104 0.000000 udp 10.0.2.22 51868 -> 88.87.30.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:34:34.819815 0.000000 udp 10.0.2.22 51868 -> 95.169.211.29 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:34:36.822644 0.204206 udp 10.0.2.22 51868 <-> 66.237.94.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:37.813941 0.000000 udp 10.0.2.22 51868 -> 188.131.27.193 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:34:38.815341 0.476639 udp 10.0.2.22 51868 <-> 211.36.185.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:39.817235 0.082035 udp 10.0.2.22 51868 <-> 78.188.164.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:40.818766 0.287131 udp 10.0.2.22 51868 <-> 115.161.4.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:41.819605 0.158790 udp 10.0.2.22 51868 <-> 24.40.246.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:42.821440 0.769636 udp 10.0.2.22 51868 <-> 201.231.197.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:43.813012 0.219755 udp 10.0.2.22 51868 <-> 108.176.96.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:44.814513 0.350341 udp 10.0.2.22 51868 <-> 1.172.69.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:45.815360 0.246555 udp 10.0.2.22 51868 <-> 117.200.120.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:46.817570 0.417787 udp 10.0.2.22 51868 <-> 220.87.77.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:47.818763 0.050587 udp 10.0.2.22 51868 <-> 46.253.3.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:48.820280 0.255169 udp 10.0.2.22 51868 <-> 84.228.222.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:49.821467 0.080481 udp 10.0.2.22 51868 <-> 2.94.11.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:50.692954 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:34:50.812667 0.000000 udp 10.0.2.22 51868 -> 217.174.48.38 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:34:51.814397 0.164851 udp 10.0.2.22 51868 <-> 50.80.10.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:52.815565 0.043817 udp 10.0.2.22 51868 <-> 5.20.72.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:53.816962 0.058927 udp 10.0.2.22 51868 <-> 95.85.176.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:54.818323 0.147149 udp 10.0.2.22 51868 <-> 173.44.108.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:55.820084 0.000000 udp 10.0.2.22 51868 -> 66.31.49.90 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:34:56.821165 0.143082 udp 10.0.2.22 51868 <-> 67.85.150.166 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:57.813162 0.000000 udp 10.0.2.22 51868 -> 83.21.115.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:34:58.814243 0.051260 udp 10.0.2.22 51868 <-> 87.99.81.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:34:59.816188 0.042680 udp 10.0.2.22 51868 <-> 178.254.244.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:35:00.817142 0.071753 udp 10.0.2.22 51868 <-> 2.228.29.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:35:01.818431 0.081404 udp 10.0.2.22 51868 <-> 31.176.252.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:35:02.820349 0.178717 udp 10.0.2.22 51868 <-> 24.49.203.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:35:03.821628 0.319538 udp 10.0.2.22 51868 <-> 121.177.85.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:35:04.813054 0.594220 udp 10.0.2.22 51868 <-> 61.227.76.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:35:05.814807 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:06.816202 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:07.817312 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:08.819101 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:09.820420 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:10.821873 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:12.814727 0.000084 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:12.814811 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:35:13.815594 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:14.817751 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:15.819059 3.995416 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:16.820039 0.422891 udp 10.0.2.22 51868 <-> 180.215.229.0 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:35:17.821362 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:18.693291 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:35:18.813226 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:20.815733 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:21.817389 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:22.819247 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:23.820100 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:24.821630 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:25.812937 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:26.814912 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:27.816365 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:28.817910 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:29.818857 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:30.820731 0.000077 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:30.820808 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:35:32.813059 0.323650 udp 10.0.2.22 51868 <-> 219.71.90.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:35:33.814342 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:35.817485 0.091345 udp 10.0.2.22 51868 <-> 217.217.16.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:35:36.819000 0.166596 udp 10.0.2.22 51868 <-> 66.68.188.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:35:37.820809 0.147859 udp 10.0.2.22 51868 <-> 173.44.108.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:35:38.821521 0.330716 udp 10.0.2.22 51868 <-> 187.70.92.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:35:39.813140 0.408217 udp 10.0.2.22 51868 <-> 65.191.163.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:35:40.815128 0.161063 udp 10.0.2.22 51868 <-> 74.77.223.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:35:41.815946 0.064653 udp 10.0.2.22 51868 <-> 176.101.9.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:35:42.817909 4.996797 udp 10.0.2.22 51868 -> 142.179.200.37 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:43.819022 0.000000 udp 10.0.2.22 51868 -> 117.232.238.60 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:44.820408 0.325139 udp 10.0.2.22 51868 <-> 114.159.192.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:35:45.691767 0.000101 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:35:45.822414 0.000000 udp 10.0.2.22 51868 -> 61.227.76.99 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:46.813708 0.000000 udp 10.0.2.22 51868 -> 83.221.86.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:48.815964 2.122132 udp 10.0.2.22 51868 <-> 5.43.104.39 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:35:49.818034 0.000000 udp 10.0.2.22 51868 -> 212.233.239.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:51.820285 0.000000 udp 10.0.2.22 51868 -> 61.227.76.99 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:52.822241 1.040808 udp 10.0.2.22 51868 <-> 117.222.79.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:35:53.813523 0.304141 udp 10.0.2.22 51868 <-> 41.70.180.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:35:54.815016 0.227624 udp 10.0.2.22 51868 <-> 183.82.241.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:35:55.816609 0.345243 udp 10.0.2.22 51868 <-> 180.176.22.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:35:56.818035 0.000000 udp 10.0.2.22 51868 -> 5.244.146.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:35:57.819212 0.345473 udp 10.0.2.22 51868 <-> 49.158.45.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:35:58.820545 0.180866 udp 10.0.2.22 51868 <-> 201.174.223.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:35:59.822225 0.267676 udp 10.0.2.22 51868 <-> 115.241.205.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:00.813737 0.076276 udp 10.0.2.22 51868 <-> 85.84.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:01.815239 4.073324 udp 10.0.2.22 51868 <-> 87.121.108.52 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:02.816602 0.064484 udp 10.0.2.22 51868 <-> 94.190.190.26 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:03.818075 0.169117 udp 10.0.2.22 51868 <-> 150.201.62.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:04.819176 0.140363 udp 10.0.2.22 51868 <-> 24.3.209.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:06.822220 0.146436 udp 10.0.2.22 51868 <-> 173.44.108.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:07.813867 0.103203 udp 10.0.2.22 51868 <-> 78.188.164.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:08.815324 0.172600 udp 10.0.2.22 51868 <-> 69.137.7.210 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:09.816639 0.148316 udp 10.0.2.22 51868 <-> 174.99.98.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:10.818291 0.409297 udp 10.0.2.22 51868 <-> 118.44.199.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:11.818970 0.399157 udp 10.0.2.22 51868 <-> 117.208.53.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:12.690709 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:36:12.821060 0.211061 udp 10.0.2.22 51868 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:13.822113 0.000000 udp 10.0.2.22 51868 -> 84.225.91.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:36:14.813455 0.000000 udp 10.0.2.22 51868 -> 90.233.145.217 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:36:15.815262 0.182305 udp 10.0.2.22 51868 <-> 183.87.217.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:16.816639 0.307283 udp 10.0.2.22 51868 <-> 126.15.77.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:17.818244 0.139024 udp 10.0.2.22 51868 <-> 82.228.64.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:18.819039 0.347507 udp 10.0.2.22 51868 <-> 80.135.44.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:19.820864 0.000000 udp 10.0.2.22 51868 -> 27.7.205.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:36:20.822012 0.488326 udp 10.0.2.22 51868 <-> 211.105.150.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:21.813423 0.023174 udp 10.0.2.22 51868 <-> 178.48.110.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:22.815166 1.147563 udp 10.0.2.22 51868 <-> 98.67.228.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:23.816345 0.000000 udp 10.0.2.22 51868 -> 49.128.161.86 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:36:24.818060 0.146640 udp 10.0.2.22 51868 <-> 24.34.106.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:25.819247 0.000000 udp 10.0.2.22 51868 -> 116.202.86.163 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:36:26.820547 0.152434 udp 10.0.2.22 51868 <-> 67.248.85.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:27.822399 0.000000 udp 10.0.2.22 51868 -> 178.79.11.31 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:36:28.814107 0.000000 udp 10.0.2.22 51868 -> 88.187.104.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:36:29.815093 2.817986 udp 10.0.2.22 51868 <-> 187.37.207.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:30.816698 0.334277 udp 10.0.2.22 51868 <-> 190.247.155.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:31.818506 0.312429 udp 10.0.2.22 51868 <-> 201.13.222.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:32.819473 0.000000 udp 10.0.2.22 51868 -> 71.75.119.96 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:36:33.820915 0.154045 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:34.822315 1.514034 udp 10.0.2.22 51868 <-> 187.107.15.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:35.814138 0.000000 udp 10.0.2.22 51868 -> 108.183.201.0 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:36:36.814957 0.000000 udp 10.0.2.22 51868 -> 41.139.21.83 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:36:37.816448 0.143620 udp 10.0.2.22 51868 <-> 24.209.73.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:38.818564 0.059447 udp 10.0.2.22 51868 <-> 88.186.212.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:39.689650 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:36:39.819694 0.047122 udp 10.0.2.22 51868 <-> 78.158.4.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:40.820810 0.143371 udp 10.0.2.22 51868 <-> 95.250.98.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:41.824726 0.152471 udp 10.0.2.22 51868 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:42.814121 0.344745 udp 10.0.2.22 51868 <-> 61.207.180.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:43.815194 0.153130 udp 10.0.2.22 51868 <-> 108.183.39.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:44.817139 0.338297 udp 10.0.2.22 51868 <-> 220.60.160.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:45.818236 0.504968 udp 10.0.2.22 51868 <-> 202.164.146.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:46.819487 0.032370 udp 10.0.2.22 51868 <-> 31.220.225.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:47.820743 0.163790 udp 10.0.2.22 51868 <-> 50.80.10.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:48.822844 0.000000 udp 10.0.2.22 51868 -> 92.47.53.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:36:49.813739 0.201707 udp 10.0.2.22 51868 <-> 49.143.252.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:50.815772 0.371411 udp 10.0.2.22 51868 <-> 27.3.230.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:51.816955 0.060847 udp 10.0.2.22 51868 <-> 95.169.211.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:52.818655 0.356261 udp 10.0.2.22 51868 <-> 61.227.65.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:53.819833 0.025187 udp 10.0.2.22 51868 <-> 158.58.226.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:54.821666 0.271401 udp 10.0.2.22 51868 <-> 117.208.95.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:55.822264 1.029121 udp 10.0.2.22 51868 <-> 89.65.132.123 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:57.815148 0.197738 udp 10.0.2.22 51868 <-> 24.207.212.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:58.817221 0.053505 udp 10.0.2.22 51868 <-> 85.14.74.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:36:59.818514 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:00.819825 0.000000 udp 10.0.2.22 51868 -> 223.234.207.163 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:01.820894 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:02.822471 0.167441 udp 10.0.2.22 51868 <-> 75.67.90.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:03.813736 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:04.815573 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:05.817138 0.164902 udp 10.0.2.22 51868 <-> 75.132.170.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:06.688386 0.000105 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:37:06.818199 0.131961 udp 10.0.2.22 51868 <-> 66.117.244.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:07.819554 0.270609 udp 10.0.2.22 51868 <-> 117.203.62.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:08.820907 0.312791 udp 10.0.2.22 51868 <-> 14.97.60.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:09.822635 0.426088 udp 10.0.2.22 51868 <-> 211.209.63.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:10.814435 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:11.815835 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:12.816955 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:13.818572 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:14.819870 0.000000 udp 10.0.2.22 51868 -> 14.194.54.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:15.821152 0.000000 udp 10.0.2.22 51868 -> 151.246.103.116 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:16.812487 1.298842 udp 10.0.2.22 51868 <-> 190.49.200.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:17.814668 0.355182 udp 10.0.2.22 51868 <-> 211.227.124.117 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:18.815971 0.297073 udp 10.0.2.22 51868 <-> 61.21.68.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:19.817266 0.051783 udp 10.0.2.22 51868 <-> 193.219.37.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:20.818275 0.061617 udp 10.0.2.22 51868 <-> 85.122.147.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:21.820307 0.143269 udp 10.0.2.22 51868 <-> 173.44.108.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:22.821286 0.125456 udp 10.0.2.22 51868 <-> 173.81.25.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:23.812724 0.178036 udp 10.0.2.22 51868 <-> 64.207.73.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:24.814392 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:25.815369 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:26.817374 0.058379 udp 10.0.2.22 51868 <-> 158.49.161.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:27.818565 0.291024 udp 10.0.2.22 51868 <-> 115.161.4.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:28.820504 0.051296 udp 10.0.2.22 51868 <-> 78.20.42.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:29.821278 0.387766 udp 10.0.2.22 51868 <-> 111.242.29.233 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:30.812545 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:31.814036 0.000000 udp 10.0.2.22 51868 -> 117.200.81.91 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:32.815982 0.358972 udp 10.0.2.22 51868 <-> 114.38.39.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:33.697246 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:37:33.817071 0.049450 udp 10.0.2.22 51868 <-> 85.196.245.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:34.148135 0.012900 udp 10.0.2.22 60004 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 02:37:34.161283 0.000000 udp 10.0.2.22 60005 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:34.818568 0.211381 udp 10.0.2.22 51868 <-> 124.123.157.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:35.819770 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:36.822057 0.000096 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:36.822153 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:37:37.813136 0.222117 udp 10.0.2.22 51868 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:38.814493 0.332127 udp 10.0.2.22 51868 <-> 183.103.133.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:39.816175 0.000000 udp 10.0.2.22 51868 -> 118.169.215.159 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:40.817205 0.140255 udp 10.0.2.22 51868 <-> 71.88.102.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:41.818436 0.145388 udp 10.0.2.22 51868 <-> 98.27.22.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:42.819827 0.441915 udp 10.0.2.22 51868 <-> 121.167.34.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:43.821717 0.309893 udp 10.0.2.22 51868 <-> 61.192.59.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:44.812899 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:45.814305 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:46.815570 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:47.817282 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:48.819115 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:49.820123 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:50.821926 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:51.813123 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:52.814261 1.255546 udp 10.0.2.22 51868 <-> 69.59.89.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:53.815754 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:54.817193 0.319701 udp 10.0.2.22 51868 <-> 14.97.220.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:55.819182 0.030616 udp 10.0.2.22 51868 <-> 89.253.136.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:56.820575 0.000000 udp 10.0.2.22 51868 -> 114.41.101.153 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:37:57.821990 0.134843 udp 10.0.2.22 51868 <-> 67.242.78.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:58.813210 0.136646 udp 10.0.2.22 51868 <-> 68.46.15.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:37:59.814715 0.134790 udp 10.0.2.22 51868 <-> 68.84.213.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:00.695865 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:38:00.815684 0.066001 udp 10.0.2.22 51868 <-> 79.117.157.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:01.817502 0.051681 udp 10.0.2.22 51868 <-> 46.214.189.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:02.818854 0.534257 udp 10.0.2.22 51868 <-> 111.254.125.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:03.820636 0.144421 udp 10.0.2.22 51868 <-> 98.229.185.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:04.821802 0.061652 udp 10.0.2.22 51868 <-> 46.10.227.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:05.813108 0.136837 udp 10.0.2.22 51868 <-> 68.84.213.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:06.814676 0.000000 udp 10.0.2.22 51868 -> 201.0.15.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:38:07.816489 0.000000 udp 10.0.2.22 51868 -> 62.42.145.7 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:38:08.817746 0.144186 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:09.818637 0.085174 udp 10.0.2.22 51868 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:10.820707 0.076159 udp 10.0.2.22 51868 <-> 81.232.31.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:11.822040 0.151152 udp 10.0.2.22 51868 <-> 68.114.146.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:12.813319 4.005724 udp 10.0.2.22 51868 -> 95.89.19.46 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:38:13.814707 0.040058 udp 10.0.2.22 51868 <-> 109.87.128.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:14.816242 0.049461 udp 10.0.2.22 51868 <-> 188.190.84.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:15.817983 0.021155 udp 10.0.2.22 51868 <-> 5.146.210.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:17.820683 0.390501 udp 10.0.2.22 51868 <-> 121.124.80.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:18.821928 0.556787 udp 10.0.2.22 51868 <-> 24.51.69.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:19.813230 0.000000 udp 10.0.2.22 51868 -> 178.89.193.120 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:38:20.815214 0.000000 udp 10.0.2.22 51868 -> 188.245.171.120 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:38:21.816348 0.639285 udp 10.0.2.22 51868 <-> 117.227.9.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:22.818190 0.000000 udp 10.0.2.22 51868 -> 115.242.215.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:38:23.818765 0.153237 udp 10.0.2.22 51868 <-> 95.252.143.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:24.820296 0.147493 udp 10.0.2.22 51868 <-> 24.74.188.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:25.822301 0.145544 udp 10.0.2.22 51868 <-> 75.185.190.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:26.813435 0.145751 udp 10.0.2.22 51868 <-> 68.114.146.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:27.694385 0.000037 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:38:27.814802 0.878390 udp 10.0.2.22 51868 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:28.815986 0.412979 udp 10.0.2.22 51868 <-> 175.211.29.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:29.817821 4.096003 udp 10.0.2.22 51868 <-> 151.66.223.64 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:30.818827 0.040665 udp 10.0.2.22 51868 <-> 188.254.247.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:31.820350 0.000000 udp 10.0.2.22 51868 -> 98.250.1.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:38:32.822154 0.000000 udp 10.0.2.22 51868 -> 119.157.170.214 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:38:34.815196 0.299254 udp 10.0.2.22 51868 <-> 61.26.178.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:35.816616 0.060716 udp 10.0.2.22 51868 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:36.817466 0.150283 udp 10.0.2.22 51868 <-> 192.226.149.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:37.819022 0.165701 udp 10.0.2.22 51868 <-> 72.177.63.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:38.820738 3.231803 udp 10.0.2.22 51868 <-> 89.230.111.41 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:39.822032 0.041233 udp 10.0.2.22 51868 <-> 188.254.247.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:40.813365 0.213702 udp 10.0.2.22 51868 <-> 67.187.191.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:42.816085 0.155730 udp 10.0.2.22 51868 <-> 192.226.151.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:43.817709 0.272955 udp 10.0.2.22 51868 <-> 151.233.128.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:44.819374 0.709985 udp 10.0.2.22 51868 <-> 87.17.252.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:45.820736 0.227527 udp 10.0.2.22 51868 <-> 202.62.87.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:46.822507 0.048828 udp 10.0.2.22 51868 <-> 77.77.29.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:47.813675 0.054281 udp 10.0.2.22 51868 <-> 91.90.76.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:48.815091 0.858371 udp 10.0.2.22 51868 <-> 117.217.28.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:49.816593 0.000000 udp 10.0.2.22 51868 -> 151.73.15.140 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:38:50.817604 0.166486 udp 10.0.2.22 51868 <-> 72.191.127.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:51.819716 0.344093 udp 10.0.2.22 51868 <-> 123.192.49.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:52.820649 1.135334 udp 10.0.2.22 51868 <-> 24.0.29.18 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:54.693220 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:38:54.813865 0.022189 udp 10.0.2.22 51868 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:55.815059 0.265699 udp 10.0.2.22 51868 <-> 190.183.18.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:56.816292 0.000000 udp 10.0.2.22 51868 -> 173.254.199.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:38:57.818346 0.000000 udp 10.0.2.22 51868 -> 117.196.253.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:38:58.819747 0.038275 udp 10.0.2.22 51868 <-> 78.128.39.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:38:59.820619 0.351881 udp 10.0.2.22 51868 <-> 111.242.155.167 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:00.822225 0.052934 udp 10.0.2.22 51868 <-> 178.210.193.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:01.813683 0.208610 udp 10.0.2.22 51868 <-> 50.149.114.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:02.814912 0.000000 udp 10.0.2.22 51868 -> 2.180.158.9 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:39:03.816332 0.421350 udp 10.0.2.22 51868 <-> 14.99.131.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:04.818368 0.273163 udp 10.0.2.22 51868 <-> 117.206.250.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:05.819321 0.135811 udp 10.0.2.22 51868 <-> 69.122.87.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:06.820699 0.110305 udp 10.0.2.22 51868 <-> 78.239.65.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:07.822419 0.200266 udp 10.0.2.22 51868 <-> 75.85.120.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:08.813616 0.350520 udp 10.0.2.22 51868 <-> 223.16.38.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:09.815390 0.150494 udp 10.0.2.22 51868 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:11.817789 0.159349 udp 10.0.2.22 51868 <-> 173.23.113.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:12.819224 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:39:13.821167 0.000000 udp 10.0.2.22 51868 -> 84.54.159.66 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:39:14.822597 0.000000 udp 10.0.2.22 51868 -> 59.93.192.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:39:16.814988 0.325540 udp 10.0.2.22 51868 <-> 211.227.124.117 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:17.816523 0.000000 udp 10.0.2.22 51868 -> 114.36.70.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:39:18.817903 0.317048 udp 10.0.2.22 51868 <-> 183.102.244.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:19.820037 0.054180 udp 10.0.2.22 51868 <-> 79.118.105.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:20.821194 0.000000 udp 10.0.2.22 51868 -> 115.241.54.86 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:39:21.692017 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:39:21.822653 1.033300 udp 10.0.2.22 51868 <-> 80.167.147.71 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:23.815576 0.365855 udp 10.0.2.22 51868 <-> 122.118.144.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:24.816732 2.259467 udp 10.0.2.22 51868 <-> 116.72.1.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:25.818682 0.000000 udp 10.0.2.22 51868 -> 68.117.185.142 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:39:26.819617 0.000000 udp 10.0.2.22 51868 -> 177.215.18.145 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:39:27.821432 0.401914 udp 10.0.2.22 51868 <-> 1.232.66.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:28.822506 0.251837 udp 10.0.2.22 51868 <-> 71.102.80.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:29.814079 0.057947 udp 10.0.2.22 51868 <-> 83.249.190.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:30.815821 1.997272 udp 10.0.2.22 51868 <-> 122.107.139.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:31.817156 0.048889 udp 10.0.2.22 51868 <-> 145.236.152.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:32.818494 0.000000 udp 10.0.2.22 51868 -> 220.143.102.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:39:33.819631 1.001686 udp 10.0.2.22 51868 <-> 71.236.119.239 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:35.822619 3.019572 udp 10.0.2.22 51868 <-> 176.199.23.172 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:36.814096 4.295177 udp 10.0.2.22 51868 <-> 186.91.202.114 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:39.818688 0.144329 udp 10.0.2.22 51868 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:41.821027 0.000000 udp 10.0.2.22 51868 -> 213.171.242.218 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:39:42.822945 1.951957 udp 10.0.2.22 51868 <-> 122.107.139.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:43.814091 0.132101 udp 10.0.2.22 51868 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:44.815432 0.637691 udp 10.0.2.22 51868 <-> 124.247.137.90 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:45.816688 0.252506 udp 10.0.2.22 51868 <-> 190.206.89.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:46.818302 0.154783 udp 10.0.2.22 51868 <-> 174.100.202.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:47.819734 0.000000 udp 10.0.2.22 51868 -> 101.63.152.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:39:48.444018 3.001261 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 02:39:48.691052 0.000116 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:39:48.821653 0.154495 udp 10.0.2.22 51868 <-> 114.79.166.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:49.812880 0.000000 udp 10.0.2.22 51868 -> 113.172.168.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:39:50.814143 0.039160 udp 10.0.2.22 51868 <-> 95.90.117.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:51.815411 0.058569 udp 10.0.2.22 51868 <-> 212.104.169.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:52.817055 0.323064 udp 10.0.2.22 51868 <-> 121.136.43.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:53.818594 0.052063 udp 10.0.2.22 51868 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:54.819588 0.000000 udp 10.0.2.22 51868 -> 92.240.41.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:39:55.451116 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:39:55.821162 0.237342 udp 10.0.2.22 51868 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:56.812567 0.057521 udp 10.0.2.22 51868 <-> 88.168.134.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:39:57.814328 0.000000 udp 10.0.2.22 51868 -> 2.198.185.55 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:39:58.815353 0.000000 udp 10.0.2.22 51868 -> 89.205.104.107 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:39:59.817064 0.000000 udp 10.0.2.22 51868 -> 192.168.0.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:40:00.818634 0.000000 udp 10.0.2.22 51868 -> 92.241.136.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:40:01.819898 0.000000 udp 10.0.2.22 51868 -> 2.185.67.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:40:02.821755 0.000000 udp 10.0.2.22 51868 -> 24.102.154.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:40:03.452724 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:40:03.812916 0.123867 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:04.814446 0.052089 udp 10.0.2.22 51868 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:05.816032 0.000000 udp 10.0.2.22 51868 -> 41.218.41.198 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:40:06.817358 0.292225 udp 10.0.2.22 51868 <-> 58.85.230.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:07.818738 3.996020 udp 10.0.2.22 51868 -> 2.185.67.249 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:40:08.819748 0.715394 udp 10.0.2.22 51868 <-> 112.200.109.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:09.821560 0.000000 udp 10.0.2.22 51868 -> 192.168.0.1 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:40:10.813188 0.044030 udp 10.0.2.22 51868 <-> 92.241.136.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:12.815983 0.234840 udp 10.0.2.22 51868 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:13.817570 3.032364 udp 10.0.2.22 51868 <-> 83.83.126.95 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:14.818823 0.073274 udp 10.0.2.22 51868 <-> 178.79.57.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:15.689975 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:40:15.820084 0.366955 udp 10.0.2.22 51868 <-> 137.166.125.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:17.812683 0.296191 udp 10.0.2.22 51868 <-> 190.204.21.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:18.814392 0.145957 udp 10.0.2.22 51868 <-> 72.231.172.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:19.455106 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:40:19.815797 0.000000 udp 10.0.2.22 51868 -> 182.188.172.102 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:40:20.817436 4.997247 udp 10.0.2.22 51868 -> 69.77.205.104 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:40:21.818445 0.039286 udp 10.0.2.22 51868 <-> 213.89.225.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:22.820251 0.000000 udp 10.0.2.22 51868 -> 95.227.182.54 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:40:23.821538 0.029493 udp 10.0.2.22 51868 <-> 83.83.126.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:24.812906 0.000000 udp 10.0.2.22 51868 -> 46.233.24.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:40:26.816088 2.084468 udp 10.0.2.22 51868 <-> 89.205.104.107 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:27.817050 0.065175 udp 10.0.2.22 51868 <-> 81.61.202.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:29.820315 0.025672 udp 10.0.2.22 51868 <-> 46.150.38.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:30.822200 0.312092 udp 10.0.2.22 51868 <-> 211.124.168.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:31.812795 0.189385 udp 10.0.2.22 51868 <-> 62.113.14.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:32.814698 0.134795 udp 10.0.2.22 51868 <-> 68.195.20.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:33.815841 0.052180 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:34.817476 0.035168 udp 10.0.2.22 51868 <-> 89.212.98.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:35.819273 0.157669 udp 10.0.2.22 51868 <-> 174.73.110.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:36.820216 0.000000 udp 10.0.2.22 51868 -> 212.95.7.73 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:40:37.821725 0.169305 udp 10.0.2.22 51868 <-> 184.69.38.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:38.813446 0.335839 udp 10.0.2.22 51868 -> 125.204.145.134 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:40:39.149285 0.000000 icmp 125.204.145.134 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 02:40:39.814571 0.069654 udp 10.0.2.22 51868 <-> 85.176.56.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:40.815859 0.049980 udp 10.0.2.22 51868 <-> 79.114.38.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:41.817487 0.303262 udp 10.0.2.22 51868 <-> 115.242.181.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:42.689000 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:40:42.818787 0.183982 udp 10.0.2.22 51868 <-> 68.7.45.223 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:43.820313 0.000000 udp 10.0.2.22 51868 -> 203.202.216.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:40:44.821494 0.052263 udp 10.0.2.22 51868 <-> 62.129.168.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:45.813082 0.155322 udp 10.0.2.22 51868 <-> 174.100.202.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:46.814795 0.353929 udp 10.0.2.22 51868 <-> 114.175.5.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:47.816391 0.145275 udp 10.0.2.22 51868 <-> 69.127.160.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:48.817406 0.005269 udp 10.0.2.22 51868 <-> 147.229.140.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:49.818983 0.162603 udp 10.0.2.22 51868 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:50.820431 0.059850 udp 10.0.2.22 51868 <-> 188.24.130.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:51.461585 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:40:51.822243 2.265954 udp 10.0.2.22 51868 <-> 181.28.105.210 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:52.813150 0.258644 udp 10.0.2.22 51868 <-> 190.73.247.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:54.816268 2.317790 udp 10.0.2.22 51868 <-> 219.71.217.211 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:55.817889 0.000000 udp 10.0.2.22 51868 -> 5.20.66.155 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:40:57.820433 0.146601 udp 10.0.2.22 51868 <-> 69.127.160.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:58.821653 0.345394 udp 10.0.2.22 51868 <-> 36.232.204.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:40:59.813836 1.021944 udp 10.0.2.22 51868 <-> 69.59.89.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:41:00.815135 0.000000 udp 10.0.2.22 51868 -> 147.156.90.204 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:01.816270 0.344888 udp 10.0.2.22 51868 <-> 125.230.213.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:41:02.817455 0.333413 udp 10.0.2.22 51868 <-> 1.163.90.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:41:03.818803 0.047899 udp 10.0.2.22 51868 <-> 93.105.185.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:41:04.820316 0.000000 udp 10.0.2.22 51868 -> 101.175.212.168 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:05.822081 0.053628 udp 10.0.2.22 51868 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:41:06.813791 0.190793 udp 10.0.2.22 51868 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:41:07.815280 0.000000 udp 10.0.2.22 51868 -> 24.48.118.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:08.816711 0.072117 udp 10.0.2.22 51868 <-> 86.124.224.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:41:09.687803 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:41:09.817754 0.300538 udp 10.0.2.22 51868 <-> 119.171.47.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:41:10.819275 0.303578 udp 10.0.2.22 51868 <-> 124.122.2.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:41:11.820646 0.000073 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:11.820719 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:41:12.822017 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:13.813357 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:14.814705 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:15.816201 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:16.818081 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:17.819399 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:18.820800 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:19.822486 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:20.813924 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:21.815314 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:22.816195 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:23.818172 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:24.819019 2.003520 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:25.820819 0.402478 udp 10.0.2.22 51868 <-> 118.44.199.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:41:27.813316 0.000063 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:27.813379 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:41:28.815059 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:29.816739 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:30.817686 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:31.819839 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:32.820488 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:33.822290 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:34.813841 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:35.815182 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:36.696243 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:41:36.816726 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:37.818184 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:39.820628 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:40.821997 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:41.813910 0.401913 udp 10.0.2.22 51868 <-> 118.44.199.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:41:42.815140 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:43.817043 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:45.819776 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:46.820736 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:47.822092 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:48.814248 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:49.815024 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:50.816947 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:51.818411 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:52.819495 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:53.820990 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:54.822309 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:55.813985 0.000048 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:55.814033 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:41:56.815275 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:41:57.816903 0.290744 udp 10.0.2.22 51868 <-> 119.171.47.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:41:58.818468 0.403206 udp 10.0.2.22 51868 <-> 118.44.199.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:41:59.819590 0.207221 udp 10.0.2.22 51868 <-> 71.95.216.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:00.821491 0.015345 udp 10.0.2.22 51868 <-> 94.113.97.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:01.822520 0.473929 udp 10.0.2.22 51868 <-> 151.16.143.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:02.814208 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:42:03.695030 0.000099 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:42:03.815596 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:42:04.817242 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:42:05.818015 0.058421 udp 10.0.2.22 51868 <-> 46.49.86.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:06.819612 0.482275 udp 10.0.2.22 51868 <-> 50.72.198.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:07.821015 0.766747 udp 10.0.2.22 51868 <-> 180.215.207.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:08.822570 0.149385 udp 10.0.2.22 51868 <-> 96.20.190.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:09.813903 0.133581 udp 10.0.2.22 51868 <-> 107.3.86.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:10.815275 0.595477 udp 10.0.2.22 51868 <-> 114.47.107.220 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:11.817187 0.253202 udp 10.0.2.22 51868 <-> 46.225.5.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:12.818639 0.158205 udp 10.0.2.22 51868 <-> 74.65.45.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:13.820078 2.002388 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:42:14.820889 0.411133 udp 10.0.2.22 51868 <-> 118.47.164.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:16.814344 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:42:17.815662 3.004359 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:42:18.816838 0.067390 udp 10.0.2.22 51868 <-> 213.37.230.218 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:19.818728 0.656900 udp 10.0.2.22 51868 <-> 186.136.207.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:21.821188 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:42:22.812378 0.410182 udp 10.0.2.22 51868 <-> 118.47.164.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:23.814708 0.000000 udp 10.0.2.22 51868 -> 190.204.17.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:42:24.815451 0.058813 udp 10.0.2.22 51868 <-> 89.32.153.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:25.817037 0.164562 udp 10.0.2.22 51868 <-> 68.102.168.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:26.818508 0.508993 udp 10.0.2.22 51868 <-> 117.220.3.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:27.859663 0.355192 udp 10.0.2.22 51868 <-> 114.47.152.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:28.861202 0.065553 udp 10.0.2.22 51868 <-> 80.242.107.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:29.853078 0.161217 udp 10.0.2.22 51868 <-> 98.250.250.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:30.733769 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:42:30.854237 0.083139 udp 10.0.2.22 51868 <-> 86.146.77.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:31.855880 0.537552 udp 10.0.2.22 51868 <-> 77.10.213.186 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:32.856829 0.279402 udp 10.0.2.22 51868 <-> 186.90.22.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:33.858551 0.220886 udp 10.0.2.22 51868 <-> 71.199.58.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:34.860195 0.022439 udp 10.0.2.22 51868 <-> 89.103.128.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:35.861249 0.484701 udp 10.0.2.22 51868 <-> 190.198.80.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:36.852636 0.000000 udp 10.0.2.22 51868 -> 89.65.132.123 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:42:37.854543 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:42:38.855581 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:42:39.857251 0.325455 udp 10.0.2.22 51868 <-> 219.174.52.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:40.858338 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:42:41.859999 0.042179 udp 10.0.2.22 51868 <-> 178.148.27.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:42.861803 0.244246 udp 10.0.2.22 51868 <-> 190.72.3.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:43.852811 0.030081 udp 10.0.2.22 51868 <-> 77.70.44.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:44.854074 0.090828 udp 10.0.2.22 51868 <-> 84.125.195.170 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:45.855917 0.297227 udp 10.0.2.22 51868 <-> 181.31.80.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:46.857187 0.164078 udp 10.0.2.22 51868 <-> 70.178.41.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:47.858600 0.000000 udp 10.0.2.22 51868 -> 115.240.73.93 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:42:48.860273 0.151383 udp 10.0.2.22 51868 <-> 67.240.151.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:49.861350 0.000000 udp 10.0.2.22 51868 -> 89.103.128.39 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:42:50.853109 0.083251 udp 10.0.2.22 51868 <-> 145.236.151.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:51.854604 0.040867 udp 10.0.2.22 51868 <-> 83.250.76.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:52.856077 0.167386 udp 10.0.2.22 51868 <-> 76.109.136.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:53.684066 0.000000 udp 10.0.2.22 51868 <- 115.240.73.93 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:42:53.857161 0.058100 udp 10.0.2.22 51868 -> 94.37.57.107 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:42:53.915261 0.000000 icmp 94.37.57.107 0x0303 -> 10.0.2.22 0x5040 URP 192 1 70 flow=Background 1970/01/01 02:42:54.858744 0.030461 udp 10.0.2.22 51868 <-> 78.90.215.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:55.859968 0.150073 udp 10.0.2.22 51868 <-> 87.237.237.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:56.861975 0.144137 udp 10.0.2.22 51868 <-> 75.185.186.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:57.732666 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:42:57.853113 2.141863 udp 10.0.2.22 51868 <-> 24.191.81.20 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:42:58.854731 0.000000 udp 10.0.2.22 51868 -> 181.16.7.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:43:00.857850 0.325109 udp 10.0.2.22 51868 <-> 187.56.23.81 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:01.858791 0.089091 udp 10.0.2.22 51868 <-> 84.122.212.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:02.860410 0.048293 udp 10.0.2.22 51868 <-> 188.173.249.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:03.862008 0.000000 udp 10.0.2.22 51868 -> 86.124.224.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:43:04.852827 0.000000 udp 10.0.2.22 51868 -> 186.92.60.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:43:05.854937 0.000000 udp 10.0.2.22 51868 -> 186.92.177.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:43:06.855712 0.000000 udp 10.0.2.22 51868 -> 91.228.233.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:43:07.857765 0.000000 udp 10.0.2.22 51868 -> 86.205.219.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:43:08.858955 0.109085 udp 10.0.2.22 51868 <-> 109.182.53.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:09.860660 0.238730 udp 10.0.2.22 51868 <-> 208.104.198.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:10.861453 0.000000 udp 10.0.2.22 51868 -> 184.162.1.226 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:43:11.853490 0.423801 udp 10.0.2.22 51868 <-> 117.200.235.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:12.854853 0.154199 udp 10.0.2.22 51868 <-> 46.233.24.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:13.856401 0.000000 udp 10.0.2.22 51868 -> 178.165.59.127 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:43:14.857763 0.839398 udp 10.0.2.22 51868 <-> 111.253.168.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:15.858905 0.094223 udp 10.0.2.22 51868 <-> 82.61.45.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:16.860692 0.000000 udp 10.0.2.22 51868 -> 79.148.108.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:43:17.862117 0.062977 udp 10.0.2.22 51868 <-> 77.78.227.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:18.853082 0.066448 udp 10.0.2.22 51868 <-> 82.225.28.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:19.854635 0.000000 udp 10.0.2.22 51868 -> 114.177.121.164 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:43:20.856231 0.062277 udp 10.0.2.22 51868 <-> 88.161.227.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:21.857502 0.428895 udp 10.0.2.22 51868 <-> 72.15.127.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:22.859350 0.089880 udp 10.0.2.22 51868 -> 80.36.81.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:43:22.949230 0.000000 icmp 80.36.81.20 0x0303 -> 10.0.2.22 0x5040 URP 192 1 70 flow=Background 1970/01/01 02:43:23.860561 0.147583 udp 10.0.2.22 51868 <-> 216.16.109.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:24.731393 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:43:24.861896 0.326751 udp 10.0.2.22 51868 <-> 88.72.192.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:25.853677 1.489720 udp 10.0.2.22 51868 <-> 178.25.74.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:26.854923 0.060186 udp 10.0.2.22 51868 <-> 95.107.216.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:27.856662 0.074074 udp 10.0.2.22 51868 <-> 85.86.64.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:28.857665 0.248452 udp 10.0.2.22 51868 <-> 72.130.237.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:29.859031 0.517053 udp 10.0.2.22 51868 <-> 201.211.102.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:30.860724 1.048310 udp 10.0.2.22 51868 <-> 86.120.153.114 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:32.853342 0.092121 udp 10.0.2.22 51868 <-> 82.61.45.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:33.854518 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:43:34.856476 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:43:35.857741 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:43:36.909072 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:43:37.910535 0.403143 udp 10.0.2.22 51868 <-> 218.102.238.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:38.911925 0.747392 udp 10.0.2.22 51868 <-> 76.119.125.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:39.903393 0.288041 udp 10.0.2.22 51868 <-> 58.177.117.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:40.905507 0.334036 udp 10.0.2.22 51868 <-> 123.100.213.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:41.906288 0.262107 udp 10.0.2.22 51868 <-> 67.215.24.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:42.908042 0.165452 udp 10.0.2.22 51868 <-> 71.63.13.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:43.909000 0.301240 udp 10.0.2.22 51868 <-> 69.180.10.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:44.911024 0.000000 udp 10.0.2.22 51868 -> 91.120.99.47 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:43:45.911870 0.337187 udp 10.0.2.22 51868 <-> 111.250.115.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:46.903751 0.032104 udp 10.0.2.22 51868 <-> 130.204.169.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:47.905152 0.524749 udp 10.0.2.22 51868 <-> 188.2.135.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:48.906683 3.344568 udp 10.0.2.22 51868 <-> 221.185.96.90 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:49.907667 0.122739 udp 10.0.2.22 51868 <-> 24.57.120.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:50.909612 0.000000 udp 10.0.2.22 51868 -> 179.235.139.101 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:43:51.780496 0.000116 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:43:52.912164 0.079693 udp 10.0.2.22 51868 <-> 86.18.63.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:53.903696 3.004536 udp 10.0.2.22 51868 -> 1.164.153.33 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:43:54.905647 0.054155 udp 10.0.2.22 51868 <-> 79.173.35.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:55.906524 1.186191 udp 10.0.2.22 51868 <-> 78.8.126.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:57.909513 0.305721 udp 10.0.2.22 51868 <-> 210.194.114.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:58.911251 0.201716 udp 10.0.2.22 51868 <-> 79.9.99.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:43:59.912157 0.205693 udp 10.0.2.22 51868 <-> 98.210.235.8 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:00.903847 0.071976 udp 10.0.2.22 51868 <-> 62.20.193.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:01.905139 0.159072 udp 10.0.2.22 51868 <-> 76.119.125.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:02.906663 0.433088 udp 10.0.2.22 51868 <-> 138.130.242.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:03.908480 0.038982 udp 10.0.2.22 51868 <-> 85.231.171.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:04.909660 0.377352 udp 10.0.2.22 51868 <-> 14.198.8.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:05.911165 0.000000 udp 10.0.2.22 51868 -> 92.134.71.128 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:44:06.912266 0.000000 udp 10.0.2.22 51868 -> 178.26.123.117 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:44:07.906547 0.000000 udp 10.0.2.22 51868 -> 212.90.9.223 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:44:08.905053 4.032397 udp 10.0.2.22 51868 <-> 85.130.46.105 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:09.907088 0.070074 udp 10.0.2.22 51868 <-> 109.60.31.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:10.908094 0.000000 udp 10.0.2.22 51868 -> 1.34.204.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:44:11.909265 0.087700 udp 10.0.2.22 51868 <-> 84.125.195.170 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:13.912135 0.000000 udp 10.0.2.22 51868 -> 114.36.213.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:44:14.903771 0.000000 udp 10.0.2.22 51868 -> 212.95.7.73 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:44:15.905050 0.000000 udp 10.0.2.22 51868 -> 178.26.123.117 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:44:16.907012 0.000000 udp 10.0.2.22 51868 -> 85.130.46.105 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:44:17.908123 4.996967 udp 10.0.2.22 51868 <-> 84.125.195.170 16464 CON 0 0 3 866 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:18.779631 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:44:18.909561 2.138900 udp 10.0.2.22 51868 <-> 69.118.219.97 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:19.910734 0.057317 udp 10.0.2.22 51868 <-> 109.60.31.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:21.904143 0.000000 udp 10.0.2.22 51868 -> 92.134.71.128 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:44:22.986710 0.000000 udp 10.0.2.22 51868 <- 84.125.195.170 16464 RSP 0 0 1 750 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:44:23.907090 0.000000 udp 10.0.2.22 51868 -> 50.10.109.132 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:44:24.908603 0.273414 udp 10.0.2.22 51868 <-> 201.83.219.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:25.909542 0.147204 udp 10.0.2.22 51868 <-> 69.118.219.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:26.910936 0.000000 udp 10.0.2.22 51868 -> 178.26.123.117 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:44:27.912875 0.078145 udp 10.0.2.22 51868 <-> 109.60.31.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:28.903695 0.025904 udp 10.0.2.22 51868 <-> 85.130.46.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:29.905818 1.124437 udp 10.0.2.22 51868 <-> 61.224.81.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:30.906680 0.000000 udp 10.0.2.22 51868 -> 92.134.71.128 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:44:31.908003 0.319594 udp 10.0.2.22 51868 <-> 1.34.204.71 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:32.910087 0.000000 udp 10.0.2.22 51868 -> 212.90.9.223 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:44:33.911060 3.995779 udp 10.0.2.22 51868 <-> 85.130.46.105 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:34.912593 0.024841 udp 10.0.2.22 51868 <-> 78.35.97.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:35.904015 0.000000 udp 10.0.2.22 51868 -> 14.198.8.143 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:44:36.905452 0.000000 udp 10.0.2.22 51868 -> 50.10.109.132 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:44:38.908700 0.000000 udp 10.0.2.22 51868 -> 212.90.9.223 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:44:39.909672 0.137528 udp 10.0.2.22 51868 <-> 69.118.219.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:40.911186 0.081779 udp 10.0.2.22 51868 <-> 84.125.195.170 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:41.912851 4.997225 udp 10.0.2.22 51868 -> 70.30.90.88 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:44:42.904297 0.000000 udp 10.0.2.22 51868 -> 77.198.190.116 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:44:43.905726 0.000000 udp 10.0.2.22 51868 -> 88.246.103.131 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:44:44.907003 0.173332 udp 10.0.2.22 51868 <-> 135.19.188.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:45.777897 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:44:45.908286 0.055907 udp 10.0.2.22 51868 <-> 86.126.42.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:47.911223 0.055591 udp 10.0.2.22 51868 <-> 86.122.152.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:48.912818 0.349709 udp 10.0.2.22 51868 <-> 106.1.199.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:49.904310 0.656887 udp 10.0.2.22 51868 <-> 109.91.102.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:50.905862 0.052828 udp 10.0.2.22 51868 <-> 89.99.86.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:51.907210 0.000000 udp 10.0.2.22 51868 -> 96.10.91.141 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:44:52.908224 0.083147 udp 10.0.2.22 51868 <-> 79.165.97.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:53.909995 0.058323 udp 10.0.2.22 51868 <-> 93.80.0.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:54.911348 0.205175 udp 10.0.2.22 51868 <-> 74.69.234.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:55.903253 0.177664 udp 10.0.2.22 51868 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:56.904297 0.186102 udp 10.0.2.22 51868 <-> 68.16.236.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:57.905526 0.396282 udp 10.0.2.22 51868 <-> 121.124.80.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:58.907070 0.102035 udp 10.0.2.22 51868 <-> 85.84.44.119 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:44:59.908756 0.027176 udp 10.0.2.22 51868 <-> 213.109.121.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:45:00.909711 0.143880 udp 10.0.2.22 51868 <-> 71.77.141.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:45:01.911514 0.167997 udp 10.0.2.22 51868 <-> 66.69.203.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:45:02.902762 0.017611 udp 10.0.2.22 51868 <-> 130.180.97.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:45:03.904092 0.000000 udp 10.0.2.22 51868 -> 117.204.33.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:04.905733 0.253440 udp 10.0.2.22 51868 <-> 199.117.183.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:45:05.907188 0.636357 udp 10.0.2.22 51868 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:45:06.908350 0.082157 udp 10.0.2.22 51868 <-> 85.228.144.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:45:07.909808 0.191054 udp 10.0.2.22 51868 <-> 31.18.241.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:45:08.911954 0.274049 udp 10.0.2.22 51868 <-> 85.216.122.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:45:09.902625 0.164658 udp 10.0.2.22 51868 <-> 174.64.165.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:45:10.904804 0.000000 udp 10.0.2.22 51868 -> 116.203.234.40 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:11.906054 1.065582 udp 10.0.2.22 51868 <-> 94.190.190.26 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:45:12.787270 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:45:13.908517 0.035559 udp 10.0.2.22 51868 <-> 79.117.54.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:45:14.910473 0.156701 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:45:15.911579 4.997430 udp 10.0.2.22 51868 <-> 85.216.122.12 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:45:16.902893 0.135193 udp 10.0.2.22 51868 <-> 162.17.224.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:45:17.904161 0.150217 udp 10.0.2.22 51868 <-> 192.226.164.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:45:18.906179 0.000000 udp 10.0.2.22 51868 -> 84.123.162.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:19.906999 0.071834 udp 10.0.2.22 51868 <-> 85.85.71.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:45:21.003280 0.000000 udp 10.0.2.22 51868 <- 85.216.122.12 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:21.910582 0.000000 udp 10.0.2.22 51868 -> 78.62.159.32 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:22.911918 0.064019 udp 10.0.2.22 51868 <-> 94.190.190.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:45:23.902861 0.218739 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:45:24.904433 0.000000 udp 10.0.2.22 51868 -> 49.202.231.102 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:25.905889 0.000000 udp 10.0.2.22 51868 -> 14.96.252.0 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:26.907259 0.142681 udp 10.0.2.22 51868 <-> 66.168.86.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:45:27.908923 0.000050 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:27.908973 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:45:28.910669 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:29.911890 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:30.902818 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:31.904255 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:32.905755 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:33.907538 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:34.909084 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:35.910865 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:36.912032 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:37.903114 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:38.904923 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:39.786236 0.000098 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:45:39.905960 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:40.907907 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:41.908882 0.000000 udp 10.0.2.22 51868 -> 1.164.153.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:42.910746 0.000000 udp 10.0.2.22 51868 -> 98.243.238.45 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:43.912221 0.426433 udp 10.0.2.22 51868 <-> 59.128.198.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:45:44.903098 0.143198 udp 10.0.2.22 51868 <-> 66.168.86.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:45:45.904731 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:46.906175 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:47.907555 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:48.909315 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:50.912255 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:51.903189 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:52.904568 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:53.906254 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:54.907798 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:55.908760 0.000045 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:55.908805 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:45:56.910516 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:57.911919 0.147483 udp 10.0.2.22 51868 <-> 203.192.207.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:45:58.903551 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:45:59.904977 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:00.906370 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:01.907785 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:02.909108 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:03.910744 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:04.911884 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:05.903608 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:06.784596 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:46:06.905116 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:07.906717 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:08.907644 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:09.909092 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:10.910946 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:11.912384 0.000045 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:11.912429 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:46:13.905264 0.000000 udp 10.0.2.22 51868 -> 14.96.252.0 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:14.906261 0.125562 udp 10.0.2.22 51868 <-> 46.233.24.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:46:15.907782 0.000000 udp 10.0.2.22 51868 -> 24.123.162.54 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:16.909386 0.000000 udp 10.0.2.22 51868 -> 188.214.34.53 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:17.911100 0.348682 udp 10.0.2.22 51868 <-> 61.4.170.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:46:18.912545 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:20.905048 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:21.906594 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:22.907579 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:23.909614 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:24.910661 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:25.912408 0.000073 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:25.912481 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:46:26.903810 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:27.905193 0.058615 udp 10.0.2.22 51868 <-> 188.214.34.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:46:28.906222 0.339497 udp 10.0.2.22 51868 <-> 1.164.153.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:46:29.907838 0.000000 udp 10.0.2.22 51868 -> 72.192.3.224 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:30.909645 0.000000 udp 10.0.2.22 51868 -> 14.96.252.0 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:31.910796 0.000000 udp 10.0.2.22 51868 -> 220.143.102.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:32.912488 0.000000 udp 10.0.2.22 51868 -> 24.123.162.54 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:33.783784 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:46:33.903394 0.000000 udp 10.0.2.22 51868 -> 188.214.34.53 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:34.905164 0.294014 udp 10.0.2.22 51868 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:46:35.906586 0.144730 udp 10.0.2.22 51868 <-> 66.168.86.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:46:36.908423 0.000000 udp 10.0.2.22 51868 -> 1.164.153.33 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:37.909292 0.152493 udp 10.0.2.22 51868 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:46:38.911088 0.155856 udp 10.0.2.22 51868 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:46:39.912325 0.000000 udp 10.0.2.22 51868 -> 98.71.228.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:40.903987 0.000000 udp 10.0.2.22 51868 -> 72.192.3.224 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:41.905045 0.000000 udp 10.0.2.22 51868 -> 96.249.193.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:42.906645 0.000000 udp 10.0.2.22 51868 -> 89.142.152.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:43.907953 0.000000 udp 10.0.2.22 51868 -> 117.99.51.7 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:44.909569 0.142411 udp 10.0.2.22 51868 <-> 203.192.207.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:46:45.910819 0.360542 udp 10.0.2.22 51868 <-> 124.244.75.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:46:46.912620 0.000000 udp 10.0.2.22 51868 -> 1.113.98.212 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:47.904131 0.141903 udp 10.0.2.22 51868 <-> 68.194.253.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:46:48.905189 0.257713 udp 10.0.2.22 51868 <-> 117.198.163.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:46:49.906824 0.347120 udp 10.0.2.22 51868 <-> 182.214.34.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:46:50.907862 0.128835 udp 10.0.2.22 51868 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:46:51.909409 1.215982 udp 10.0.2.22 51868 <-> 186.220.85.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:46:52.910881 0.518841 udp 10.0.2.22 51868 <-> 124.171.169.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:46:53.912333 1.432387 udp 10.0.2.22 51868 <-> 14.99.35.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:46:54.904105 1.539845 udp 10.0.2.22 51868 <-> 24.232.19.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:46:55.557455 3.061589 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 02:46:55.905054 1.327956 udp 10.0.2.22 51868 <-> 180.19.158.116 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:46:57.927992 0.059038 udp 10.0.2.22 51868 <-> 79.115.66.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:46:58.929853 0.000000 udp 10.0.2.22 51868 -> 61.62.169.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:46:59.931305 0.000000 udp 10.0.2.22 51868 -> 174.54.248.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:47:00.802043 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:47:00.932656 0.190576 udp 10.0.2.22 51868 <-> 98.184.128.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:01.923675 1.451370 udp 10.0.2.22 51868 <-> 24.232.19.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:02.625383 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:47:02.925505 0.423115 udp 10.0.2.22 51868 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:03.926938 0.050856 udp 10.0.2.22 51868 <-> 86.100.74.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:04.928600 0.047460 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:05.929599 0.000000 udp 10.0.2.22 51868 -> 92.241.136.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:47:06.931580 0.416049 udp 10.0.2.22 51868 <-> 62.113.14.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:08.063103 0.000000 udp 10.0.2.22 51868 -> 149.254.182.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:47:09.054302 0.000000 udp 10.0.2.22 51868 -> 68.114.151.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:47:10.055712 0.107005 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:10.756499 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:47:11.057031 0.315319 udp 10.0.2.22 51868 <-> 42.148.185.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:12.058696 0.430109 udp 10.0.2.22 51868 <-> 109.101.94.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:13.220424 0.000000 udp 10.0.2.22 51868 -> 1.165.81.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:47:14.221383 0.319409 udp 10.0.2.22 51868 <-> 27.143.12.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:15.223145 0.050227 udp 10.0.2.22 51868 <-> 5.14.145.222 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:16.214537 0.273191 udp 10.0.2.22 51868 <-> 115.240.19.243 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:17.215770 0.041697 udp 10.0.2.22 51868 <-> 156.17.15.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:18.217373 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:47:19.218810 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:47:20.220580 0.000045 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:47:20.220625 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:47:21.221553 0.000000 udp 10.0.2.22 51868 -> 86.121.41.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:47:22.212975 0.060548 udp 10.0.2.22 51868 <-> 213.167.1.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:23.214902 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:47:24.216435 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:47:25.217473 0.836823 udp 10.0.2.22 51868 <-> 94.47.18.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:26.219036 0.346851 udp 10.0.2.22 51868 <-> 124.125.44.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:26.919948 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:47:27.220507 0.318577 udp 10.0.2.22 51868 <-> 124.96.225.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:28.091340 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:47:28.221768 0.050962 udp 10.0.2.22 51868 <-> 89.229.150.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:29.213269 0.342614 udp 10.0.2.22 51868 <-> 111.250.95.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:30.214371 0.300890 udp 10.0.2.22 51868 <-> 221.115.144.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:31.216081 0.156703 udp 10.0.2.22 51868 <-> 173.23.87.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:32.217589 0.404339 udp 10.0.2.22 51868 <-> 183.106.127.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:33.218954 0.233912 udp 10.0.2.22 51868 <-> 190.78.168.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:34.220785 2.666104 udp 10.0.2.22 51868 <-> 65.191.163.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:35.221821 0.307506 udp 10.0.2.22 51868 <-> 182.165.97.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:36.213641 0.652824 udp 10.0.2.22 51868 <-> 117.227.9.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:37.215098 0.317749 udp 10.0.2.22 51868 <-> 121.152.3.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:38.216151 0.135800 udp 10.0.2.22 51868 <-> 173.81.172.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:39.217300 0.270388 udp 10.0.2.22 51868 <-> 201.211.132.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:40.219272 0.143394 udp 10.0.2.22 51868 <-> 75.181.151.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:41.220676 0.151634 udp 10.0.2.22 51868 <-> 24.31.217.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:42.221735 0.151154 udp 10.0.2.22 51868 <-> 71.71.254.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:43.213051 0.000000 udp 10.0.2.22 51868 -> 88.62.206.178 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:47:44.214708 0.066256 udp 10.0.2.22 51868 <-> 83.213.199.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:45.216422 1.229282 udp 10.0.2.22 51868 <-> 81.31.161.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:46.217821 0.073262 udp 10.0.2.22 51868 <-> 92.2.234.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:47.219377 0.182647 udp 10.0.2.22 51868 <-> 68.179.181.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:48.220634 0.397403 udp 10.0.2.22 51868 <-> 122.131.251.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:49.222242 0.000000 udp 10.0.2.22 51868 -> 200.7.146.229 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:47:50.213530 0.357480 udp 10.0.2.22 51868 <-> 114.36.139.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:51.215086 1.096656 udp 10.0.2.22 51868 <-> 46.33.213.99 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:53.217908 0.092882 udp 10.0.2.22 51868 <-> 41.33.182.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:54.219191 0.226554 udp 10.0.2.22 51868 <-> 177.224.152.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:55.090766 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:47:55.220989 0.026047 udp 10.0.2.22 51868 <-> 89.133.13.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:56.221962 0.144347 udp 10.0.2.22 51868 <-> 75.181.151.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:57.213276 0.135885 udp 10.0.2.22 51868 <-> 67.242.84.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:58.215161 0.152082 udp 10.0.2.22 51868 <-> 71.8.5.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:47:58.926193 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:47:59.216199 0.000000 udp 10.0.2.22 51868 -> 95.9.55.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:48:00.218191 1.088295 udp 10.0.2.22 51868 <-> 62.57.203.80 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:02.221062 0.994696 udp 10.0.2.22 51868 <-> 24.244.173.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:03.221891 0.000000 udp 10.0.2.22 51868 -> 130.204.169.49 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:48:04.213983 0.000000 udp 10.0.2.22 51868 -> 184.89.182.202 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:48:05.215605 0.533140 udp 10.0.2.22 51868 <-> 211.172.38.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:06.216901 0.000000 udp 10.0.2.22 51868 -> 112.104.131.94 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:48:07.218471 0.073167 udp 10.0.2.22 51868 <-> 82.225.28.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:08.219335 0.165167 udp 10.0.2.22 51868 <-> 75.67.90.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:09.220714 0.000000 udp 10.0.2.22 51868 -> 84.232.245.161 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:48:10.222440 3.284874 udp 10.0.2.22 51868 <-> 61.26.178.46 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:11.214026 0.053532 udp 10.0.2.22 51868 <-> 79.113.103.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:12.215285 0.000000 udp 10.0.2.22 51868 -> 113.254.24.169 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:48:14.218198 0.176459 udp 10.0.2.22 51868 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:15.219315 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:48:16.220877 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:48:17.222631 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:48:18.213384 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:48:19.215335 0.159766 udp 10.0.2.22 51868 <-> 71.206.190.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:20.216506 0.139527 udp 10.0.2.22 51868 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:21.218231 0.196900 udp 10.0.2.22 51868 <-> 98.140.253.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:22.088888 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:48:22.219326 0.637266 udp 10.0.2.22 51868 <-> 117.214.218.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:23.220978 0.352081 udp 10.0.2.22 51868 <-> 122.121.111.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:24.222201 0.165511 udp 10.0.2.22 51868 <-> 50.165.123.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:25.214037 0.000000 udp 10.0.2.22 51868 -> 85.85.71.52 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:48:26.214996 0.000000 udp 10.0.2.22 51868 -> 116.202.116.200 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:48:27.216564 0.278050 udp 10.0.2.22 51868 <-> 124.123.108.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:28.218025 0.049288 udp 10.0.2.22 51868 <-> 79.98.3.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:29.219281 0.150812 udp 10.0.2.22 51868 <-> 67.248.209.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:30.220869 0.066089 udp 10.0.2.22 51868 <-> 188.24.132.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:31.222098 0.037964 udp 10.0.2.22 51868 <-> 212.104.100.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:32.214122 2.002747 udp 10.0.2.22 51868 -> 186.19.203.238 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:48:33.215090 0.314418 udp 10.0.2.22 51868 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:35.218237 0.335460 udp 10.0.2.22 51868 <-> 61.63.107.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:36.219755 0.063563 udp 10.0.2.22 51868 <-> 78.204.132.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:37.221132 0.042207 udp 10.0.2.22 51868 <-> 147.156.170.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:38.222514 0.171518 udp 10.0.2.22 51868 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:39.214268 0.148439 udp 10.0.2.22 51868 <-> 75.76.12.210 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:40.215718 0.411271 udp 10.0.2.22 51868 <-> 121.166.87.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:41.216475 0.157068 udp 10.0.2.22 51868 <-> 67.149.214.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:42.217889 0.123665 udp 10.0.2.22 51868 <-> 92.246.215.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:43.220028 0.276854 udp 10.0.2.22 51868 <-> 180.215.105.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:44.221106 0.042217 udp 10.0.2.22 51868 <-> 147.156.153.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:45.222916 0.055195 udp 10.0.2.22 51868 <-> 81.190.173.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:46.213639 0.161119 udp 10.0.2.22 51868 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:47.215681 0.301630 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:48.216979 0.052122 udp 10.0.2.22 51868 <-> 89.29.182.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:49.088312 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:48:49.218759 1.110395 udp 10.0.2.22 51868 <-> 115.240.75.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:50.219961 0.226521 udp 10.0.2.22 51868 <-> 71.197.74.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:51.221456 0.000000 udp 10.0.2.22 51868 -> 31.220.225.139 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:48:52.222642 0.316751 udp 10.0.2.22 51868 <-> 112.169.196.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:53.214236 0.049707 udp 10.0.2.22 51868 <-> 91.126.97.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:54.215154 0.279941 udp 10.0.2.22 51868 <-> 177.82.176.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:55.217099 0.344653 udp 10.0.2.22 51868 <-> 180.176.22.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:56.218257 0.337739 udp 10.0.2.22 51868 <-> 61.228.149.34 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:57.219957 0.150916 udp 10.0.2.22 51868 <-> 68.11.134.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:58.221282 0.778909 udp 10.0.2.22 51868 <-> 116.202.116.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:48:59.222396 0.130856 udp 10.0.2.22 51868 <-> 79.17.72.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:00.214222 0.237835 udp 10.0.2.22 51868 <-> 74.220.242.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:01.215260 0.320815 udp 10.0.2.22 51868 <-> 117.74.22.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:02.217388 0.491029 udp 10.0.2.22 51868 <-> 78.70.27.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:03.218606 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:49:04.219947 0.136662 udp 10.0.2.22 51868 <-> 68.83.124.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:05.220998 0.121075 udp 10.0.2.22 51868 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:06.222629 0.173609 udp 10.0.2.22 51868 <-> 96.26.92.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:07.214431 0.212568 udp 10.0.2.22 51868 <-> 64.250.217.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:08.215330 0.597843 udp 10.0.2.22 51868 <-> 114.42.85.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:09.217127 0.364988 udp 10.0.2.22 51868 <-> 14.198.8.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:10.218289 0.096495 udp 10.0.2.22 51868 <-> 77.232.161.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:11.220054 0.188881 udp 10.0.2.22 51868 <-> 72.197.28.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:12.221257 0.151576 udp 10.0.2.22 51868 <-> 24.31.217.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:13.223015 0.321049 udp 10.0.2.22 51868 <-> 114.40.221.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:14.214124 0.000000 udp 10.0.2.22 51868 -> 182.189.101.118 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:49:15.215889 2.058640 udp 10.0.2.22 51868 <-> 195.70.108.58 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:16.097257 0.000187 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:49:16.216890 0.031219 udp 10.0.2.22 51868 <-> 77.81.147.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:18.219927 1.041913 udp 10.0.2.22 51868 <-> 156.17.15.163 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:20.223190 0.295839 udp 10.0.2.22 51868 <-> 211.10.166.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:21.214652 0.000000 udp 10.0.2.22 51868 -> 222.166.240.87 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:49:22.215382 0.321978 udp 10.0.2.22 51868 <-> 111.67.153.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:23.216912 0.263825 udp 10.0.2.22 51868 <-> 14.96.172.212 16464 CON 0 0 2 388 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:24.218284 0.036048 udp 10.0.2.22 51868 <-> 89.176.72.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:25.219949 3.132607 udp 10.0.2.22 51868 <-> 95.180.114.173 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:26.221224 0.131613 udp 10.0.2.22 51868 <-> 79.17.72.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:27.223051 0.000000 udp 10.0.2.22 51868 -> 46.27.92.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:49:29.216131 0.149854 udp 10.0.2.22 51868 <-> 50.158.209.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:30.217426 0.053077 udp 10.0.2.22 51868 <-> 91.210.108.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:31.218550 0.341925 udp 10.0.2.22 51868 <-> 36.230.63.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:32.220520 0.000000 udp 10.0.2.22 51868 -> 61.70.234.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:49:33.221865 0.363463 udp 10.0.2.22 51868 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:34.223200 2.167221 udp 10.0.2.22 51868 <-> 78.249.211.8 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:35.214492 0.164547 udp 10.0.2.22 51868 <-> 176.104.145.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:37.217234 0.127445 udp 10.0.2.22 51868 <-> 173.81.172.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:38.218585 0.180232 udp 10.0.2.22 51868 <-> 5.244.127.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:39.220345 0.421669 udp 10.0.2.22 51868 <-> 116.49.205.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:40.221613 0.096831 udp 10.0.2.22 51868 <-> 95.247.173.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:41.222961 0.000000 udp 10.0.2.22 51868 -> 183.72.69.99 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:49:42.214782 0.049294 udp 10.0.2.22 51868 <-> 95.77.197.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:43.095586 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:49:43.216239 0.142000 udp 10.0.2.22 51868 <-> 98.239.193.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:44.217190 0.000000 udp 10.0.2.22 51868 -> 188.21.161.214 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:49:45.218575 0.178494 udp 10.0.2.22 51868 <-> 103.250.139.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:46.220069 0.346717 udp 10.0.2.22 51868 <-> 122.102.232.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:47.221369 0.000000 udp 10.0.2.22 51868 -> 71.218.70.150 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:49:48.222909 0.000000 udp 10.0.2.22 51868 -> 212.3.13.189 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:49:49.214596 0.244521 udp 10.0.2.22 51868 <-> 82.50.173.224 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:50.216215 0.050675 udp 10.0.2.22 51868 <-> 81.253.5.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:51.217754 0.313054 udp 10.0.2.22 51868 <-> 219.115.86.160 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:52.218869 0.028722 udp 10.0.2.22 51868 <-> 82.176.202.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:53.220159 0.161495 udp 10.0.2.22 51868 <-> 161.6.244.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:54.221819 0.095639 udp 10.0.2.22 51868 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:55.213502 3.354699 udp 10.0.2.22 51868 <-> 114.27.114.11 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:56.214825 0.168977 udp 10.0.2.22 51868 <-> 66.169.209.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:49:57.215707 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:49:59.218626 0.136416 udp 10.0.2.22 51868 <-> 67.82.53.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:50:00.220123 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:01.221862 4.997119 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:02.212965 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:03.214878 0.338088 udp 10.0.2.22 51868 <-> 118.165.202.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:50:04.216338 0.142105 udp 10.0.2.22 51868 <-> 71.77.141.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:50:05.217387 0.058805 udp 10.0.2.22 51868 <-> 81.202.147.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:50:08.221551 0.045486 udp 10.0.2.22 51868 <-> 188.27.196.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:50:09.212997 0.030916 udp 10.0.2.22 51868 <-> 82.192.233.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:50:10.094506 0.000112 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:50:10.214790 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:11.216624 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:12.217397 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:13.218826 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:14.220614 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:15.222037 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:16.213108 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:17.214656 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:19.217506 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:20.218788 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:21.220504 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:22.221863 2.994836 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:22.221916 2.994783 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 2 172 flow=Background 1970/01/01 02:50:23.213591 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:24.214873 3.083235 udp 10.0.2.22 51868 <-> 81.202.147.79 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:50:26.218042 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:28.220520 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:29.221901 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:30.213163 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:31.215234 0.000151 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:31.215385 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:50:32.216488 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:33.217489 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:34.219226 0.000000 udp 10.0.2.22 51868 -> 188.27.196.55 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:35.220970 0.060044 udp 10.0.2.22 51868 <-> 81.202.147.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:50:36.222415 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:37.093117 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:50:37.213537 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:38.215102 0.000159 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:38.215261 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:50:39.216135 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:40.218267 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:41.219678 0.000000 udp 10.0.2.22 51868 -> 188.27.196.55 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:42.220516 0.141831 udp 10.0.2.22 51868 <-> 71.77.141.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:50:43.221994 0.190096 udp 10.0.2.22 51868 <-> 178.25.74.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:50:44.213532 0.054005 udp 10.0.2.22 51868 <-> 188.173.130.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:50:45.214721 0.139703 udp 10.0.2.22 51868 <-> 203.192.205.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:50:46.216465 0.142947 udp 10.0.2.22 51868 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:50:47.218207 0.196443 udp 10.0.2.22 51868 <-> 207.34.248.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:50:48.219356 0.295219 udp 10.0.2.22 51868 <-> 199.117.183.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:50:49.221110 0.088546 udp 10.0.2.22 51868 <-> 89.132.14.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:50:50.222440 0.000000 udp 10.0.2.22 51868 -> 122.134.49.223 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:51.213764 0.118851 udp 10.0.2.22 51868 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:50:52.215150 0.000000 udp 10.0.2.22 51868 -> 2.187.40.114 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:53.216511 0.000000 udp 10.0.2.22 51868 -> 84.229.204.125 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:54.217793 0.000000 udp 10.0.2.22 51868 -> 24.164.171.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:55.219720 0.307055 udp 10.0.2.22 51868 <-> 27.142.3.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:50:56.221210 0.000000 udp 10.0.2.22 51868 -> 71.7.230.73 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:50:57.222551 3.069537 udp 10.0.2.22 51868 <-> 85.84.193.130 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:50:58.213822 0.142249 udp 10.0.2.22 51868 <-> 66.168.86.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:50:59.215557 0.744462 udp 10.0.2.22 51868 <-> 186.88.174.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:01.218201 0.271751 udp 10.0.2.22 51868 <-> 31.185.113.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:02.219624 0.000000 udp 10.0.2.22 51868 -> 58.108.171.233 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:51:03.221011 0.086333 udp 10.0.2.22 51868 <-> 84.55.13.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:04.092491 0.000100 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:51:04.222064 0.322262 udp 10.0.2.22 51868 <-> 178.25.74.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:05.213900 0.351431 udp 10.0.2.22 51868 <-> 62.113.14.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:06.214989 0.411492 udp 10.0.2.22 51868 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:07.216823 0.143687 udp 10.0.2.22 51868 <-> 174.108.102.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:08.217979 2.274970 udp 10.0.2.22 51868 <-> 201.21.169.53 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:09.219666 0.000000 udp 10.0.2.22 51868 -> 61.62.169.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:51:11.222392 0.000000 udp 10.0.2.22 51868 -> 92.241.136.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:51:12.213669 0.000000 udp 10.0.2.22 51868 -> 83.221.86.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:51:13.215005 4.006249 udp 10.0.2.22 51868 -> 76.122.44.249 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:51:14.216810 0.000000 udp 10.0.2.22 51868 -> 89.77.192.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:51:15.218152 0.000000 udp 10.0.2.22 51868 -> 58.11.136.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:51:16.219917 0.296418 udp 10.0.2.22 51868 <-> 201.248.21.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:18.222745 0.212641 udp 10.0.2.22 51868 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:19.214056 0.148112 udp 10.0.2.22 51868 <-> 68.195.20.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:20.215756 0.000000 udp 10.0.2.22 51868 -> 82.56.150.79 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:51:21.216754 0.317107 udp 10.0.2.22 51868 <-> 110.233.68.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:22.218678 0.035627 udp 10.0.2.22 51868 <-> 79.117.54.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:23.219739 0.724284 udp 10.0.2.22 51868 <-> 89.228.127.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:24.221710 0.158113 udp 10.0.2.22 51868 <-> 96.59.111.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:25.222596 0.084622 udp 10.0.2.22 51868 <-> 151.74.151.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:26.214421 3.057591 udp 10.0.2.22 51868 <-> 188.173.130.21 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:27.215398 0.000000 udp 10.0.2.22 51868 -> 161.6.244.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:51:28.216753 0.051578 udp 10.0.2.22 51868 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:30.219856 0.000000 udp 10.0.2.22 51868 -> 2.246.25.40 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:51:31.090777 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:51:31.221197 0.043493 udp 10.0.2.22 51868 <-> 79.118.98.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:32.222658 0.036548 udp 10.0.2.22 51868 <-> 79.117.54.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:33.213801 0.000000 udp 10.0.2.22 51868 -> 37.145.43.57 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:51:34.215526 0.000000 udp 10.0.2.22 51868 -> 82.56.150.79 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:51:35.217265 0.792302 udp 10.0.2.22 51868 <-> 109.91.102.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:36.218644 0.051829 udp 10.0.2.22 51868 <-> 84.54.171.18 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:37.219635 0.334083 udp 10.0.2.22 51868 <-> 220.143.102.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:38.221118 0.194616 udp 10.0.2.22 51868 <-> 184.156.20.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:39.222705 0.150170 udp 10.0.2.22 51868 <-> 173.27.248.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:40.214174 0.053992 udp 10.0.2.22 51868 <-> 141.136.14.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:41.215767 0.000000 udp 10.0.2.22 51868 -> 106.242.107.213 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:51:42.216792 0.131941 udp 10.0.2.22 51868 <-> 78.188.164.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:43.218635 0.283367 udp 10.0.2.22 51868 <-> 201.214.63.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:44.219757 0.058952 udp 10.0.2.22 51868 <-> 31.44.194.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:45.221889 0.433090 udp 10.0.2.22 51868 <-> 36.227.126.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:46.222928 0.059701 udp 10.0.2.22 51868 <-> 178.75.248.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:47.214381 1.467474 udp 10.0.2.22 51868 <-> 24.246.239.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:48.215604 0.052834 udp 10.0.2.22 51868 <-> 82.242.39.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:49.217096 0.273376 udp 10.0.2.22 51868 <-> 31.185.113.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:50.218609 0.432152 udp 10.0.2.22 51868 <-> 119.154.218.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:51.219876 0.000000 udp 10.0.2.22 51868 -> 88.203.26.156 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:51:52.221093 0.000000 udp 10.0.2.22 51868 -> 190.178.172.104 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:51:53.223201 1.014379 udp 10.0.2.22 51868 <-> 78.8.126.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:54.214200 0.384707 udp 10.0.2.22 51868 <-> 27.2.203.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:55.215694 0.422528 udp 10.0.2.22 51868 <-> 101.63.3.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:56.216940 0.000000 udp 10.0.2.22 51868 -> 24.135.86.77 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:51:57.218948 0.180355 udp 10.0.2.22 51868 <-> 219.91.230.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:58.090059 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:51:58.220307 0.304230 udp 10.0.2.22 51868 <-> 119.171.47.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:51:59.221279 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:52:00.222691 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:52:01.214195 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:52:02.215771 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:52:03.217379 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:52:04.218648 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:52:05.220073 0.284302 udp 10.0.2.22 51868 <-> 126.36.45.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:06.221773 0.039543 udp 10.0.2.22 51868 <-> 130.204.99.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:07.223072 2.165002 udp 10.0.2.22 51868 <-> 69.244.18.241 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:08.214457 0.000000 udp 10.0.2.22 51868 -> 31.44.194.248 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:52:10.217098 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:52:11.218554 2.290924 udp 10.0.2.22 51868 <-> 187.107.15.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:12.219828 0.022888 udp 10.0.2.22 51868 <-> 194.94.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:13.221442 0.000000 udp 10.0.2.22 51868 -> 186.19.203.238 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:52:14.222695 0.000000 udp 10.0.2.22 51868 -> 120.59.16.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:52:15.214310 0.173240 udp 10.0.2.22 51868 <-> 69.244.18.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:16.216278 0.039354 udp 10.0.2.22 51868 <-> 5.15.195.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:17.217322 0.266701 udp 10.0.2.22 51868 <-> 117.204.112.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:18.219023 0.164356 udp 10.0.2.22 51868 <-> 68.117.130.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:19.220608 0.242112 udp 10.0.2.22 51868 <-> 173.81.250.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:20.221341 0.346692 udp 10.0.2.22 51868 <-> 111.243.170.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:21.223310 0.357920 udp 10.0.2.22 51868 <-> 27.3.164.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:22.214277 0.000000 udp 10.0.2.22 51868 -> 2.191.120.100 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:52:23.215913 1.159625 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:25.088791 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:52:25.218489 0.252718 udp 10.0.2.22 51868 <-> 49.204.100.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:26.220625 0.000000 udp 10.0.2.22 51868 -> 61.21.68.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:52:27.221524 0.142618 udp 10.0.2.22 51868 <-> 103.8.164.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:28.213289 0.157099 udp 10.0.2.22 51868 <-> 98.243.242.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:29.214826 0.114581 udp 10.0.2.22 51868 <-> 87.2.181.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:30.215699 0.000000 udp 10.0.2.22 51868 -> 115.241.1.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:52:31.217683 0.034404 udp 10.0.2.22 51868 <-> 151.100.166.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:32.219250 0.000000 udp 10.0.2.22 51868 -> 200.127.30.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:52:33.220673 0.142636 udp 10.0.2.22 51868 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:34.221525 0.000000 udp 10.0.2.22 51868 -> 124.123.167.92 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:52:34.552546 0.023101 udp 10.0.2.22 60006 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 02:52:34.575981 0.000000 udp 10.0.2.22 60007 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:52:35.213250 0.130480 udp 10.0.2.22 51868 <-> 76.116.104.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:35.885114 0.000000 udp 10.0.2.22 51868 <- 2.191.120.100 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:52:36.214786 0.000000 udp 10.0.2.22 51868 -> 109.98.105.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:52:37.216040 0.180821 udp 10.0.2.22 51868 <-> 207.134.187.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:38.217239 0.039740 udp 10.0.2.22 51868 <-> 188.254.207.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:39.218690 0.066438 udp 10.0.2.22 51868 <-> 46.5.250.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:40.220631 0.167447 udp 10.0.2.22 51868 <-> 108.176.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:41.221525 0.335327 udp 10.0.2.22 51868 <-> 67.55.242.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:42.213197 0.000000 udp 10.0.2.22 51868 -> 101.63.155.156 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:52:43.214374 0.290115 udp 10.0.2.22 51868 <-> 122.215.8.28 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:44.216119 0.445962 udp 10.0.2.22 51868 <-> 116.64.95.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:45.217893 1.159454 udp 10.0.2.22 51868 <-> 75.139.7.5 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:47.220776 0.162479 udp 10.0.2.22 51868 <-> 209.33.13.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:48.222201 0.351175 udp 10.0.2.22 51868 <-> 111.251.8.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:49.213024 0.000000 udp 10.0.2.22 51868 -> 115.240.33.240 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:52:50.215096 0.140105 udp 10.0.2.22 51868 <-> 103.8.164.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:51.216048 0.149203 udp 10.0.2.22 51868 <-> 174.102.8.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:52.097554 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:52:52.218043 0.062797 udp 10.0.2.22 51868 <-> 77.78.239.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:53.219038 0.149064 udp 10.0.2.22 51868 <-> 24.209.250.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:54.220403 0.436603 udp 10.0.2.22 51868 <-> 117.200.61.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:55.221881 0.659122 udp 10.0.2.22 51868 <-> 117.200.220.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:56.213239 0.000000 udp 10.0.2.22 51868 -> 189.103.208.104 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:52:56.904655 0.000000 udp 10.0.2.22 51868 <- 115.240.33.240 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:52:57.214891 0.000000 udp 10.0.2.22 51868 -> 1.170.254.215 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:52:58.216114 0.136130 udp 10.0.2.22 51868 <-> 24.185.176.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:52:59.217838 0.155066 udp 10.0.2.22 51868 <-> 75.133.28.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:00.218817 0.155658 udp 10.0.2.22 51868 <-> 67.184.116.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:01.220726 0.000000 udp 10.0.2.22 51868 -> 111.254.125.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:53:02.221950 0.217248 udp 10.0.2.22 51868 <-> 190.36.162.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:03.213462 0.000000 udp 10.0.2.22 51868 -> 109.101.94.105 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:53:04.215243 0.061747 udp 10.0.2.22 51868 <-> 95.42.254.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:05.216425 0.125858 udp 10.0.2.22 51868 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:06.217626 0.000000 udp 10.0.2.22 51868 -> 83.7.22.51 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:53:07.219320 0.000000 udp 10.0.2.22 51868 -> 118.209.62.83 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:53:08.221022 0.094882 udp 10.0.2.22 51868 <-> 77.103.126.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:09.222492 0.000000 udp 10.0.2.22 51868 -> 77.211.57.96 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:53:10.213199 0.594252 udp 10.0.2.22 51868 <-> 77.77.235.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:11.214855 0.000000 udp 10.0.2.22 51868 -> 94.68.151.96 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:53:12.216727 0.014947 udp 10.0.2.22 51868 <-> 84.118.6.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:13.217879 0.055327 udp 10.0.2.22 51868 <-> 91.211.110.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:14.218965 0.393724 udp 10.0.2.22 51868 <-> 14.99.3.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:15.220949 0.332409 udp 10.0.2.22 51868 <-> 115.242.119.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:16.222387 0.146184 udp 10.0.2.22 51868 <-> 96.23.154.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:17.213736 0.557551 udp 10.0.2.22 51868 <-> 67.242.194.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:18.215309 0.409550 udp 10.0.2.22 51868 <-> 111.249.249.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:19.096625 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:53:19.216421 0.088563 udp 10.0.2.22 51868 <-> 178.77.18.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:20.218272 0.060497 udp 10.0.2.22 51868 <-> 79.115.73.152 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:21.219038 0.472239 udp 10.0.2.22 51868 <-> 190.155.70.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:22.220640 0.062869 udp 10.0.2.22 51868 <-> 95.65.118.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:23.222159 0.125277 udp 10.0.2.22 51868 <-> 87.110.22.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:24.213665 0.048988 udp 10.0.2.22 51868 <-> 88.222.156.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:25.215173 0.141263 udp 10.0.2.22 51868 <-> 203.192.205.254 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:26.216328 0.146897 udp 10.0.2.22 51868 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:27.218087 0.038789 udp 10.0.2.22 51868 <-> 89.77.192.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:28.219461 0.129548 udp 10.0.2.22 51868 <-> 178.125.164.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:29.220750 0.000000 udp 10.0.2.22 51868 -> 106.76.101.38 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:53:30.222337 0.155365 udp 10.0.2.22 51868 <-> 98.122.114.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:31.213759 0.175494 udp 10.0.2.22 51868 <-> 98.194.123.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:32.215202 0.166712 udp 10.0.2.22 51868 <-> 98.27.139.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:33.216298 3.273079 udp 10.0.2.22 51868 <-> 115.184.187.134 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:34.218204 0.030702 udp 10.0.2.22 51868 <-> 94.155.231.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:35.219731 0.041837 udp 10.0.2.22 51868 <-> 89.25.112.106 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:37.222318 0.133206 udp 10.0.2.22 51868 <-> 5.34.126.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:38.214128 0.000000 udp 10.0.2.22 51868 -> 188.24.130.240 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:53:39.214902 0.000000 udp 10.0.2.22 51868 -> 97.66.238.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:53:39.720233 0.000000 udp 10.0.2.22 51868 <- 115.184.187.134 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:53:40.216685 0.305406 udp 10.0.2.22 51868 <-> 180.199.214.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:41.218450 0.527260 udp 10.0.2.22 51868 <-> 186.88.174.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:42.219794 0.021595 udp 10.0.2.22 51868 <-> 88.152.117.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:43.220815 0.163013 udp 10.0.2.22 51868 <-> 31.7.124.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:44.222753 0.125371 udp 10.0.2.22 51868 <-> 149.140.171.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:45.213798 0.000000 udp 10.0.2.22 51868 -> 161.6.244.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:53:46.094998 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:53:46.215499 0.228582 udp 10.0.2.22 51868 <-> 118.95.78.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:47.216579 0.999666 udp 10.0.2.22 51868 <-> 103.246.241.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:48.218423 0.175226 udp 10.0.2.22 51868 <-> 69.243.233.159 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:49.219922 0.020731 udp 10.0.2.22 51868 <-> 93.103.42.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:50.220910 0.216341 udp 10.0.2.22 51868 <-> 98.242.27.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:51.222589 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:53:52.214099 0.000000 udp 10.0.2.22 51868 -> 173.247.187.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:53:53.215160 0.044271 udp 10.0.2.22 51868 <-> 176.37.230.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:54.217076 0.000000 udp 10.0.2.22 51868 -> 130.83.54.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:53:55.218192 0.156008 udp 10.0.2.22 51868 <-> 111.91.62.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:56.219482 0.140966 udp 10.0.2.22 51868 <-> 203.192.205.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:53:57.220785 0.000000 udp 10.0.2.22 51868 -> 70.70.164.40 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:53:59.214290 0.000100 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:53:59.214390 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:54:00.215107 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:01.217114 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:02.217971 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:02.931772 3.002040 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 02:54:03.219963 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:04.221270 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:05.222502 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:06.214157 0.059246 udp 10.0.2.22 51868 <-> 81.202.229.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:54:07.215927 0.000000 udp 10.0.2.22 51868 -> 82.244.92.185 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:08.216889 0.342595 udp 10.0.2.22 51868 <-> 220.129.41.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:54:09.218460 0.138392 udp 10.0.2.22 51868 <-> 68.195.20.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:54:09.939549 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:54:10.219473 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:11.221317 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:12.223115 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:13.093699 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:54:13.214236 3.004474 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:13.308148 0.000000 udp 10.0.2.22 51868 <- 70.70.164.40 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:14.215679 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:15.217069 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:17.219921 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:17.941245 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:54:18.221502 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:19.222677 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:20.214529 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:21.215456 0.305101 udp 10.0.2.22 51868 <-> 111.217.235.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:54:22.216953 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:23.218255 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:24.219624 0.804108 udp 10.0.2.22 51868 <-> 109.91.102.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:54:25.221052 0.297050 udp 10.0.2.22 51868 <-> 126.36.45.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:54:26.222781 0.154758 udp 10.0.2.22 51868 <-> 96.59.111.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:54:27.214508 0.040155 udp 10.0.2.22 51868 <-> 213.89.225.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:54:28.215582 2.002747 udp 10.0.2.22 51868 -> 92.241.136.6 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:29.217251 0.059069 udp 10.0.2.22 51868 <-> 82.242.39.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:54:31.220100 0.065725 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:54:32.221374 1.063079 udp 10.0.2.22 51868 <-> 95.42.253.18 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:54:33.944045 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:54:34.214380 0.000000 udp 10.0.2.22 51868 -> 94.156.153.244 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:35.216121 0.345533 udp 10.0.2.22 51868 <-> 36.232.204.18 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:54:36.217232 3.331910 udp 10.0.2.22 51868 <-> 123.110.11.43 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:54:37.218517 4.586278 udp 10.0.2.22 51868 <-> 218.226.32.36 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:54:38.220122 0.000000 udp 10.0.2.22 51868 -> 188.2.216.49 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:40.092505 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:54:40.222921 0.000000 udp 10.0.2.22 51868 -> 89.134.231.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:42.215988 3.153115 udp 10.0.2.22 51868 <-> 96.20.190.63 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:54:43.217444 0.000000 udp 10.0.2.22 51868 -> 94.156.153.244 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:44.218797 0.000000 udp 10.0.2.22 51868 -> 24.135.219.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:46.221457 0.039905 udp 10.0.2.22 51868 <-> 46.237.64.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:54:47.223179 0.326448 udp 10.0.2.22 51868 <-> 123.110.11.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:54:48.214582 0.170368 udp 10.0.2.22 51868 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:54:49.215920 0.019427 udp 10.0.2.22 51868 <-> 89.176.58.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:54:50.217067 4.183572 udp 10.0.2.22 51868 <-> 174.54.248.12 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:54:51.218418 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:52.220554 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:53.221846 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:55.214755 0.000000 udp 10.0.2.22 51868 -> 175.103.46.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:56.216158 0.172658 udp 10.0.2.22 51868 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:54:57.217100 0.000000 udp 10.0.2.22 51868 -> 92.240.41.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:54:58.219149 0.018959 udp 10.0.2.22 51868 <-> 91.146.185.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:54:59.219936 0.055876 udp 10.0.2.22 51868 <-> 86.122.145.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:00.222011 0.291037 udp 10.0.2.22 51868 <-> 122.215.8.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:01.213241 0.234341 udp 10.0.2.22 51868 <-> 76.244.146.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:02.214458 4.363380 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:03.510221 0.000000 udp 10.0.2.22 51868 -> 69.8.46.202 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:55:04.357966 4.997209 udp 10.0.2.22 51868 <-> 203.192.205.254 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:05.359281 0.443793 udp 10.0.2.22 51868 <-> 114.39.33.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:06.090567 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 02:55:07.231925 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:55:07.361790 0.000000 udp 10.0.2.22 51868 -> 98.222.5.147 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:55:08.353689 0.051281 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:10.356564 1.796673 udp 10.0.2.22 51868 <-> 69.8.46.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:11.357963 0.043803 udp 10.0.2.22 51868 <-> 188.115.182.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:12.358827 0.015602 udp 10.0.2.22 51868 <-> 164.8.204.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:13.360422 0.154813 udp 10.0.2.22 51868 <-> 98.253.230.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:14.362157 1.246647 udp 10.0.2.22 51868 <-> 181.165.163.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:15.353199 0.345428 udp 10.0.2.22 51868 <-> 111.250.115.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:16.355020 0.021544 udp 10.0.2.22 51868 <-> 161.53.161.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:17.356324 0.155215 udp 10.0.2.22 51868 <-> 24.210.74.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:18.357458 0.214584 udp 10.0.2.22 51868 <-> 109.102.128.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:18.665179 0.000000 udp 10.0.2.22 51868 <- 98.222.5.147 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:55:19.359216 0.000000 udp 10.0.2.22 51868 -> 111.92.3.137 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:55:20.360615 0.062021 udp 10.0.2.22 51868 <-> 78.50.110.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:21.362359 0.032764 udp 10.0.2.22 51868 <-> 89.132.240.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:22.353586 1.225242 udp 10.0.2.22 51868 <-> 117.239.29.60 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:24.356067 0.312574 udp 10.0.2.22 51868 <-> 153.165.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:25.358151 0.000000 udp 10.0.2.22 51868 -> 188.21.161.214 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:55:26.359620 0.041166 udp 10.0.2.22 51868 <-> 84.197.172.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:27.360775 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:55:28.362479 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:55:29.353525 0.312883 udp 10.0.2.22 51868 <-> 221.121.174.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:30.355194 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:55:31.356828 0.339611 udp 10.0.2.22 51868 <-> 186.122.74.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:32.358039 0.022171 udp 10.0.2.22 51868 <-> 89.33.186.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:33.359395 0.396294 udp 10.0.2.22 51868 <-> 211.179.224.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:34.230489 0.000134 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:55:34.360976 0.037061 udp 10.0.2.22 51868 <-> 31.131.49.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:35.362292 1.697419 udp 10.0.2.22 51868 <-> 190.195.127.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:36.353506 0.335172 udp 10.0.2.22 51868 <-> 111.125.230.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:37.355093 0.359552 udp 10.0.2.22 51868 <-> 27.3.191.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:38.356299 0.263753 udp 10.0.2.22 51868 <-> 50.113.56.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:39.357966 0.169296 udp 10.0.2.22 51868 <-> 174.49.200.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:40.359597 0.000000 udp 10.0.2.22 51868 -> 114.40.217.73 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:55:41.360701 0.042275 udp 10.0.2.22 51868 <-> 147.156.24.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:42.362610 0.000000 udp 10.0.2.22 51868 -> 190.0.76.156 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:55:43.353686 0.163843 udp 10.0.2.22 51868 <-> 74.77.226.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:44.355364 0.000000 udp 10.0.2.22 51868 -> 1.164.153.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:55:45.356577 0.037694 udp 10.0.2.22 51868 <-> 178.79.32.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:46.358048 0.000000 udp 10.0.2.22 51868 -> 98.154.166.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:55:47.359559 0.405010 udp 10.0.2.22 51868 <-> 175.215.84.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:48.361296 0.321934 udp 10.0.2.22 51868 <-> 1.163.129.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:49.362712 0.150244 udp 10.0.2.22 51868 <-> 98.235.61.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:50.353943 0.031027 udp 10.0.2.22 51868 <-> 89.64.246.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:51.355146 0.097572 udp 10.0.2.22 51868 <-> 84.125.195.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:52.356645 0.143336 udp 10.0.2.22 51868 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:53.358646 0.266440 udp 10.0.2.22 51868 <-> 115.245.180.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:55:54.359375 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:55:55.361496 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:55:56.362086 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:55:57.353617 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:55:58.355092 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:55:59.356387 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:00.358516 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:01.229759 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:56:01.359277 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:02.361315 0.351763 udp 10.0.2.22 51868 <-> 14.99.131.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:56:04.354187 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:05.355085 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:06.356950 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:07.358554 0.000050 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:07.358604 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:56:08.359510 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:09.361244 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:10.362358 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:11.354309 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:12.355256 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:13.356700 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:14.358338 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:15.359919 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:16.361237 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:17.362284 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:18.353825 0.369668 udp 10.0.2.22 51868 <-> 14.99.131.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:56:19.355153 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:20.356922 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:21.358199 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:22.359825 0.000048 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:22.359873 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:56:23.361083 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:25.353897 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:26.355618 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:27.357086 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:28.228078 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:56:28.358670 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:29.359581 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:30.360969 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:31.362949 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:32.354247 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:33.355425 0.000000 udp 10.0.2.22 51868 -> 14.99.131.141 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:34.356726 0.291333 udp 10.0.2.22 51868 <-> 115.245.180.64 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:56:35.358620 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:36.360155 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:38.362961 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:39.354540 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:40.355858 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:41.357480 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:42.358484 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:43.359698 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:44.361228 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:45.363112 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:46.354525 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:47.355387 4.006254 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:48.357141 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:49.358281 4.427937 udp 10.0.2.22 51868 <-> 14.99.131.141 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:56:50.360133 0.158768 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:56:53.354604 0.304627 udp 10.0.2.22 51868 <-> 14.97.54.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:56:54.355899 0.000000 udp 10.0.2.22 51868 -> 81.202.229.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:56:55.236915 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:56:55.357270 0.241285 udp 10.0.2.22 51868 <-> 2.180.150.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:56:56.358617 0.326743 udp 10.0.2.22 51868 <-> 202.78.81.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:56:57.360315 0.210289 udp 10.0.2.22 51868 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:56:58.361837 0.159241 udp 10.0.2.22 51868 <-> 75.86.159.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:56:59.363208 1.050048 udp 10.0.2.22 51868 <-> 188.173.128.69 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:01.355526 0.044737 udp 10.0.2.22 51868 <-> 193.150.231.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:02.357617 0.146974 udp 10.0.2.22 51868 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:03.358842 0.264727 udp 10.0.2.22 51868 <-> 79.12.187.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:04.360522 0.102702 udp 10.0.2.22 51868 <-> 84.225.93.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:05.362010 2.106789 udp 10.0.2.22 51868 <-> 190.49.238.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:06.362946 0.155092 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:07.354623 0.266655 udp 10.0.2.22 51868 <-> 190.38.216.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:08.356016 0.000000 udp 10.0.2.22 51868 -> 118.108.87.203 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:57:09.357295 0.145608 udp 10.0.2.22 51868 <-> 67.85.178.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:10.359076 0.621122 udp 10.0.2.22 51868 <-> 117.221.65.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:11.360369 0.048280 udp 10.0.2.22 51868 <-> 150.214.64.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:12.361433 0.110458 udp 10.0.2.22 51868 <-> 79.43.132.117 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:13.363242 0.049823 udp 10.0.2.22 51868 <-> 195.70.108.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:14.354617 0.175980 udp 10.0.2.22 51868 <-> 107.223.74.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:15.355928 0.640875 udp 10.0.2.22 51868 <-> 117.214.188.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:16.357398 0.022183 udp 10.0.2.22 51868 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:17.358847 1.346964 udp 10.0.2.22 51868 <-> 36.232.204.18 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:19.361705 0.053583 udp 10.0.2.22 51868 <-> 188.173.130.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:20.363235 0.209410 udp 10.0.2.22 51868 <-> 71.196.226.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:21.354767 0.000000 udp 10.0.2.22 51868 -> 115.124.226.38 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:57:22.235691 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:57:22.356413 0.075210 udp 10.0.2.22 51868 <-> 85.84.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:23.357473 0.368555 udp 10.0.2.22 51868 <-> 219.73.68.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:24.359248 0.153615 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:25.360366 0.159701 udp 10.0.2.22 51868 <-> 72.23.198.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:26.361497 2.675888 udp 10.0.2.22 51868 <-> 178.149.14.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:27.363140 0.094910 udp 10.0.2.22 51868 <-> 85.56.52.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:28.354373 0.148001 udp 10.0.2.22 51868 <-> 84.225.93.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:29.356198 1.128175 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:31.358726 0.294780 udp 10.0.2.22 51868 <-> 201.95.31.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:32.360630 1.233507 udp 10.0.2.22 51868 <-> 88.37.113.50 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:34.353699 0.341019 udp 10.0.2.22 51868 <-> 36.224.67.102 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:35.354733 0.145129 udp 10.0.2.22 51868 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:36.356704 0.046911 udp 10.0.2.22 51868 <-> 84.40.72.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:37.357897 0.116598 udp 10.0.2.22 51868 <-> 24.54.59.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:38.359375 0.505442 udp 10.0.2.22 51868 <-> 69.47.131.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:39.360898 0.000000 udp 10.0.2.22 51868 -> 69.104.55.122 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:57:40.362474 0.330283 udp 10.0.2.22 51868 <-> 1.164.48.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:41.353186 0.175315 udp 10.0.2.22 51868 <-> 50.123.134.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:42.355026 0.182527 udp 10.0.2.22 51868 <-> 192.226.149.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:43.356324 0.256729 udp 10.0.2.22 51868 <-> 69.120.164.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:44.358117 0.150986 udp 10.0.2.22 51868 <-> 65.188.38.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:45.359266 0.148113 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:46.360252 0.068123 udp 10.0.2.22 51868 <-> 84.55.13.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:47.362396 0.120825 udp 10.0.2.22 51868 <-> 24.57.120.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:48.353726 0.253885 udp 10.0.2.22 51868 <-> 187.20.177.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:49.234863 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:57:49.355191 0.337777 udp 10.0.2.22 51868 <-> 119.236.63.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:50.356459 0.136598 udp 10.0.2.22 51868 <-> 67.85.183.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:51.357617 0.078619 udp 10.0.2.22 51868 <-> 95.74.64.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:52.359268 0.000000 udp 10.0.2.22 51868 -> 84.12.142.25 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:57:53.360357 0.457035 udp 10.0.2.22 51868 <-> 36.230.26.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:54.361732 0.000000 udp 10.0.2.22 51868 -> 122.149.74.178 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:57:55.353474 0.000000 udp 10.0.2.22 51868 -> 216.75.127.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:57:56.355089 0.000000 udp 10.0.2.22 51868 -> 5.12.178.175 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:57:57.356617 0.276057 udp 10.0.2.22 51868 <-> 85.224.225.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:58.357843 0.057334 udp 10.0.2.22 51868 <-> 84.236.148.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:57:59.359192 0.151192 udp 10.0.2.22 51868 <-> 174.108.78.50 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:58:00.360780 0.066770 udp 10.0.2.22 51868 <-> 95.178.112.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:58:01.362446 0.000000 udp 10.0.2.22 51868 -> 84.125.195.156 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:02.353860 0.077489 udp 10.0.2.22 51868 <-> 188.23.228.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:58:03.355175 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:04.356606 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:05.357766 0.037463 udp 10.0.2.22 51868 <-> 84.196.174.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:58:06.359014 0.366570 udp 10.0.2.22 51868 <-> 111.246.34.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:58:07.361463 0.343897 udp 10.0.2.22 51868 <-> 218.250.127.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:58:08.361869 0.229619 udp 10.0.2.22 51868 <-> 83.20.28.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:58:09.353453 0.296408 udp 10.0.2.22 51868 <-> 219.96.51.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:58:10.355083 0.150413 udp 10.0.2.22 51868 <-> 24.74.24.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:58:11.356339 0.000000 udp 10.0.2.22 51868 -> 14.96.2.228 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:12.357641 0.415229 udp 10.0.2.22 51868 <-> 175.211.29.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:58:13.359259 0.340712 udp 10.0.2.22 51868 <-> 111.254.125.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:58:15.362345 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:16.233609 0.000039 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:58:16.353424 0.000041 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:16.353465 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:58:17.354817 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:18.356971 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:19.357825 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:20.359526 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:21.360798 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:22.362356 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:23.354072 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:24.355430 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:25.376830 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:26.377781 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:27.379893 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:28.380866 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:29.382517 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:30.374029 4.172713 udp 10.0.2.22 51868 <-> 72.226.92.80 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:58:31.375304 0.000044 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:31.375348 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:58:33.378221 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:35.380981 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:36.382151 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:37.374297 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:38.375573 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:39.377125 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:40.378207 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:41.379908 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:42.381043 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:43.252275 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:58:43.382851 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:44.374170 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:45.375307 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:46.376553 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:47.377980 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:49.381224 0.004523 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:49.385747 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:58:50.383042 0.055900 udp 10.0.2.22 51868 <-> 176.14.77.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:58:51.374052 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:52.375374 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:53.376791 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:54.378769 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:55.380054 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:56.381156 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:57.382347 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:58.373967 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:58:59.375617 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:00.377485 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:01.378622 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:02.379561 0.000074 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:02.379635 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:59:03.381282 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:04.382829 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:06.375354 0.277253 udp 10.0.2.22 51868 <-> 186.67.39.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:59:07.377317 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:08.378790 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:09.379745 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:10.381440 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:11.252449 0.000039 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:59:11.383168 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:12.374399 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:13.375943 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:14.376864 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:15.378861 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:16.379988 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:17.381695 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:18.382605 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:19.374332 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:21.377005 0.000062 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:21.377067 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:59:22.378792 0.265237 udp 10.0.2.22 51868 <-> 123.237.188.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:59:23.379724 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:24.381206 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:25.382928 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:26.374631 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:27.376014 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:28.377160 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:29.378654 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:30.380377 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:31.381582 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:32.383375 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:33.374451 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:35.377082 0.000044 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:35.377126 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:59:36.378955 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:37.379946 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:38.251401 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:59:38.381521 0.000000 udp 10.0.2.22 51868 -> 94.42.125.83 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:39.383072 0.056024 udp 10.0.2.22 51868 <-> 176.14.77.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:59:40.374626 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:41.376101 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:42.377776 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:43.379383 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:44.380316 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:45.381623 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:46.383531 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:47.374707 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:48.375931 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:49.377168 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:50.378945 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:52.381505 0.000107 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:52.381612 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 02:59:53.383065 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:54.374308 0.270423 udp 10.0.2.22 51868 <-> 186.67.39.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 02:59:55.376126 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:56.377202 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:57.378819 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:58.380348 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:59:59.382107 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:00:00.383568 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:00:01.374850 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:00:02.375910 0.297200 udp 10.0.2.22 51868 <-> 219.96.51.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:03.377684 0.000000 udp 10.0.2.22 51868 -> 82.239.45.91 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:00:04.379290 0.000000 udp 10.0.2.22 51868 -> 177.38.33.93 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:00:05.250532 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:00:05.380359 0.353795 udp 10.0.2.22 51868 <-> 115.165.236.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:06.382051 0.342495 udp 10.0.2.22 51868 <-> 112.120.210.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:07.373149 0.295916 udp 10.0.2.22 51868 <-> 61.215.114.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:08.374614 0.158983 udp 10.0.2.22 51868 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:09.375960 0.135022 udp 10.0.2.22 51868 <-> 68.194.18.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:10.377718 1.877618 udp 10.0.2.22 51868 <-> 189.54.80.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:11.379007 0.160985 udp 10.0.2.22 51868 <-> 173.30.6.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:12.380670 0.254417 udp 10.0.2.22 51868 <-> 201.248.21.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:13.382287 0.568500 udp 10.0.2.22 51868 <-> 92.229.124.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:14.373314 0.404866 udp 10.0.2.22 51868 <-> 190.77.199.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:15.375020 0.884343 udp 10.0.2.22 51868 <-> 103.250.17.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:16.376441 0.360882 udp 10.0.2.22 51868 <-> 97.102.73.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:17.378111 0.136411 udp 10.0.2.22 51868 <-> 24.44.159.76 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:18.379310 0.053389 udp 10.0.2.22 51868 <-> 78.96.183.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:19.380659 0.190523 udp 10.0.2.22 51868 <-> 75.135.53.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:20.382388 0.063363 udp 10.0.2.22 51868 <-> 95.42.254.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:21.373598 0.379272 udp 10.0.2.22 51868 <-> 1.36.1.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:22.375162 0.153429 udp 10.0.2.22 51868 <-> 111.91.62.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:23.376274 0.072745 udp 10.0.2.22 51868 <-> 83.97.238.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:24.378115 0.052987 udp 10.0.2.22 51868 <-> 83.142.2.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:25.379119 0.039815 udp 10.0.2.22 51868 <-> 91.218.81.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:26.380462 1.001626 udp 10.0.2.22 51868 <-> 124.96.225.9 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:28.373685 0.163785 udp 10.0.2.22 51868 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:29.375145 0.248567 udp 10.0.2.22 51868 <-> 50.47.95.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:30.376512 0.309352 udp 10.0.2.22 51868 <-> 219.121.216.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:31.377716 0.022134 udp 10.0.2.22 51868 <-> 93.103.42.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:32.249267 0.000242 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:00:32.379173 0.199076 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:33.380584 0.084747 udp 10.0.2.22 51868 <-> 94.41.65.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:34.382122 0.038638 udp 10.0.2.22 51868 <-> 89.71.59.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:35.373439 0.000000 udp 10.0.2.22 51868 -> 213.246.186.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:00:36.374979 0.083344 udp 10.0.2.22 51868 <-> 151.48.113.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:37.376243 0.373430 udp 10.0.2.22 51868 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:38.378113 0.773546 udp 10.0.2.22 51868 <-> 85.30.146.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:39.379131 0.173178 udp 10.0.2.22 51868 <-> 65.24.128.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:40.380891 0.052126 udp 10.0.2.22 51868 <-> 83.142.2.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:41.382647 0.142317 udp 10.0.2.22 51868 <-> 66.168.86.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:42.373899 1.329106 udp 10.0.2.22 51868 <-> 123.110.11.43 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:44.376271 0.049378 udp 10.0.2.22 51868 <-> 5.14.212.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:45.377908 0.357384 udp 10.0.2.22 51868 <-> 1.172.101.198 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:46.379226 0.292850 udp 10.0.2.22 51868 <-> 91.133.48.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:47.380957 0.000000 udp 10.0.2.22 51868 -> 84.122.156.150 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:00:48.382402 0.084879 udp 10.0.2.22 51868 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:49.373874 0.000000 udp 10.0.2.22 51868 -> 187.56.100.187 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:00:50.375399 0.295210 udp 10.0.2.22 51868 <-> 110.233.68.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:51.376723 0.062322 udp 10.0.2.22 51868 <-> 94.253.238.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:52.377727 0.058048 udp 10.0.2.22 51868 <-> 79.118.213.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:53.379631 0.460932 udp 10.0.2.22 51868 <-> 58.105.9.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:54.380819 0.075941 udp 10.0.2.22 51868 <-> 85.84.168.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:55.382595 0.000000 udp 10.0.2.22 51868 -> 92.240.41.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:00:56.373662 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:00:57.374925 0.121691 udp 10.0.2.22 51868 <-> 70.188.21.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:58.376334 0.158157 udp 10.0.2.22 51868 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:00:59.247550 0.000098 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:00:59.378258 0.178934 udp 10.0.2.22 51868 <-> 216.121.246.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:00.379969 0.196929 udp 10.0.2.22 51868 <-> 75.84.176.143 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:01.381143 0.000000 udp 10.0.2.22 51868 -> 209.137.215.138 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:01:02.382283 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:01:03.373763 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:01:04.375501 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:01:05.376829 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:01:06.378435 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:01:07.379416 0.144134 udp 10.0.2.22 51868 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:08.380792 0.126139 udp 10.0.2.22 51868 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:09.382138 1.972520 udp 10.0.2.22 51868 <-> 14.97.91.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:10.115512 3.002762 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 03:01:10.374344 0.000000 udp 10.0.2.22 51868 -> 209.137.215.138 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:01:12.376565 0.372007 udp 10.0.2.22 51868 <-> 27.3.133.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:13.378601 0.173573 udp 10.0.2.22 51868 <-> 24.155.247.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:14.379330 0.591592 udp 10.0.2.22 51868 <-> 79.216.201.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:15.380999 0.000000 udp 10.0.2.22 51868 -> 190.74.199.174 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:01:16.382810 0.142819 udp 10.0.2.22 51868 <-> 85.85.242.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:17.123834 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:01:17.373623 0.000000 udp 10.0.2.22 51868 -> 151.241.117.61 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:01:18.375642 0.364463 udp 10.0.2.22 51868 <-> 61.223.95.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:19.376740 0.000000 udp 10.0.2.22 51868 -> 1.175.217.230 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:01:20.378435 0.133948 udp 10.0.2.22 51868 <-> 24.75.177.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:21.379859 0.139837 udp 10.0.2.22 51868 <-> 69.116.161.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:22.381472 0.000000 udp 10.0.2.22 51868 -> 27.0.51.38 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:01:23.382964 0.030136 udp 10.0.2.22 51868 <-> 131.114.121.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:24.374022 0.298527 udp 10.0.2.22 51868 <-> 153.162.40.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:25.125062 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:01:25.375226 1.056273 udp 10.0.2.22 51868 <-> 94.240.161.16 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:26.256388 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:01:27.378454 0.417128 udp 10.0.2.22 51868 <-> 175.211.29.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:28.380129 0.040266 udp 10.0.2.22 51868 <-> 46.237.64.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:29.381552 0.155347 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:30.382493 0.173927 udp 10.0.2.22 51868 <-> 24.182.200.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:31.374642 1.053325 udp 10.0.2.22 51868 <-> 31.176.247.121 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:33.376924 0.069927 udp 10.0.2.22 51868 <-> 85.86.78.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:34.378657 0.116961 udp 10.0.2.22 51868 <-> 24.36.65.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:35.379813 0.161162 udp 10.0.2.22 51868 <-> 75.68.219.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:36.381083 0.261697 udp 10.0.2.22 51868 <-> 183.82.144.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:37.382772 0.000000 udp 10.0.2.22 51868 -> 151.233.139.192 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:01:38.374026 0.194148 udp 10.0.2.22 51868 <-> 210.212.99.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:39.375582 0.018743 udp 10.0.2.22 51868 <-> 195.64.78.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:40.377159 0.342375 udp 10.0.2.22 51868 <-> 61.1.224.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:41.128320 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:01:41.378132 0.166141 udp 10.0.2.22 51868 <-> 173.31.129.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:42.379714 0.160800 udp 10.0.2.22 51868 <-> 178.122.189.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:43.381016 0.082292 udp 10.0.2.22 51868 <-> 93.72.6.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:44.383028 0.331925 udp 10.0.2.22 51868 <-> 153.132.3.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:45.374373 1.313557 udp 10.0.2.22 51868 <-> 122.210.119.52 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:47.376813 0.000000 udp 10.0.2.22 51868 -> 138.100.100.120 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:01:48.379030 0.326994 udp 10.0.2.22 51868 <-> 59.190.46.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:49.379907 0.313652 udp 10.0.2.22 51868 <-> 190.72.54.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:50.381679 0.000000 udp 10.0.2.22 51868 -> 14.99.85.142 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:01:51.382927 0.302737 udp 10.0.2.22 51868 <-> 59.20.31.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:52.374392 0.040457 udp 10.0.2.22 51868 <-> 86.107.198.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:53.255557 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:01:53.375491 0.145829 udp 10.0.2.22 51868 <-> 174.102.8.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:54.377574 0.170769 udp 10.0.2.22 51868 <-> 71.86.94.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:55.378600 0.000000 udp 10.0.2.22 51868 -> 1.23.89.131 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:01:56.379982 0.000000 udp 10.0.2.22 51868 -> 62.84.95.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:01:57.381709 0.116149 udp 10.0.2.22 51868 <-> 24.36.65.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:58.382904 0.087364 udp 10.0.2.22 51868 <-> 77.78.227.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:01:59.374011 0.055410 udp 10.0.2.22 51868 <-> 188.173.130.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:02:00.375763 0.000000 udp 10.0.2.22 51868 -> 203.192.205.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:01.377380 0.125480 udp 10.0.2.22 51868 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:02:02.378950 0.338101 udp 10.0.2.22 51868 <-> 49.249.30.201 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:02:03.380050 0.133044 udp 10.0.2.22 51868 <-> 5.34.126.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:02:04.381881 0.200853 udp 10.0.2.22 51868 <-> 174.6.108.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:02:05.383247 0.160136 udp 10.0.2.22 51868 <-> 12.39.137.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:02:06.374527 0.329707 udp 10.0.2.22 51868 <-> 219.174.52.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:02:07.375646 0.395555 udp 10.0.2.22 51868 <-> 190.48.170.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:02:08.376980 0.396697 udp 10.0.2.22 51868 <-> 118.165.157.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:02:09.379071 0.216406 udp 10.0.2.22 51868 <-> 202.71.18.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:02:10.380402 0.340286 udp 10.0.2.22 51868 <-> 111.250.238.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:02:11.381954 0.063603 udp 10.0.2.22 51868 <-> 193.68.211.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:02:12.383124 0.121142 udp 10.0.2.22 51868 <-> 72.38.7.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:02:13.134043 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:02:13.374257 0.282555 udp 10.0.2.22 51868 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:02:14.375592 0.000000 udp 10.0.2.22 51868 -> 60.231.84.237 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:15.377213 0.027321 udp 10.0.2.22 51868 <-> 151.237.10.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:02:16.378678 0.029779 udp 10.0.2.22 51868 <-> 80.99.142.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:02:17.380610 0.303941 udp 10.0.2.22 51868 <-> 177.38.33.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:02:18.381567 0.137604 udp 10.0.2.22 51868 <-> 178.185.16.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:02:19.382956 3.297378 udp 10.0.2.22 51868 <-> 221.115.144.118 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:02:20.253985 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:02:20.374434 0.151754 udp 10.0.2.22 51868 <-> 69.73.57.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:02:21.376093 0.000000 udp 10.0.2.22 51868 -> 93.141.26.182 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:23.379234 0.000000 udp 10.0.2.22 51868 -> 151.241.6.39 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:24.380194 0.140773 udp 10.0.2.22 51868 <-> 184.56.45.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:02:25.382051 0.042881 udp 10.0.2.22 51868 <-> 80.3.188.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:02:26.383023 0.000000 udp 10.0.2.22 51868 -> 187.56.100.187 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:27.374684 0.000000 udp 10.0.2.22 51868 -> 183.83.120.224 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:28.376183 0.296354 udp 10.0.2.22 51868 <-> 190.19.174.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:02:29.377246 0.155824 udp 10.0.2.22 51868 <-> 76.16.185.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:02:31.380434 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:32.382053 0.000066 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:32.382119 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:02:33.382991 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:34.374683 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:35.375964 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:36.377776 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:37.378882 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:38.380572 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:39.381782 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:40.373828 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:41.374826 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:42.376247 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:43.377720 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:44.379058 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:45.380849 2.994243 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:46.381720 0.011872 udp 10.0.2.22 51868 <-> 212.59.229.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:02:47.253280 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:02:47.373214 0.000055 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:47.373269 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:02:49.375935 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:50.377371 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:51.379360 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:52.380731 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:53.382334 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:54.373163 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:55.375225 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:56.376479 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:57.377538 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:58.378846 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:02:59.380656 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:03:00.381957 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:03:02.374903 0.233667 udp 10.0.2.22 51868 <-> 183.83.32.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:03.376484 0.011678 udp 10.0.2.22 51868 <-> 212.59.229.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:04.377712 4.997323 udp 10.0.2.22 51868 -> 69.248.152.15 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:03:05.379191 0.005295 udp 10.0.2.22 51868 <-> 147.229.140.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:06.381012 0.000000 udp 10.0.2.22 51868 -> 75.237.168.68 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:03:07.381898 0.000000 udp 10.0.2.22 51868 -> 61.223.95.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:03:08.373635 0.236673 udp 10.0.2.22 51868 <-> 183.83.32.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:10.376241 0.000000 udp 10.0.2.22 51868 -> 14.96.102.136 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:03:11.378052 0.118133 udp 10.0.2.22 51868 <-> 216.121.246.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:12.379359 0.005185 udp 10.0.2.22 51868 <-> 147.229.140.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:13.380794 2.994510 udp 10.0.2.22 51868 -> 88.254.102.105 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:03:14.252053 0.000122 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:03:14.381974 0.234474 udp 10.0.2.22 51868 <-> 183.83.32.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:15.373595 0.138727 udp 10.0.2.22 51868 <-> 79.25.244.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:17.376467 0.296533 udp 10.0.2.22 51868 <-> 153.165.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:18.378240 0.403464 udp 10.0.2.22 51868 <-> 75.237.168.68 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:19.379695 1.131067 udp 10.0.2.22 51868 <-> 195.62.0.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:21.382049 0.332794 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:22.373945 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:03:23.375114 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:03:24.376468 0.000000 udp 10.0.2.22 51868 -> 109.228.117.240 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:03:25.377806 0.950061 udp 10.0.2.22 51868 <-> 201.231.197.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:26.379254 2.994180 udp 10.0.2.22 51868 -> 83.25.70.11 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:03:27.381201 0.224422 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:28.382432 0.029899 udp 10.0.2.22 51868 <-> 109.193.41.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:30.375110 0.378814 udp 10.0.2.22 51868 <-> 108.230.246.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:31.376811 0.152656 udp 10.0.2.22 51868 <-> 70.44.250.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:32.378388 1.917561 udp 10.0.2.22 51868 <-> 190.49.238.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:33.380008 0.322304 udp 10.0.2.22 51868 <-> 76.109.136.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:34.380628 0.639028 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:35.382201 0.032834 udp 10.0.2.22 51868 <-> 130.204.169.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:36.374139 0.039372 udp 10.0.2.22 51868 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:37.375163 0.201161 udp 10.0.2.22 51868 <-> 94.205.1.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:38.376928 4.997424 udp 10.0.2.22 51868 <-> 77.179.221.52 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:39.378680 0.235465 udp 10.0.2.22 51868 <-> 115.244.252.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:40.379272 0.000000 udp 10.0.2.22 51868 -> 116.202.131.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:03:41.250874 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:03:41.380700 0.296118 udp 10.0.2.22 51868 <-> 186.92.60.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:42.382181 2.151641 udp 10.0.2.22 51868 <-> 68.11.235.36 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:43.998326 0.000000 udp 10.0.2.22 51868 <- 77.179.221.52 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:03:45.377025 0.046632 udp 10.0.2.22 51868 <-> 89.46.84.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:46.377902 0.065014 udp 10.0.2.22 51868 <-> 79.173.35.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:47.379275 0.054984 udp 10.0.2.22 51868 <-> 79.117.106.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:48.380926 0.080946 udp 10.0.2.22 51868 <-> 188.94.82.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:49.382770 0.190876 udp 10.0.2.22 51868 <-> 109.67.249.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:50.373943 0.156062 udp 10.0.2.22 51868 <-> 96.23.154.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:51.375038 0.000000 udp 10.0.2.22 51868 -> 79.176.13.149 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:03:52.376785 1.001678 udp 10.0.2.22 51868 <-> 123.201.207.144 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:54.379502 0.052942 udp 10.0.2.22 51868 <-> 84.232.228.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:55.381307 0.047645 udp 10.0.2.22 51868 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:56.382667 0.000000 udp 10.0.2.22 51868 -> 24.193.202.251 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:03:57.374319 0.339194 udp 10.0.2.22 51868 <-> 190.51.51.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:58.375775 0.113943 udp 10.0.2.22 51868 <-> 78.188.164.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:03:59.376951 0.000000 udp 10.0.2.22 51868 -> 50.26.127.53 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:04:00.378275 3.995978 udp 10.0.2.22 51868 -> 122.100.80.110 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:04:01.379483 0.000084 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:04:01.379567 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:04:02.381533 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:04:03.382572 0.155092 udp 10.0.2.22 51868 <-> 68.117.189.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:05.375179 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:04:06.376798 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:04:07.189235 0.000000 udp 10.0.2.22 51868 <- 122.100.80.110 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:04:07.378449 0.049391 udp 10.0.2.22 51868 <-> 178.150.91.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:08.249906 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:04:08.380016 2.003035 udp 10.0.2.22 51868 -> 177.149.127.27 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:04:09.381128 0.291503 udp 10.0.2.22 51868 <-> 210.194.128.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:11.373792 3.004968 udp 10.0.2.22 51868 <-> 60.62.93.24 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:12.375602 0.046583 udp 10.0.2.22 51868 <-> 95.108.60.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:13.376738 0.091960 udp 10.0.2.22 51868 <-> 178.129.93.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:15.379786 2.994701 udp 10.0.2.22 51868 <-> 89.133.113.59 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:16.381198 0.291550 udp 10.0.2.22 51868 <-> 210.194.128.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:17.383169 0.000000 udp 10.0.2.22 51868 -> 179.95.124.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:04:19.375803 0.000000 udp 10.0.2.22 51868 -> 175.140.37.60 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:04:20.376821 0.054808 udp 10.0.2.22 51868 <-> 62.20.124.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:21.378914 0.000000 udp 10.0.2.22 51868 -> 174.73.117.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:04:22.379744 0.482363 udp 10.0.2.22 51868 <-> 77.176.38.4 16464 CON 0 0 2 668 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:23.381594 0.111638 udp 10.0.2.22 51868 <-> 78.220.84.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:24.383030 0.583276 udp 10.0.2.22 51868 <-> 181.168.234.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:25.374209 0.087115 udp 10.0.2.22 51868 <-> 77.78.227.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:26.375425 0.136210 udp 10.0.2.22 51868 <-> 68.192.3.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:27.377681 0.085330 udp 10.0.2.22 51868 <-> 197.200.160.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:28.378599 0.000000 udp 10.0.2.22 51868 -> 85.202.213.208 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:04:29.380185 0.071056 udp 10.0.2.22 51868 <-> 93.176.212.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:30.381652 0.066384 udp 10.0.2.22 51868 <-> 178.150.91.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:31.382693 0.000000 udp 10.0.2.22 51868 -> 180.215.5.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:04:32.374218 0.000000 udp 10.0.2.22 51868 -> 210.89.38.166 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:04:33.375827 0.321995 udp 10.0.2.22 51868 <-> 123.110.35.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:34.376999 0.000000 udp 10.0.2.22 51868 -> 80.99.142.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:04:35.248437 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:04:35.379045 0.030484 udp 10.0.2.22 51868 <-> 131.114.50.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:36.380442 0.056097 udp 10.0.2.22 51868 <-> 78.243.4.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:37.381327 4.997402 udp 10.0.2.22 51868 -> 188.27.196.55 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:04:38.383377 0.044964 udp 10.0.2.22 51868 <-> 176.37.230.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:39.374058 0.059651 udp 10.0.2.22 51868 <-> 5.43.104.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:40.376032 0.026468 udp 10.0.2.22 51868 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:41.377636 0.050693 udp 10.0.2.22 51868 <-> 46.102.30.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:43.380109 0.058448 udp 10.0.2.22 51868 <-> 95.173.32.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:44.381518 0.031155 udp 10.0.2.22 51868 <-> 87.97.204.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:45.383059 0.343357 udp 10.0.2.22 51868 <-> 1.172.166.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:46.374901 0.021211 udp 10.0.2.22 51868 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:47.376066 2.002995 udp 10.0.2.22 51868 -> 188.27.196.55 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:04:48.377170 0.134107 udp 10.0.2.22 51868 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:50.380387 0.068520 udp 10.0.2.22 51868 <-> 82.130.171.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:51.381697 0.178448 udp 10.0.2.22 51868 <-> 79.11.152.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:52.383081 0.000000 udp 10.0.2.22 51868 -> 69.122.169.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:04:53.374189 0.136115 udp 10.0.2.22 51868 <-> 24.0.91.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:54.375626 1.138709 udp 10.0.2.22 51868 <-> 69.123.197.24 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:56.378804 0.138215 udp 10.0.2.22 51868 <-> 63.131.171.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:57.380550 1.047235 udp 10.0.2.22 51868 <-> 201.254.97.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:58.382049 0.051914 udp 10.0.2.22 51868 <-> 82.224.126.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:04:59.383295 0.144204 udp 10.0.2.22 51868 <-> 203.192.205.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:00.374772 0.512762 udp 10.0.2.22 51868 <-> 59.94.122.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:01.376264 0.048969 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:02.256920 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:05:02.377421 0.327348 udp 10.0.2.22 51868 <-> 113.252.190.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:03.378991 0.204238 udp 10.0.2.22 51868 <-> 66.237.94.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:04.380217 0.047705 udp 10.0.2.22 51868 <-> 77.78.239.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:05.381710 0.227596 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:06.383131 0.176898 udp 10.0.2.22 51868 <-> 74.62.164.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:07.374956 0.041398 udp 10.0.2.22 51868 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:08.376453 0.049013 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:09.377727 0.000000 udp 10.0.2.22 51868 -> 105.141.41.74 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:05:10.379168 0.000000 udp 10.0.2.22 51868 -> 95.169.211.29 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:05:11.380226 0.327406 udp 10.0.2.22 51868 <-> 113.252.190.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:12.381772 1.403545 udp 10.0.2.22 51868 <-> 201.254.97.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:13.372988 0.048536 udp 10.0.2.22 51868 <-> 77.78.239.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:14.375024 0.237191 udp 10.0.2.22 51868 <-> 186.89.8.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:15.376485 0.000000 udp 10.0.2.22 51868 -> 79.117.54.42 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:05:16.377313 0.067707 udp 10.0.2.22 51868 <-> 93.105.14.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:17.378696 0.000000 udp 10.0.2.22 51868 -> 200.125.109.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:05:18.380397 0.176855 udp 10.0.2.22 51868 <-> 1.186.100.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:19.382078 0.000000 udp 10.0.2.22 51868 -> 90.137.158.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:05:20.373030 0.291698 udp 10.0.2.22 51868 <-> 210.194.128.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:21.374990 0.018217 udp 10.0.2.22 51868 <-> 88.132.62.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:22.376262 0.047928 udp 10.0.2.22 51868 <-> 46.55.189.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:23.377870 0.056278 udp 10.0.2.22 51868 <-> 188.214.34.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:24.378961 0.045034 udp 10.0.2.22 51868 <-> 178.79.32.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:25.380732 0.486373 udp 10.0.2.22 51868 <-> 77.176.38.4 16464 CON 0 0 3 1278 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:26.382424 0.228854 udp 10.0.2.22 51868 <-> 124.123.223.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:27.373083 0.041212 udp 10.0.2.22 51868 <-> 212.233.239.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:28.374999 0.459170 udp 10.0.2.22 51868 -> 59.97.156.49 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:05:28.834169 0.000000 icmp 59.97.156.49 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 03:05:29.256112 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:05:29.376129 0.361155 udp 10.0.2.22 51868 <-> 36.239.68.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:30.377627 0.158737 udp 10.0.2.22 51868 <-> 24.15.191.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:31.378858 0.213452 udp 10.0.2.22 51868 <-> 71.84.134.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:32.380459 0.207209 udp 10.0.2.22 51868 <-> 223.223.134.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:33.381967 0.000000 udp 10.0.2.22 51868 -> 50.10.109.132 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:05:34.373546 0.368829 udp 10.0.2.22 51868 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:35.375184 0.369135 udp 10.0.2.22 51868 <-> 186.191.29.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:36.376746 0.036406 udp 10.0.2.22 51868 <-> 89.69.212.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:37.378029 0.038207 udp 10.0.2.22 51868 <-> 188.143.29.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:38.379076 0.119636 udp 10.0.2.22 51868 <-> 70.184.172.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:39.380924 0.358266 udp 10.0.2.22 51868 <-> 114.40.25.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:40.382511 0.000000 udp 10.0.2.22 51868 -> 120.56.194.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:05:41.373308 0.000000 udp 10.0.2.22 51868 -> 95.111.72.116 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:05:42.375255 2.002946 udp 10.0.2.22 51868 <-> 1.164.153.33 16464 CON 0 0 6 3676 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:43.376405 0.000000 udp 10.0.2.22 51868 -> 62.57.203.80 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:05:45.379613 0.048551 udp 10.0.2.22 51868 <-> 85.204.248.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:46.381124 0.000000 udp 10.0.2.22 51868 -> 188.53.70.45 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:05:47.382352 0.095695 udp 10.0.2.22 51868 <-> 89.205.104.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:48.373601 0.331554 udp 10.0.2.22 51868 <-> 1.164.153.33 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:49.374828 0.183532 udp 10.0.2.22 51868 <-> 50.10.109.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:50.376160 1.268645 udp 10.0.2.22 51868 <-> 201.17.131.137 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:52.379398 0.000000 udp 10.0.2.22 51868 -> 120.56.194.17 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:05:53.380701 0.142182 udp 10.0.2.22 51868 <-> 24.126.41.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:54.382645 0.077524 udp 10.0.2.22 51868 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:55.373473 1.047887 udp 10.0.2.22 51868 <-> 89.25.112.106 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:56.255045 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:05:57.376212 0.219008 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:05:58.378012 0.000000 udp 10.0.2.22 51868 -> 115.240.247.88 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:05:59.379338 1.317253 udp 10.0.2.22 51868 <-> 181.166.200.3 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:01.381991 0.368122 udp 10.0.2.22 51868 <-> 179.235.6.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:02.373479 0.000000 udp 10.0.2.22 51868 -> 174.100.71.86 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:06:03.375126 0.082364 udp 10.0.2.22 51868 <-> 94.42.125.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:04.376466 0.134508 udp 10.0.2.22 51868 <-> 75.118.87.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:05.378080 0.102452 udp 10.0.2.22 51868 <-> 137.99.40.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:06.379979 0.161388 udp 10.0.2.22 51868 <-> 74.193.135.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:07.380741 0.000000 udp 10.0.2.22 51868 -> 101.63.174.144 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:06:08.382559 0.157498 udp 10.0.2.22 51868 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:09.373462 0.062102 udp 10.0.2.22 51868 <-> 37.25.100.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:10.375327 0.000000 udp 10.0.2.22 51868 -> 128.68.67.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:06:11.376351 0.000000 udp 10.0.2.22 51868 -> 76.178.38.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:06:12.378502 0.406380 udp 10.0.2.22 51868 <-> 175.193.245.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:13.379218 0.146521 udp 10.0.2.22 51868 <-> 174.109.199.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:14.381256 0.087922 udp 10.0.2.22 51868 <-> 95.82.203.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:15.382389 0.339352 udp 10.0.2.22 51868 <-> 202.140.211.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:16.373869 0.304236 udp 10.0.2.22 51868 <-> 173.81.250.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:17.375110 0.000000 udp 10.0.2.22 51868 -> 217.186.199.127 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:06:18.376845 0.000000 udp 10.0.2.22 51868 -> 117.203.223.206 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:06:19.378338 0.000000 udp 10.0.2.22 51868 -> 79.117.201.113 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:06:20.379793 0.061741 udp 10.0.2.22 51868 <-> 78.8.65.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:21.381428 0.049346 udp 10.0.2.22 51868 <-> 82.139.22.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:22.382252 0.560207 udp 10.0.2.22 51868 <-> 181.16.98.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:23.253756 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:06:23.373624 0.041090 udp 10.0.2.22 51868 <-> 5.15.141.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:24.375650 0.000000 udp 10.0.2.22 51868 -> 192.168.0.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:06:25.376822 0.142489 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:26.378120 0.117309 udp 10.0.2.22 51868 <-> 70.184.172.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:27.379856 0.000000 udp 10.0.2.22 51868 -> 59.127.131.213 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:06:28.381241 0.335968 udp 10.0.2.22 51868 <-> 211.105.150.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:29.382682 0.029694 udp 10.0.2.22 51868 <-> 77.81.147.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:30.373826 0.310528 udp 10.0.2.22 51868 <-> 210.115.47.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:31.375175 0.024551 udp 10.0.2.22 51868 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:32.376826 0.134126 udp 10.0.2.22 51868 <-> 85.87.202.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:33.378215 4.997087 udp 10.0.2.22 51868 -> 190.203.75.15 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:06:34.379971 0.000000 udp 10.0.2.22 51868 -> 119.238.135.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:06:35.380964 0.146939 udp 10.0.2.22 51868 <-> 96.23.154.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:36.382601 0.045371 udp 10.0.2.22 51868 <-> 84.212.44.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:37.373731 0.000000 udp 10.0.2.22 51868 -> 115.241.146.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:06:39.376894 0.142235 udp 10.0.2.22 51868 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:40.378400 0.151161 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:41.379466 0.039736 udp 10.0.2.22 51868 <-> 178.150.156.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:42.381013 0.046162 udp 10.0.2.22 51868 <-> 89.2.226.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:43.383020 0.000000 udp 10.0.2.22 51868 -> 5.234.48.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:06:44.374310 0.152438 udp 10.0.2.22 51868 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:06:45.375906 0.000000 udp 10.0.2.22 51868 -> 76.171.144.238 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:06:47.378103 0.000133 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:06:47.378236 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:06:48.380005 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:06:49.381005 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:06:50.252736 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:06:50.382658 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:06:51.374448 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:06:52.375822 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:06:53.376985 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:06:54.378837 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:06:55.379985 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:06:56.381454 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:06:57.382814 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:06:58.374546 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:06:59.375782 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:00.377517 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:01.378621 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:02.380341 0.049785 udp 10.0.2.22 51868 <-> 31.11.113.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:07:03.381834 0.293821 udp 10.0.2.22 51868 <-> 210.194.114.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:07:04.382849 0.158963 udp 10.0.2.22 51868 <-> 87.222.107.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:07:05.374020 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:06.376139 0.000073 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:06.376212 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:07:07.376962 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:08.378635 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:09.380158 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:10.381439 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:12.374109 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:13.376125 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:14.376948 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:15.378435 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:16.380071 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:17.251721 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:07:17.381694 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:18.382973 0.343568 udp 10.0.2.22 51868 <-> 180.215.207.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:07:19.374300 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:20.375719 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:21.376972 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:22.378983 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:23.380408 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:24.381501 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:25.383043 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:27.375598 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:28.377853 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:29.379169 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:30.380070 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:31.381818 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:32.383136 0.000136 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:32.383272 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:07:33.374486 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:34.375765 0.047157 udp 10.0.2.22 51868 <-> 178.119.171.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:07:34.706889 0.011451 udp 10.0.2.22 60008 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 03:07:34.718659 0.000000 udp 10.0.2.22 60009 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:35.377192 0.355311 udp 10.0.2.22 51868 <-> 180.215.207.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:07:36.379165 0.164197 udp 10.0.2.22 51868 <-> 173.25.161.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:07:37.380588 0.118610 udp 10.0.2.22 51868 <-> 24.36.173.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:07:38.381926 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:39.383180 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:40.374436 0.000163 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:07:40.374599 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:07:41.376121 1.148824 udp 10.0.2.22 51868 <-> 24.193.20.26 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:07:43.378621 0.993668 udp 10.0.2.22 51868 <-> 109.91.102.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:07:44.250148 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:07:44.380027 0.074545 udp 10.0.2.22 51868 <-> 109.182.53.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:07:45.381509 1.317320 udp 10.0.2.22 51868 <-> 183.103.133.188 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:07:47.374664 0.114953 udp 10.0.2.22 51868 <-> 105.139.86.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:07:48.376165 0.317309 udp 10.0.2.22 51868 <-> 123.225.58.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:07:49.377745 0.159618 udp 10.0.2.22 51868 <-> 75.68.219.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:07:50.379313 0.741573 udp 10.0.2.22 51868 <-> 186.81.212.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:07:51.380731 0.157408 udp 10.0.2.22 51868 <-> 217.203.28.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:07:52.381621 3.134631 udp 10.0.2.22 51868 <-> 146.163.172.106 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:07:53.373428 0.400853 udp 10.0.2.22 51868 <-> 85.202.213.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:07:54.374942 4.021569 udp 10.0.2.22 51868 <-> 161.53.118.11 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:07:56.377328 0.155345 udp 10.0.2.22 51868 <-> 98.237.3.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:07:57.379221 0.075170 udp 10.0.2.22 51868 <-> 178.149.208.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:07:59.382284 0.158444 udp 10.0.2.22 51868 <-> 75.68.219.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:00.373345 0.000000 udp 10.0.2.22 51868 -> 217.203.28.131 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:08:01.374755 0.000000 udp 10.0.2.22 51868 -> 2.178.123.107 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:08:02.376100 0.140340 udp 10.0.2.22 51868 <-> 146.163.172.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:03.378168 0.318501 udp 10.0.2.22 51868 <-> 2.185.110.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:04.379365 0.165163 udp 10.0.2.22 51868 <-> 50.162.123.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:05.380522 2.852636 udp 10.0.2.22 51868 <-> 113.193.163.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:06.381834 0.743116 udp 10.0.2.22 51868 <-> 99.196.156.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:07.373115 0.298153 udp 10.0.2.22 51868 <-> 105.227.253.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:08.374905 0.000000 udp 10.0.2.22 51868 -> 220.143.102.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:08:09.376657 0.291286 udp 10.0.2.22 51868 <-> 110.233.68.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:10.377981 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:08:11.248777 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:08:11.379273 0.164404 udp 10.0.2.22 51868 <-> 79.12.187.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:12.380514 0.056972 udp 10.0.2.22 51868 <-> 79.98.3.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:13.382589 0.000000 udp 10.0.2.22 51868 -> 46.72.180.205 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:08:14.373452 0.059561 udp 10.0.2.22 51868 <-> 109.60.31.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:15.375135 0.036710 udp 10.0.2.22 51868 <-> 81.161.241.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:16.376637 0.170670 udp 10.0.2.22 51868 <-> 76.186.42.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:17.140100 3.001656 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 03:08:17.377484 0.000000 udp 10.0.2.22 51868 -> 14.99.235.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:08:18.379071 0.000000 udp 10.0.2.22 51868 -> 92.240.41.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:08:19.380404 0.111972 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:20.382639 4.062608 udp 10.0.2.22 51868 <-> 128.68.67.11 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:21.373251 0.000000 udp 10.0.2.22 51868 -> 83.56.152.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:08:22.375216 2.353819 udp 10.0.2.22 51868 <-> 14.96.184.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:23.376213 2.268657 udp 10.0.2.22 51868 <-> 105.229.138.31 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:24.147821 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:08:26.380458 0.049379 udp 10.0.2.22 51868 <-> 89.235.244.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:27.382083 0.062113 udp 10.0.2.22 51868 <-> 151.65.169.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:28.373958 0.000000 udp 10.0.2.22 51868 -> 24.111.193.229 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:08:29.375090 0.393665 udp 10.0.2.22 51868 <-> 14.96.207.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:30.376794 0.304951 udp 10.0.2.22 51868 <-> 110.132.116.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:31.378031 0.136872 udp 10.0.2.22 51868 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:32.149215 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:08:32.379073 0.000000 udp 10.0.2.22 51868 -> 79.7.190.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:08:33.380905 0.000000 udp 10.0.2.22 51868 -> 118.165.68.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:08:34.382298 0.152081 udp 10.0.2.22 51868 <-> 31.70.198.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:35.373439 0.447762 udp 10.0.2.22 51868 <-> 189.110.82.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:36.374896 0.640802 udp 10.0.2.22 51868 <-> 89.229.164.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:37.377033 0.143829 udp 10.0.2.22 51868 <-> 70.63.221.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:38.247826 0.000112 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:08:38.377796 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:08:39.379825 0.216619 udp 10.0.2.22 51868 <-> 203.192.241.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:40.380896 0.503503 udp 10.0.2.22 51868 <-> 5.237.22.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:41.382177 0.062887 udp 10.0.2.22 51868 <-> 151.65.169.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:42.373982 0.291249 udp 10.0.2.22 51868 <-> 221.241.140.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:43.375165 0.172261 udp 10.0.2.22 51868 <-> 188.59.110.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:44.376849 0.190434 udp 10.0.2.22 51868 <-> 103.5.186.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:45.378293 0.320520 udp 10.0.2.22 51868 <-> 125.128.173.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:46.379209 0.152164 udp 10.0.2.22 51868 <-> 76.24.95.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:47.380980 0.155077 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:48.151739 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:08:48.382799 1.899082 udp 10.0.2.22 51868 <-> 208.95.91.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:49.373788 0.000000 udp 10.0.2.22 51868 -> 115.118.22.159 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:08:50.375176 0.536969 udp 10.0.2.22 51868 <-> 117.205.240.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:51.376594 0.000000 udp 10.0.2.22 51868 -> 49.1.70.212 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:08:52.377942 0.375767 udp 10.0.2.22 51868 <-> 187.102.85.3 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:53.379308 0.285064 udp 10.0.2.22 51868 <-> 187.107.235.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:54.381333 0.046293 udp 10.0.2.22 51868 <-> 188.231.220.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:55.382483 1.166547 udp 10.0.2.22 51868 <-> 190.189.63.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:56.373971 0.000000 udp 10.0.2.22 51868 -> 190.57.242.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:08:57.375123 1.368628 udp 10.0.2.22 51868 <-> 24.232.19.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:58.376832 0.038918 udp 10.0.2.22 51868 <-> 213.202.37.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:08:59.378583 0.054977 udp 10.0.2.22 51868 <-> 79.118.98.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:00.379908 0.174438 udp 10.0.2.22 51868 <-> 69.244.18.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:01.380890 1.993387 udp 10.0.2.22 51868 <-> 5.12.11.55 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:02.382748 0.168461 udp 10.0.2.22 51868 <-> 173.23.110.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:04.375336 0.410647 udp 10.0.2.22 51868 <-> 61.105.222.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:05.256584 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:09:05.376561 0.116770 udp 10.0.2.22 51868 <-> 68.14.146.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:06.378052 0.451308 udp 10.0.2.22 51868 <-> 200.101.111.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:07.379991 0.313762 udp 10.0.2.22 51868 <-> 222.110.41.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:08.380967 0.365026 udp 10.0.2.22 51868 <-> 27.3.191.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:09.383024 0.144291 udp 10.0.2.22 51868 <-> 202.71.10.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:10.374316 0.165921 udp 10.0.2.22 51868 <-> 174.108.102.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:11.375326 0.039674 udp 10.0.2.22 51868 <-> 89.69.212.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:12.376885 0.060862 udp 10.0.2.22 51868 <-> 188.252.201.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:13.378661 0.000000 udp 10.0.2.22 51868 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:09:14.380099 1.159345 udp 10.0.2.22 51868 <-> 174.78.104.11 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:16.382391 4.284474 udp 10.0.2.22 51868 <-> 61.21.68.252 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:17.374236 0.148114 udp 10.0.2.22 51868 <-> 68.194.18.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:18.375199 0.000000 udp 10.0.2.22 51868 -> 85.54.191.49 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:09:19.376879 0.000000 udp 10.0.2.22 51868 -> 142.136.206.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:09:20.157802 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:09:21.380316 0.132018 udp 10.0.2.22 51868 <-> 5.34.126.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:22.381303 0.329873 udp 10.0.2.22 51868 <-> 121.147.28.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:23.382999 0.276201 udp 10.0.2.22 51868 <-> 179.235.4.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:24.374132 0.023259 udp 10.0.2.22 51868 <-> 78.42.78.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:25.375400 0.206940 udp 10.0.2.22 51868 <-> 66.237.94.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:26.377221 0.037391 udp 10.0.2.22 51868 <-> 212.238.4.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:27.378434 0.214400 udp 10.0.2.22 51868 <-> 96.40.110.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:28.380200 0.178302 udp 10.0.2.22 51868 <-> 75.66.196.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:29.381790 0.132348 udp 10.0.2.22 51868 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:30.382614 0.000000 udp 10.0.2.22 51868 -> 76.22.121.196 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:09:31.374062 0.160874 udp 10.0.2.22 51868 <-> 24.113.92.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:32.255155 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:09:32.375874 0.628651 udp 10.0.2.22 51868 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:33.377623 0.938185 udp 10.0.2.22 51868 <-> 75.214.226.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:34.378813 0.000000 udp 10.0.2.22 51868 -> 202.29.178.151 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:09:35.380423 0.194457 udp 10.0.2.22 51868 <-> 72.175.79.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:36.381542 3.995403 udp 10.0.2.22 51868 <-> 178.75.248.22 16464 CON 0 0 5 1954 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:37.383033 0.000000 udp 10.0.2.22 51868 -> 107.197.130.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:09:39.375942 2.171578 udp 10.0.2.22 51868 <-> 179.216.83.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:41.378311 0.000000 udp 10.0.2.22 51868 -> 115.242.101.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:09:42.380410 0.362109 udp 10.0.2.22 51868 <-> 111.254.125.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:43.381502 0.000000 udp 10.0.2.22 51868 -> 190.49.238.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:09:44.383199 0.135570 udp 10.0.2.22 51868 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:45.374462 0.363469 udp 10.0.2.22 51868 <-> 61.228.19.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:46.375651 0.119708 udp 10.0.2.22 51868 <-> 72.38.7.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:47.377418 0.177736 udp 10.0.2.22 51868 <-> 103.14.235.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:48.378946 0.428838 udp 10.0.2.22 51868 <-> 138.130.242.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:49.379794 0.384762 udp 10.0.2.22 51868 <-> 151.40.236.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:50.381483 0.029380 udp 10.0.2.22 51868 <-> 78.90.215.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:51.383044 2.134554 udp 10.0.2.22 51868 <-> 173.80.197.248 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:52.374554 0.000000 udp 10.0.2.22 51868 -> 122.107.139.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:09:54.377717 0.067661 udp 10.0.2.22 51868 <-> 188.32.59.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:55.378831 0.000000 udp 10.0.2.22 51868 -> 31.59.123.198 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:09:56.380437 0.242205 udp 10.0.2.22 51868 <-> 62.113.14.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:57.381304 0.139233 udp 10.0.2.22 51868 <-> 83.250.76.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:58.383143 0.460459 udp 10.0.2.22 51868 <-> 115.242.96.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:09:59.254598 0.000113 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:09:59.374421 0.091357 udp 10.0.2.22 51868 <-> 31.131.86.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:00.375623 0.000000 udp 10.0.2.22 51868 -> 24.234.69.152 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:10:01.377413 3.201813 udp 10.0.2.22 51868 <-> 88.37.113.50 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:02.378755 0.231451 udp 10.0.2.22 51868 <-> 124.123.242.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:03.380264 3.244952 udp 10.0.2.22 51868 <-> 183.83.120.224 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:05.383024 0.000000 udp 10.0.2.22 51868 -> 24.144.217.92 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:10:07.376260 0.151522 udp 10.0.2.22 51868 <-> 202.71.27.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:08.377816 0.000000 udp 10.0.2.22 51868 -> 88.241.238.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:10:09.378645 0.063308 udp 10.0.2.22 51868 <-> 85.122.147.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:10.380199 0.430591 udp 10.0.2.22 51868 <-> 121.124.80.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:11.381871 0.208589 udp 10.0.2.22 51868 <-> 50.27.25.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:12.382842 0.000000 udp 10.0.2.22 51868 -> 50.9.197.87 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:10:13.374384 0.347885 udp 10.0.2.22 51868 <-> 61.4.170.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:14.376182 0.214457 udp 10.0.2.22 51868 <-> 50.193.233.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:15.377906 2.304569 udp 10.0.2.22 51868 <-> 101.111.191.70 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:16.378582 0.146908 udp 10.0.2.22 51868 <-> 24.164.171.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:18.381523 0.000000 udp 10.0.2.22 51868 -> 87.121.26.230 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:10:19.372899 0.324600 udp 10.0.2.22 51868 <-> 85.224.201.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:20.374475 0.476392 udp 10.0.2.22 51868 <-> 210.119.21.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:21.375791 0.184439 udp 10.0.2.22 51868 <-> 78.136.73.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:22.377899 0.047792 udp 10.0.2.22 51868 <-> 150.214.29.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:23.378738 0.311358 udp 10.0.2.22 51868 <-> 118.19.90.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:24.380286 0.000000 udp 10.0.2.22 51868 -> 188.47.235.136 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:10:25.381595 0.042710 udp 10.0.2.22 51868 <-> 80.200.192.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:26.252792 0.000126 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:10:26.373409 0.349387 udp 10.0.2.22 51868 <-> 116.68.242.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:27.375009 0.078265 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:28.376202 4.005952 udp 10.0.2.22 51868 -> 50.10.109.132 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:10:29.377728 4.997443 udp 10.0.2.22 51868 <-> 122.121.6.112 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:30.379185 0.139202 udp 10.0.2.22 51868 <-> 79.173.35.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:31.380178 0.066964 udp 10.0.2.22 51868 <-> 188.32.59.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:33.373137 2.041362 udp 10.0.2.22 51868 <-> 78.128.44.131 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:36.377577 0.459113 udp 10.0.2.22 51868 <-> 201.231.197.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:37.379119 0.000000 udp 10.0.2.22 51868 -> 50.10.109.132 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:10:38.380398 3.029031 udp 10.0.2.22 51868 <-> 84.52.157.171 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:39.381677 0.048088 udp 10.0.2.22 51868 <-> 31.18.241.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:40.373675 0.171853 udp 10.0.2.22 51868 <-> 198.179.118.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:42.376119 0.000000 udp 10.0.2.22 51868 -> 62.113.14.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:10:43.377540 0.000000 udp 10.0.2.22 51868 -> 186.90.110.134 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:10:44.379019 3.996101 udp 10.0.2.22 51868 -> 81.61.202.140 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:10:45.380833 0.361118 udp 10.0.2.22 51868 <-> 122.121.6.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:46.382126 0.169525 udp 10.0.2.22 51868 <-> 76.188.147.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:47.373283 3.004625 udp 10.0.2.22 51868 -> 50.10.109.132 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:10:49.376135 0.122266 udp 10.0.2.22 51868 <-> 79.173.35.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:51.379321 0.367987 udp 10.0.2.22 51868 <-> 122.121.6.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:52.380402 0.157942 udp 10.0.2.22 51868 <-> 198.179.118.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:53.252183 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:10:53.381906 0.000000 udp 10.0.2.22 51868 -> 81.61.202.140 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:10:54.373986 0.426539 udp 10.0.2.22 51868 <-> 201.231.197.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:55.375340 0.228834 udp 10.0.2.22 51868 <-> 186.90.110.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:56.376603 0.043774 udp 10.0.2.22 51868 <-> 5.20.72.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:57.378132 0.615254 udp 10.0.2.22 51868 <-> 14.97.91.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:58.379149 0.192189 udp 10.0.2.22 51868 <-> 50.66.54.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:10:59.380657 1.993436 udp 10.0.2.22 51868 -> 79.116.107.4 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:00.382294 0.041042 udp 10.0.2.22 51868 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:11:02.375079 1.001804 udp 10.0.2.22 51868 <-> 78.70.27.119 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:11:04.378324 0.000000 udp 10.0.2.22 51868 -> 212.92.246.78 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:05.379701 1.622574 udp 10.0.2.22 51868 <-> 174.113.145.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:11:06.381137 0.015530 udp 10.0.2.22 51868 <-> 164.8.204.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:11:07.382264 0.050325 udp 10.0.2.22 51868 <-> 46.253.3.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:11:08.373629 0.314761 udp 10.0.2.22 51868 <-> 218.152.217.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:11:09.374931 0.000000 udp 10.0.2.22 51868 -> 87.19.151.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:10.376629 0.047383 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:11:11.378150 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:12.379272 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:13.380854 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:14.382750 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:15.373769 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:16.375534 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:17.376616 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:18.378038 0.649345 udp 10.0.2.22 51868 <-> 114.37.112.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:11:19.379681 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:20.251068 0.000127 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:11:20.380816 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:21.382822 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:22.373904 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:23.374926 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:24.376676 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:25.378417 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:27.381263 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:28.382388 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:29.374010 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:30.375129 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:31.376757 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:32.378537 0.000076 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:32.378613 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:11:33.379975 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:34.381292 0.291652 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:11:35.382887 0.051966 udp 10.0.2.22 51868 <-> 46.214.189.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:11:36.373607 0.164714 udp 10.0.2.22 51868 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:11:37.375221 0.173949 udp 10.0.2.22 51868 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:11:38.376798 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:39.378357 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:40.380029 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:41.381062 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:42.382264 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:44.375174 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:45.377121 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:46.378433 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:47.249945 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:11:47.379987 0.000055 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:47.380042 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:11:48.380881 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:49.382981 0.056491 udp 10.0.2.22 51868 <-> 195.238.118.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:11:50.373920 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:51.375219 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:52.377117 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:53.378299 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:54.379593 3.995776 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:55.381177 0.000096 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:55.381273 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:11:56.382910 0.165940 udp 10.0.2.22 51868 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:11:57.373790 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:11:59.376816 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:12:00.378253 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:12:01.380000 0.237507 udp 10.0.2.22 51868 <-> 75.246.135.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:02.381114 0.041059 udp 10.0.2.22 51868 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:03.382631 0.425872 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:04.374071 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:12:05.375334 0.000000 udp 10.0.2.22 51868 -> 186.94.17.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:12:06.377078 0.000000 udp 10.0.2.22 51868 -> 117.196.253.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:12:07.378714 0.051371 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:08.380208 0.209540 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:09.381074 0.059043 udp 10.0.2.22 51868 <-> 195.238.118.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:10.382824 3.310073 udp 10.0.2.22 51868 <-> 122.50.47.251 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:12.376085 4.056445 udp 10.0.2.22 51868 <-> 193.108.229.8 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:14.248633 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:12:14.378547 0.154278 udp 10.0.2.22 51868 <-> 68.117.189.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:15.380301 0.036817 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:17.383120 1.101981 udp 10.0.2.22 51868 <-> 87.120.215.67 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:19.375870 0.153768 udp 10.0.2.22 51868 <-> 216.115.131.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:20.376886 0.000000 udp 10.0.2.22 51868 -> 109.199.236.29 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:12:21.379083 0.082991 udp 10.0.2.22 51868 <-> 145.236.208.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:22.379855 0.287915 udp 10.0.2.22 51868 <-> 181.31.103.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:23.381493 1.299751 udp 10.0.2.22 51868 <-> 126.123.91.123 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:25.374748 1.087301 udp 10.0.2.22 51868 <-> 178.77.18.206 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:27.377743 0.361379 udp 10.0.2.22 51868 <-> 190.176.231.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:28.378719 3.004461 udp 10.0.2.22 51868 -> 79.53.109.44 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:12:29.379839 1.001483 udp 10.0.2.22 51868 <-> 188.173.128.69 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:32.374533 4.357811 udp 10.0.2.22 51868 <-> 114.47.92.145 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:33.375989 0.000000 udp 10.0.2.22 51868 -> 145.236.208.167 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:12:34.377170 0.209664 udp 10.0.2.22 51868 <-> 76.95.164.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:35.378824 0.000000 udp 10.0.2.22 51868 -> 109.199.236.29 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:12:37.381626 0.153483 udp 10.0.2.22 51868 <-> 24.231.152.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:38.383036 0.000000 udp 10.0.2.22 51868 -> 93.41.209.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:12:39.374704 0.245868 udp 10.0.2.22 51868 <-> 177.224.152.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:40.376282 0.056719 udp 10.0.2.22 51868 <-> 188.213.162.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:41.257149 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:12:41.377103 4.439326 udp 10.0.2.22 51868 <-> 117.246.250.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:42.378896 0.344150 udp 10.0.2.22 51868 <-> 219.70.156.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:43.380225 0.000000 udp 10.0.2.22 51868 -> 109.199.236.29 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:12:44.381673 0.346611 udp 10.0.2.22 51868 <-> 114.47.92.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:45.383134 0.000000 udp 10.0.2.22 51868 -> 93.41.209.234 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:12:46.374694 0.000000 udp 10.0.2.22 51868 -> 85.87.202.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:12:47.375685 2.304257 udp 10.0.2.22 51868 <-> 126.123.91.123 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:48.377136 0.000000 udp 10.0.2.22 51868 -> 110.169.250.191 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:12:50.380535 0.152199 udp 10.0.2.22 51868 <-> 88.57.184.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:51.381491 0.319242 udp 10.0.2.22 51868 <-> 202.147.219.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:52.373086 0.149646 udp 10.0.2.22 51868 <-> 69.124.115.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:53.374325 0.143488 udp 10.0.2.22 51868 <-> 98.204.133.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:54.376434 0.048010 udp 10.0.2.22 51868 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:55.377233 0.000000 udp 10.0.2.22 51868 -> 83.34.195.244 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:12:56.378777 0.133180 udp 10.0.2.22 51868 <-> 5.34.126.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:57.380389 0.347574 udp 10.0.2.22 51868 <-> 190.72.54.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:58.381732 0.348730 udp 10.0.2.22 51868 <-> 1.172.69.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:12:59.373725 0.000000 udp 10.0.2.22 51868 -> 189.72.6.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:13:00.374905 2.063195 udp 10.0.2.22 51868 <-> 122.107.139.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:01.376256 0.000000 udp 10.0.2.22 51868 -> 62.113.14.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:13:02.377904 0.022914 udp 10.0.2.22 51868 <-> 194.94.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:03.379027 0.168359 udp 10.0.2.22 51868 <-> 98.215.30.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:04.380151 3.133503 udp 10.0.2.22 51868 <-> 71.224.28.226 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:05.381809 0.000000 udp 10.0.2.22 51868 -> 78.125.147.32 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:13:06.373595 0.000000 udp 10.0.2.22 51868 -> 24.154.70.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:13:08.255896 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:13:08.376490 0.175915 udp 10.0.2.22 51868 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:09.377805 0.341664 udp 10.0.2.22 51868 <-> 220.143.102.26 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:10.379379 0.056812 udp 10.0.2.22 51868 <-> 89.230.111.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:11.380215 0.159054 udp 10.0.2.22 51868 <-> 108.176.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:12.382322 0.000000 udp 10.0.2.22 51868 -> 98.253.7.67 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:13:13.373550 0.000000 udp 10.0.2.22 51868 -> 68.19.174.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:13:14.374603 0.000000 udp 10.0.2.22 51868 -> 50.134.240.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:13:15.376457 0.175304 udp 10.0.2.22 51868 <-> 108.167.33.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:16.377688 0.355329 udp 10.0.2.22 51868 <-> 219.78.101.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:17.378858 0.015618 udp 10.0.2.22 51868 <-> 164.8.108.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:18.380666 0.329716 udp 10.0.2.22 51868 <-> 123.216.46.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:19.382157 0.360144 udp 10.0.2.22 51868 <-> 113.252.190.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:20.373486 1.882390 arp 10.0.2.22 who 169.254.237.134 INT 3 126 flow=Background-ARP 1970/01/01 03:13:21.375190 0.154882 udp 10.0.2.22 51868 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:22.376627 0.080510 udp 10.0.2.22 51868 <-> 79.165.97.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:23.377635 0.000000 udp 10.0.2.22 51868 -> 85.85.71.52 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:13:24.379156 0.000000 udp 10.0.2.22 51868 -> 89.102.235.54 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:13:25.380972 1.081624 udp 10.0.2.22 51868 <-> 116.73.33.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:26.382089 0.386897 udp 10.0.2.22 51868 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:27.373201 0.343086 udp 10.0.2.22 51868 <-> 123.216.46.32 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:28.375024 0.294644 udp 10.0.2.22 51868 <-> 190.44.59.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:29.376552 0.000000 udp 10.0.2.22 51868 -> 192.168.1.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:13:30.377911 0.339384 udp 10.0.2.22 51868 <-> 1.172.166.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:31.379319 0.957778 udp 10.0.2.22 51868 <-> 111.246.35.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:32.380642 0.197892 udp 10.0.2.22 51868 <-> 162.204.44.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:33.382151 0.280535 udp 10.0.2.22 51868 <-> 96.26.211.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:34.373583 0.000000 udp 10.0.2.22 51868 -> 94.113.109.89 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:13:35.254912 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:13:35.375260 0.043942 udp 10.0.2.22 51868 <-> 83.166.2.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:36.376138 0.000000 udp 10.0.2.22 51868 -> 108.185.229.164 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:13:37.377634 0.158413 udp 10.0.2.22 51868 <-> 24.201.35.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:38.379018 0.087775 udp 10.0.2.22 51868 <-> 83.136.186.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:39.380602 0.326078 udp 10.0.2.22 51868 <-> 190.229.208.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:40.382263 0.061068 udp 10.0.2.22 51868 <-> 79.113.177.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:41.373372 0.153248 udp 10.0.2.22 51868 <-> 174.108.102.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:42.375381 0.218354 udp 10.0.2.22 51868 <-> 81.226.243.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:43.376276 0.055332 udp 10.0.2.22 51868 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:44.378240 1.065079 udp 10.0.2.22 51868 <-> 116.73.33.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:45.379894 0.115108 udp 10.0.2.22 51868 <-> 24.36.173.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:46.381196 0.148391 udp 10.0.2.22 51868 <-> 174.98.145.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:47.382251 0.158780 udp 10.0.2.22 51868 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:48.373618 0.000000 udp 10.0.2.22 51868 -> 190.60.53.110 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:13:49.375377 0.068816 udp 10.0.2.22 51868 <-> 81.233.138.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:50.376681 0.000000 udp 10.0.2.22 51868 -> 67.233.187.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:13:51.378232 0.143664 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:52.379421 1.364992 udp 10.0.2.22 51868 <-> 113.254.247.11 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:54.382549 0.295308 udp 10.0.2.22 51868 <-> 187.35.13.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:55.374035 1.155269 udp 10.0.2.22 51868 <-> 76.16.13.14 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:57.376330 0.103096 udp 10.0.2.22 51868 <-> 78.70.192.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:58.378360 4.996712 udp 10.0.2.22 51868 <-> 184.156.20.27 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:13:59.379573 0.312130 udp 10.0.2.22 51868 <-> 220.129.38.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:00.381001 0.305382 udp 10.0.2.22 51868 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:01.382138 3.145712 udp 10.0.2.22 51868 <-> 174.108.49.15 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:02.253644 0.000097 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:14:02.373564 0.000000 udp 10.0.2.22 51868 -> 92.86.49.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:14:03.778028 0.000000 udp 10.0.2.22 51868 <- 184.156.20.27 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:14:05.378537 0.000000 udp 10.0.2.22 51868 -> 190.139.224.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:14:06.379514 0.000000 udp 10.0.2.22 51868 -> 220.143.102.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:14:07.381024 0.312438 udp 10.0.2.22 51868 <-> 220.129.38.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:08.382797 0.321804 udp 10.0.2.22 51868 <-> 111.185.49.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:09.374130 0.278111 udp 10.0.2.22 51868 <-> 106.209.140.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:10.375346 0.000000 udp 10.0.2.22 51868 -> 124.96.225.9 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:14:11.377187 0.208008 udp 10.0.2.22 51868 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:12.378287 0.344787 udp 10.0.2.22 51868 <-> 14.53.244.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:13.379996 0.026703 udp 10.0.2.22 51868 <-> 78.193.52.203 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:14.381516 0.336479 udp 10.0.2.22 51868 <-> 218.166.153.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:15.382740 0.161643 udp 10.0.2.22 51868 <-> 74.79.65.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:16.373893 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:14:17.375169 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:14:18.377176 0.043825 udp 10.0.2.22 51868 <-> 5.13.90.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:19.378401 0.368440 udp 10.0.2.22 51868 <-> 85.185.151.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:20.380140 0.144504 udp 10.0.2.22 51868 <-> 75.138.193.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:21.380976 0.138985 udp 10.0.2.22 51868 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:22.382486 0.054019 udp 10.0.2.22 51868 <-> 94.240.161.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:23.373933 0.015018 udp 10.0.2.22 51868 <-> 161.53.118.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:24.375208 1.415348 udp 10.0.2.22 51868 <-> 24.232.19.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:25.377273 0.155449 udp 10.0.2.22 51868 <-> 74.199.89.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:26.378778 0.000000 udp 10.0.2.22 51868 -> 71.192.132.121 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:14:27.379756 0.164594 udp 10.0.2.22 51868 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:28.380946 0.000000 udp 10.0.2.22 51868 -> 61.227.75.148 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:14:29.252678 0.000039 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:14:29.382480 0.503139 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:30.374185 0.000000 udp 10.0.2.22 51868 -> 87.114.114.96 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:14:31.375237 0.116530 udp 10.0.2.22 51868 <-> 98.166.225.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:32.376690 1.154090 udp 10.0.2.22 51868 <-> 174.97.209.103 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:34.379540 0.069249 udp 10.0.2.22 51868 <-> 86.121.142.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:35.381126 0.153250 udp 10.0.2.22 51868 <-> 24.148.135.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:36.383057 0.182738 udp 10.0.2.22 51868 <-> 203.88.154.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:37.374414 0.055107 udp 10.0.2.22 51868 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:38.375590 0.174520 udp 10.0.2.22 51868 <-> 173.23.208.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:39.376742 0.057590 udp 10.0.2.22 51868 <-> 90.154.230.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:39.752194 0.000000 udp 10.0.2.22 51868 <- 71.192.132.121 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:14:40.378216 0.310886 udp 10.0.2.22 51868 <-> 180.18.8.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:41.380099 0.000000 udp 10.0.2.22 51868 -> 79.176.4.56 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:14:42.381079 0.000000 udp 10.0.2.22 51868 -> 187.20.177.169 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:14:43.382490 0.000000 udp 10.0.2.22 51868 -> 1.186.119.171 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:14:44.374293 0.113818 udp 10.0.2.22 51868 <-> 72.209.212.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:45.375594 0.000000 udp 10.0.2.22 51868 -> 75.110.50.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:14:46.377139 0.281018 udp 10.0.2.22 51868 <-> 179.235.4.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:47.378858 0.242164 udp 10.0.2.22 51868 <-> 49.205.17.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:48.380262 0.275549 udp 10.0.2.22 51868 <-> 67.148.202.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:49.381377 0.000000 udp 10.0.2.22 51868 -> 89.253.133.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:14:50.383105 0.170388 udp 10.0.2.22 51868 <-> 24.201.107.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:51.374288 0.000000 udp 10.0.2.22 51868 -> 173.31.129.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:14:52.376127 0.951648 udp 10.0.2.22 51868 <-> 112.200.109.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:53.377294 0.305932 udp 10.0.2.22 51868 <-> 14.32.249.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:54.379073 0.144996 udp 10.0.2.22 51868 <-> 75.181.151.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:55.379863 0.106608 udp 10.0.2.22 51868 <-> 87.17.244.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:56.251557 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:14:56.381494 0.000000 udp 10.0.2.22 51868 -> 68.185.124.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:14:57.383097 0.216557 udp 10.0.2.22 51868 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:58.374670 0.163787 udp 10.0.2.22 51868 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:14:59.375521 0.093090 udp 10.0.2.22 51868 <-> 178.43.207.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:00.377240 0.539318 udp 10.0.2.22 51868 <-> 188.167.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:01.379036 0.166855 udp 10.0.2.22 51868 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:02.380205 0.046442 udp 10.0.2.22 51868 <-> 84.40.72.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:03.381496 0.164769 udp 10.0.2.22 51868 <-> 74.140.150.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:04.382905 0.140476 udp 10.0.2.22 51868 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:05.374308 0.114089 udp 10.0.2.22 51868 <-> 94.190.82.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:06.375980 0.367556 udp 10.0.2.22 51868 <-> 27.3.164.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:07.377136 0.103811 udp 10.0.2.22 51868 <-> 46.233.24.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:08.379057 0.000000 udp 10.0.2.22 51868 -> 188.27.204.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:09.379927 0.046590 udp 10.0.2.22 51868 <-> 86.125.61.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:10.381709 0.025712 udp 10.0.2.22 51868 <-> 83.83.126.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:11.383301 0.284199 udp 10.0.2.22 51868 <-> 118.236.191.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:12.374545 0.000000 udp 10.0.2.22 51868 -> 211.178.220.97 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:13.375638 0.000000 udp 10.0.2.22 51868 -> 59.183.26.101 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:14.377081 0.072034 udp 10.0.2.22 51868 <-> 188.94.82.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:15.379032 1.157199 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:17.382222 0.068457 udp 10.0.2.22 51868 <-> 79.114.153.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:19.375000 0.431040 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:20.375692 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:21.377932 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:22.378578 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:23.380434 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:24.164317 3.001137 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 03:15:24.251222 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:15:24.381642 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:25.373653 0.048982 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:26.374318 0.047715 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:27.376281 0.135940 udp 10.0.2.22 51868 <-> 95.59.208.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:28.377216 0.000000 udp 10.0.2.22 51868 -> 87.19.27.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:29.379317 0.340895 udp 10.0.2.22 51868 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:30.380223 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:31.171499 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:15:31.381694 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:32.373137 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:33.374846 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:34.376109 0.177861 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:35.377547 0.374038 udp 10.0.2.22 51868 <-> 177.182.119.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:36.379122 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:37.380601 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:38.381785 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:39.173210 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:15:39.373245 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:40.374537 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:41.376489 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:42.377816 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:43.379118 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:44.380185 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:45.381907 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:46.373048 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:47.374721 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:48.376284 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:49.378013 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:50.378824 0.135807 udp 10.0.2.22 51868 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:51.250589 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:15:51.380340 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:52.382199 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:53.373212 0.047045 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:54.375169 0.037806 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:55.176160 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:15:55.376548 0.199798 udp 10.0.2.22 51868 <-> 174.1.110.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:56.377892 0.000000 udp 10.0.2.22 51868 -> 79.132.171.205 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:15:57.379379 0.172311 udp 10.0.2.22 51868 <-> 70.115.72.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:58.380731 0.354864 udp 10.0.2.22 51868 <-> 114.46.235.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:15:59.382485 0.359265 udp 10.0.2.22 51868 <-> 113.254.24.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:00.373305 0.049158 udp 10.0.2.22 51868 <-> 82.233.157.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:01.374651 0.336487 udp 10.0.2.22 51868 <-> 198.179.116.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:02.376056 0.166557 udp 10.0.2.22 51868 <-> 98.214.56.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:03.377682 0.347845 udp 10.0.2.22 51868 <-> 189.41.102.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:04.379145 0.000047 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:16:04.379192 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:16:05.380706 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:16:06.381810 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:16:07.373597 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:16:08.375095 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:16:09.376375 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:16:10.378225 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:16:11.379330 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:16:12.380499 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:16:13.381917 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:16:14.373357 2.339494 udp 10.0.2.22 51868 <-> 122.118.74.61 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:15.375247 0.000000 udp 10.0.2.22 51868 -> 189.41.102.85 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:16:17.378350 0.128999 udp 10.0.2.22 51868 <-> 178.185.16.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:18.248829 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:16:18.379261 0.483199 udp 10.0.2.22 51868 <-> 151.26.102.0 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:19.380697 0.298696 udp 10.0.2.22 51868 <-> 190.47.113.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:20.382257 0.092220 udp 10.0.2.22 51868 <-> 31.131.86.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:21.373929 0.189304 udp 10.0.2.22 51868 <-> 94.70.24.122 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:22.375106 0.275101 udp 10.0.2.22 51868 <-> 190.39.97.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:23.376970 0.163253 udp 10.0.2.22 51868 <-> 66.66.140.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:24.378378 0.426120 udp 10.0.2.22 51868 <-> 111.242.159.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:25.379233 0.163305 udp 10.0.2.22 51868 <-> 151.26.102.0 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:26.380572 0.364665 udp 10.0.2.22 51868 <-> 122.118.209.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:27.182261 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:16:27.382379 0.291319 udp 10.0.2.22 51868 <-> 94.183.154.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:28.374102 0.566918 udp 10.0.2.22 51868 <-> 14.98.39.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:29.374885 0.341917 udp 10.0.2.22 51868 <-> 220.60.160.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:30.377025 0.157532 udp 10.0.2.22 51868 <-> 72.137.144.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:31.378273 0.050947 udp 10.0.2.22 51868 <-> 87.99.81.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:32.379306 0.065313 udp 10.0.2.22 51868 <-> 94.190.190.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:33.381108 0.000000 udp 10.0.2.22 51868 -> 181.31.35.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:16:34.382738 0.435936 udp 10.0.2.22 51868 <-> 115.242.196.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:35.373903 0.000000 udp 10.0.2.22 51868 -> 213.112.230.161 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:16:36.375227 0.298711 udp 10.0.2.22 51868 <-> 177.182.184.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:37.376416 0.307572 udp 10.0.2.22 51868 <-> 124.122.2.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:38.377874 2.059214 udp 10.0.2.22 51868 <-> 31.131.180.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:39.379408 0.033563 udp 10.0.2.22 51868 <-> 89.132.240.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:40.381386 0.090499 udp 10.0.2.22 51868 <-> 95.232.66.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:41.382809 0.358233 udp 10.0.2.22 51868 <-> 184.161.209.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:42.373613 2.225348 udp 10.0.2.22 51868 <-> 183.83.192.184 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:43.375218 0.157515 udp 10.0.2.22 51868 <-> 68.59.89.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:45.248044 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:16:45.378698 0.000000 udp 10.0.2.22 51868 -> 72.240.76.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:16:46.379935 0.000000 udp 10.0.2.22 51868 -> 194.208.95.74 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:16:47.381272 0.060250 udp 10.0.2.22 51868 <-> 109.104.184.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:48.382283 0.039513 udp 10.0.2.22 51868 <-> 46.10.189.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:49.374050 0.000000 udp 10.0.2.22 51868 -> 211.31.51.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:16:50.375111 2.003471 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:51.376907 0.097495 udp 10.0.2.22 51868 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:53.379411 0.000000 udp 10.0.2.22 51868 -> 190.49.238.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:16:54.380878 0.047920 udp 10.0.2.22 51868 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:55.382528 0.000000 udp 10.0.2.22 51868 -> 50.72.184.244 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:16:56.374038 2.002627 udp 10.0.2.22 51868 -> 211.31.51.234 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:16:57.375333 0.097445 udp 10.0.2.22 51868 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:16:59.378649 0.140618 udp 10.0.2.22 51868 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:00.379779 2.033923 udp 10.0.2.22 51868 <-> 190.49.238.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:01.381073 0.157306 udp 10.0.2.22 51868 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:02.382503 0.991778 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:04.376022 0.000000 udp 10.0.2.22 51868 -> 166.143.26.240 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:17:05.377304 0.074718 udp 10.0.2.22 51868 <-> 78.189.224.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:06.378656 0.161648 udp 10.0.2.22 51868 <-> 76.107.149.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:07.379980 0.174987 udp 10.0.2.22 51868 <-> 98.197.173.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:08.381579 0.000000 udp 10.0.2.22 51868 -> 115.250.161.44 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:17:09.382527 0.245413 udp 10.0.2.22 51868 <-> 74.127.161.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:10.374567 0.041260 udp 10.0.2.22 51868 <-> 212.233.239.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:11.375384 0.058538 udp 10.0.2.22 51868 <-> 79.118.193.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:12.257104 0.000085 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:17:12.377015 0.319000 udp 10.0.2.22 51868 <-> 124.37.205.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:13.378784 0.000000 udp 10.0.2.22 51868 -> 201.241.29.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:17:14.380131 0.137077 udp 10.0.2.22 51868 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:15.381030 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:17:16.382492 0.000094 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:17:16.382586 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:17:17.373969 0.000000 udp 10.0.2.22 51868 -> 50.26.127.53 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:17:18.375719 0.435086 udp 10.0.2.22 51868 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:19.377262 0.350575 udp 10.0.2.22 51868 <-> 186.191.29.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:20.378770 0.030750 udp 10.0.2.22 51868 <-> 89.64.246.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:21.379773 0.177282 udp 10.0.2.22 51868 <-> 207.134.228.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:22.381623 0.296587 udp 10.0.2.22 51868 <-> 24.232.15.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:23.383349 0.039741 udp 10.0.2.22 51868 <-> 89.66.178.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:24.374156 0.000000 udp 10.0.2.22 51868 -> 66.66.140.114 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:17:25.375833 1.392940 udp 10.0.2.22 51868 <-> 184.81.168.173 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:27.378695 0.000000 udp 10.0.2.22 51868 -> 68.204.178.182 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:17:28.380073 0.417684 udp 10.0.2.22 51868 <-> 175.35.18.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:29.381884 0.065653 udp 10.0.2.22 51868 <-> 178.75.230.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:30.383187 0.055376 udp 10.0.2.22 51868 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:31.374504 0.000000 udp 10.0.2.22 51868 -> 220.143.102.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:17:32.375939 0.154005 udp 10.0.2.22 51868 <-> 68.11.235.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:33.377024 0.221549 udp 10.0.2.22 51868 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:34.378555 0.359567 udp 10.0.2.22 51868 <-> 178.25.74.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:35.380134 0.086686 udp 10.0.2.22 51868 <-> 87.59.123.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:36.381284 0.030556 udp 10.0.2.22 51868 <-> 89.64.246.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:37.383137 0.000000 udp 10.0.2.22 51868 -> 88.165.10.238 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:17:38.374138 0.000000 udp 10.0.2.22 51868 -> 118.169.215.159 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:17:39.255868 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:17:39.375713 0.317224 udp 10.0.2.22 51868 <-> 189.25.78.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:40.377633 0.144509 udp 10.0.2.22 51868 <-> 24.151.86.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:41.378793 0.255705 udp 10.0.2.22 51868 <-> 1.22.190.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:42.380511 0.000000 udp 10.0.2.22 51868 -> 101.63.152.29 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:17:43.382018 0.219629 udp 10.0.2.22 51868 <-> 207.134.228.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:44.383314 0.051549 udp 10.0.2.22 51868 <-> 93.152.189.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:45.374669 0.765992 udp 10.0.2.22 51868 <-> 79.118.199.198 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:46.376170 0.000000 udp 10.0.2.22 51868 -> 106.51.19.216 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:17:47.377078 0.051719 udp 10.0.2.22 51868 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:48.379139 0.044581 udp 10.0.2.22 51868 <-> 178.75.230.48 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:49.380327 0.221795 udp 10.0.2.22 51868 <-> 70.82.157.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:50.381902 0.614595 udp 10.0.2.22 51868 <-> 201.211.102.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:51.383107 0.000000 udp 10.0.2.22 51868 -> 87.16.118.103 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:17:52.374979 0.087273 udp 10.0.2.22 51868 <-> 80.80.41.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:53.376094 0.232966 udp 10.0.2.22 51868 <-> 81.147.68.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:54.377225 0.153016 udp 10.0.2.22 51868 <-> 66.130.116.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:55.378851 0.341246 udp 10.0.2.22 51868 <-> 36.232.196.61 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:56.380681 0.000000 udp 10.0.2.22 51868 -> 49.249.246.25 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:17:57.381861 0.073890 udp 10.0.2.22 51868 <-> 87.59.123.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:58.373035 3.004190 udp 10.0.2.22 51868 <-> 109.105.207.217 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:17:59.374347 0.000000 udp 10.0.2.22 51868 -> 76.125.64.235 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:18:00.375721 4.213138 udp 10.0.2.22 51868 <-> 208.99.142.222 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:02.378926 0.474420 udp 10.0.2.22 51868 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:03.380655 0.794693 udp 10.0.2.22 51868 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:05.373098 3.174094 udp 10.0.2.22 51868 <-> 178.149.14.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:06.254701 0.000037 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:18:06.374593 2.208827 udp 10.0.2.22 51868 <-> 142.136.206.4 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:09.379538 2.712473 udp 10.0.2.22 51868 <-> 122.100.80.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:10.380385 0.000000 udp 10.0.2.22 51868 -> 5.20.68.115 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:18:11.382355 0.246431 udp 10.0.2.22 51868 <-> 49.205.135.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:12.373080 0.000000 udp 10.0.2.22 51868 -> 105.229.138.31 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:18:13.375078 0.147537 udp 10.0.2.22 51868 <-> 216.16.109.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:14.375992 0.402345 udp 10.0.2.22 51868 <-> 118.179.243.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:15.377456 0.117991 udp 10.0.2.22 51868 <-> 184.175.42.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:16.379387 0.082793 udp 10.0.2.22 51868 <-> 78.239.29.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:17.380568 1.054327 udp 10.0.2.22 51868 <-> 147.163.93.48 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:19.373176 0.172220 udp 10.0.2.22 51868 <-> 89.205.104.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:20.375102 0.050896 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:21.376626 0.163124 udp 10.0.2.22 51868 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:22.377689 0.000000 udp 10.0.2.22 51868 -> 77.77.31.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:18:23.378921 0.161378 udp 10.0.2.22 51868 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:24.380950 0.142672 udp 10.0.2.22 51868 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:25.382337 0.014847 udp 10.0.2.22 51868 <-> 161.53.118.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:26.373164 0.156978 udp 10.0.2.22 51868 <-> 24.222.144.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:27.374984 0.042997 udp 10.0.2.22 51868 <-> 80.200.192.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:28.376263 3.004642 udp 10.0.2.22 51868 -> 79.155.114.84 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:18:29.378133 0.000000 udp 10.0.2.22 51868 -> 14.99.235.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:18:30.379243 3.019129 udp 10.0.2.22 51868 <-> 85.130.45.29 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:32.382428 4.996569 udp 10.0.2.22 51868 -> 190.177.200.152 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:18:33.253628 0.000092 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:18:34.375020 0.000000 udp 10.0.2.22 51868 -> 93.143.13.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:18:35.376254 0.101226 udp 10.0.2.22 51868 <-> 87.16.118.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:36.378165 0.074716 udp 10.0.2.22 51868 <-> 87.59.123.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:38.380729 0.358414 udp 10.0.2.22 51868 <-> 1.160.137.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:39.382444 0.000000 udp 10.0.2.22 51868 -> 24.0.29.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:18:40.373618 0.000000 udp 10.0.2.22 51868 -> 190.177.200.152 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:18:41.375273 0.348681 udp 10.0.2.22 51868 <-> 177.143.102.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:42.376448 2.002878 udp 10.0.2.22 51868 -> 203.122.6.41 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:18:43.377650 0.308104 udp 10.0.2.22 51868 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:45.381085 0.058448 udp 10.0.2.22 51868 <-> 188.173.128.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:46.382549 0.388361 udp 10.0.2.22 51868 <-> 14.99.235.28 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:47.373295 0.317992 udp 10.0.2.22 51868 <-> 86.58.36.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:48.375340 0.322162 udp 10.0.2.22 51868 <-> 210.113.35.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:49.198695 0.000000 udp 10.0.2.22 51868 <- 203.122.6.41 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:18:49.376804 0.277155 udp 10.0.2.22 51868 <-> 186.95.33.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:50.377919 3.646410 udp 10.0.2.22 51868 <-> 113.19.198.27 16464 CON 0 0 2 668 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:51.379840 0.000000 udp 10.0.2.22 51868 -> 74.68.63.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:18:52.380695 0.013440 udp 10.0.2.22 51868 <-> 89.177.137.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:53.382242 0.346254 udp 10.0.2.22 51868 <-> 111.243.170.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:54.373627 0.000000 udp 10.0.2.22 51868 -> 92.241.136.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:18:55.375224 0.279553 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:56.376713 0.192316 udp 10.0.2.22 51868 <-> 94.205.1.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:18:57.377938 0.000000 udp 10.0.2.22 51868 -> 68.185.124.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:18:58.379771 1.162785 udp 10.0.2.22 51868 <-> 70.81.218.84 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:00.251767 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:19:00.382467 0.049037 udp 10.0.2.22 51868 <-> 188.173.77.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:01.373958 0.082096 udp 10.0.2.22 51868 <-> 78.70.192.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:02.375023 0.295113 udp 10.0.2.22 51868 <-> 14.96.181.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:03.376826 0.000000 udp 10.0.2.22 51868 -> 50.55.237.122 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:19:04.378162 0.356052 udp 10.0.2.22 51868 <-> 187.101.113.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:05.379190 0.146893 udp 10.0.2.22 51868 <-> 24.144.193.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:06.380816 1.214035 udp 10.0.2.22 51868 <-> 49.144.75.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:07.382596 0.018275 udp 10.0.2.22 51868 <-> 88.132.62.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:08.373719 0.000000 udp 10.0.2.22 51868 -> 190.53.90.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:19:09.375150 0.015159 udp 10.0.2.22 51868 <-> 95.222.234.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:10.376773 0.000000 udp 10.0.2.22 51868 -> 199.47.186.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:19:11.377810 0.048277 udp 10.0.2.22 51868 <-> 150.214.64.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:12.379362 0.451609 udp 10.0.2.22 51868 <-> 173.216.251.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:13.381082 0.155378 udp 10.0.2.22 51868 <-> 89.218.238.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:14.382594 0.401227 udp 10.0.2.22 51868 <-> 183.109.37.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:15.373786 0.000000 udp 10.0.2.22 51868 -> 109.2.250.226 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:19:16.375284 0.145979 udp 10.0.2.22 51868 <-> 75.131.21.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:17.376420 0.286904 udp 10.0.2.22 51868 <-> 121.85.199.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:18.378509 0.116495 udp 10.0.2.22 51868 <-> 178.129.93.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:19.379540 0.000000 udp 10.0.2.22 51868 -> 99.247.166.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:19:20.380903 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:19:21.382663 0.345056 udp 10.0.2.22 51868 <-> 112.158.196.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:22.374408 0.358677 udp 10.0.2.22 51868 <-> 14.97.108.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:23.375118 0.807911 udp 10.0.2.22 51868 <-> 190.208.103.70 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:24.376819 0.253111 udp 10.0.2.22 51868 <-> 115.241.134.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:25.378221 0.299109 udp 10.0.2.22 51868 <-> 211.33.152.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:26.379910 0.054450 udp 10.0.2.22 51868 <-> 89.190.113.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:27.251065 0.000098 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:19:27.380896 0.139269 udp 10.0.2.22 51868 <-> 184.56.45.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:28.382567 0.333469 udp 10.0.2.22 51868 <-> 101.63.209.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:29.373694 0.228769 udp 10.0.2.22 51868 <-> 105.227.32.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:30.375582 0.336860 udp 10.0.2.22 51868 <-> 61.4.170.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:31.377045 0.075303 udp 10.0.2.22 51868 <-> 82.247.203.115 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:32.378347 0.065752 udp 10.0.2.22 51868 <-> 88.186.212.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:33.380051 3.240565 udp 10.0.2.22 51868 <-> 190.207.151.119 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:34.381102 0.000000 udp 10.0.2.22 51868 -> 115.241.176.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:19:35.382492 0.022480 udp 10.0.2.22 51868 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:37.375802 0.611181 udp 10.0.2.22 51868 <-> 181.165.132.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:38.376677 0.000000 udp 10.0.2.22 51868 -> 116.202.140.224 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:19:39.378220 0.043844 udp 10.0.2.22 51868 <-> 90.228.224.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:40.380019 0.371735 udp 10.0.2.22 51868 <-> 113.252.190.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:41.381477 0.000000 udp 10.0.2.22 51868 -> 92.86.43.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:19:42.382389 0.304003 udp 10.0.2.22 51868 <-> 109.163.151.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:43.374396 0.135676 udp 10.0.2.22 51868 <-> 68.84.213.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:44.375255 0.141263 udp 10.0.2.22 51868 <-> 98.239.193.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:45.376990 0.057604 udp 10.0.2.22 51868 <-> 90.154.230.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:46.378274 0.000000 udp 10.0.2.22 51868 -> 177.2.69.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:19:47.379589 0.159563 udp 10.0.2.22 51868 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:48.381149 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:19:49.382526 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:19:50.374348 0.301588 udp 10.0.2.22 51868 <-> 74.72.169.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:19:51.375760 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:19:52.376928 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:19:53.378204 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:19:54.250041 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:19:54.380001 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:19:55.381332 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:19:56.383359 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:19:57.374477 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:19:59.377068 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:20:00.379062 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:20:01.380234 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:20:02.381961 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:20:03.383110 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:20:04.374397 0.000040 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:20:04.374437 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:20:05.375934 3.003823 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:20:06.377729 0.295169 udp 10.0.2.22 51868 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:20:07.378991 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:20:09.381334 0.000000 udp 10.0.2.22 51868 -> 72.238.160.195 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:20:10.382847 0.000000 udp 10.0.2.22 51868 -> 84.232.228.140 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:20:11.374185 0.454032 udp 10.0.2.22 51868 <-> 65.15.129.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:20:12.376150 4.143488 udp 10.0.2.22 51868 <-> 69.123.197.24 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:20:13.376976 0.275133 udp 10.0.2.22 51868 <-> 190.17.84.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:20:14.378500 1.704759 udp 10.0.2.22 51868 <-> 79.109.150.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:20:15.380604 0.000000 udp 10.0.2.22 51868 -> 126.123.91.123 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:20:17.383457 0.151709 udp 10.0.2.22 51868 <-> 24.99.237.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:20:18.374922 0.051034 udp 10.0.2.22 51868 <-> 86.121.142.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:20:19.376320 0.214650 udp 10.0.2.22 51868 <-> 24.23.11.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:20:20.377216 0.040443 udp 10.0.2.22 51868 <-> 46.237.64.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:20:21.248806 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:20:21.378568 0.174668 udp 10.0.2.22 51868 <-> 96.2.150.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:20:22.380612 3.995653 udp 10.0.2.22 51868 -> 1.172.166.20 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:20:23.382085 0.300536 udp 10.0.2.22 51868 <-> 180.199.144.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:20:24.383196 3.246999 udp 10.0.2.22 51868 <-> 24.23.11.39 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:20:25.374412 0.000000 udp 10.0.2.22 51868 -> 161.6.244.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:20:28.379101 0.149283 udp 10.0.2.22 51868 <-> 98.235.61.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:20:29.380557 0.000000 udp 10.0.2.22 51868 -> 36.238.113.124 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:20:30.381517 0.000000 udp 10.0.2.22 51868 -> 186.95.79.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:20:31.372916 0.000000 udp 10.0.2.22 51868 -> 122.121.6.112 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:20:32.374372 1.049822 udp 10.0.2.22 51868 <-> 86.125.61.76 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:20:34.377696 4.997311 udp 10.0.2.22 51868 -> 188.214.34.53 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:20:35.379119 4.997150 udp 10.0.2.22 51868 -> 36.238.113.124 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:20:36.380454 0.055005 udp 10.0.2.22 51868 <-> 195.238.118.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:20:37.381726 0.000000 udp 10.0.2.22 51868 -> 93.137.189.60 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:20:38.372903 0.045246 udp 10.0.2.22 51868 <-> 86.121.142.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:20:41.377738 0.353080 udp 10.0.2.22 51868 <-> 122.121.6.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:20:42.379092 0.172201 udp 10.0.2.22 51868 <-> 173.18.114.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:20:43.380517 0.066150 udp 10.0.2.22 51868 <-> 79.140.165.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:20:44.381619 4.299864 udp 10.0.2.22 51868 <-> 14.43.147.158 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:20:45.373270 0.000000 udp 10.0.2.22 51868 -> 190.16.162.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:20:46.374632 0.222799 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:20:47.376114 2.061605 udp 10.0.2.22 51868 <-> 195.238.118.241 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:20:48.257593 0.000098 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:20:50.380305 0.000000 udp 10.0.2.22 51868 -> 78.8.65.60 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:20:51.381870 0.303478 udp 10.0.2.22 51868 <-> 14.43.147.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:20:52.373701 1.259049 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:20:54.376367 0.066451 udp 10.0.2.22 51868 <-> 79.140.165.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:20:55.377784 0.052338 udp 10.0.2.22 51868 <-> 46.214.189.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:20:56.378774 2.002932 udp 10.0.2.22 51868 -> 190.16.162.245 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:20:57.380371 0.116520 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:20:59.373417 0.000000 udp 10.0.2.22 51868 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:21:00.375178 0.489360 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:01.376287 0.000000 udp 10.0.2.22 51868 -> 173.18.114.28 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:21:02.377967 0.000000 udp 10.0.2.22 51868 -> 161.6.244.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:21:03.378995 4.997064 udp 10.0.2.22 51868 <-> 180.199.144.137 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:04.380597 0.381533 udp 10.0.2.22 51868 <-> 24.23.11.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:05.382024 0.000000 udp 10.0.2.22 51868 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:21:06.373145 0.000000 udp 10.0.2.22 51868 -> 93.137.189.60 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:21:07.375183 0.059205 udp 10.0.2.22 51868 <-> 195.238.118.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:08.670785 0.000000 udp 10.0.2.22 51868 <- 180.199.144.137 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:21:09.377834 0.065800 udp 10.0.2.22 51868 <-> 79.140.165.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:10.379050 0.052105 udp 10.0.2.22 51868 <-> 46.214.189.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:11.381080 0.191483 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:12.382417 0.058931 udp 10.0.2.22 51868 <-> 195.238.118.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:13.373646 1.215262 udp 10.0.2.22 51868 <-> 24.23.11.39 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:15.256380 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:21:15.376077 0.000000 udp 10.0.2.22 51868 -> 78.8.65.60 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:21:16.377609 4.997492 udp 10.0.2.22 51868 -> 36.238.113.124 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:21:17.379184 0.197441 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:18.380557 0.060362 udp 10.0.2.22 51868 <-> 86.121.142.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:19.382421 0.000000 udp 10.0.2.22 51868 -> 122.121.6.112 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:21:20.373758 0.000000 udp 10.0.2.22 51868 -> 93.137.189.60 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:21:22.376151 0.182144 udp 10.0.2.22 51868 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:23.377818 0.000000 udp 10.0.2.22 51868 -> 36.238.113.124 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:21:24.379214 0.149302 udp 10.0.2.22 51868 <-> 98.235.61.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:25.381181 0.000000 udp 10.0.2.22 51868 -> 173.18.114.28 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:21:26.382537 1.050719 udp 10.0.2.22 51868 <-> 86.121.142.140 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:28.375019 0.312665 udp 10.0.2.22 51868 <-> 150.162.97.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:29.376395 0.456773 udp 10.0.2.22 51868 <-> 190.36.28.235 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:30.378110 0.000000 udp 10.0.2.22 51868 -> 27.51.14.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:21:31.379290 2.003075 udp 10.0.2.22 51868 <-> 46.48.181.30 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:32.381159 0.360872 udp 10.0.2.22 51868 <-> 61.223.208.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:34.374020 0.098630 udp 10.0.2.22 51868 <-> 178.137.200.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:35.375277 0.168976 udp 10.0.2.22 51868 <-> 74.77.226.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:36.376681 0.000000 udp 10.0.2.22 51868 -> 186.95.79.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:21:37.378225 0.052559 udp 10.0.2.22 51868 <-> 79.115.141.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:38.379365 0.146442 udp 10.0.2.22 51868 <-> 96.23.154.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:39.381077 0.146524 udp 10.0.2.22 51868 <-> 203.192.205.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:40.382050 0.229153 udp 10.0.2.22 51868 <-> 79.19.53.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:41.374136 1.001235 udp 10.0.2.22 51868 <-> 123.201.207.144 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:42.255187 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:21:43.377035 0.098743 udp 10.0.2.22 51868 <-> 178.137.200.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:44.378488 0.250898 udp 10.0.2.22 51868 <-> 183.83.165.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:45.379763 0.413475 udp 10.0.2.22 51868 <-> 189.42.55.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:46.380902 0.037511 udp 10.0.2.22 51868 <-> 213.112.230.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:47.382242 0.000000 udp 10.0.2.22 51868 -> 213.231.166.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:21:48.374082 0.298945 udp 10.0.2.22 51868 <-> 61.21.68.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:49.375745 0.065845 udp 10.0.2.22 51868 <-> 79.140.165.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:50.377002 0.135772 udp 10.0.2.22 51868 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:51.378036 3.046670 udp 10.0.2.22 51868 <-> 217.18.251.249 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:52.379697 0.052295 udp 10.0.2.22 51868 <-> 147.163.93.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:53.380848 4.035802 udp 10.0.2.22 51868 <-> 213.231.166.253 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:21:55.374191 0.000000 udp 10.0.2.22 51868 -> 79.140.165.245 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:21:56.375165 0.000000 udp 10.0.2.22 51868 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:21:58.378654 0.000000 udp 10.0.2.22 51868 -> 173.80.197.248 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:21:59.380012 0.296521 udp 10.0.2.22 51868 <-> 189.42.55.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:00.380978 3.995886 udp 10.0.2.22 51868 <-> 201.83.219.18 16464 CON 0 0 5 1954 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:01.382423 4.071445 udp 10.0.2.22 51868 <-> 92.36.150.72 16464 CON 0 0 6 3676 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:02.373651 0.162377 udp 10.0.2.22 51868 <-> 71.89.115.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:06.379848 0.299566 udp 10.0.2.22 51868 <-> 189.42.55.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:07.380917 1.053714 udp 10.0.2.22 51868 <-> 147.163.93.48 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:09.254185 0.000037 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:22:09.374013 0.050900 udp 10.0.2.22 51868 <-> 46.102.30.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:10.375313 0.292791 udp 10.0.2.22 51868 <-> 177.39.62.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:11.376827 0.039753 udp 10.0.2.22 51868 <-> 77.234.87.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:12.378527 0.210879 udp 10.0.2.22 51868 <-> 67.187.191.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:13.379836 0.192806 udp 10.0.2.22 51868 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:14.381532 3.440827 udp 10.0.2.22 51868 <-> 75.243.16.247 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:16.374410 0.066070 udp 10.0.2.22 51868 <-> 79.140.165.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:18.377456 0.050652 udp 10.0.2.22 51868 <-> 46.102.30.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:19.378296 0.059285 udp 10.0.2.22 51868 <-> 188.173.128.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:20.380207 0.205823 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:21.381165 0.381777 udp 10.0.2.22 51868 <-> 201.213.98.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:22.383066 0.394688 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:23.374556 0.174406 udp 10.0.2.22 51868 <-> 76.85.171.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:24.375632 0.000000 udp 10.0.2.22 51868 -> 86.121.18.55 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:22:25.376731 0.000000 udp 10.0.2.22 51868 -> 177.39.62.54 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:22:26.378848 0.210976 udp 10.0.2.22 51868 <-> 67.187.191.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:27.379816 0.051073 udp 10.0.2.22 51868 <-> 46.102.30.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:28.381053 0.114766 udp 10.0.2.22 51868 <-> 95.85.162.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:29.383331 0.034918 udp 10.0.2.22 51868 <-> 77.234.87.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:30.373907 0.059292 udp 10.0.2.22 51868 <-> 188.173.128.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:31.187403 3.002633 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 03:22:31.375395 0.480691 udp 10.0.2.22 51868 <-> 201.213.98.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:32.377031 0.066264 udp 10.0.2.22 51868 <-> 79.140.165.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:33.378512 0.040503 udp 10.0.2.22 51868 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:34.380271 0.279440 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:34.710721 0.011381 udp 10.0.2.22 60010 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 03:22:34.722488 0.000000 udp 10.0.2.22 60011 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:22:35.381503 0.140951 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:36.252857 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:22:36.382883 0.051900 udp 10.0.2.22 51868 <-> 46.214.189.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:37.374686 0.059047 udp 10.0.2.22 51868 <-> 188.173.128.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:38.195241 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:22:38.375639 0.055739 udp 10.0.2.22 51868 <-> 86.121.18.55 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:39.377010 0.034933 udp 10.0.2.22 51868 <-> 77.234.87.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:40.378775 0.000000 udp 10.0.2.22 51868 -> 177.39.62.54 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:22:41.379831 0.312870 udp 10.0.2.22 51868 <-> 95.85.162.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:42.381199 0.059371 udp 10.0.2.22 51868 <-> 188.173.128.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:43.382739 0.051124 udp 10.0.2.22 51868 <-> 46.102.30.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:44.374558 0.367997 udp 10.0.2.22 51868 <-> 201.213.98.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:45.376238 0.039985 udp 10.0.2.22 51868 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:46.197570 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:22:46.377036 0.037062 udp 10.0.2.22 51868 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:47.378710 1.057030 udp 10.0.2.22 51868 <-> 86.121.18.55 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:49.381264 0.000000 udp 10.0.2.22 51868 -> 177.39.62.54 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:22:50.383035 2.059834 udp 10.0.2.22 51868 <-> 79.140.165.245 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:51.374324 0.039499 udp 10.0.2.22 51868 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:53.377545 1.164058 udp 10.0.2.22 51868 <-> 71.89.115.229 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:55.380089 0.303340 udp 10.0.2.22 51868 <-> 201.83.219.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:56.381920 0.307301 udp 10.0.2.22 51868 <-> 189.42.55.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:57.383115 1.029162 udp 10.0.2.22 51868 <-> 213.112.230.161 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:22:59.375675 0.000000 udp 10.0.2.22 51868 -> 77.234.87.43 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:23:00.377156 0.311845 udp 10.0.2.22 51868 <-> 177.39.62.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:01.378604 0.058850 udp 10.0.2.22 51868 <-> 188.173.128.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:02.200536 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:23:02.380449 0.142537 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:03.251751 0.000090 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:23:03.381811 0.005122 udp 10.0.2.22 51868 <-> 147.229.140.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:04.373026 0.335719 udp 10.0.2.22 51868 <-> 50.113.56.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:05.374692 0.435191 udp 10.0.2.22 51868 <-> 58.233.119.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:06.376381 0.044160 udp 10.0.2.22 51868 <-> 194.158.73.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:07.377530 0.282836 udp 10.0.2.22 51868 <-> 117.203.81.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:08.379209 4.103411 udp 10.0.2.22 51868 <-> 80.164.97.146 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:09.380212 0.058881 udp 10.0.2.22 51868 <-> 188.252.201.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:10.381845 0.000000 udp 10.0.2.22 51868 -> 85.86.78.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:23:11.373270 0.065432 udp 10.0.2.22 51868 <-> 93.100.170.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:13.376444 0.500233 udp 10.0.2.22 51868 <-> 117.217.209.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:14.377678 0.000000 udp 10.0.2.22 51868 -> 84.151.135.118 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:23:15.379115 0.184954 udp 10.0.2.22 51868 <-> 151.74.151.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:16.380617 0.041360 udp 10.0.2.22 51868 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:17.382004 0.991107 udp 10.0.2.22 51868 <-> 95.233.87.84 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:19.375306 0.041623 udp 10.0.2.22 51868 <-> 86.121.105.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:20.376120 0.310748 udp 10.0.2.22 51868 <-> 150.162.192.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:21.377557 0.000000 udp 10.0.2.22 51868 -> 179.174.239.243 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:23:22.378964 1.599656 udp 10.0.2.22 51868 <-> 190.16.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:23.380345 0.455957 udp 10.0.2.22 51868 <-> 117.206.117.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:24.382086 0.000000 udp 10.0.2.22 51868 -> 92.36.150.72 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:23:25.373656 1.172488 udp 10.0.2.22 51868 <-> 174.54.248.12 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:27.376274 0.155376 udp 10.0.2.22 51868 <-> 24.63.83.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:28.378050 0.179233 udp 10.0.2.22 51868 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:29.378955 0.058210 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:30.250462 0.000125 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:23:30.380463 3.141021 udp 10.0.2.22 51868 <-> 24.176.157.25 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:32.373147 0.000000 udp 10.0.2.22 51868 -> 92.86.49.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:23:34.206058 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:23:34.376266 0.307555 udp 10.0.2.22 51868 <-> 95.91.31.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:35.377744 0.031308 udp 10.0.2.22 51868 <-> 77.21.231.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:36.379507 1.070674 udp 10.0.2.22 51868 <-> 85.87.142.161 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:38.382416 0.303316 udp 10.0.2.22 51868 <-> 211.33.152.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:39.373109 0.000000 udp 10.0.2.22 51868 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:23:40.374979 4.005489 udp 10.0.2.22 51868 -> 220.143.102.26 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:23:41.376176 4.997382 udp 10.0.2.22 51868 <-> 46.191.214.12 16464 CON 0 0 5 1954 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:42.377691 0.138822 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:45.382387 0.000000 udp 10.0.2.22 51868 -> 189.19.181.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:23:46.462429 0.000000 udp 10.0.2.22 51868 <- 46.191.214.12 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:23:47.374852 2.078973 udp 10.0.2.22 51868 <-> 109.60.87.7 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:23:51.380723 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:23:52.382069 0.000080 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:23:52.382149 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:23:53.373877 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:23:54.374945 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:23:55.376465 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:23:56.377623 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:23:57.379396 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:23:58.250984 0.000120 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:23:58.380762 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:23:59.382509 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:00.373936 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:01.375441 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:02.376870 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:03.378581 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:04.379692 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:05.380714 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:06.382306 0.158903 udp 10.0.2.22 51868 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:24:07.373732 0.309247 udp 10.0.2.22 51868 <-> 119.24.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:24:08.375011 0.000064 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:08.375075 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:24:09.376346 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:10.377740 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:11.379300 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:12.380733 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:13.382029 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:14.373559 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:15.375557 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:16.377038 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:17.377806 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:18.379811 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:19.381312 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:20.382218 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:22.375183 0.153996 udp 10.0.2.22 51868 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:24:23.377078 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:24.378471 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:25.249368 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:24:25.379279 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:26.381220 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:27.382814 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:28.374250 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:29.375562 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:30.376579 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:31.378272 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:32.379751 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:33.381039 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:34.382320 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:35.373666 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:36.375094 0.000120 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:36.375214 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:24:37.376952 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:38.377969 0.155109 udp 10.0.2.22 51868 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:24:39.379853 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:41.382540 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:42.374320 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:43.375363 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:44.376735 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:45.378437 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:46.379653 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:47.381056 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:48.382652 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:49.374279 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:50.375329 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:51.377111 0.000110 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:51.377221 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:24:52.248384 0.000111 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:24:52.378811 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:53.380141 1.162306 udp 10.0.2.22 51868 <-> 174.78.104.11 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:24:55.383062 1.238675 udp 10.0.2.22 51868 <-> 151.64.199.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:24:56.374212 3.004297 udp 10.0.2.22 51868 -> 135.19.220.28 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:57.375281 0.000000 udp 10.0.2.22 51868 -> 1.160.137.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:24:58.377027 0.000000 udp 10.0.2.22 51868 -> 69.176.180.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:00.379644 0.153083 udp 10.0.2.22 51868 <-> 50.88.67.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:25:01.381573 0.124598 udp 10.0.2.22 51868 <-> 79.6.214.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:25:02.382639 0.048925 udp 10.0.2.22 51868 <-> 89.190.113.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:25:03.374505 0.059162 udp 10.0.2.22 51868 <-> 31.44.194.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:25:04.375511 0.501060 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:25:05.377314 0.325901 udp 10.0.2.22 51868 <-> 117.222.69.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:25:06.378292 0.035657 udp 10.0.2.22 51868 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:25:07.380099 0.102217 udp 10.0.2.22 51868 <-> 84.2.200.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:25:08.381126 3.995919 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:09.383152 3.995785 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:11.376149 0.527644 udp 10.0.2.22 51868 <-> 180.215.76.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:25:14.379939 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:15.381599 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:16.383187 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:17.374322 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:18.376024 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:19.256808 0.000113 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:25:19.377191 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:20.378364 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:21.380546 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:23.382879 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:24.374620 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:25.376275 0.000092 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:25.376367 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:25:26.377253 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:27.379166 4.411184 udp 10.0.2.22 51868 <-> 175.211.29.15 16464 CON 0 0 5 1954 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:25:29.381761 1.062988 udp 10.0.2.22 51868 <-> 5.61.147.12 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:25:32.375837 0.000000 udp 10.0.2.22 51868 -> 60.50.253.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:33.377847 1.024934 udp 10.0.2.22 51868 <-> 82.227.89.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:25:34.378553 1.534920 udp 10.0.2.22 51868 <-> 201.235.95.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:25:35.379937 0.000000 udp 10.0.2.22 51868 -> 180.215.76.11 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:36.381984 0.176635 udp 10.0.2.22 51868 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:25:37.373063 0.000000 udp 10.0.2.22 51868 -> 74.68.63.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:38.374596 3.896404 udp 10.0.2.22 51868 <-> 99.250.38.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:25:39.376377 0.298900 udp 10.0.2.22 51868 <-> 117.222.69.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:25:40.377472 0.000000 udp 10.0.2.22 51868 -> 60.50.253.12 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:41.378537 0.000000 udp 10.0.2.22 51868 -> 180.215.76.11 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:42.380197 0.169726 udp 10.0.2.22 51868 <-> 98.170.237.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:25:43.381491 0.052372 udp 10.0.2.22 51868 -> 188.219.244.104 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:43.433863 0.000000 icmp 188.219.244.104 0x0303 -> 10.0.2.22 0x5040 URP 192 1 70 flow=Background 1970/01/01 03:25:44.373047 0.000000 udp 10.0.2.22 51868 -> 67.233.250.225 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:45.374488 0.155292 udp 10.0.2.22 51868 <-> 173.24.11.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:25:46.255672 0.000121 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:25:46.376060 0.000000 udp 10.0.2.22 51868 -> 27.2.138.119 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:47.377821 0.310945 udp 10.0.2.22 51868 <-> 150.162.192.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:25:48.379164 0.042780 udp 10.0.2.22 51868 <-> 89.133.113.59 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:25:49.380382 0.000000 udp 10.0.2.22 51868 -> 188.27.196.55 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:50.382352 0.410395 udp 10.0.2.22 51868 <-> 203.192.126.51 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:25:51.373351 0.106663 udp 10.0.2.22 51868 <-> 95.85.162.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:25:52.374631 0.303269 udp 10.0.2.22 51868 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:25:53.376484 0.059271 udp 10.0.2.22 51868 <-> 31.44.194.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:25:54.377467 0.000000 udp 10.0.2.22 51868 -> 88.222.170.133 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:55.378692 0.000000 udp 10.0.2.22 51868 -> 118.6.66.92 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:56.380593 0.200675 udp 10.0.2.22 51868 <-> 70.70.162.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:25:57.381815 0.000000 udp 10.0.2.22 51868 -> 115.187.62.123 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:58.373134 0.000000 udp 10.0.2.22 51868 -> 67.236.142.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:25:59.374525 0.000000 udp 10.0.2.22 51868 -> 124.120.104.139 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:26:00.376507 0.058105 udp 10.0.2.22 51868 <-> 92.231.178.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:01.377683 0.163498 udp 10.0.2.22 51868 <-> 69.245.13.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:02.378737 0.195202 udp 10.0.2.22 51868 <-> 123.238.140.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:03.380319 2.037760 udp 10.0.2.22 51868 <-> 176.37.230.16 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:04.381597 0.090879 udp 10.0.2.22 51868 <-> 178.233.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:06.374822 0.155534 udp 10.0.2.22 51868 <-> 68.46.230.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:07.376629 0.332606 udp 10.0.2.22 51868 <-> 187.70.92.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:08.377389 0.314685 udp 10.0.2.22 51868 <-> 60.56.154.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:09.379289 0.564432 udp 10.0.2.22 51868 <-> 202.29.178.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:10.380817 0.000000 udp 10.0.2.22 51868 -> 118.161.50.164 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:26:11.382520 0.171450 udp 10.0.2.22 51868 <-> 174.49.200.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:12.373374 0.000000 udp 10.0.2.22 51868 -> 203.192.205.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:26:13.254553 0.000105 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:26:13.375185 0.164964 udp 10.0.2.22 51868 <-> 98.208.189.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:14.376045 3.004511 udp 10.0.2.22 51868 -> 179.174.239.243 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:26:15.377889 1.001504 udp 10.0.2.22 51868 <-> 77.234.87.43 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:18.382170 0.000000 udp 10.0.2.22 51868 -> 176.201.40.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:26:19.373885 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:26:20.375101 0.000000 udp 10.0.2.22 51868 -> 118.167.78.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:26:21.376647 0.314293 udp 10.0.2.22 51868 <-> 60.62.66.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:22.377788 0.136550 udp 10.0.2.22 51868 <-> 24.193.20.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:23.379167 0.000000 udp 10.0.2.22 51868 -> 93.183.153.48 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:26:24.381020 1.047441 udp 10.0.2.22 51868 <-> 88.216.52.44 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:26.373274 0.000000 udp 10.0.2.22 51868 -> 24.102.154.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:26:27.374958 0.000000 udp 10.0.2.22 51868 -> 77.103.126.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:26:28.376516 0.000000 udp 10.0.2.22 51868 -> 1.164.153.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:26:29.377858 0.009796 udp 10.0.2.22 51868 <-> 188.175.96.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:30.379285 0.153280 udp 10.0.2.22 51868 <-> 68.11.235.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:31.380490 4.155957 udp 10.0.2.22 51868 <-> 68.59.56.94 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:32.382151 0.000000 udp 10.0.2.22 51868 -> 83.136.186.86 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:26:33.373295 0.000000 udp 10.0.2.22 51868 -> 108.153.161.86 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:26:34.375207 0.000000 udp 10.0.2.22 51868 -> 93.183.153.48 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:26:36.377811 0.080756 udp 10.0.2.22 51868 <-> 95.90.117.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:37.379060 0.036402 udp 10.0.2.22 51868 <-> 89.65.132.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:38.381135 0.321638 udp 10.0.2.22 51868 <-> 219.169.100.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:39.382561 0.127163 udp 10.0.2.22 51868 <-> 79.22.181.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:40.253468 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:26:40.374175 0.340750 udp 10.0.2.22 51868 <-> 59.9.44.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:41.374979 0.551118 udp 10.0.2.22 51868 <-> 117.203.238.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:42.376705 0.151830 udp 10.0.2.22 51868 <-> 68.117.189.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:43.377804 0.038379 udp 10.0.2.22 51868 <-> 144.122.47.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:44.379410 0.137857 udp 10.0.2.22 51868 <-> 69.123.17.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:45.380684 1.993061 udp 10.0.2.22 51868 -> 110.5.74.242 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:26:46.382377 2.023853 udp 10.0.2.22 51868 <-> 109.193.41.242 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:26:49.376920 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:26:50.378291 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:26:51.379898 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:26:52.380629 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:26:53.382553 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:26:54.373816 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:26:55.375419 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:26:56.377077 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:26:57.378077 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:26:58.379921 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:26:59.380707 0.070973 udp 10.0.2.22 51868 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:00.382718 0.140144 udp 10.0.2.22 51868 <-> 203.192.205.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:01.374106 0.031696 udp 10.0.2.22 51868 <-> 77.77.31.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:02.375343 0.000000 udp 10.0.2.22 51868 -> 95.108.60.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:27:03.377156 4.056263 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:04.377906 0.158607 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:06.381415 0.035399 udp 10.0.2.22 51868 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:07.251964 0.000101 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:27:08.373659 0.043904 udp 10.0.2.22 51868 <-> 85.230.38.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:09.375099 0.394676 udp 10.0.2.22 51868 <-> 92.229.124.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:10.377095 0.000000 udp 10.0.2.22 51868 -> 87.24.71.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:27:11.378419 0.352778 udp 10.0.2.22 51868 <-> 125.224.18.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:12.380034 0.049647 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:13.381431 0.328018 udp 10.0.2.22 51868 <-> 153.130.52.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:14.382914 0.050372 udp 10.0.2.22 51868 <-> 90.231.187.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:15.374145 0.343484 udp 10.0.2.22 51868 <-> 112.150.92.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:16.375173 0.000000 udp 10.0.2.22 51868 -> 192.168.1.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:27:17.377251 0.123808 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:18.378618 0.051802 udp 10.0.2.22 51868 <-> 82.79.126.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:19.379466 0.109495 udp 10.0.2.22 51868 <-> 89.126.12.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:20.380966 0.000000 udp 10.0.2.22 51868 -> 122.167.173.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:27:21.382762 0.184586 udp 10.0.2.22 51868 <-> 90.232.39.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:22.374130 3.364811 udp 10.0.2.22 51868 <-> 223.16.38.28 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:23.375239 0.258630 udp 10.0.2.22 51868 <-> 123.237.188.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:24.377234 0.000000 udp 10.0.2.22 51868 -> 216.110.251.115 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:27:26.380099 0.369889 udp 10.0.2.22 51868 <-> 113.254.24.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:27.381378 0.182535 udp 10.0.2.22 51868 <-> 69.139.109.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:28.382796 0.000000 udp 10.0.2.22 51868 -> 50.141.14.162 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:27:29.374309 0.151349 udp 10.0.2.22 51868 <-> 173.23.113.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:30.375255 0.000000 udp 10.0.2.22 51868 -> 75.64.127.51 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:27:31.377445 0.287859 udp 10.0.2.22 51868 <-> 117.199.228.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:32.378142 0.136623 udp 10.0.2.22 51868 <-> 68.192.3.101 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:33.380251 0.493521 udp 10.0.2.22 51868 <-> 177.182.77.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:34.250781 0.000092 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:27:34.381169 0.048988 udp 10.0.2.22 51868 <-> 188.190.84.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:35.382623 0.099327 udp 10.0.2.22 51868 <-> 109.60.87.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:36.374475 2.184973 udp 10.0.2.22 51868 <-> 115.242.101.24 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:38.376796 1.349897 udp 10.0.2.22 51868 <-> 174.108.49.15 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:40.380177 0.680610 udp 10.0.2.22 51868 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:41.381721 0.159627 udp 10.0.2.22 51868 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:42.382564 0.197440 udp 10.0.2.22 51868 <-> 79.27.166.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:43.374075 0.047131 udp 10.0.2.22 51868 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:44.375371 0.000000 udp 10.0.2.22 51868 -> 220.143.102.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:27:45.377004 0.320148 udp 10.0.2.22 51868 <-> 122.215.8.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:46.378860 0.368116 udp 10.0.2.22 51868 <-> 116.68.92.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:47.379705 0.000000 udp 10.0.2.22 51868 -> 119.24.43.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:27:48.381737 0.000000 udp 10.0.2.22 51868 -> 79.132.77.108 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:27:49.383121 0.164118 udp 10.0.2.22 51868 <-> 68.206.170.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:50.374495 0.040377 udp 10.0.2.22 51868 <-> 46.237.64.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:51.375895 0.275525 udp 10.0.2.22 51868 <-> 177.80.55.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:52.377324 0.286919 udp 10.0.2.22 51868 <-> 117.204.33.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:53.378905 0.342867 udp 10.0.2.22 51868 <-> 61.228.149.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:54.380453 0.088244 udp 10.0.2.22 51868 <-> 89.126.12.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:55.381602 0.000000 udp 10.0.2.22 51868 -> 78.188.73.155 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:27:56.382985 1.293684 udp 10.0.2.22 51868 <-> 125.4.136.238 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:27:58.375754 0.000000 udp 10.0.2.22 51868 -> 27.51.14.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:27:59.377291 0.000000 udp 10.0.2.22 51868 -> 72.0.251.222 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:28:00.379011 0.309384 udp 10.0.2.22 51868 <-> 183.87.72.23 16464 CON 0 0 4 628 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:01.249865 0.000098 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:28:01.379942 0.151209 udp 10.0.2.22 51868 <-> 68.11.134.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:02.381620 0.550310 udp 10.0.2.22 51868 <-> 58.71.93.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:03.382714 0.173546 udp 10.0.2.22 51868 <-> 76.107.65.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:04.374538 0.000000 udp 10.0.2.22 51868 -> 85.94.110.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:28:05.375694 1.000275 udp 10.0.2.22 51868 <-> 117.194.210.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:06.377229 0.056395 udp 10.0.2.22 51868 <-> 46.249.179.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:07.378644 0.059958 udp 10.0.2.22 51868 <-> 77.78.239.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:08.380548 0.201794 udp 10.0.2.22 51868 <-> 66.68.188.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:09.381576 0.075904 udp 10.0.2.22 51868 <-> 83.228.41.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:10.373111 0.157501 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:11.374307 1.102524 udp 10.0.2.22 51868 <-> 82.254.207.7 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:13.377552 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:28:14.378907 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:28:15.380672 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:28:16.381671 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:28:17.373226 0.329054 udp 10.0.2.22 51868 <-> 58.114.242.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:18.374261 0.036561 udp 10.0.2.22 51868 <-> 85.130.12.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:19.376290 0.130512 udp 10.0.2.22 51868 <-> 216.145.87.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:20.377630 0.401239 udp 10.0.2.22 51868 <-> 111.220.236.165 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:21.379384 3.032991 udp 10.0.2.22 51868 <-> 185.22.137.88 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:22.380031 0.316831 udp 10.0.2.22 51868 <-> 78.242.194.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:23.382144 0.000000 udp 10.0.2.22 51868 -> 219.124.195.90 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:28:25.374413 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:28:26.375822 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:28:27.378011 1.058683 udp 10.0.2.22 51868 <-> 79.113.147.215 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:28.248422 0.000131 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:28:29.380094 0.383096 udp 10.0.2.22 51868 <-> 111.248.97.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:30.382095 0.930866 udp 10.0.2.22 51868 <-> 188.115.242.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:31.373271 0.364932 udp 10.0.2.22 51868 <-> 180.176.70.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:32.374686 0.277709 udp 10.0.2.22 51868 <-> 201.83.219.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:33.375828 0.493147 udp 10.0.2.22 51868 <-> 117.201.93.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:34.377871 0.169141 udp 10.0.2.22 51868 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:35.378758 0.000000 udp 10.0.2.22 51868 -> 195.38.112.168 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:28:36.380749 0.000000 udp 10.0.2.22 51868 -> 95.169.211.29 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:28:37.382218 0.308290 udp 10.0.2.22 51868 <-> 189.46.64.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:38.373601 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:28:39.374723 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:28:40.376000 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:28:41.377728 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:28:42.378844 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:28:43.380340 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:28:44.382194 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:28:45.373719 0.000067 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:28:45.373786 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:28:46.374831 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:28:47.376293 0.064519 udp 10.0.2.22 51868 <-> 195.38.112.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:48.377835 0.000000 udp 10.0.2.22 51868 -> 95.169.211.29 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:28:49.379107 0.722931 udp 10.0.2.22 51868 <-> 27.2.144.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:50.380596 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:28:51.381815 0.141687 udp 10.0.2.22 51868 <-> 95.57.52.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:52.373188 1.434042 udp 10.0.2.22 51868 <-> 123.194.225.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:53.374971 0.000000 udp 10.0.2.22 51868 -> 123.237.211.87 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:28:54.376728 3.259047 udp 10.0.2.22 51868 <-> 190.153.152.209 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:55.247931 0.000093 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:28:55.378035 0.000000 udp 10.0.2.22 51868 -> 98.193.225.86 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:28:56.378923 0.171125 udp 10.0.2.22 51868 <-> 76.109.136.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:58.382260 0.393699 udp 10.0.2.22 51868 <-> 117.203.243.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:28:59.373360 0.354313 udp 10.0.2.22 51868 <-> 177.44.3.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:29:00.375315 0.319940 udp 10.0.2.22 51868 <-> 219.70.156.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:29:01.376509 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:02.377948 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:03.379065 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:04.380946 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:05.382503 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:06.373688 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:07.374952 0.000074 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:07.375026 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:29:08.376451 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:10.379588 0.274762 udp 10.0.2.22 51868 <-> 181.164.145.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:29:12.382328 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:13.373922 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:14.375213 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:15.376460 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:16.377987 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:17.379854 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:18.380813 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:19.502787 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:20.493956 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:21.495014 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:22.376262 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:29:22.496714 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:23.498351 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:24.499749 0.000061 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:24.499810 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:29:25.501240 4.997021 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:26.502454 0.159187 udp 10.0.2.22 51868 <-> 71.235.176.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:29:27.493822 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:28.495345 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:29.496550 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:31.499765 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:32.501498 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:33.502646 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:34.494510 0.042569 udp 10.0.2.22 51868 <-> 82.19.125.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:29:35.495641 0.369061 udp 10.0.2.22 51868 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:29:36.497107 3.332218 udp 10.0.2.22 51868 <-> 190.246.109.252 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:29:37.498227 0.290718 udp 10.0.2.22 51868 <-> 200.146.193.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:29:38.331563 3.002465 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 03:29:39.501075 0.312762 udp 10.0.2.22 51868 <-> 27.143.20.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:29:40.502342 0.101543 udp 10.0.2.22 51868 <-> 85.65.239.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:29:41.494070 0.143604 udp 10.0.2.22 51868 <-> 97.95.244.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:29:42.495915 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:43.496975 0.490416 udp 10.0.2.22 51868 <-> 210.119.21.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:29:44.498801 0.317022 udp 10.0.2.22 51868 <-> 27.106.214.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:29:45.339983 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:29:45.499831 0.000000 udp 10.0.2.22 51868 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:46.501302 1.166298 udp 10.0.2.22 51868 <-> 98.100.21.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:29:47.503003 0.248274 udp 10.0.2.22 51868 <-> 79.101.3.240 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:29:48.494262 0.000000 udp 10.0.2.22 51868 -> 78.137.40.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:49.375093 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:29:49.495577 0.044275 udp 10.0.2.22 51868 <-> 31.176.184.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:29:50.497375 0.040433 udp 10.0.2.22 51868 <-> 92.233.16.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:29:51.498682 0.040592 udp 10.0.2.22 51868 <-> 95.76.188.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:29:52.500086 0.000000 udp 10.0.2.22 51868 -> 49.137.51.93 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:53.341309 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:29:53.501214 0.144732 udp 10.0.2.22 51868 <-> 24.95.94.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:29:54.502918 0.135293 udp 10.0.2.22 51868 <-> 68.34.31.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:29:55.494011 0.112069 udp 10.0.2.22 51868 <-> 145.236.151.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:29:56.495807 0.000000 udp 10.0.2.22 51868 -> 85.210.226.117 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:57.497243 0.000000 udp 10.0.2.22 51868 -> 212.92.246.78 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:29:58.498461 0.602482 udp 10.0.2.22 51868 <-> 88.177.203.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:29:59.500062 0.309002 udp 10.0.2.22 51868 <-> 187.35.107.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:00.501216 0.311358 udp 10.0.2.22 51868 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:01.503051 0.384114 udp 10.0.2.22 51868 <-> 118.168.126.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:02.494234 0.347168 udp 10.0.2.22 51868 <-> 223.16.38.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:03.495772 0.044105 udp 10.0.2.22 51868 <-> 109.199.236.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:04.497225 0.023822 udp 10.0.2.22 51868 <-> 88.132.62.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:05.498976 0.000000 udp 10.0.2.22 51868 -> 31.176.209.70 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:30:06.499971 0.059241 udp 10.0.2.22 51868 <-> 89.29.182.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:07.501872 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:30:08.502761 0.405293 udp 10.0.2.22 51868 <-> 175.214.45.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:09.343805 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:30:09.494040 0.154255 udp 10.0.2.22 51868 <-> 24.250.78.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:10.495880 0.042467 udp 10.0.2.22 51868 <-> 86.177.2.220 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:11.497343 0.160348 udp 10.0.2.22 51868 <-> 71.232.87.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:12.499015 0.309843 udp 10.0.2.22 51868 <-> 187.35.107.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:13.500330 0.060900 udp 10.0.2.22 51868 <-> 147.163.93.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:14.502001 0.051688 udp 10.0.2.22 51868 <-> 89.190.113.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:15.502991 4.133829 udp 10.0.2.22 51868 <-> 68.39.158.43 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:16.374320 0.000092 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:30:16.494327 2.002631 udp 10.0.2.22 51868 -> 91.120.99.47 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:30:17.497143 0.359648 udp 10.0.2.22 51868 <-> 1.160.137.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:20.500124 1.041805 udp 10.0.2.22 51868 <-> 27.106.27.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:21.501654 0.000000 udp 10.0.2.22 51868 -> 118.165.68.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:30:22.503039 0.000000 udp 10.0.2.22 51868 -> 91.120.99.47 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:30:23.494190 0.136392 udp 10.0.2.22 51868 <-> 68.39.158.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:24.495720 0.037433 udp 10.0.2.22 51868 <-> 188.127.27.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:25.497840 0.177653 udp 10.0.2.22 51868 <-> 184.49.10.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:26.498977 0.151899 udp 10.0.2.22 51868 <-> 69.124.115.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:27.500627 0.159038 udp 10.0.2.22 51868 <-> 71.61.103.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:28.501369 0.126253 udp 10.0.2.22 51868 <-> 217.66.215.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:29.503417 0.049893 udp 10.0.2.22 51868 <-> 95.180.246.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:30.494743 0.951933 udp 10.0.2.22 51868 <-> 86.56.0.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:31.495890 0.315070 udp 10.0.2.22 51868 <-> 59.20.210.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:32.497103 0.009347 udp 10.0.2.22 51868 <-> 89.176.244.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:33.498662 0.318299 udp 10.0.2.22 51868 <-> 184.156.20.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:34.500356 0.060619 udp 10.0.2.22 51868 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:35.502141 0.153118 udp 10.0.2.22 51868 <-> 184.162.123.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:36.502964 0.000000 udp 10.0.2.22 51868 -> 61.124.169.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:30:37.494808 1.519374 udp 10.0.2.22 51868 <-> 14.97.98.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:38.495937 3.063943 udp 10.0.2.22 51868 <-> 158.49.215.15 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:39.497524 0.198533 udp 10.0.2.22 51868 <-> 66.237.94.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:40.499147 0.000000 udp 10.0.2.22 51868 -> 5.15.146.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:30:41.350314 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:30:42.501967 0.000000 udp 10.0.2.22 51868 -> 88.203.26.156 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:30:43.372835 0.000109 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:30:43.493224 0.322675 udp 10.0.2.22 51868 <-> 175.202.80.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:44.494439 0.000000 udp 10.0.2.22 51868 -> 80.245.167.230 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:30:45.496137 0.194191 udp 10.0.2.22 51868 <-> 24.170.247.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:46.497796 0.059373 udp 10.0.2.22 51868 <-> 46.233.24.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:47.499060 0.361460 udp 10.0.2.22 51868 <-> 114.47.133.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:48.500786 0.050145 udp 10.0.2.22 51868 <-> 95.180.246.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:49.501559 0.272173 udp 10.0.2.22 51868 <-> 115.253.9.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:50.493256 0.165972 udp 10.0.2.22 51868 <-> 24.113.92.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:51.494589 0.450297 udp 10.0.2.22 51868 <-> 14.97.126.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:52.496055 0.863959 udp 10.0.2.22 51868 <-> 190.57.242.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:53.497297 0.044942 udp 10.0.2.22 51868 <-> 176.37.230.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:54.498858 0.147223 udp 10.0.2.22 51868 <-> 66.57.113.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:55.500782 1.529389 udp 10.0.2.22 51868 <-> 68.217.244.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:56.501842 0.187291 udp 10.0.2.22 51868 <-> 98.27.22.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:57.493649 0.000000 udp 10.0.2.22 51868 -> 49.249.197.31 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:30:58.495018 0.313027 udp 10.0.2.22 51868 <-> 219.110.97.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:30:59.496413 0.000000 udp 10.0.2.22 51868 -> 27.110.154.126 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:31:00.498084 0.289091 udp 10.0.2.22 51868 <-> 190.191.188.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:01.499104 0.145708 udp 10.0.2.22 51868 <-> 68.194.27.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:02.500546 0.024901 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:03.502066 0.141816 udp 10.0.2.22 51868 <-> 151.52.90.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:04.493532 0.083968 udp 10.0.2.22 51868 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:05.494746 0.266141 udp 10.0.2.22 51868 <-> 190.195.85.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:06.496691 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:31:07.497957 0.363241 udp 10.0.2.22 51868 <-> 61.223.208.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:08.499249 0.000000 udp 10.0.2.22 51868 -> 178.165.59.127 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:31:09.500463 0.117882 udp 10.0.2.22 51868 <-> 24.36.173.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:10.372079 0.000110 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:31:10.501928 0.304724 udp 10.0.2.22 51868 <-> 103.7.151.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:11.493442 0.159373 udp 10.0.2.22 51868 <-> 69.138.192.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:12.494860 0.014788 udp 10.0.2.22 51868 <-> 89.177.137.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:13.496157 0.135808 udp 10.0.2.22 51868 <-> 68.84.110.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:14.498082 0.355552 udp 10.0.2.22 51868 <-> 60.62.114.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:15.499226 0.000000 udp 10.0.2.22 51868 -> 89.25.112.106 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:31:16.501062 0.318201 udp 10.0.2.22 51868 <-> 1.34.204.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:17.503342 2.783373 udp 10.0.2.22 51868 <-> 14.98.242.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:18.493821 0.192296 udp 10.0.2.22 51868 <-> 123.238.137.224 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:19.495308 0.293478 udp 10.0.2.22 51868 <-> 211.124.168.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:20.496784 0.042786 udp 10.0.2.22 51868 <-> 84.196.43.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:21.498253 0.118164 udp 10.0.2.22 51868 <-> 70.160.122.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:22.499184 0.311154 udp 10.0.2.22 51868 <-> 190.208.103.70 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:23.500658 0.073976 udp 10.0.2.22 51868 <-> 91.105.64.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:24.501891 0.084521 udp 10.0.2.22 51868 <-> 90.132.212.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:25.493605 0.000000 udp 10.0.2.22 51868 -> 195.62.0.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:31:26.495332 0.000000 udp 10.0.2.22 51868 -> 183.82.196.140 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:31:27.496855 0.322172 udp 10.0.2.22 51868 <-> 121.136.43.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:28.498126 0.000000 udp 10.0.2.22 51868 -> 177.29.235.103 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:31:29.499289 0.055869 udp 10.0.2.22 51868 <-> 79.98.138.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:30.500843 0.144908 udp 10.0.2.22 51868 <-> 75.185.190.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:31.502072 0.000000 udp 10.0.2.22 51868 -> 93.180.162.84 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:31:32.493735 0.346126 udp 10.0.2.22 51868 <-> 101.63.83.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:33.495237 0.338948 udp 10.0.2.22 51868 <-> 111.242.143.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:34.496584 0.000000 udp 10.0.2.22 51868 -> 1.73.157.103 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:31:35.497722 0.150732 udp 10.0.2.22 51868 <-> 24.51.140.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:36.499418 0.179348 udp 10.0.2.22 51868 <-> 201.174.223.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:37.370910 0.000037 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:31:37.500825 0.156956 udp 10.0.2.22 51868 <-> 75.143.122.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:38.502840 0.490324 udp 10.0.2.22 51868 <-> 83.168.65.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:39.493456 0.148036 udp 10.0.2.22 51868 <-> 216.186.178.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:40.495022 1.145033 udp 10.0.2.22 51868 <-> 95.90.35.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:41.496537 0.000000 udp 10.0.2.22 51868 -> 178.42.18.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:31:42.498260 0.072624 udp 10.0.2.22 51868 <-> 84.120.186.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:43.499204 0.051256 udp 10.0.2.22 51868 <-> 46.253.3.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:44.500988 0.310208 udp 10.0.2.22 51868 <-> 187.10.248.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:45.502406 0.000000 udp 10.0.2.22 51868 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:31:46.493815 0.413599 udp 10.0.2.22 51868 <-> 183.104.37.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:47.495294 0.308034 udp 10.0.2.22 51868 <-> 79.19.53.203 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:48.497048 0.105716 udp 10.0.2.22 51868 <-> 62.18.19.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:49.498058 0.156871 udp 10.0.2.22 51868 <-> 67.198.91.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:50.499740 0.328804 udp 10.0.2.22 51868 <-> 36.231.93.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:51.501230 0.029825 udp 10.0.2.22 51868 <-> 95.154.49.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:52.502135 0.293653 udp 10.0.2.22 51868 <-> 121.80.163.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:53.493612 0.000000 udp 10.0.2.22 51868 -> 59.161.88.67 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:31:54.495130 0.047905 udp 10.0.2.22 51868 <-> 78.157.66.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:55.496602 0.144419 udp 10.0.2.22 51868 <-> 67.85.178.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:56.498243 0.256272 udp 10.0.2.22 51868 <-> 173.180.203.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:57.499476 0.250179 udp 10.0.2.22 51868 <-> 24.15.28.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:58.501257 0.205742 udp 10.0.2.22 51868 <-> 71.92.68.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:31:59.502344 0.000000 udp 10.0.2.22 51868 -> 75.64.127.51 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:00.493673 0.210908 udp 10.0.2.22 51868 <-> 64.234.32.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:32:01.495328 0.365660 udp 10.0.2.22 51868 <-> 118.232.181.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:32:02.497121 0.299265 udp 10.0.2.22 51868 <-> 61.46.123.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:32:03.498113 0.255681 udp 10.0.2.22 51868 <-> 190.206.89.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:32:04.369701 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:32:04.499525 0.342283 udp 10.0.2.22 51868 <-> 112.150.92.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:32:05.501588 0.603154 udp 10.0.2.22 51868 <-> 223.236.86.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:32:06.502541 0.000000 udp 10.0.2.22 51868 -> 36.237.40.219 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:07.494323 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:08.495346 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:09.496664 4.312303 udp 10.0.2.22 51868 <-> 173.34.197.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:32:10.498154 0.164961 udp 10.0.2.22 51868 <-> 217.203.156.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:32:11.500145 0.202289 udp 10.0.2.22 51868 <-> 178.122.72.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:32:12.501174 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:13.502330 0.207095 udp 10.0.2.22 51868 <-> 24.8.139.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:32:14.494463 0.307906 udp 10.0.2.22 51868 <-> 27.143.12.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:32:15.495302 0.445154 udp 10.0.2.22 51868 <-> 121.124.80.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:32:16.497172 0.056575 udp 10.0.2.22 51868 <-> 91.211.110.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:32:17.498464 0.233725 udp 10.0.2.22 51868 <-> 201.211.130.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:32:18.499707 0.080490 udp 10.0.2.22 51868 <-> 151.50.126.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:32:19.501193 0.051311 udp 10.0.2.22 51868 <-> 91.92.10.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:32:20.502664 0.350207 udp 10.0.2.22 51868 <-> 1.172.59.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:32:21.494199 0.051593 udp 10.0.2.22 51868 <-> 95.77.197.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:32:23.496863 0.000083 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:23.496946 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:32:24.498842 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:25.499572 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:26.501538 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:27.502822 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:28.494419 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:29.495683 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:30.497578 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:31.367996 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:32:31.498855 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:32.500328 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:33.501682 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:34.502846 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:35.494637 4.005281 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:36.495688 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:37.497141 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:38.498257 0.050699 udp 10.0.2.22 51868 <-> 81.16.172.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:32:40.501175 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:41.503254 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:42.494703 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:43.496113 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:44.497289 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:45.499181 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:46.500097 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:47.501564 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:48.503291 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:49.494748 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:50.495860 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:51.497214 0.000061 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:51.497275 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:32:53.499955 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:54.501752 0.116716 udp 10.0.2.22 51868 <-> 24.122.51.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:32:55.503237 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:56.494879 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:57.496329 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:58.376982 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:32:58.497613 0.000067 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:32:58.497680 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:32:59.499008 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:33:00.500454 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:33:01.501973 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:33:02.503029 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:33:03.494471 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:33:04.496365 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:33:05.497544 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:33:06.498684 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:33:07.500402 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:33:08.501648 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:33:09.503406 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:33:10.495094 0.050663 udp 10.0.2.22 51868 <-> 81.16.172.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:11.496096 0.058553 udp 10.0.2.22 51868 <-> 178.149.21.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:12.497261 0.324712 udp 10.0.2.22 51868 <-> 220.92.174.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:13.499217 0.000000 udp 10.0.2.22 51868 -> 178.79.32.44 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:33:14.500026 0.098502 udp 10.0.2.22 51868 <-> 178.122.31.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:15.501494 0.504535 udp 10.0.2.22 51868 <-> 190.195.52.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:16.493069 0.000000 udp 10.0.2.22 51868 -> 14.97.100.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:33:17.494698 0.287762 udp 10.0.2.22 51868 <-> 110.134.145.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:18.496158 0.134674 udp 10.0.2.22 51868 <-> 75.109.236.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:19.497317 0.226335 udp 10.0.2.22 51868 <-> 190.36.226.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:20.498864 0.118045 udp 10.0.2.22 51868 <-> 37.14.140.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:21.500666 0.055578 udp 10.0.2.22 51868 <-> 158.49.215.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:22.501999 0.141156 udp 10.0.2.22 51868 <-> 98.239.193.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:23.493410 0.000000 udp 10.0.2.22 51868 -> 190.16.162.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:33:24.494574 0.160671 udp 10.0.2.22 51868 <-> 12.205.55.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:25.376041 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:33:25.496019 0.047368 udp 10.0.2.22 51868 <-> 82.128.198.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:26.497731 0.287931 udp 10.0.2.22 51868 <-> 115.242.50.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:27.499321 0.348266 udp 10.0.2.22 51868 <-> 1.170.254.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:28.500722 0.434186 udp 10.0.2.22 51868 <-> 61.105.4.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:29.502055 0.145541 udp 10.0.2.22 51868 <-> 174.102.8.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:30.493256 0.126236 udp 10.0.2.22 51868 <-> 137.118.142.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:31.494690 0.532555 udp 10.0.2.22 51868 <-> 180.221.237.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:32.496089 0.000000 udp 10.0.2.22 51868 -> 189.121.186.200 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:33:33.497646 0.296331 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:34.498806 0.014956 udp 10.0.2.22 51868 <-> 161.53.118.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:35.500848 0.251633 udp 10.0.2.22 51868 <-> 188.53.70.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:36.501913 0.131815 udp 10.0.2.22 51868 <-> 158.46.108.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:37.493576 0.245227 udp 10.0.2.22 51868 <-> 49.205.136.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:38.494517 0.155963 udp 10.0.2.22 51868 <-> 76.113.150.12 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:39.496551 0.372189 udp 10.0.2.22 51868 <-> 181.167.238.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:40.497674 0.220125 udp 10.0.2.22 51868 <-> 74.243.166.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:41.498857 2.994407 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:33:42.500689 0.315782 udp 10.0.2.22 51868 <-> 119.194.129.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:43.501738 0.305589 udp 10.0.2.22 51868 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:45.494885 0.340178 udp 10.0.2.22 51868 <-> 111.250.51.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:46.496656 0.030555 udp 10.0.2.22 51868 <-> 130.204.99.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:47.497619 0.056809 udp 10.0.2.22 51868 <-> 79.132.163.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:48.499398 0.316011 udp 10.0.2.22 51868 <-> 218.152.217.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:49.500823 2.155398 udp 10.0.2.22 51868 <-> 115.241.24.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:50.502476 0.180810 udp 10.0.2.22 51868 <-> 184.59.192.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:51.493392 0.000000 udp 10.0.2.22 51868 -> 89.33.186.176 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:33:52.374720 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:33:52.495202 0.026703 udp 10.0.2.22 51868 <-> 46.5.250.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:53.496622 0.054559 udp 10.0.2.22 51868 <-> 85.66.42.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:54.497932 0.181016 udp 10.0.2.22 51868 <-> 68.35.232.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:55.499670 0.058294 udp 10.0.2.22 51868 <-> 78.251.241.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:56.500694 0.154075 udp 10.0.2.22 51868 <-> 24.98.204.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:57.502094 0.077347 udp 10.0.2.22 51868 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:58.493562 0.325639 udp 10.0.2.22 51868 <-> 59.94.208.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:33:59.494878 0.087901 udp 10.0.2.22 51868 <-> 95.82.203.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:00.496160 0.170321 udp 10.0.2.22 51868 <-> 68.207.184.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:01.497900 0.165164 udp 10.0.2.22 51868 <-> 123.201.168.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:02.499119 0.491555 udp 10.0.2.22 51868 <-> 177.149.35.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:03.500650 0.000000 udp 10.0.2.22 51868 -> 106.218.0.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:34:04.502283 0.148851 udp 10.0.2.22 51868 <-> 41.33.182.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:05.493388 0.354036 udp 10.0.2.22 51868 <-> 190.193.54.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:06.494772 0.052775 udp 10.0.2.22 51868 <-> 78.60.103.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:07.496624 0.171257 udp 10.0.2.22 51868 <-> 24.55.45.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:08.498023 3.163201 udp 10.0.2.22 51868 <-> 75.86.159.42 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:09.499805 0.000000 udp 10.0.2.22 51868 -> 106.218.0.76 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:34:10.500714 3.670539 udp 10.0.2.22 51868 <-> 119.63.168.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:12.494032 0.456327 udp 10.0.2.22 51868 <-> 177.149.35.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:13.495723 0.139826 udp 10.0.2.22 51868 <-> 66.57.113.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:14.496687 0.307739 udp 10.0.2.22 51868 <-> 27.143.46.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:15.498497 0.298033 udp 10.0.2.22 51868 <-> 200.171.250.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:16.499165 0.161286 udp 10.0.2.22 51868 <-> 123.201.168.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:17.501490 0.146934 udp 10.0.2.22 51868 <-> 50.73.70.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:18.502573 0.305975 udp 10.0.2.22 51868 <-> 178.25.74.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:19.373960 0.000113 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:34:19.494029 0.000000 udp 10.0.2.22 51868 -> 90.63.7.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:34:20.495080 0.136649 udp 10.0.2.22 51868 <-> 79.25.244.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:21.496545 0.171939 udp 10.0.2.22 51868 <-> 123.238.129.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:22.498181 0.210559 udp 10.0.2.22 51868 <-> 98.234.66.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:23.499252 0.000000 udp 10.0.2.22 51868 -> 78.8.77.196 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:34:24.500805 0.062626 udp 10.0.2.22 51868 <-> 78.246.60.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:25.502860 0.043391 udp 10.0.2.22 51868 <-> 89.253.191.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:26.493912 0.349509 udp 10.0.2.22 51868 <-> 114.27.114.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:27.495219 0.185770 udp 10.0.2.22 51868 <-> 68.6.65.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:28.497277 0.275707 udp 10.0.2.22 51868 <-> 177.143.165.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:29.498241 0.200705 udp 10.0.2.22 51868 <-> 173.196.58.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:30.499831 0.034660 udp 10.0.2.22 51868 <-> 78.137.60.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:31.501258 0.000000 udp 10.0.2.22 51868 -> 89.230.111.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:34:32.502499 0.018913 udp 10.0.2.22 51868 <-> 109.192.70.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:33.493627 0.157606 udp 10.0.2.22 51868 <-> 173.30.6.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:34.495212 0.202921 udp 10.0.2.22 51868 <-> 212.251.106.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:35.497081 0.334353 udp 10.0.2.22 51868 <-> 177.107.236.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:36.498350 0.000000 udp 10.0.2.22 51868 -> 115.240.93.116 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:34:37.499910 0.000000 udp 10.0.2.22 51868 -> 71.45.42.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:34:38.501096 0.084359 udp 10.0.2.22 51868 <-> 188.29.123.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:39.502611 1.157899 udp 10.0.2.22 51868 <-> 122.107.150.0 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:40.493684 0.290438 udp 10.0.2.22 51868 <-> 14.97.60.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:41.495351 0.209128 udp 10.0.2.22 51868 <-> 75.84.105.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:42.496561 0.159543 udp 10.0.2.22 51868 <-> 70.185.202.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:43.498515 0.259329 udp 10.0.2.22 51868 <-> 173.180.203.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:44.499752 0.148131 udp 10.0.2.22 51868 <-> 217.200.133.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:45.501514 0.294062 udp 10.0.2.22 51868 <-> 124.47.100.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:46.372089 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:34:46.502822 0.381930 udp 10.0.2.22 51868 <-> 114.40.25.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:47.494285 0.000000 udp 10.0.2.22 51868 -> 99.245.223.88 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:34:48.495722 0.159487 udp 10.0.2.22 51868 <-> 75.132.170.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:49.497219 0.000000 udp 10.0.2.22 51868 -> 24.233.63.115 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:34:50.498232 0.365379 udp 10.0.2.22 51868 <-> 122.118.144.231 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:51.499677 0.787866 udp 10.0.2.22 51868 <-> 198.45.191.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:52.500945 0.145116 udp 10.0.2.22 51868 <-> 97.69.223.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:53.503254 0.325206 udp 10.0.2.22 51868 <-> 186.226.231.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:54.493792 0.700698 udp 10.0.2.22 51868 <-> 89.229.164.171 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:55.495342 0.145896 udp 10.0.2.22 51868 <-> 96.20.190.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:56.496688 0.000000 udp 10.0.2.22 51868 -> 71.197.28.72 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:34:57.498829 0.337800 udp 10.0.2.22 51868 <-> 123.241.89.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:58.499630 0.659888 udp 10.0.2.22 51868 <-> 219.77.148.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:34:59.501723 0.049808 udp 10.0.2.22 51868 <-> 81.225.87.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:00.503121 0.373858 udp 10.0.2.22 51868 <-> 114.40.25.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:01.494619 0.175109 udp 10.0.2.22 51868 <-> 95.250.98.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:02.495341 0.134738 udp 10.0.2.22 51868 <-> 69.125.238.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:03.497077 0.136867 udp 10.0.2.22 51868 <-> 68.84.110.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:04.498242 0.053427 udp 10.0.2.22 51868 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:05.499951 0.360690 udp 10.0.2.22 51868 <-> 112.118.56.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:06.501742 0.000000 udp 10.0.2.22 51868 -> 76.115.145.87 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:35:07.503094 0.107840 udp 10.0.2.22 51868 <-> 178.122.146.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:08.494584 0.156650 udp 10.0.2.22 51868 <-> 69.141.89.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:09.495659 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:35:10.496895 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:35:11.498379 0.054402 udp 10.0.2.22 51868 <-> 89.46.182.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:12.500322 0.178944 udp 10.0.2.22 51868 <-> 50.165.123.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:13.370907 0.007060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:35:13.501543 0.000000 udp 10.0.2.22 51868 -> 201.93.194.74 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:35:14.503040 0.176136 udp 10.0.2.22 51868 <-> 183.87.170.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:15.494304 1.214905 udp 10.0.2.22 51868 <-> 79.40.117.56 16464 CON 0 0 7 4566 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:17.497443 0.172609 udp 10.0.2.22 51868 <-> 184.48.243.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:18.498655 0.175723 udp 10.0.2.22 51868 <-> 74.197.79.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:19.499784 0.047562 udp 10.0.2.22 51868 <-> 193.146.36.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:20.502054 1.295936 udp 10.0.2.22 51868 <-> 210.1.178.217 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:22.494366 0.090373 udp 10.0.2.22 51868 <-> 79.25.244.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:23.495862 0.334824 udp 10.0.2.22 51868 <-> 153.167.182.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:24.497602 0.172547 udp 10.0.2.22 51868 <-> 103.250.151.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:25.498738 0.133605 udp 10.0.2.22 51868 <-> 68.84.110.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:26.500084 0.159161 udp 10.0.2.22 51868 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:27.501292 0.061597 udp 10.0.2.22 51868 <-> 93.72.126.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:28.503121 0.000000 udp 10.0.2.22 51868 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:35:29.494123 0.000000 udp 10.0.2.22 51868 -> 92.229.124.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:35:30.496109 3.003765 udp 10.0.2.22 51868 -> 89.142.152.236 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:35:31.497209 0.103207 udp 10.0.2.22 51868 <-> 88.165.10.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:32.498919 0.164393 udp 10.0.2.22 51868 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:34.501336 0.156769 udp 10.0.2.22 51868 <-> 67.184.116.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:35.503414 0.000000 udp 10.0.2.22 51868 -> 89.132.33.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:35:36.494834 0.052670 udp 10.0.2.22 51868 <-> 46.214.189.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:37.495861 0.152625 udp 10.0.2.22 51868 <-> 24.214.119.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:38.497137 0.296317 udp 10.0.2.22 51868 <-> 81.226.243.247 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:39.499305 2.364951 udp 10.0.2.22 51868 <-> 111.240.40.248 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:40.370092 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:35:40.500593 0.186333 udp 10.0.2.22 51868 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:42.502981 0.348089 udp 10.0.2.22 51868 <-> 123.195.215.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:43.494504 0.311257 udp 10.0.2.22 51868 <-> 74.199.89.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:44.555774 0.343201 udp 10.0.2.22 51868 <-> 61.124.224.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:45.557991 0.080925 udp 10.0.2.22 51868 <-> 213.66.160.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:46.559350 0.000000 udp 10.0.2.22 51868 -> 85.176.34.25 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:35:47.560475 0.065112 udp 10.0.2.22 51868 <-> 94.190.190.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:48.561824 0.108712 udp 10.0.2.22 51868 <-> 2.69.140.209 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:49.553497 0.145186 udp 10.0.2.22 51868 <-> 67.191.228.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:50.554912 0.182948 udp 10.0.2.22 51868 <-> 24.113.136.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:51.556439 0.160507 udp 10.0.2.22 51868 <-> 114.79.179.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:52.559722 0.000000 udp 10.0.2.22 51868 -> 108.183.176.48 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:35:53.558794 0.000000 udp 10.0.2.22 51868 -> 67.197.35.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:35:54.560908 1.992181 udp 10.0.2.22 51868 <-> 71.197.74.70 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:55.561973 0.337243 udp 10.0.2.22 51868 <-> 115.240.75.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:57.554571 0.044803 udp 10.0.2.22 51868 <-> 37.130.219.6 16464 CON 0 0 2 116 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:58.555962 0.173817 udp 10.0.2.22 51868 <-> 173.23.12.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:35:59.557979 0.000000 udp 10.0.2.22 51868 -> 108.183.176.48 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:36:00.559497 0.074653 udp 10.0.2.22 51868 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:01.560242 0.158277 udp 10.0.2.22 51868 <-> 75.139.7.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:02.562414 0.000000 udp 10.0.2.22 51868 -> 87.19.151.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:36:03.553699 0.144925 udp 10.0.2.22 51868 <-> 202.179.89.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:04.555141 0.031912 udp 10.0.2.22 51868 <-> 87.97.204.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:05.556001 0.145904 udp 10.0.2.22 51868 <-> 24.176.157.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:06.557803 0.028658 udp 10.0.2.22 51868 <-> 94.155.231.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:07.428827 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:36:07.559413 0.294243 udp 10.0.2.22 51868 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:08.560686 0.378276 udp 10.0.2.22 51868 <-> 201.71.53.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:09.561807 0.158283 udp 10.0.2.22 51868 <-> 174.64.185.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:10.553709 0.000000 udp 10.0.2.22 51868 -> 62.113.14.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:36:11.554894 0.000000 udp 10.0.2.22 51868 -> 190.139.224.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:36:12.556798 0.139574 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:13.557981 0.405233 udp 10.0.2.22 51868 <-> 190.201.123.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:14.559521 0.222115 udp 10.0.2.22 51868 <-> 115.247.117.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:15.560650 0.562190 udp 10.0.2.22 51868 <-> 92.229.124.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:16.562287 0.053826 udp 10.0.2.22 51868 <-> 178.210.193.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:17.553684 0.000000 udp 10.0.2.22 51868 -> 151.64.199.29 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:36:18.555190 0.041925 udp 10.0.2.22 51868 <-> 83.166.27.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:19.556421 0.227687 udp 10.0.2.22 51868 <-> 74.62.164.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:20.557769 0.277562 udp 10.0.2.22 51868 <-> 24.214.174.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:21.559829 4.760758 udp 10.0.2.22 51868 <-> 116.75.23.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:22.560656 0.143664 udp 10.0.2.22 51868 <-> 107.16.6.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:23.562283 0.350589 udp 10.0.2.22 51868 <-> 83.168.65.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:24.553567 0.361511 udp 10.0.2.22 51868 <-> 42.98.79.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:25.555151 0.180687 udp 10.0.2.22 51868 <-> 68.6.74.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:26.556399 0.293956 udp 10.0.2.22 51868 <-> 115.162.37.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:27.557976 0.171398 udp 10.0.2.22 51868 <-> 70.178.163.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:28.559279 0.000000 udp 10.0.2.22 51868 -> 202.63.117.221 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:36:29.560864 0.918406 udp 10.0.2.22 51868 <-> 84.240.210.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:30.562256 0.073842 udp 10.0.2.22 51868 <-> 82.254.207.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:31.554218 1.288901 udp 10.0.2.22 51868 <-> 181.166.124.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:32.555444 0.039202 udp 10.0.2.22 51868 <-> 212.50.72.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:33.556746 0.064254 udp 10.0.2.22 51868 <-> 89.212.98.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:34.427657 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:36:34.558281 0.000000 udp 10.0.2.22 51868 -> 192.168.15.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:36:35.559360 0.064941 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:36.561238 1.569334 udp 10.0.2.22 51868 <-> 14.96.39.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:37.562615 0.169939 udp 10.0.2.22 51868 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:39.555078 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:36:40.556566 0.000095 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:36:40.556661 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:36:41.558297 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:36:42.559478 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:36:43.560856 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:36:44.562770 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:36:45.416824 3.000986 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 03:36:45.553478 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:36:46.555287 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:36:47.556934 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:36:48.558600 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:36:49.559964 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:36:50.560927 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:36:51.562492 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:36:52.423355 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:36:52.553857 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:36:53.555160 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:36:54.557182 0.160153 udp 10.0.2.22 51868 <-> 24.201.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:36:55.558327 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:36:56.559309 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:36:57.560906 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:36:58.562733 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:36:59.553682 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:37:00.425425 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:37:00.555259 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:37:01.436745 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:37:01.557166 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:37:03.559775 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:37:04.560795 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:37:05.562456 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:37:06.554181 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:37:07.555232 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:37:08.556847 3.004273 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:37:08.557029 3.004091 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 2 172 flow=Background 1970/01/01 03:37:09.558349 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:37:10.560014 0.217378 udp 10.0.2.22 51868 <-> 62.57.140.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:12.562777 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:37:14.555199 0.065075 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:15.556742 0.163775 udp 10.0.2.22 51868 <-> 24.201.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:16.428382 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:37:16.558331 0.050381 udp 10.0.2.22 51868 <-> 82.233.157.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:17.559974 0.103887 udp 10.0.2.22 51868 <-> 93.144.183.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:18.560962 0.641244 udp 10.0.2.22 51868 <-> 117.214.221.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:19.562794 0.087577 udp 10.0.2.22 51868 <-> 79.11.156.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:20.553822 0.262431 udp 10.0.2.22 51868 <-> 189.25.78.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:21.555759 1.076822 udp 10.0.2.22 51868 <-> 151.45.195.135 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:23.558590 0.050841 udp 10.0.2.22 51868 <-> 46.102.30.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:24.560224 0.293840 udp 10.0.2.22 51868 <-> 203.165.99.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:25.561664 0.332151 udp 10.0.2.22 51868 <-> 59.9.44.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:26.562468 0.082783 udp 10.0.2.22 51868 <-> 151.15.58.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:27.554027 0.087126 udp 10.0.2.22 51868 <-> 151.45.195.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:28.435227 0.000129 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:37:28.555852 0.000000 udp 10.0.2.22 51868 -> 5.38.150.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:37:29.556914 0.442109 udp 10.0.2.22 51868 <-> 69.151.57.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:30.558582 0.028587 udp 10.0.2.22 51868 <-> 77.70.5.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:31.559956 0.253971 udp 10.0.2.22 51868 <-> 201.17.131.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:32.561422 3.995388 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:37:33.562786 4.997180 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:37:34.554201 0.182941 udp 10.0.2.22 51868 <-> 94.205.117.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:34.885006 0.011497 udp 10.0.2.22 60012 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 03:37:34.896756 0.000000 udp 10.0.2.22 60013 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:37:35.555772 0.334910 udp 10.0.2.22 51868 <-> 111.252.97.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:37.558775 0.000000 udp 10.0.2.22 51868 -> 79.117.102.135 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:37:39.561152 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:37:40.562785 0.435462 udp 10.0.2.22 51868 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:41.554121 0.177959 udp 10.0.2.22 51868 <-> 95.81.41.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:42.555675 1.171128 udp 10.0.2.22 51868 <-> 76.109.136.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:44.558994 0.397192 udp 10.0.2.22 51868 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:45.560263 0.069746 udp 10.0.2.22 51868 <-> 213.65.135.112 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:46.561342 0.000000 udp 10.0.2.22 51868 -> 151.241.2.99 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:37:47.563280 0.000000 udp 10.0.2.22 51868 -> 49.205.136.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:37:48.434229 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:37:48.554326 1.435805 udp 10.0.2.22 51868 <-> 87.3.116.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:49.555891 0.043919 udp 10.0.2.22 51868 <-> 86.121.142.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:50.557198 1.051685 udp 10.0.2.22 51868 <-> 217.77.28.90 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:52.559832 0.000000 udp 10.0.2.22 51868 -> 157.14.178.157 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:37:53.561613 0.184052 udp 10.0.2.22 51868 <-> 124.125.22.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:54.563096 0.000000 udp 10.0.2.22 51868 -> 158.181.242.169 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:37:55.434253 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:37:55.554557 0.046499 udp 10.0.2.22 51868 <-> 95.87.207.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:56.555588 0.000000 udp 10.0.2.22 51868 -> 80.4.12.60 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:37:57.557210 0.050944 udp 10.0.2.22 51868 <-> 37.77.155.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:58.559075 0.482546 udp 10.0.2.22 51868 <-> 36.235.110.170 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:37:59.560207 0.101140 udp 10.0.2.22 51868 <-> 77.21.184.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:00.561588 0.367212 udp 10.0.2.22 51868 <-> 177.44.3.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:01.563288 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:02.554192 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:03.556020 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:04.557149 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:05.559189 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:06.560682 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:07.561796 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:08.563132 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:09.554451 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:10.555903 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:11.557530 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:12.559045 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:13.560263 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:14.562177 0.000000 udp 10.0.2.22 51868 -> 183.83.152.189 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:15.562986 0.057135 udp 10.0.2.22 51868 <-> 92.231.178.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:16.554588 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:17.556206 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:18.557602 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:19.558777 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:20.560564 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:21.561950 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:22.433569 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:38:22.553073 0.067245 udp 10.0.2.22 51868 <-> 92.231.178.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:23.554800 0.206681 udp 10.0.2.22 51868 <-> 68.35.78.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:24.556054 0.336161 udp 10.0.2.22 51868 <-> 36.236.170.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:25.557524 0.065500 udp 10.0.2.22 51868 <-> 188.241.23.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:26.559375 0.000000 udp 10.0.2.22 51868 -> 106.196.133.116 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:27.560971 0.000000 udp 10.0.2.22 51868 -> 98.247.242.179 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:28.561850 0.000000 udp 10.0.2.22 51868 -> 83.50.27.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:29.553141 0.051179 udp 10.0.2.22 51868 <-> 93.79.173.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:30.554631 0.365446 udp 10.0.2.22 51868 <-> 114.27.249.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:31.556018 0.260870 udp 10.0.2.22 51868 <-> 65.185.171.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:32.557633 0.000000 udp 10.0.2.22 51868 -> 219.54.8.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:33.559023 0.062369 udp 10.0.2.22 51868 <-> 94.155.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:34.560672 0.127893 udp 10.0.2.22 51868 <-> 5.34.126.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:35.561928 0.035629 udp 10.0.2.22 51868 <-> 87.254.183.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:36.553080 0.334201 udp 10.0.2.22 51868 <-> 114.24.114.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:37.555087 0.436325 udp 10.0.2.22 51868 <-> 88.177.203.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:38.556480 3.310915 udp 10.0.2.22 51868 <-> 110.134.250.56 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:39.557665 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:40.559286 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:42.562222 0.000000 udp 10.0.2.22 51868 -> 79.176.13.149 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:43.553777 0.274908 udp 10.0.2.22 51868 <-> 181.28.105.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:44.555241 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:45.556471 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:46.558058 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:47.559225 0.140316 udp 10.0.2.22 51868 <-> 111.91.84.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:48.561014 0.370189 udp 10.0.2.22 51868 <-> 1.168.39.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:49.431700 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:38:49.561769 0.378021 udp 10.0.2.22 51868 <-> 111.188.22.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:50.553286 0.161056 udp 10.0.2.22 51868 <-> 50.129.144.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:51.555100 0.000000 udp 10.0.2.22 51868 -> 14.99.164.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:38:52.556243 0.315725 udp 10.0.2.22 51868 <-> 201.186.166.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:53.557980 0.150452 udp 10.0.2.22 51868 <-> 120.88.35.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:54.558968 0.243577 udp 10.0.2.22 51868 <-> 49.249.55.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:55.560898 0.343190 udp 10.0.2.22 51868 <-> 114.24.114.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:56.562473 0.156676 udp 10.0.2.22 51868 <-> 84.240.238.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:57.553766 0.026238 udp 10.0.2.22 51868 <-> 83.166.192.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:58.554758 3.595137 udp 10.0.2.22 51868 <-> 190.228.99.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:38:59.556713 0.334028 udp 10.0.2.22 51868 <-> 36.235.110.170 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:00.558390 0.000000 udp 10.0.2.22 51868 -> 115.240.63.115 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:39:01.559125 0.040770 udp 10.0.2.22 51868 <-> 85.231.171.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:02.560474 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:39:03.562170 1.811895 udp 10.0.2.22 51868 <-> 183.73.33.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:04.553522 0.373424 udp 10.0.2.22 51868 <-> 124.12.32.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:05.555436 0.208658 udp 10.0.2.22 51868 <-> 24.119.59.82 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:06.556703 0.184576 udp 10.0.2.22 51868 <-> 24.113.7.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:07.557662 0.218481 udp 10.0.2.22 51868 <-> 125.62.101.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:08.559165 0.250193 udp 10.0.2.22 51868 <-> 183.82.164.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:09.560913 0.181807 udp 10.0.2.22 51868 <-> 68.6.74.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:10.562562 0.198286 udp 10.0.2.22 51868 <-> 76.172.91.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:11.553906 0.173665 udp 10.0.2.22 51868 <-> 68.207.184.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:12.555331 0.171630 udp 10.0.2.22 51868 <-> 173.198.147.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:13.556871 0.000000 udp 10.0.2.22 51868 -> 174.97.45.201 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:39:14.558144 0.615488 udp 10.0.2.22 51868 <-> 190.94.233.98 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:15.559735 0.303195 udp 10.0.2.22 51868 <-> 218.155.221.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:16.431050 0.000085 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:39:16.560781 0.000000 udp 10.0.2.22 51868 -> 117.200.137.215 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:39:17.562613 0.377191 udp 10.0.2.22 51868 <-> 116.49.205.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:18.553947 0.988093 udp 10.0.2.22 51868 <-> 68.207.92.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:19.555104 0.102500 udp 10.0.2.22 51868 <-> 85.65.239.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:20.556905 0.058171 udp 10.0.2.22 51868 <-> 79.118.213.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:21.557923 0.370060 udp 10.0.2.22 51868 <-> 186.89.101.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:22.559221 0.345523 udp 10.0.2.22 51868 <-> 111.253.66.42 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:23.560995 0.135623 udp 10.0.2.22 51868 <-> 46.241.166.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:24.562358 0.182170 udp 10.0.2.22 51868 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:25.554051 0.151435 udp 10.0.2.22 51868 <-> 173.197.148.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:26.555689 0.290264 udp 10.0.2.22 51868 <-> 14.97.26.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:27.556909 0.344507 udp 10.0.2.22 51868 <-> 112.119.100.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:28.558197 0.198480 udp 10.0.2.22 51868 <-> 186.81.212.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:29.559688 0.000000 udp 10.0.2.22 51868 -> 115.184.178.209 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:39:30.561222 3.529774 udp 10.0.2.22 51868 <-> 186.94.17.11 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:31.562229 0.000000 udp 10.0.2.22 51868 -> 151.246.103.116 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:39:32.553879 0.741199 udp 10.0.2.22 51868 <-> 179.235.6.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:34.556894 0.022651 udp 10.0.2.22 51868 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:35.558547 0.020014 udp 10.0.2.22 51868 <-> 95.222.234.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:36.559528 0.331929 udp 10.0.2.22 51868 <-> 14.99.18.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:37.561311 0.134230 udp 10.0.2.22 51868 <-> 31.204.5.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:38.562555 0.069841 udp 10.0.2.22 51868 <-> 178.79.51.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:39.553926 0.356577 udp 10.0.2.22 51868 <-> 201.250.99.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:40.555441 0.230603 udp 10.0.2.22 51868 <-> 70.132.115.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:41.557162 0.388299 udp 10.0.2.22 51868 <-> 114.45.53.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:42.558650 0.000000 udp 10.0.2.22 51868 -> 24.164.171.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:39:43.429209 0.000107 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:39:43.559746 1.192688 udp 10.0.2.22 51868 <-> 24.231.62.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:44.561269 0.014739 udp 10.0.2.22 51868 <-> 188.230.145.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:45.562550 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:39:46.554360 0.316962 udp 10.0.2.22 51868 <-> 211.124.168.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:39:47.555152 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:39:48.557072 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:39:49.558247 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:39:50.560063 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:39:51.561514 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:39:52.563006 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:39:53.554009 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:39:54.555572 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:39:55.557402 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:39:57.560068 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:39:58.561405 0.000083 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:39:58.561488 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:39:59.562847 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:40:00.553999 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:40:01.555313 2.435643 udp 10.0.2.22 51868 <-> 50.27.216.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:02.556874 0.042446 udp 10.0.2.22 51868 <-> 147.156.170.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:03.558990 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:40:04.560033 0.045150 udp 10.0.2.22 51868 <-> 178.150.200.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:05.561416 0.248477 udp 10.0.2.22 51868 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:06.562894 0.348631 udp 10.0.2.22 51868 <-> 49.158.158.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:07.554300 0.140768 udp 10.0.2.22 51868 <-> 75.178.77.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:08.555484 0.000000 udp 10.0.2.22 51868 -> 82.56.43.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:40:09.556952 0.047611 udp 10.0.2.22 51868 <-> 178.79.51.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:10.428527 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:40:10.558286 0.044459 udp 10.0.2.22 51868 <-> 176.37.230.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:11.560223 0.313807 udp 10.0.2.22 51868 <-> 14.36.40.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:12.561266 0.441340 udp 10.0.2.22 51868 <-> 95.85.162.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:13.562559 0.045136 udp 10.0.2.22 51868 <-> 109.199.236.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:14.554103 0.181755 udp 10.0.2.22 51868 <-> 108.242.151.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:15.555418 0.094455 udp 10.0.2.22 51868 <-> 2.244.249.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:16.557131 0.137659 udp 10.0.2.22 51868 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:17.558483 0.157372 udp 10.0.2.22 51868 <-> 216.186.239.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:18.559975 0.056979 udp 10.0.2.22 51868 <-> 88.186.212.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:19.561171 0.342209 udp 10.0.2.22 51868 <-> 200.175.212.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:20.562881 0.000000 udp 10.0.2.22 51868 -> 74.127.161.157 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:40:21.554557 0.042517 udp 10.0.2.22 51868 <-> 147.156.170.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:22.555670 0.154408 udp 10.0.2.22 51868 <-> 24.158.210.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:23.557602 0.049069 udp 10.0.2.22 51868 <-> 89.99.62.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:24.558903 0.000000 udp 10.0.2.22 51868 -> 72.141.22.175 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:40:25.560154 0.290615 udp 10.0.2.22 51868 <-> 201.231.44.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:26.561606 0.000000 udp 10.0.2.22 51868 -> 88.177.203.97 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:40:27.563407 0.186899 udp 10.0.2.22 51868 <-> 209.42.67.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:28.554356 2.316125 udp 10.0.2.22 51868 <-> 190.79.104.28 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:29.555843 0.158077 udp 10.0.2.22 51868 <-> 68.11.235.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:31.558466 0.340480 udp 10.0.2.22 51868 <-> 220.41.136.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:32.560591 0.160298 udp 10.0.2.22 51868 <-> 50.165.123.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:33.561826 0.331214 udp 10.0.2.22 51868 <-> 1.163.90.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:34.562922 0.147468 udp 10.0.2.22 51868 <-> 65.189.203.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:35.554179 0.443724 udp 10.0.2.22 51868 <-> 14.97.9.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:36.556022 0.150140 udp 10.0.2.22 51868 <-> 173.86.134.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:37.437013 0.000092 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:40:37.557564 0.000000 udp 10.0.2.22 51868 -> 83.16.175.66 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:40:38.558958 0.568810 udp 10.0.2.22 51868 <-> 5.22.91.0 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:39.560425 0.105798 udp 10.0.2.22 51868 <-> 176.200.165.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:40.562038 0.164212 udp 10.0.2.22 51868 <-> 68.185.195.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:41.563244 0.404706 udp 10.0.2.22 51868 <-> 1.226.113.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:42.554519 0.421320 udp 10.0.2.22 51868 <-> 118.44.234.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:43.555698 0.165007 udp 10.0.2.22 51868 <-> 178.233.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:44.557358 0.065460 udp 10.0.2.22 51868 <-> 78.239.110.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:45.558770 0.000000 udp 10.0.2.22 51868 -> 111.91.41.218 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:40:46.560607 0.150402 udp 10.0.2.22 51868 <-> 203.194.104.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:47.562242 0.330326 udp 10.0.2.22 51868 <-> 151.233.128.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:48.552904 0.335820 udp 10.0.2.22 51868 <-> 219.210.12.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:49.555069 0.068211 udp 10.0.2.22 51868 <-> 85.87.224.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:50.556341 0.407545 udp 10.0.2.22 51868 <-> 121.167.236.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:51.557544 0.361289 udp 10.0.2.22 51868 <-> 42.98.79.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:52.559135 0.149495 udp 10.0.2.22 51868 <-> 68.12.180.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:40:53.560451 0.000000 udp 10.0.2.22 51868 -> 84.50.131.115 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:40:55.553671 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:40:56.554884 0.000059 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:40:56.554943 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:40:57.556283 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:40:58.557242 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:40:59.559074 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:00.560571 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:01.561696 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:02.553015 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:03.554802 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:04.435901 0.000129 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:41:04.555872 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:05.557304 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:06.559266 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:07.560475 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:08.562369 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:09.553737 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:10.555073 0.163341 udp 10.0.2.22 51868 <-> 174.102.151.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:41:11.556620 0.297706 udp 10.0.2.22 51868 <-> 180.199.144.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:41:12.557519 0.075998 udp 10.0.2.22 51868 <-> 151.65.231.43 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:41:13.559163 3.995494 udp 10.0.2.22 51868 -> 203.67.210.147 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:14.560257 0.043476 udp 10.0.2.22 51868 <-> 213.100.250.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:41:15.562047 0.050552 udp 10.0.2.22 51868 <-> 95.180.246.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:41:16.553425 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:18.556597 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:19.557830 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:20.559261 0.062470 udp 10.0.2.22 51868 <-> 151.65.231.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:41:21.560758 0.147256 udp 10.0.2.22 51868 <-> 98.30.47.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:41:22.562127 0.000000 udp 10.0.2.22 51868 -> 203.51.106.170 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:23.553562 0.110061 udp 10.0.2.22 51868 <-> 176.201.224.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:41:24.555068 0.000000 udp 10.0.2.22 51868 -> 98.250.16.167 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:25.556357 4.997185 udp 10.0.2.22 51868 <-> 190.37.211.72 16464 CON 0 0 5 1954 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:41:26.558057 0.267416 udp 10.0.2.22 51868 <-> 50.11.204.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:41:27.559056 0.000000 udp 10.0.2.22 51868 -> 117.245.35.83 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:29.562057 0.229724 udp 10.0.2.22 51868 <-> 124.123.108.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:41:30.795530 0.000000 udp 10.0.2.22 51868 <- 190.37.211.72 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:31.435180 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:41:32.556311 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:33.558124 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:34.559675 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:35.561014 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:36.562169 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:37.553745 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:38.555010 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:39.556626 0.137756 udp 10.0.2.22 51868 <-> 74.88.126.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:41:40.557646 0.214394 udp 10.0.2.22 51868 <-> 31.147.62.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:41:41.559071 0.226384 udp 10.0.2.22 51868 <-> 79.0.211.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:41:42.561190 0.000000 udp 10.0.2.22 51868 -> 24.102.154.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:43.562507 0.368459 udp 10.0.2.22 51868 <-> 118.171.193.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:41:44.553700 0.328145 udp 10.0.2.22 51868 <-> 103.6.184.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:41:45.555356 0.000000 udp 10.0.2.22 51868 -> 49.249.197.31 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:46.556267 0.207436 udp 10.0.2.22 51868 <-> 84.240.226.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:41:47.557748 0.119141 udp 10.0.2.22 51868 <-> 24.54.59.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:41:48.559483 0.170324 udp 10.0.2.22 51868 <-> 27.106.32.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:41:49.560625 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:50.562606 0.411720 udp 10.0.2.22 51868 <-> 119.24.148.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:41:51.554000 0.295528 udp 10.0.2.22 51868 <-> 186.11.18.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:41:52.555198 0.371284 udp 10.0.2.22 51868 <-> 36.224.2.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:41:53.556908 0.155561 udp 10.0.2.22 51868 <-> 184.91.50.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:41:54.558498 0.351379 udp 10.0.2.22 51868 <-> 58.172.44.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:41:55.559286 0.146156 udp 10.0.2.22 51868 <-> 68.193.113.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:41:56.560865 0.784771 udp 10.0.2.22 51868 <-> 112.197.242.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:41:57.562481 0.039846 udp 10.0.2.22 51868 <-> 95.76.73.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:41:58.433842 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:41:58.553810 0.000000 udp 10.0.2.22 51868 -> 85.187.232.164 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:41:59.555393 0.168070 udp 10.0.2.22 51868 <-> 69.245.165.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:00.556766 0.000000 udp 10.0.2.22 51868 -> 216.118.142.180 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:42:01.558147 0.000000 udp 10.0.2.22 51868 -> 186.38.54.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:42:02.569996 0.118749 udp 10.0.2.22 51868 <-> 178.7.212.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:03.571306 0.000000 udp 10.0.2.22 51868 -> 98.215.30.230 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:42:04.572331 0.301320 udp 10.0.2.22 51868 <-> 103.7.151.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:05.564016 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:42:06.565074 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:42:07.567196 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:42:08.568319 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:42:09.569968 0.000072 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:42:09.570040 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:42:10.571349 0.000000 udp 10.0.2.22 51868 -> 177.191.57.25 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:42:11.572450 0.039893 udp 10.0.2.22 51868 <-> 188.246.87.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:12.564016 0.349115 udp 10.0.2.22 51868 <-> 187.56.212.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:13.565174 0.164225 udp 10.0.2.22 51868 <-> 173.25.161.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:14.566773 0.313679 udp 10.0.2.22 51868 <-> 189.90.126.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:15.567972 0.143074 udp 10.0.2.22 51868 <-> 98.204.133.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:16.569948 0.304762 udp 10.0.2.22 51868 <-> 14.43.147.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:17.571079 0.045705 udp 10.0.2.22 51868 <-> 79.173.36.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:18.572342 0.289988 udp 10.0.2.22 51868 <-> 124.121.94.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:19.564307 2.639932 udp 10.0.2.22 51868 <-> 189.28.214.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:20.565346 3.209157 udp 10.0.2.22 51868 <-> 93.184.85.53 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:21.567125 0.000000 udp 10.0.2.22 51868 -> 117.200.103.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:42:22.568725 0.172509 udp 10.0.2.22 51868 <-> 98.194.123.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:24.571404 0.854270 udp 10.0.2.22 51868 <-> 187.56.54.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:25.442322 0.000092 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:42:25.572595 0.858266 udp 10.0.2.22 51868 <-> 88.156.69.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:26.563970 0.168664 udp 10.0.2.22 51868 <-> 68.39.158.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:27.565755 0.404004 udp 10.0.2.22 51868 <-> 111.119.245.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:28.567218 0.000000 udp 10.0.2.22 51868 -> 115.242.101.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:42:29.568537 0.054343 udp 10.0.2.22 51868 <-> 89.46.182.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:30.569616 4.240218 udp 10.0.2.22 51868 <-> 108.183.176.48 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:31.571291 0.076784 udp 10.0.2.22 51868 <-> 82.227.89.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:32.572409 0.000000 udp 10.0.2.22 51868 -> 95.91.31.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:42:33.564393 0.083480 udp 10.0.2.22 51868 <-> 86.126.32.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:35.606802 0.000000 udp 10.0.2.22 51868 -> 105.141.41.74 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:42:36.608779 0.000000 udp 10.0.2.22 51868 -> 70.65.248.65 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:42:37.609894 0.136330 udp 10.0.2.22 51868 <-> 68.39.158.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:38.611201 0.000000 udp 10.0.2.22 51868 -> 115.242.101.24 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:42:39.612996 0.065765 udp 10.0.2.22 51868 <-> 188.241.23.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:40.604496 0.289752 udp 10.0.2.22 51868 <-> 75.225.70.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:41.605417 0.335362 udp 10.0.2.22 51868 <-> 117.195.130.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:42.606944 0.167614 udp 10.0.2.22 51868 <-> 173.23.110.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:43.608973 0.359473 udp 10.0.2.22 51868 <-> 116.203.138.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:44.610267 0.000000 udp 10.0.2.22 51868 -> 99.33.210.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:42:45.611388 0.000000 udp 10.0.2.22 51868 -> 80.37.253.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:42:46.612602 0.913781 udp 10.0.2.22 51868 <-> 89.228.127.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:47.604641 0.076370 udp 10.0.2.22 51868 <-> 2.94.11.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:48.605892 2.905979 udp 10.0.2.22 51868 <-> 176.61.165.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:49.607144 0.000000 udp 10.0.2.22 51868 -> 217.186.199.127 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:42:50.608476 0.339977 udp 10.0.2.22 51868 <-> 61.1.224.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:51.609837 0.000000 udp 10.0.2.22 51868 -> 79.21.217.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:42:52.481575 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:42:52.611226 0.166746 udp 10.0.2.22 51868 <-> 46.233.24.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:53.613039 0.134838 udp 10.0.2.22 51868 <-> 68.39.158.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:54.604328 0.000000 udp 10.0.2.22 51868 -> 109.199.236.29 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:42:55.605782 0.157136 udp 10.0.2.22 51868 <-> 50.88.67.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:56.607328 0.058853 udp 10.0.2.22 51868 <-> 37.145.43.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:42:57.608726 0.000000 udp 10.0.2.22 51868 -> 79.21.217.34 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:42:58.610155 0.000000 udp 10.0.2.22 51868 -> 68.226.220.74 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:42:59.611704 0.000000 udp 10.0.2.22 51868 -> 190.188.12.111 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:43:00.612800 0.154486 udp 10.0.2.22 51868 <-> 71.90.71.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:01.604524 0.000000 udp 10.0.2.22 51868 -> 99.33.210.8 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:43:02.606041 1.497254 udp 10.0.2.22 51868 <-> 181.166.124.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:03.607044 0.141039 udp 10.0.2.22 51868 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:04.608495 0.676425 udp 10.0.2.22 51868 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:05.610710 0.185312 udp 10.0.2.22 51868 <-> 79.21.217.34 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:06.611366 0.362198 udp 10.0.2.22 51868 <-> 1.160.137.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:07.613065 0.068831 udp 10.0.2.22 51868 <-> 85.86.71.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:08.604270 0.182012 udp 10.0.2.22 51868 <-> 24.202.102.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:09.606307 0.165501 udp 10.0.2.22 51868 <-> 76.177.76.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:10.607393 0.128658 udp 10.0.2.22 51868 <-> 98.124.111.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:11.608843 0.000000 udp 10.0.2.22 51868 -> 220.143.102.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:43:12.610352 0.155094 udp 10.0.2.22 51868 <-> 98.217.103.252 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:13.611675 0.000000 udp 10.0.2.22 51868 -> 111.254.125.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:43:14.613261 0.719132 udp 10.0.2.22 51868 <-> 84.1.20.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:15.604638 0.787951 udp 10.0.2.22 51868 <-> 90.227.35.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:16.605732 0.216816 udp 10.0.2.22 51868 <-> 87.19.252.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:17.617385 0.296458 udp 10.0.2.22 51868 <-> 203.165.99.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:18.618736 0.143429 udp 10.0.2.22 51868 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:19.490414 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:43:19.620622 0.000000 udp 10.0.2.22 51868 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:43:20.621956 1.157873 udp 10.0.2.22 51868 <-> 24.178.45.245 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:22.615093 0.161964 udp 10.0.2.22 51868 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:23.615977 0.348699 udp 10.0.2.22 51868 <-> 190.110.186.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:24.617715 0.141354 udp 10.0.2.22 51868 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:25.619337 0.153726 udp 10.0.2.22 51868 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:26.620299 0.047863 udp 10.0.2.22 51868 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:27.622150 0.158576 udp 10.0.2.22 51868 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:28.613785 0.000000 udp 10.0.2.22 51868 -> 216.11.5.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:43:29.614810 0.415308 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:30.616199 0.156791 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:31.617513 3.333789 udp 10.0.2.22 51868 <-> 121.136.43.241 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:32.619095 0.000000 udp 10.0.2.22 51868 -> 71.236.119.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:43:33.620233 0.000000 udp 10.0.2.22 51868 -> 116.202.199.126 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:43:35.613158 0.117168 udp 10.0.2.22 51868 <-> 24.122.51.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:36.615115 0.176710 udp 10.0.2.22 51868 <-> 24.233.63.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:37.616553 0.328230 udp 10.0.2.22 51868 <-> 59.0.192.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:38.617585 0.305614 udp 10.0.2.22 51868 <-> 121.185.98.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:39.619321 0.353320 udp 10.0.2.22 51868 <-> 111.250.115.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:40.620503 0.198861 udp 10.0.2.22 51868 <-> 77.77.235.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:41.622288 0.324609 udp 10.0.2.22 51868 <-> 118.39.202.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:42.613617 0.211381 udp 10.0.2.22 51868 <-> 122.166.14.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:43.614902 0.143295 udp 10.0.2.22 51868 <-> 66.117.244.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:44.616116 1.162433 udp 10.0.2.22 51868 <-> 174.102.151.90 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:46.488692 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:43:46.619098 0.016420 udp 10.0.2.22 51868 <-> 84.118.6.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:47.620406 0.316208 udp 10.0.2.22 51868 <-> 177.39.62.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:48.621989 0.000000 udp 10.0.2.22 51868 -> 41.214.96.102 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:43:49.613474 3.004329 udp 10.0.2.22 51868 -> 114.168.204.65 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:43:50.615217 0.149600 udp 10.0.2.22 51868 <-> 174.108.102.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:51.616418 0.356188 udp 10.0.2.22 51868 <-> 180.176.70.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:52.500830 3.001362 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 03:43:53.619623 0.017885 udp 10.0.2.22 51868 <-> 95.168.48.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:54.620839 0.000000 udp 10.0.2.22 51868 -> 190.36.115.40 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:43:55.622052 0.000000 udp 10.0.2.22 51868 -> 114.168.204.65 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:43:56.613855 0.000000 udp 10.0.2.22 51868 -> 82.117.253.53 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:43:57.614679 0.014957 udp 10.0.2.22 51868 <-> 84.118.6.105 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:58.616802 0.476912 udp 10.0.2.22 51868 <-> 76.87.85.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:43:59.507824 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:43:59.618139 0.155795 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:00.619419 0.150084 udp 10.0.2.22 51868 <-> 173.212.89.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:01.620527 1.330568 udp 10.0.2.22 51868 <-> 58.115.15.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:02.622127 0.000000 udp 10.0.2.22 51868 -> 217.231.61.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:44:03.613778 0.309923 udp 10.0.2.22 51868 <-> 211.225.215.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:04.615179 0.204403 udp 10.0.2.22 51868 <-> 120.60.42.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:05.616735 0.046181 udp 10.0.2.22 51868 <-> 78.84.205.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:06.618184 0.070027 udp 10.0.2.22 51868 <-> 77.181.230.251 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:07.509669 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:44:07.619134 0.321672 udp 10.0.2.22 51868 <-> 121.185.98.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:08.620953 0.369331 udp 10.0.2.22 51868 <-> 201.93.194.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:09.622661 0.000000 udp 10.0.2.22 51868 -> 113.254.247.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:44:10.613661 0.000000 udp 10.0.2.22 51868 -> 14.99.151.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:44:11.614829 0.161859 udp 10.0.2.22 51868 <-> 68.226.220.74 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:12.616311 0.212196 udp 10.0.2.22 51868 <-> 197.7.69.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:13.487760 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:44:13.618179 0.299821 udp 10.0.2.22 51868 <-> 202.90.212.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:14.619369 0.045458 udp 10.0.2.22 51868 <-> 188.231.220.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:15.620706 0.270946 udp 10.0.2.22 51868 <-> 179.209.89.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:16.622485 0.451004 udp 10.0.2.22 51868 <-> 114.36.139.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:17.613509 0.161168 udp 10.0.2.22 51868 <-> 69.245.13.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:18.615273 2.002733 udp 10.0.2.22 51868 <-> 46.48.181.30 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:19.616711 4.081817 udp 10.0.2.22 51868 <-> 85.152.244.7 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:21.619213 0.245198 udp 10.0.2.22 51868 <-> 87.123.92.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:22.620796 0.045333 udp 10.0.2.22 51868 <-> 109.199.236.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:23.512480 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:44:24.613900 0.158275 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:25.615375 0.281694 udp 10.0.2.22 51868 <-> 180.215.118.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:26.616489 4.997199 udp 10.0.2.22 51868 -> 151.64.199.29 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:44:27.618216 0.146001 udp 10.0.2.22 51868 <-> 24.89.222.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:28.619621 0.138587 udp 10.0.2.22 51868 <-> 173.81.129.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:29.621531 0.462633 udp 10.0.2.22 51868 <-> 175.35.18.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:30.622657 0.320265 udp 10.0.2.22 51868 <-> 123.225.58.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:32.615343 0.000000 udp 10.0.2.22 51868 -> 85.100.206.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:44:33.055185 0.000000 udp 10.0.2.22 51868 <- 151.64.199.29 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:44:33.616466 1.139904 udp 10.0.2.22 51868 <-> 71.225.111.82 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:35.619337 0.000000 udp 10.0.2.22 51868 -> 92.86.49.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:44:36.621012 0.000000 udp 10.0.2.22 51868 -> 220.143.102.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:44:37.622839 0.052731 udp 10.0.2.22 51868 <-> 5.61.147.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:38.614112 0.220311 udp 10.0.2.22 51868 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:39.615085 0.000000 udp 10.0.2.22 51868 -> 115.240.45.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:44:40.496600 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:44:40.616958 0.479019 udp 10.0.2.22 51868 <-> 175.35.18.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:41.617971 1.318564 udp 10.0.2.22 51868 <-> 151.64.199.29 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:42.619899 0.270954 udp 10.0.2.22 51868 <-> 24.89.222.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:43.621522 0.031041 udp 10.0.2.22 51868 <-> 91.106.225.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:44.622546 0.024149 udp 10.0.2.22 51868 <-> 84.26.131.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:45.614200 0.034129 udp 10.0.2.22 51868 <-> 89.149.25.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:46.615446 0.318019 udp 10.0.2.22 51868 <-> 219.106.142.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:47.617039 0.227383 udp 10.0.2.22 51868 <-> 70.80.51.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:48.618555 0.000000 udp 10.0.2.22 51868 -> 208.101.81.78 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:44:49.619460 0.000000 udp 10.0.2.22 51868 -> 110.171.60.51 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:44:50.621267 0.068044 udp 10.0.2.22 51868 <-> 77.181.230.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:51.622510 0.316150 udp 10.0.2.22 51868 <-> 1.22.70.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:52.614049 0.040622 udp 10.0.2.22 51868 <-> 88.72.244.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:53.615204 0.052467 udp 10.0.2.22 51868 <-> 158.49.133.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:54.616965 0.169030 udp 10.0.2.22 51868 <-> 24.13.129.213 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:55.518127 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:44:55.618184 0.263673 udp 10.0.2.22 51868 <-> 117.212.27.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:56.620203 0.000000 udp 10.0.2.22 51868 -> 192.168.1.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:44:57.621259 1.828745 udp 10.0.2.22 51868 <-> 69.47.131.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:58.622657 0.645947 udp 10.0.2.22 51868 <-> 219.54.8.11 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:44:59.613933 3.158648 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:45:00.615596 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:01.617114 0.000000 udp 10.0.2.22 51868 -> 178.129.93.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:03.619969 4.996913 udp 10.0.2.22 51868 <-> 98.193.134.246 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:45:04.621054 1.993510 udp 10.0.2.22 51868 -> 159.146.5.235 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:05.622763 0.150340 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:45:07.495677 0.000104 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:45:07.615471 0.294269 udp 10.0.2.22 51868 <-> 180.146.156.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:45:08.779585 0.000000 udp 10.0.2.22 51868 <- 98.193.134.246 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:09.618698 0.166901 udp 10.0.2.22 51868 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:45:11.621508 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:12.622970 0.000062 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:12.623032 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:45:13.614139 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:14.615927 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:15.617439 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:16.618478 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:17.619892 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:18.621277 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:19.622875 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:20.614579 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:21.615779 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:22.617222 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:23.618635 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:24.619847 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:25.621853 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:26.623358 0.000000 udp 10.0.2.22 51868 -> 61.223.95.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:27.614091 0.216519 udp 10.0.2.22 51868 <-> 103.245.105.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:45:28.615741 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:29.617146 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:30.638608 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:31.639954 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:32.641554 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:33.643091 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:34.514108 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:45:34.634460 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:35.636244 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:37.638925 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:38.639957 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:39.641524 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:40.642941 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:41.634912 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:42.636099 0.467927 udp 10.0.2.22 51868 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:45:43.637885 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:44.639276 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:45.640543 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:46.641649 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:47.643566 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:48.634692 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:49.635728 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:50.637212 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:51.639207 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:52.640542 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:53.642168 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:54.633258 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:55.634949 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:56.636527 0.000000 udp 10.0.2.22 51868 -> 79.116.107.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:57.637415 0.000000 udp 10.0.2.22 51868 -> 142.136.206.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:45:58.638757 0.144395 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:45:59.640417 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:00.642412 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:01.512971 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:46:01.633516 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:02.634723 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:03.636092 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:04.637689 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:05.638918 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:06.640904 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:07.642283 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:08.633424 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:09.634936 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:10.636560 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:11.637651 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:12.639016 0.374599 udp 10.0.2.22 51868 <-> 61.223.95.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:46:13.640292 1.993380 udp 10.0.2.22 51868 <-> 142.136.206.4 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:46:14.641691 0.048908 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:46:16.634843 0.172898 udp 10.0.2.22 51868 <-> 103.245.105.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:46:17.636323 0.052221 udp 10.0.2.22 51868 <-> 83.142.2.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:46:18.637590 0.181153 udp 10.0.2.22 51868 <-> 70.173.33.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:46:19.639453 0.236661 udp 10.0.2.22 51868 <-> 72.201.124.131 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:46:20.640659 0.062896 udp 10.0.2.22 51868 <-> 95.107.216.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:46:21.642165 0.044274 udp 10.0.2.22 51868 <-> 88.216.52.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:46:22.633193 0.351838 udp 10.0.2.22 51868 <-> 27.106.20.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:46:23.634842 0.000000 udp 10.0.2.22 51868 -> 95.172.168.7 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:24.636097 0.138336 udp 10.0.2.22 51868 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:46:25.638044 0.000000 udp 10.0.2.22 51868 -> 123.16.76.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:26.639055 0.000000 udp 10.0.2.22 51868 -> 84.123.162.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:27.641115 0.000000 udp 10.0.2.22 51868 -> 176.201.40.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:28.511589 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:46:28.642229 0.015156 udp 10.0.2.22 51868 <-> 161.53.118.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:46:29.633436 0.032946 udp 10.0.2.22 51868 <-> 77.77.31.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:46:30.635084 0.762568 udp 10.0.2.22 51868 <-> 117.237.101.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:46:31.636710 0.159843 udp 10.0.2.22 51868 <-> 108.170.53.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:46:32.637849 0.201903 udp 10.0.2.22 51868 <-> 151.33.100.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:46:33.639046 0.048712 udp 10.0.2.22 51868 <-> 89.231.71.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:46:34.640478 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:35.642458 0.000085 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:35.642543 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:46:36.633341 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:37.635312 0.265578 udp 10.0.2.22 51868 <-> 186.136.213.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:46:39.637625 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:40.779357 0.498023 udp 10.0.2.22 51868 <-> 117.200.92.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:46:41.780931 0.000000 udp 10.0.2.22 51868 -> 2.188.216.128 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:42.782780 0.139433 udp 10.0.2.22 51868 <-> 71.89.8.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:46:43.773746 0.318655 udp 10.0.2.22 51868 <-> 112.170.230.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:46:44.775727 0.178751 udp 10.0.2.22 51868 <-> 68.4.25.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:46:45.777102 0.042417 udp 10.0.2.22 51868 <-> 82.22.195.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:46:46.778435 0.070245 udp 10.0.2.22 51868 <-> 82.252.180.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:46:47.779707 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:48.781234 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:49.783028 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:50.774100 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:51.775405 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:52.776779 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:53.778549 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:54.779433 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:55.650743 0.000117 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:46:55.781123 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:56.782313 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:57.774037 0.347968 udp 10.0.2.22 51868 <-> 27.105.29.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:46:58.775796 0.000078 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:46:58.775874 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:46:59.776598 0.031385 udp 10.0.2.22 51868 <-> 130.204.169.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:00.778447 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:47:01.780021 0.000000 udp 10.0.2.22 51868 -> 37.236.212.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:47:02.780915 0.000000 udp 10.0.2.22 51868 -> 14.97.9.149 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:47:03.782678 0.000000 udp 10.0.2.22 51868 -> 50.11.190.177 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:47:04.774320 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:47:05.775883 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:47:06.777377 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:47:07.778646 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:47:08.779830 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:47:09.781070 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:47:10.783062 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:47:11.773870 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:47:12.775475 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:47:13.776869 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:47:14.778854 0.124083 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:15.780185 0.309399 udp 10.0.2.22 51868 <-> 121.159.101.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:16.781928 0.000000 udp 10.0.2.22 51868 -> 115.241.174.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:47:17.783069 0.337541 udp 10.0.2.22 51868 <-> 14.97.9.149 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:18.774045 0.176253 udp 10.0.2.22 51868 <-> 67.68.72.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:19.775422 0.354287 udp 10.0.2.22 51868 <-> 115.241.81.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:20.776932 3.787519 udp 10.0.2.22 51868 <-> 201.41.10.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:21.778934 0.286588 udp 10.0.2.22 51868 <-> 115.161.4.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:22.650195 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:47:22.779964 0.163196 udp 10.0.2.22 51868 <-> 173.165.66.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:22.802069 0.000000 udp 10.0.2.22 51868 <- 115.241.174.23 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:47:23.781111 0.732451 udp 10.0.2.22 51868 <-> 68.207.92.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:24.783217 0.250158 udp 10.0.2.22 51868 <-> 14.96.179.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:25.774611 2.073586 udp 10.0.2.22 51868 <-> 86.126.32.66 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:26.775890 0.152347 udp 10.0.2.22 51868 <-> 67.240.151.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:28.778978 0.061676 udp 10.0.2.22 51868 <-> 82.229.19.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:29.780271 0.216050 udp 10.0.2.22 51868 <-> 186.89.156.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:30.781593 0.143878 udp 10.0.2.22 51868 <-> 75.181.151.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:31.783214 0.000000 udp 10.0.2.22 51868 -> 71.70.83.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:47:32.774029 0.396273 udp 10.0.2.22 51868 <-> 65.191.163.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:33.776024 0.331747 udp 10.0.2.22 51868 <-> 36.231.140.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:34.776957 0.044538 udp 10.0.2.22 51868 <-> 5.20.66.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:35.778871 0.327063 udp 10.0.2.22 51868 <-> 123.240.224.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:36.780289 0.171896 udp 10.0.2.22 51868 <-> 173.198.147.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:37.781679 0.080245 udp 10.0.2.22 51868 <-> 79.56.5.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:38.783095 0.142072 udp 10.0.2.22 51868 <-> 97.80.121.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:39.774845 0.127598 udp 10.0.2.22 51868 <-> 31.181.251.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:40.776018 0.162887 udp 10.0.2.22 51868 <-> 50.142.111.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:41.777500 0.916752 udp 10.0.2.22 51868 <-> 93.184.81.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:42.778673 0.347145 udp 10.0.2.22 51868 <-> 112.119.100.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:43.780587 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:47:44.781769 4.997159 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:47:46.774263 0.000000 udp 10.0.2.22 51868 -> 151.238.62.47 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:47:47.776082 0.155639 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:48.777168 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:47:49.648733 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:47:50.779918 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:47:51.781771 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:47:52.782917 1.277022 udp 10.0.2.22 51868 <-> 60.238.117.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:53.814575 0.000000 udp 10.0.2.22 51868 -> 24.231.62.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:47:54.815785 2.675102 udp 10.0.2.22 51868 <-> 50.27.216.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:55.817709 1.167753 udp 10.0.2.22 51868 <-> 14.96.97.6 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:56.818886 0.137256 udp 10.0.2.22 51868 <-> 68.193.213.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:57.820052 0.380856 udp 10.0.2.22 51868 <-> 117.198.83.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:47:58.821962 0.000000 udp 10.0.2.22 51868 -> 114.36.221.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:47:59.823207 0.293333 udp 10.0.2.22 51868 <-> 27.143.46.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:00.814706 0.143854 udp 10.0.2.22 51868 <-> 174.103.104.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:01.816443 0.099142 udp 10.0.2.22 51868 <-> 46.191.234.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:02.817441 0.000000 udp 10.0.2.22 51868 -> 24.164.171.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:48:03.819234 0.057845 udp 10.0.2.22 51868 <-> 88.168.134.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:04.820766 0.966411 udp 10.0.2.22 51868 <-> 79.121.110.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:05.821684 0.270456 udp 10.0.2.22 51868 <-> 187.104.29.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:06.823553 0.000000 udp 10.0.2.22 51868 -> 122.149.40.240 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:48:07.814966 0.352744 udp 10.0.2.22 51868 <-> 219.70.156.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:08.816357 0.270099 udp 10.0.2.22 51868 <-> 31.18.241.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:09.817555 0.057403 udp 10.0.2.22 51868 <-> 81.57.78.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:10.819064 0.000000 udp 10.0.2.22 51868 -> 192.168.1.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:48:11.820220 2.296802 udp 10.0.2.22 51868 <-> 186.92.60.28 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:12.821786 0.420641 udp 10.0.2.22 51868 <-> 118.168.126.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:14.815089 0.208224 udp 10.0.2.22 51868 <-> 190.26.100.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:15.816605 0.000000 udp 10.0.2.22 51868 -> 71.89.50.92 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:48:16.697281 0.000190 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:48:16.817747 0.191502 udp 10.0.2.22 51868 <-> 190.219.20.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:17.818828 0.080319 udp 10.0.2.22 51868 <-> 62.99.117.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:18.820475 0.155836 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:19.822017 0.000000 udp 10.0.2.22 51868 -> 186.153.117.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:48:20.823602 2.994017 udp 10.0.2.22 51868 <-> 76.109.136.2 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:21.814854 1.001273 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:24.818977 0.190263 udp 10.0.2.22 51868 <-> 190.219.20.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:25.820499 0.025502 udp 10.0.2.22 51868 <-> 85.130.45.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:26.822343 0.646026 udp 10.0.2.22 51868 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:27.813341 0.085111 udp 10.0.2.22 51868 <-> 176.8.46.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:28.814635 0.032945 udp 10.0.2.22 51868 <-> 188.254.174.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:29.816189 0.204999 udp 10.0.2.22 51868 <-> 67.183.78.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:30.817529 2.560534 udp 10.0.2.22 51868 <-> 50.27.216.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:31.819634 0.183958 udp 10.0.2.22 51868 <-> 70.173.84.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:32.820379 0.165374 udp 10.0.2.22 51868 <-> 174.64.165.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:33.822477 1.253086 udp 10.0.2.22 51868 <-> 151.64.199.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:34.813241 0.195239 udp 10.0.2.22 51868 <-> 70.170.60.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:35.814992 0.330303 udp 10.0.2.22 51868 <-> 36.229.51.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:36.816632 0.157990 udp 10.0.2.22 51868 <-> 50.142.135.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:37.817867 0.107877 udp 10.0.2.22 51868 <-> 95.233.218.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:38.819128 0.352873 udp 10.0.2.22 51868 <-> 58.115.17.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:39.820915 0.173111 udp 10.0.2.22 51868 <-> 24.209.250.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:40.822461 0.000000 udp 10.0.2.22 51868 -> 14.97.98.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:48:41.813466 0.000000 udp 10.0.2.22 51868 -> 109.182.129.48 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:48:42.815048 0.337447 udp 10.0.2.22 51868 <-> 114.36.70.1 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:43.696392 0.000037 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:48:43.816266 0.046402 udp 10.0.2.22 51868 <-> 89.46.84.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:44.817669 0.158253 udp 10.0.2.22 51868 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:45.819179 0.752658 udp 10.0.2.22 51868 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:46.820703 0.000000 udp 10.0.2.22 51868 -> 90.41.48.123 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:48:47.822477 1.275631 udp 10.0.2.22 51868 <-> 186.92.116.129 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:49.815256 0.123580 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:50.816938 0.172072 udp 10.0.2.22 51868 <-> 2.180.111.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:51.817715 0.030165 udp 10.0.2.22 51868 <-> 131.114.121.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:52.819247 0.334007 udp 10.0.2.22 51868 <-> 200.158.248.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:53.820803 0.089699 udp 10.0.2.22 51868 <-> 46.120.136.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:54.822337 0.000000 udp 10.0.2.22 51868 -> 178.26.123.117 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:48:55.813731 0.040449 udp 10.0.2.22 51868 <-> 91.67.136.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:56.815157 0.128403 udp 10.0.2.22 51868 <-> 72.11.176.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:57.816577 0.359668 udp 10.0.2.22 51868 <-> 118.233.46.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:58.818090 0.182281 udp 10.0.2.22 51868 <-> 70.170.60.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:48:59.819253 0.051079 udp 10.0.2.22 51868 <-> 37.77.155.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:49:00.821187 2.994477 udp 10.0.2.22 51868 -> 139.0.190.28 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:01.822409 0.000000 udp 10.0.2.22 51868 -> 31.63.129.74 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:02.813679 0.401619 udp 10.0.2.22 51868 <-> 218.228.96.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:49:04.816608 0.066193 udp 10.0.2.22 51868 <-> 62.57.140.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:49:05.817992 0.000000 udp 10.0.2.22 51868 -> 147.156.24.77 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:06.819327 0.142798 udp 10.0.2.22 51868 <-> 174.106.129.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:49:07.820857 0.351601 udp 10.0.2.22 51868 <-> 124.244.148.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:49:08.822418 0.064361 udp 10.0.2.22 51868 <-> 82.227.89.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:49:09.814221 0.263896 udp 10.0.2.22 51868 <-> 190.193.222.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:49:10.694904 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:49:10.815114 0.296245 udp 10.0.2.22 51868 <-> 101.111.191.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:49:11.816448 0.062493 udp 10.0.2.22 51868 <-> 94.155.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:49:12.817879 0.140362 udp 10.0.2.22 51868 <-> 98.103.10.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:49:13.819320 0.422997 udp 10.0.2.22 51868 <-> 175.215.114.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:49:14.821272 0.217487 udp 10.0.2.22 51868 <-> 182.65.163.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:49:15.822829 0.338605 udp 10.0.2.22 51868 <-> 2.193.224.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:49:16.813724 0.042566 udp 10.0.2.22 51868 <-> 84.197.114.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:49:17.815162 0.000000 udp 10.0.2.22 51868 -> 114.24.22.131 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:18.816757 0.157471 udp 10.0.2.22 51868 <-> 174.100.67.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:49:19.818110 0.235080 udp 10.0.2.22 51868 <-> 99.135.171.220 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:49:20.819465 0.000000 udp 10.0.2.22 51868 -> 188.2.135.85 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:21.821140 0.339645 udp 10.0.2.22 51868 <-> 36.229.173.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:49:22.822506 3.265312 udp 10.0.2.22 51868 <-> 92.86.74.152 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:49:23.814107 0.084780 udp 10.0.2.22 51868 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:49:24.815137 1.065479 udp 10.0.2.22 51868 <-> 58.115.15.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:49:26.818275 0.143345 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:49:27.820053 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:28.821309 0.000046 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:28.821355 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:49:29.822640 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:30.814234 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:31.815598 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:32.816633 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:33.818689 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:34.819645 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:35.821623 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:36.822604 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:37.694012 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:49:37.813820 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:38.815658 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:39.817358 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:40.818328 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:41.819968 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:42.821632 0.000000 udp 10.0.2.22 51868 -> 79.20.212.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:43.822868 0.346959 udp 10.0.2.22 51868 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:49:44.814482 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:45.815485 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:46.817547 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:47.818484 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:48.819811 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:49.821401 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:50.823054 4.997063 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 4 1064 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:49:52.815391 0.000000 udp 10.0.2.22 51868 -> 46.35.110.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:53.817234 3.039440 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:49:54.818922 0.000000 udp 10.0.2.22 51868 -> 84.205.5.194 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:57.823208 0.063232 udp 10.0.2.22 51868 <-> 46.35.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:49:58.814568 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:49:59.815474 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:50:00.817182 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:50:01.818850 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:50:02.819765 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:50:03.821255 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:50:04.692471 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:50:04.822764 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:50:05.814605 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:50:06.815926 0.036133 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:07.817202 0.889606 udp 10.0.2.22 51868 <-> 58.115.15.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:08.818632 0.178423 udp 10.0.2.22 51868 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:09.820329 0.224357 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:10.821601 0.000000 udp 10.0.2.22 51868 -> 101.63.84.53 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:50:11.823217 3.063699 udp 10.0.2.22 51868 <-> 213.60.233.50 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:12.814558 0.000000 udp 10.0.2.22 51868 -> 98.245.34.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:50:13.815586 0.000000 udp 10.0.2.22 51868 -> 85.104.86.50 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:50:15.819116 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:50:16.820195 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:50:17.821838 0.313619 udp 10.0.2.22 51868 <-> 211.51.37.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:18.822963 0.174841 udp 10.0.2.22 51868 <-> 74.244.8.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:19.814454 0.163064 udp 10.0.2.22 51868 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:20.815829 2.156029 udp 10.0.2.22 51868 <-> 174.108.49.15 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:21.817083 0.000000 udp 10.0.2.22 51868 -> 87.4.181.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:50:23.820481 0.000000 udp 10.0.2.22 51868 -> 217.217.179.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:50:24.822101 2.058317 udp 10.0.2.22 51868 <-> 213.37.230.218 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:27.816007 0.000000 udp 10.0.2.22 51868 -> 117.222.69.230 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:50:28.817184 0.000000 udp 10.0.2.22 51868 -> 184.167.18.225 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:50:29.819137 0.342969 udp 10.0.2.22 51868 <-> 218.173.112.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:30.820373 0.015179 udp 10.0.2.22 51868 <-> 161.53.118.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:31.691707 0.000039 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:50:31.821478 0.155245 udp 10.0.2.22 51868 <-> 174.108.49.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:32.823598 0.319649 udp 10.0.2.22 51868 <-> 61.46.55.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:33.814906 0.059383 udp 10.0.2.22 51868 <-> 213.37.230.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:34.816282 0.000000 udp 10.0.2.22 51868 -> 67.233.250.225 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:50:35.817375 0.351002 udp 10.0.2.22 51868 <-> 117.222.69.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:36.819319 0.321592 udp 10.0.2.22 51868 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:37.820750 2.002667 udp 10.0.2.22 51868 -> 217.211.215.16 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:50:38.822043 0.127141 udp 10.0.2.22 51868 <-> 95.235.20.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:40.814405 0.267078 udp 10.0.2.22 51868 <-> 177.80.55.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:41.816265 0.191469 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:42.817283 0.151962 udp 10.0.2.22 51868 <-> 24.190.186.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:43.819492 0.206394 udp 10.0.2.22 51868 <-> 71.95.45.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:44.820483 3.995894 udp 10.0.2.22 51868 -> 220.143.102.26 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:50:45.821916 0.370008 udp 10.0.2.22 51868 <-> 61.223.208.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:46.823342 0.153960 udp 10.0.2.22 51868 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:47.814854 0.432305 udp 10.0.2.22 51868 <-> 70.189.102.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:49.817806 0.000000 udp 10.0.2.22 51868 -> 93.145.162.140 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:50:50.818892 0.403009 udp 10.0.2.22 51868 <-> 175.193.63.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:51.820850 0.089807 udp 10.0.2.22 51868 <-> 78.8.74.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:52.822263 0.173887 udp 10.0.2.22 51868 <-> 85.85.71.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:53.823761 0.365425 udp 10.0.2.22 51868 <-> 75.228.79.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:54.814737 0.000000 udp 10.0.2.22 51868 -> 101.63.88.95 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:50:55.816234 0.161882 udp 10.0.2.22 51868 <-> 209.203.200.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:56.818008 0.000000 udp 10.0.2.22 51868 -> 115.244.228.91 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:50:57.818989 0.094965 udp 10.0.2.22 51868 <-> 78.8.74.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:58.690668 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:50:58.820351 0.072587 udp 10.0.2.22 51868 <-> 109.163.149.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:50:59.724671 3.001653 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 03:50:59.821938 0.000000 udp 10.0.2.22 51868 -> 188.2.216.49 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:51:00.813350 0.036248 udp 10.0.2.22 51868 <-> 81.232.30.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:01.814918 0.000000 udp 10.0.2.22 51868 -> 61.4.170.48 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:51:02.816433 0.469809 udp 10.0.2.22 51868 <-> 115.240.63.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:03.817652 0.000000 udp 10.0.2.22 51868 -> 208.101.72.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:51:04.819371 0.046187 udp 10.0.2.22 51868 <-> 178.254.239.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:05.820548 0.228723 udp 10.0.2.22 51868 <-> 109.98.101.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:06.731667 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:51:06.822112 0.178045 udp 10.0.2.22 51868 <-> 98.235.73.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:07.813296 1.118948 udp 10.0.2.22 51868 <-> 117.206.120.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:08.815059 0.189347 udp 10.0.2.22 51868 <-> 68.8.70.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:09.816639 0.400356 udp 10.0.2.22 51868 <-> 175.213.179.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:10.818060 0.060738 udp 10.0.2.22 51868 <-> 84.126.103.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:11.819601 0.317302 udp 10.0.2.22 51868 <-> 203.112.45.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:12.820939 0.137064 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:13.822477 0.133618 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:14.733452 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:51:14.814104 1.221278 udp 10.0.2.22 51868 <-> 84.1.20.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:15.815429 0.066624 udp 10.0.2.22 51868 <-> 79.140.165.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:16.816158 0.365633 udp 10.0.2.22 51868 <-> 101.63.195.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:17.818029 0.137846 udp 10.0.2.22 51868 <-> 24.151.86.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:18.819333 0.322822 udp 10.0.2.22 51868 <-> 219.68.51.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:19.820680 0.000000 udp 10.0.2.22 51868 -> 190.233.46.124 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:51:20.822484 0.000000 udp 10.0.2.22 51868 -> 89.29.148.140 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:51:21.813990 0.181130 udp 10.0.2.22 51868 <-> 98.176.21.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:22.815086 0.000000 udp 10.0.2.22 51868 -> 95.9.149.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:51:23.816667 0.307819 udp 10.0.2.22 51868 <-> 122.29.17.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:24.817873 0.410799 udp 10.0.2.22 51868 <-> 121.124.80.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:25.688957 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:51:25.819314 0.123842 udp 10.0.2.22 51868 <-> 66.65.121.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:26.820654 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:51:27.822500 0.315620 udp 10.0.2.22 51868 <-> 180.220.149.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:28.813850 2.090453 udp 10.0.2.22 51868 <-> 186.22.32.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:29.815199 0.149757 udp 10.0.2.22 51868 <-> 8.28.208.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:30.736611 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:51:30.816709 0.057983 udp 10.0.2.22 51868 <-> 86.127.163.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:31.817842 0.021963 udp 10.0.2.22 51868 <-> 5.146.210.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:32.819183 0.329384 udp 10.0.2.22 51868 <-> 126.115.117.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:33.820861 0.474350 udp 10.0.2.22 51868 <-> 69.151.57.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:34.822736 0.179060 udp 10.0.2.22 51868 <-> 174.61.20.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:35.814165 0.316456 udp 10.0.2.22 51868 <-> 114.159.192.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:36.815049 0.323809 udp 10.0.2.22 51868 <-> 90.232.194.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:37.816967 0.220487 udp 10.0.2.22 51868 <-> 71.228.145.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:38.817826 0.506917 udp 10.0.2.22 51868 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:39.819249 0.034409 udp 10.0.2.22 51868 <-> 89.149.25.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:40.821077 0.028020 udp 10.0.2.22 51868 <-> 84.56.163.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:41.822112 2.513449 udp 10.0.2.22 51868 <-> 89.29.147.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:42.813681 0.085982 udp 10.0.2.22 51868 <-> 94.153.59.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:43.815210 0.000000 udp 10.0.2.22 51868 -> 37.237.56.121 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:51:44.816935 0.353173 udp 10.0.2.22 51868 <-> 211.76.50.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:45.818281 0.307223 udp 10.0.2.22 51868 <-> 121.2.96.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:46.819528 0.137370 udp 10.0.2.22 51868 <-> 24.3.182.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:47.820747 0.028889 udp 10.0.2.22 51868 <-> 84.107.67.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:48.822196 0.356900 udp 10.0.2.22 51868 <-> 61.231.101.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:51:49.814000 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:51:50.815501 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:51:51.816485 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:51:52.687830 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:51:52.818579 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:51:53.819822 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:51:54.820886 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:51:55.822888 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:51:56.814286 0.000000 udp 10.0.2.22 51868 -> 94.123.184.209 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:51:57.815128 2.002860 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:51:58.817419 0.100453 udp 10.0.2.22 51868 <-> 87.121.154.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:00.820126 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:52:01.821273 0.154845 udp 10.0.2.22 51868 <-> 96.59.111.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:02.742395 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:52:02.822650 0.000000 udp 10.0.2.22 51868 -> 94.123.184.209 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:52:03.814307 0.169973 udp 10.0.2.22 51868 <-> 174.49.200.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:04.815160 0.000000 udp 10.0.2.22 51868 -> 84.45.155.114 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:52:05.816805 0.465540 udp 10.0.2.22 51868 <-> 115.242.132.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:06.818702 0.000000 udp 10.0.2.22 51868 -> 177.149.127.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:52:07.819855 0.370490 udp 10.0.2.22 51868 <-> 190.176.231.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:08.821568 0.000000 udp 10.0.2.22 51868 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:52:09.822901 0.000000 udp 10.0.2.22 51868 -> 79.114.227.84 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:52:10.814361 0.088316 udp 10.0.2.22 51868 <-> 79.133.148.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:11.815239 0.000000 udp 10.0.2.22 51868 -> 114.36.213.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:52:12.817046 0.058884 udp 10.0.2.22 51868 <-> 85.66.114.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:13.818713 0.385469 udp 10.0.2.22 51868 <-> 118.169.110.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:14.819557 0.000000 udp 10.0.2.22 51868 -> 188.246.74.65 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:52:15.821423 2.069595 udp 10.0.2.22 51868 <-> 81.9.181.64 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:16.822467 0.000000 udp 10.0.2.22 51868 -> 1.172.166.20 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:52:18.815462 0.367449 udp 10.0.2.22 51868 <-> 114.36.213.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:19.697168 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:52:19.817668 0.154884 udp 10.0.2.22 51868 <-> 50.88.67.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:20.818683 0.309739 udp 10.0.2.22 51868 <-> 1.11.158.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:21.820040 0.572533 udp 10.0.2.22 51868 <-> 69.180.10.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:22.821471 0.000000 udp 10.0.2.22 51868 -> 188.246.74.65 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:52:23.823047 0.083146 udp 10.0.2.22 51868 <-> 81.9.181.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:24.813935 0.451984 udp 10.0.2.22 51868 <-> 1.36.1.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:25.815573 1.156076 udp 10.0.2.22 51868 <-> 66.31.49.90 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:27.818850 0.173269 udp 10.0.2.22 51868 <-> 76.107.65.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:28.819816 0.053029 udp 10.0.2.22 51868 <-> 141.136.14.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:29.821114 0.141594 udp 10.0.2.22 51868 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:30.823224 0.162137 udp 10.0.2.22 51868 <-> 98.184.128.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:31.814652 0.000000 udp 10.0.2.22 51868 -> 36.228.85.115 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:52:32.815457 0.145001 udp 10.0.2.22 51868 <-> 24.159.153.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:33.817041 0.207325 udp 10.0.2.22 51868 <-> 98.232.99.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:34.818586 0.310606 udp 10.0.2.22 51868 <-> 125.4.9.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:35.149423 0.011451 udp 10.0.2.22 60014 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 03:52:35.161217 0.000000 udp 10.0.2.22 60015 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:52:35.819750 0.068385 udp 10.0.2.22 51868 <-> 78.251.128.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:36.821503 0.377557 udp 10.0.2.22 51868 <-> 114.41.46.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:37.823293 0.336340 udp 10.0.2.22 51868 <-> 109.102.189.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:38.814569 0.161129 udp 10.0.2.22 51868 <-> 84.108.234.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:39.815510 0.214027 udp 10.0.2.22 51868 <-> 75.28.107.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:40.817808 0.000000 udp 10.0.2.22 51868 -> 105.141.41.74 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:52:41.818710 0.318739 udp 10.0.2.22 51868 <-> 114.162.153.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:42.819820 0.068180 udp 10.0.2.22 51868 <-> 83.166.30.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:43.821625 0.000000 udp 10.0.2.22 51868 -> 92.36.150.72 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:52:44.853146 0.000000 udp 10.0.2.22 51868 -> 1.36.118.97 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:52:45.844507 0.000000 udp 10.0.2.22 51868 -> 105.141.41.74 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:52:46.725971 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:52:46.845592 1.068769 udp 10.0.2.22 51868 <-> 95.220.247.249 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:48.848809 0.039301 udp 10.0.2.22 51868 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:49.850561 0.026377 udp 10.0.2.22 51868 <-> 85.130.81.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:50.851615 0.173545 udp 10.0.2.22 51868 <-> 24.182.200.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:51.853028 0.076066 udp 10.0.2.22 51868 <-> 188.94.82.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:52.844713 0.068894 udp 10.0.2.22 51868 <-> 91.134.65.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:53.845868 0.000000 udp 10.0.2.22 51868 -> 219.162.195.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:52:54.847260 0.000000 udp 10.0.2.22 51868 -> 70.160.35.225 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:52:55.658469 0.000000 udp 10.0.2.22 51868 <- 105.141.41.74 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:52:55.849122 0.000000 udp 10.0.2.22 51868 -> 178.122.80.147 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:52:56.850851 0.161058 udp 10.0.2.22 51868 <-> 98.103.195.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:57.851433 0.102963 udp 10.0.2.22 51868 <-> 79.182.127.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:58.853214 0.146535 udp 10.0.2.22 51868 <-> 96.23.154.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:52:59.844891 0.238755 udp 10.0.2.22 51868 <-> 106.51.19.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:00.846272 0.147609 udp 10.0.2.22 51868 <-> 23.28.66.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:01.847188 0.176347 udp 10.0.2.22 51868 <-> 70.115.72.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:02.848605 0.317350 udp 10.0.2.22 51868 <-> 115.240.75.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:03.850711 0.146560 udp 10.0.2.22 51868 <-> 97.80.163.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:04.851813 0.049017 udp 10.0.2.22 51868 <-> 89.231.71.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:05.853173 0.298488 udp 10.0.2.22 51868 <-> 122.145.189.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:06.844603 0.000000 udp 10.0.2.22 51868 -> 209.107.241.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:53:07.846480 0.165115 udp 10.0.2.22 51868 <-> 70.112.106.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:08.847249 0.348483 udp 10.0.2.22 51868 <-> 61.207.180.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:09.848887 0.336288 udp 10.0.2.22 51868 <-> 115.43.3.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:10.850324 3.400234 udp 10.0.2.22 51868 <-> 117.200.61.37 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:11.851880 1.364177 udp 10.0.2.22 51868 <-> 1.168.250.38 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:13.724296 0.000093 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:53:14.846253 0.000000 udp 10.0.2.22 51868 -> 97.90.18.35 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:53:15.847360 0.164087 udp 10.0.2.22 51868 <-> 98.240.160.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:16.849162 0.154384 udp 10.0.2.22 51868 <-> 69.207.82.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:17.850211 0.319257 udp 10.0.2.22 51868 <-> 58.9.28.39 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:18.852244 0.187422 udp 10.0.2.22 51868 <-> 209.55.124.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:19.853151 0.323384 udp 10.0.2.22 51868 <-> 218.149.5.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:20.844804 0.000000 udp 10.0.2.22 51868 -> 157.14.178.157 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:53:21.846297 0.346211 udp 10.0.2.22 51868 <-> 1.163.195.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:22.847786 0.068371 udp 10.0.2.22 51868 <-> 93.72.97.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:23.849521 0.052750 udp 10.0.2.22 51868 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:24.850568 0.132146 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:25.851690 0.332694 udp 10.0.2.22 51868 <-> 42.83.20.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:26.853430 0.158800 udp 10.0.2.22 51868 <-> 72.23.198.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:27.844975 0.077241 udp 10.0.2.22 51868 <-> 151.32.78.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:28.846555 4.997287 udp 10.0.2.22 51868 <-> 88.57.184.106 16464 CON 0 0 5 1954 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:29.848144 0.147838 udp 10.0.2.22 51868 <-> 146.163.172.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:31.850425 3.168424 udp 10.0.2.22 51868 <-> 207.134.178.111 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:32.851952 0.015081 udp 10.0.2.22 51868 <-> 161.53.118.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:33.930982 0.000000 udp 10.0.2.22 51868 <- 88.57.184.106 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:53:35.846063 0.423647 udp 10.0.2.22 51868 <-> 36.230.82.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:36.847886 0.220592 udp 10.0.2.22 51868 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:37.848938 0.000000 udp 10.0.2.22 51868 -> 135.19.220.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:53:38.850969 0.000000 udp 10.0.2.22 51868 -> 177.149.127.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:53:39.852317 2.175749 udp 10.0.2.22 51868 <-> 68.149.112.104 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:40.723384 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:53:40.843879 0.120940 udp 10.0.2.22 51868 <-> 79.40.192.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:43.848071 0.000048 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:53:43.848119 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:53:44.849685 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:53:45.851071 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:53:46.852102 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:53:47.843626 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:53:48.845109 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:53:49.846234 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:53:50.848112 0.153760 udp 10.0.2.22 51868 <-> 68.117.189.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:51.849171 0.174950 udp 10.0.2.22 51868 <-> 85.102.55.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:52.850921 0.300232 udp 10.0.2.22 51868 <-> 203.202.216.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:53.852603 0.361067 udp 10.0.2.22 51868 <-> 190.172.83.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:54.843353 0.000000 udp 10.0.2.22 51868 -> 14.207.67.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:53:55.845403 0.120817 udp 10.0.2.22 51868 <-> 88.72.192.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:56.846707 0.120988 udp 10.0.2.22 51868 <-> 207.237.112.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:53:57.848083 0.000000 udp 10.0.2.22 51868 -> 66.254.24.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:53:58.849416 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:53:59.851228 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:01.843545 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:02.844993 0.000050 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:02.845043 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:54:03.847155 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:04.848087 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:05.849784 2.104015 udp 10.0.2.22 51868 <-> 178.122.146.16 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:54:06.851117 0.443206 udp 10.0.2.22 51868 <-> 87.123.92.5 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:54:08.723716 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:54:08.843536 0.060157 udp 10.0.2.22 51868 <-> 93.72.126.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:54:09.845269 0.139621 udp 10.0.2.22 51868 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:54:10.847002 0.046737 udp 10.0.2.22 51868 <-> 86.126.0.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:54:11.847796 0.051068 udp 10.0.2.22 51868 <-> 94.53.32.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:54:12.849751 0.014776 udp 10.0.2.22 51868 <-> 5.146.59.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:54:13.851282 0.000043 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:13.851325 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:54:14.852846 1.212765 udp 10.0.2.22 51868 <-> 84.228.222.43 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:54:16.845262 0.361304 udp 10.0.2.22 51868 <-> 112.119.100.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:54:17.846970 0.000000 udp 10.0.2.22 51868 -> 186.162.43.75 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:18.848369 0.000000 udp 10.0.2.22 51868 -> 24.173.195.123 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:19.849681 0.016845 udp 10.0.2.22 51868 <-> 88.132.62.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:54:20.850880 0.018643 udp 10.0.2.22 51868 <-> 89.177.137.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:54:21.852527 0.077799 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:54:22.844144 0.000000 udp 10.0.2.22 51868 -> 207.42.135.185 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:23.845406 0.116795 udp 10.0.2.22 51868 <-> 151.16.39.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:54:24.846732 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:25.848347 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:26.849619 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:27.851051 0.000000 udp 10.0.2.22 51868 -> 118.169.109.87 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:28.852845 0.574667 udp 10.0.2.22 51868 <-> 183.87.89.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:54:29.843994 0.125572 udp 10.0.2.22 51868 <-> 151.52.90.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:54:30.845624 0.025419 udp 10.0.2.22 51868 <-> 109.193.41.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:54:31.847051 0.441458 udp 10.0.2.22 51868 <-> 118.221.132.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:54:32.848280 0.168716 udp 10.0.2.22 51868 <-> 173.30.6.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:54:33.849966 0.042939 udp 10.0.2.22 51868 <-> 46.175.231.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:54:34.851182 0.660643 udp 10.0.2.22 51868 <-> 90.227.35.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:54:35.722411 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:54:35.852868 0.000000 udp 10.0.2.22 51868 -> 190.79.250.42 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:36.844283 0.000000 udp 10.0.2.22 51868 -> 190.79.130.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:37.845249 0.000000 udp 10.0.2.22 51868 -> 118.169.215.159 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:38.847189 0.124332 udp 10.0.2.22 51868 <-> 31.22.139.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:54:39.848395 0.067823 udp 10.0.2.22 51868 <-> 88.161.227.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:54:40.850170 0.632674 udp 10.0.2.22 51868 <-> 219.109.69.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:54:41.851380 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:42.852903 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:43.844487 0.000044 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:43.844531 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:54:44.845372 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:45.847154 0.137585 udp 10.0.2.22 51868 <-> 71.71.46.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:54:46.848577 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:47.850261 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:48.498410 0.000000 udp 10.0.2.22 51868 <- 190.79.130.76 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:48.851078 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:49.852614 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:50.984648 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:51.986062 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:52.987177 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:53.988759 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:54.990692 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:55.991282 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:56.992714 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:57.984792 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:58.986307 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:59.987327 0.000100 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:54:59.987427 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:55:01.990230 0.036827 udp 10.0.2.22 51868 <-> 81.161.241.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:55:02.861762 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:55:02.991344 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:03.993146 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:04.984690 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:05.986264 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:06.987101 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:08.990590 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:09.991679 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:10.993215 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:11.984333 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:12.986469 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:13.987768 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:14.989001 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:15.990436 0.000097 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:15.990533 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:55:16.991474 1.993234 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:17.993627 0.152903 udp 10.0.2.22 51868 <-> 50.90.85.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:55:20.987246 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:21.988690 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:22.990258 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:23.991969 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:24.993179 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:26.175215 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:27.176348 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:28.177554 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:29.179235 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:30.120780 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:55:30.250870 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:31.252239 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:32.254076 0.000075 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:32.254151 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:55:33.245005 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:34.246614 0.000000 udp 10.0.2.22 51868 -> 180.148.49.80 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:35.287916 0.064475 udp 10.0.2.22 51868 <-> 213.37.230.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:55:36.289355 0.036842 udp 10.0.2.22 51868 <-> 81.161.241.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:55:37.290778 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:38.292706 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:39.294054 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:40.284976 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:41.286579 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:42.288232 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:43.290037 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:44.291186 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:45.292459 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:46.293910 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:47.285142 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:48.286770 0.000077 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:48.286847 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:55:49.288083 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:50.290057 0.140208 udp 10.0.2.22 51868 <-> 67.242.95.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:55:51.291231 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:52.292489 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:53.294206 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:54.285086 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:55.286922 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:56.288375 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:57.159511 0.000082 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:55:57.290135 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:55:58.290974 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:56:00.293915 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:56:01.285366 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:56:02.287036 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:56:03.288195 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:56:04.290013 0.000058 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:56:04.290071 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:56:05.291010 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:56:06.292830 0.170601 udp 10.0.2.22 51868 <-> 66.68.188.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:07.284207 0.069943 udp 10.0.2.22 51868 <-> 213.37.230.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:08.285503 0.186225 udp 10.0.2.22 51868 <-> 203.187.202.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:09.287300 0.399481 udp 10.0.2.22 51868 <-> 219.240.59.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:10.288674 0.116236 udp 10.0.2.22 51868 <-> 24.122.170.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:11.290174 0.163834 udp 10.0.2.22 51868 <-> 69.242.83.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:12.291527 0.145141 udp 10.0.2.22 51868 <-> 69.63.41.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:13.292810 0.200973 udp 10.0.2.22 51868 <-> 76.95.164.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:14.284177 0.000000 udp 10.0.2.22 51868 -> 41.70.151.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:56:15.285330 0.865344 udp 10.0.2.22 51868 <-> 122.107.150.0 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:16.286735 0.161010 udp 10.0.2.22 51868 <-> 74.194.166.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:17.288712 0.298662 udp 10.0.2.22 51868 <-> 126.12.122.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:18.289756 1.145813 udp 10.0.2.22 51868 <-> 67.86.90.91 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:20.292948 0.000000 udp 10.0.2.22 51868 -> 89.246.6.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:56:21.283927 0.189279 udp 10.0.2.22 51868 <-> 76.14.200.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:22.285369 0.000000 udp 10.0.2.22 51868 -> 113.165.160.201 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:56:23.287201 0.159172 udp 10.0.2.22 51868 <-> 68.59.89.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:24.168224 0.000098 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:56:24.288616 0.145596 udp 10.0.2.22 51868 <-> 67.86.90.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:25.290297 3.427569 udp 10.0.2.22 51868 <-> 113.193.163.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:26.291287 0.352192 udp 10.0.2.22 51868 <-> 93.148.205.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:27.292663 0.000000 udp 10.0.2.22 51868 -> 89.246.6.64 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:56:28.284366 1.023105 udp 10.0.2.22 51868 <-> 72.141.22.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:29.285542 0.124061 udp 10.0.2.22 51868 <-> 85.87.224.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:30.287154 0.025594 udp 10.0.2.22 51868 <-> 89.132.219.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:31.288554 0.247484 udp 10.0.2.22 51868 <-> 183.82.241.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:32.289997 0.300920 udp 10.0.2.22 51868 <-> 110.134.145.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:33.291167 0.044263 udp 10.0.2.22 51868 <-> 89.106.103.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:34.292746 0.196441 udp 10.0.2.22 51868 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:35.284616 0.532813 udp 10.0.2.22 51868 <-> 137.166.125.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:36.356309 1.215021 udp 10.0.2.22 51868 <-> 24.9.113.237 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:38.359094 0.000000 udp 10.0.2.22 51868 -> 182.237.165.0 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:56:39.359904 0.406186 udp 10.0.2.22 51868 <-> 91.120.105.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:40.361633 0.039859 udp 10.0.2.22 51868 <-> 62.31.245.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:41.363386 0.000000 udp 10.0.2.22 51868 -> 75.98.153.155 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:56:42.354644 0.682212 udp 10.0.2.22 51868 <-> 115.240.5.226 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:43.355833 0.180589 udp 10.0.2.22 51868 <-> 178.205.27.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:44.357256 0.055279 udp 10.0.2.22 51868 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:45.358711 0.158488 udp 10.0.2.22 51868 <-> 98.209.179.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:46.360650 0.214106 udp 10.0.2.22 51868 <-> 89.247.36.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:47.361619 2.624558 udp 10.0.2.22 51868 <-> 27.51.14.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:48.363282 0.179960 udp 10.0.2.22 51868 <-> 41.214.202.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:49.354898 0.000000 udp 10.0.2.22 51868 -> 83.180.205.123 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:56:50.355714 0.157167 udp 10.0.2.22 51868 <-> 76.180.2.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:51.237356 0.000159 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:56:51.357286 0.070395 udp 10.0.2.22 51868 <-> 85.86.64.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:52.359098 0.023245 udp 10.0.2.22 51868 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:53.360526 2.002705 udp 10.0.2.22 51868 -> 186.56.148.250 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:56:54.361939 0.334136 udp 10.0.2.22 51868 <-> 82.59.115.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:56.354464 0.687296 udp 10.0.2.22 51868 <-> 108.230.246.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:57.355777 1.048483 udp 10.0.2.22 51868 <-> 87.173.35.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:58.357891 0.932120 udp 10.0.2.22 51868 <-> 115.241.54.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:56:59.359290 0.320476 udp 10.0.2.22 51868 <-> 109.186.128.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:00.360119 0.260690 udp 10.0.2.22 51868 <-> 46.48.181.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:01.361595 0.884477 udp 10.0.2.22 51868 <-> 179.236.58.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:02.363645 0.292085 udp 10.0.2.22 51868 <-> 109.67.249.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:03.355212 0.344152 udp 10.0.2.22 51868 <-> 220.129.41.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:04.356252 0.312561 udp 10.0.2.22 51868 <-> 118.15.72.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:05.357807 0.282827 udp 10.0.2.22 51868 <-> 124.34.178.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:06.359072 0.305832 udp 10.0.2.22 51868 <-> 58.9.3.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:07.360160 0.085411 udp 10.0.2.22 51868 <-> 83.228.41.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:08.362316 0.000000 udp 10.0.2.22 51868 -> 198.179.118.149 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:57:09.363373 0.141895 udp 10.0.2.22 51868 <-> 69.116.80.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:10.354481 0.393297 udp 10.0.2.22 51868 <-> 211.178.220.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:11.356483 0.080131 udp 10.0.2.22 51868 <-> 87.120.215.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:12.358025 0.019500 udp 10.0.2.22 51868 <-> 89.47.233.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:13.359270 0.310449 udp 10.0.2.22 51868 <-> 60.62.16.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:14.360348 0.533583 udp 10.0.2.22 51868 <-> 36.232.94.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:15.361699 0.000000 udp 10.0.2.22 51868 -> 201.208.23.136 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:57:16.363294 0.052187 udp 10.0.2.22 51868 <-> 94.21.66.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:17.354735 0.088129 udp 10.0.2.22 51868 <-> 85.84.83.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:18.236181 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:57:18.356626 0.000000 udp 10.0.2.22 51868 -> 114.24.201.203 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:57:19.357439 0.055867 udp 10.0.2.22 51868 <-> 86.122.152.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:20.359211 0.312675 udp 10.0.2.22 51868 <-> 220.129.38.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:21.360849 0.381327 udp 10.0.2.22 51868 <-> 114.40.170.48 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:22.362225 0.000000 udp 10.0.2.22 51868 -> 86.121.41.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:57:23.363197 0.000000 udp 10.0.2.22 51868 -> 27.2.138.119 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:57:24.354917 0.000000 udp 10.0.2.22 51868 -> 180.215.92.106 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:57:25.356714 0.044463 udp 10.0.2.22 51868 <-> 84.252.22.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:26.358282 0.038628 udp 10.0.2.22 51868 <-> 88.80.117.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:27.358907 0.000000 udp 10.0.2.22 51868 -> 62.18.74.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:57:28.360734 0.076686 udp 10.0.2.22 51868 <-> 88.162.229.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:29.362375 0.116906 udp 10.0.2.22 51868 <-> 79.183.172.249 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:30.363340 1.152484 udp 10.0.2.22 51868 <-> 24.178.45.245 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:32.356270 0.030867 udp 10.0.2.22 51868 <-> 109.193.41.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:33.358048 0.000000 udp 10.0.2.22 51868 -> 176.201.40.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:57:34.358993 0.000000 udp 10.0.2.22 51868 -> 95.144.215.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:57:35.360803 0.211519 udp 10.0.2.22 51868 <-> 184.59.192.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:36.362490 0.000000 udp 10.0.2.22 51868 -> 60.231.84.237 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:57:37.363962 0.000000 udp 10.0.2.22 51868 -> 125.62.101.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:57:38.355018 0.000000 udp 10.0.2.22 51868 -> 178.123.204.152 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:57:39.356709 0.149145 udp 10.0.2.22 51868 <-> 2.181.7.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:40.357746 4.005971 udp 10.0.2.22 51868 <-> 95.220.247.249 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:41.359655 0.000000 udp 10.0.2.22 51868 -> 151.52.90.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:57:42.360674 0.254636 udp 10.0.2.22 51868 <-> 79.183.172.249 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:43.362400 0.099599 udp 10.0.2.22 51868 <-> 178.129.93.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:45.234920 0.000155 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:57:45.355423 0.169658 udp 10.0.2.22 51868 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:46.356798 0.402966 udp 10.0.2.22 51868 <-> 60.231.84.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:47.358330 0.173680 udp 10.0.2.22 51868 <-> 184.59.192.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:48.359465 0.424181 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:49.360960 0.000000 udp 10.0.2.22 51868 -> 67.193.64.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:57:50.362663 0.026859 udp 10.0.2.22 51868 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:51.363948 0.141108 udp 10.0.2.22 51868 <-> 79.183.172.249 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:52.355000 0.000000 udp 10.0.2.22 51868 -> 95.144.215.252 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:57:53.356599 0.000000 udp 10.0.2.22 51868 -> 79.27.166.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:57:54.358293 0.206886 udp 10.0.2.22 51868 <-> 98.210.235.8 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:55.359866 0.029477 udp 10.0.2.22 51868 <-> 109.193.41.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:56.360783 0.412608 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:57:57.362158 0.000000 udp 10.0.2.22 51868 -> 176.201.40.242 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:57:58.363612 0.120449 udp 10.0.2.22 51868 <-> 145.236.19.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:58:00.356522 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:01.358018 0.000061 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:01.358079 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:58:02.359537 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:03.360768 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:04.362427 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:05.364096 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:06.355169 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:07.289104 3.001673 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 03:58:07.356467 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:08.358586 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:09.359332 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:10.360988 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:11.362591 4.997063 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:12.233517 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:58:12.363871 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:13.355074 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:14.296925 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:58:14.356977 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:15.357934 0.152879 udp 10.0.2.22 51868 <-> 74.65.45.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:58:17.361112 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:18.362442 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:19.364014 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:20.355234 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:21.356808 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:22.297918 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:58:22.361463 0.000001 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:22.361464 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 03:58:24.361235 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:25.363035 0.163584 udp 10.0.2.22 51868 <-> 98.253.230.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:58:26.364278 0.203234 udp 10.0.2.22 51868 <-> 174.1.110.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:58:27.355534 0.206614 udp 10.0.2.22 51868 <-> 68.35.78.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:58:28.357010 0.388968 udp 10.0.2.22 51868 <-> 118.170.119.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:58:29.358512 0.000000 udp 10.0.2.22 51868 -> 67.187.224.156 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:30.360267 1.051659 udp 10.0.2.22 51868 <-> 95.91.31.14 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:58:32.362746 0.000000 udp 10.0.2.22 51868 -> 114.36.70.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:33.363975 1.210828 udp 10.0.2.22 51868 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:58:34.355258 0.000000 udp 10.0.2.22 51868 -> 180.146.156.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:35.357432 0.180506 udp 10.0.2.22 51868 <-> 66.68.188.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:58:36.358136 0.000000 udp 10.0.2.22 51868 -> 180.215.92.106 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:37.359661 0.100502 udp 10.0.2.22 51868 <-> 88.149.141.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:58:38.301278 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:58:38.361596 0.327362 udp 10.0.2.22 51868 <-> 49.251.197.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:58:39.232514 0.000115 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:58:39.363112 1.046443 udp 10.0.2.22 51868 <-> 89.2.226.235 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:58:41.355626 0.366429 udp 10.0.2.22 51868 <-> 223.19.173.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:58:42.356995 0.000000 udp 10.0.2.22 51868 -> 188.2.105.102 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:43.358585 0.030156 udp 10.0.2.22 51868 <-> 87.97.132.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:58:44.359915 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:45.361375 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:46.363280 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:47.353935 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:48.355774 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:49.356823 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:50.358823 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:51.360103 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:52.361604 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:53.363095 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:54.354349 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:55.355867 0.000000 udp 10.0.2.22 51868 -> 114.36.70.1 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:56.357644 0.886247 udp 10.0.2.22 51868 <-> 111.249.13.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:58:57.358629 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:58:58.360258 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:00.363393 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:01.354639 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:02.355528 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:03.357202 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:04.358638 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:05.360386 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:06.231529 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:59:06.361951 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:07.362999 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:08.354470 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:09.356022 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:10.306959 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 03:59:10.357032 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:11.358961 0.000000 udp 10.0.2.22 51868 -> 114.36.70.1 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:12.360618 0.031774 udp 10.0.2.22 51868 <-> 87.97.132.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:59:13.362096 0.147687 udp 10.0.2.22 51868 <-> 98.30.47.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:59:14.363144 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:16.355836 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:17.357611 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:18.358945 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:19.360522 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:20.361715 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:21.362839 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:22.354443 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:23.356169 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:24.357405 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:25.358794 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:26.360213 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:27.361472 0.374573 udp 10.0.2.22 51868 <-> 114.36.70.1 16464 CON 0 0 5 3618 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:59:28.363193 2.140925 udp 10.0.2.22 51868 <-> 98.30.47.92 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:59:29.354663 0.000000 udp 10.0.2.22 51868 -> 188.2.105.102 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:31.357655 0.316635 udp 10.0.2.22 51868 <-> 180.56.125.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:59:32.358957 1.001239 udp 10.0.2.22 51868 <-> 111.249.13.74 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:59:33.230332 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:59:34.361926 0.162559 udp 10.0.2.22 51868 <-> 69.180.126.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:59:35.363656 0.000000 udp 10.0.2.22 51868 -> 1.170.91.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:36.354766 0.034033 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:59:37.356502 1.001026 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:59:39.359444 0.481171 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:59:40.360627 0.198920 udp 10.0.2.22 51868 <-> 98.140.253.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:59:41.361651 0.194675 udp 10.0.2.22 51868 <-> 98.247.242.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:59:42.363261 4.374597 udp 10.0.2.22 51868 <-> 195.191.218.17 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:59:43.354590 0.000000 udp 10.0.2.22 51868 -> 178.89.70.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:44.356629 0.047007 udp 10.0.2.22 51868 <-> 5.12.105.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:59:45.357510 0.000000 udp 10.0.2.22 51868 -> 72.201.77.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:47.380368 0.000000 udp 10.0.2.22 51868 -> 118.175.82.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:48.382110 0.000000 udp 10.0.2.22 51868 -> 94.155.181.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:49.383352 0.421626 udp 10.0.2.22 51868 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:59:50.374758 0.218588 udp 10.0.2.22 51868 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:59:51.375982 0.000000 udp 10.0.2.22 51868 -> 24.75.169.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:52.378181 1.154564 udp 10.0.2.22 51868 <-> 174.100.71.86 16464 CON 0 0 4 496 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:59:54.380444 0.000000 udp 10.0.2.22 51868 -> 89.40.194.89 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:55.382154 0.000000 udp 10.0.2.22 51868 -> 74.5.156.97 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:56.383404 0.374886 udp 10.0.2.22 51868 <-> 190.78.154.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:59:57.374792 0.297579 udp 10.0.2.22 51868 <-> 60.56.154.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 03:59:58.376601 0.000000 udp 10.0.2.22 51868 -> 72.201.77.19 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 03:59:59.377775 1.371406 udp 10.0.2.22 51868 <-> 195.191.218.17 16464 CON 0 0 6 3676 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:00.248985 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:00:01.380403 0.000000 udp 10.0.2.22 51868 -> 188.2.254.25 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:00:02.382453 0.196930 udp 10.0.2.22 51868 <-> 98.247.242.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:03.383266 1.495113 udp 10.0.2.22 51868 <-> 177.181.21.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:04.375177 0.296048 udp 10.0.2.22 51868 <-> 60.56.154.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:05.376151 0.026493 udp 10.0.2.22 51868 <-> 109.193.41.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:06.377828 0.000000 udp 10.0.2.22 51868 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:00:07.379338 0.160596 udp 10.0.2.22 51868 <-> 66.176.196.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:08.380674 2.994600 udp 10.0.2.22 51868 -> 115.241.146.241 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:00:09.382362 0.346089 udp 10.0.2.22 51868 <-> 111.254.125.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:10.383679 0.000000 udp 10.0.2.22 51868 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:00:12.376187 0.155837 udp 10.0.2.22 51868 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:13.378257 0.317001 udp 10.0.2.22 51868 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:14.379643 0.000000 udp 10.0.2.22 51868 -> 61.227.54.62 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:00:15.380533 3.239241 udp 10.0.2.22 51868 <-> 183.83.32.66 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:16.382340 3.151875 udp 10.0.2.22 51868 <-> 71.235.63.43 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:17.383721 0.148056 udp 10.0.2.22 51868 <-> 70.82.157.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:20.377684 0.155996 udp 10.0.2.22 51868 <-> 66.31.49.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:21.379336 0.000000 udp 10.0.2.22 51868 -> 222.155.236.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:00:22.380840 0.000000 udp 10.0.2.22 51868 -> 79.25.244.31 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:00:23.382414 0.736271 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:24.383465 0.149208 udp 10.0.2.22 51868 <-> 70.82.157.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:25.375126 0.056580 udp 10.0.2.22 51868 <-> 86.122.145.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:26.377048 2.002145 udp 10.0.2.22 51868 -> 220.143.102.26 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:00:27.257938 0.000103 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:00:27.378247 0.240427 udp 10.0.2.22 51868 <-> 75.85.120.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:29.380962 0.000000 udp 10.0.2.22 51868 -> 116.202.174.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:00:30.382166 0.000000 udp 10.0.2.22 51868 -> 109.192.35.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:00:31.384184 3.147537 udp 10.0.2.22 51868 <-> 66.31.49.90 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:32.375153 0.000000 udp 10.0.2.22 51868 -> 61.70.234.252 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:00:33.376758 0.205656 udp 10.0.2.22 51868 <-> 69.221.161.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:35.379686 1.001338 udp 10.0.2.22 51868 <-> 5.12.192.28 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:37.382415 0.000000 udp 10.0.2.22 51868 -> 61.70.234.252 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:00:38.383700 0.181913 udp 10.0.2.22 51868 <-> 69.221.161.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:39.375219 1.001775 udp 10.0.2.22 51868 <-> 61.227.54.62 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:41.377860 0.000000 udp 10.0.2.22 51868 -> 220.143.102.26 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:00:42.380028 0.000000 udp 10.0.2.22 51868 -> 109.192.35.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:00:43.381300 0.113695 udp 10.0.2.22 51868 <-> 79.25.244.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:44.382861 0.000000 udp 10.0.2.22 51868 -> 5.12.192.28 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:00:45.383840 0.000000 udp 10.0.2.22 51868 -> 222.155.236.28 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:00:46.375415 0.000000 udp 10.0.2.22 51868 -> 61.70.234.252 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:00:47.376948 0.455741 udp 10.0.2.22 51868 <-> 180.215.92.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:48.378168 0.145364 udp 10.0.2.22 51868 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:49.379814 0.047006 udp 10.0.2.22 51868 <-> 94.244.66.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:50.381066 1.007121 udp 10.0.2.22 51868 <-> 147.229.140.10 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:52.383901 0.486711 udp 10.0.2.22 51868 <-> 78.157.7.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:53.375722 0.067887 udp 10.0.2.22 51868 <-> 86.104.76.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:54.256915 0.000106 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:00:54.376768 0.000000 udp 10.0.2.22 51868 -> 173.174.0.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:00:55.378295 0.033187 udp 10.0.2.22 51868 <-> 81.226.88.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:56.379765 0.000000 udp 10.0.2.22 51868 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:00:57.381462 0.000000 udp 10.0.2.22 51868 -> 216.70.231.226 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:00:58.382705 0.410032 udp 10.0.2.22 51868 <-> 112.119.39.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:00:59.384438 0.129055 udp 10.0.2.22 51868 <-> 178.72.107.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:00.375178 0.157323 udp 10.0.2.22 51868 <-> 70.189.26.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:01.376692 0.098472 udp 10.0.2.22 51868 <-> 141.101.8.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:02.378441 0.000000 udp 10.0.2.22 51868 -> 157.14.178.157 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:01:03.380010 0.346759 udp 10.0.2.22 51868 <-> 114.25.138.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:04.381178 0.101298 udp 10.0.2.22 51868 <-> 79.11.152.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:05.382508 0.272587 udp 10.0.2.22 51868 <-> 181.177.210.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:06.384037 0.350995 udp 10.0.2.22 51868 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:07.375240 0.000000 udp 10.0.2.22 51868 -> 81.147.68.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:01:08.377359 0.000000 udp 10.0.2.22 51868 -> 196.219.84.31 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:01:09.378774 1.047067 udp 10.0.2.22 51868 <-> 213.231.166.253 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:11.381904 0.139199 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:12.382564 0.181920 udp 10.0.2.22 51868 <-> 96.2.150.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:13.374419 0.313807 udp 10.0.2.22 51868 <-> 218.152.217.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:14.375636 0.000000 udp 10.0.2.22 51868 -> 201.222.176.32 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:01:15.377641 0.333255 udp 10.0.2.22 51868 <-> 177.107.236.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:16.378245 0.162968 udp 10.0.2.22 51868 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:17.379983 0.000000 udp 10.0.2.22 51868 -> 86.121.18.55 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:01:18.381286 0.166878 udp 10.0.2.22 51868 <-> 66.190.71.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:19.383139 1.446995 udp 10.0.2.22 51868 <-> 80.140.130.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:20.374001 0.000000 udp 10.0.2.22 51868 -> 201.254.97.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:01:21.255613 0.000110 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:01:21.375407 0.000000 udp 10.0.2.22 51868 -> 80.153.45.40 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:01:22.377287 0.000000 udp 10.0.2.22 51868 -> 216.125.238.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:01:23.378272 0.437440 udp 10.0.2.22 51868 <-> 190.78.28.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:24.380274 3.728080 udp 10.0.2.22 51868 <-> 74.242.10.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:25.381378 0.073130 udp 10.0.2.22 51868 <-> 151.16.39.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:26.382829 0.306603 udp 10.0.2.22 51868 <-> 49.128.168.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:27.374436 0.000000 udp 10.0.2.22 51868 -> 61.227.75.148 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:01:28.375856 0.322149 udp 10.0.2.22 51868 <-> 61.19.25.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:29.377531 0.000000 udp 10.0.2.22 51868 -> 188.115.242.165 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:01:30.378731 0.000000 udp 10.0.2.22 51868 -> 181.185.234.61 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:01:31.380280 0.358053 udp 10.0.2.22 51868 <-> 112.104.195.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:32.381676 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:01:33.383080 0.191233 udp 10.0.2.22 51868 <-> 116.73.211.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:34.374627 0.390213 udp 10.0.2.22 51868 <-> 118.160.211.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:35.375522 0.224310 udp 10.0.2.22 51868 <-> 50.130.138.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:36.376933 0.000000 udp 10.0.2.22 51868 -> 71.203.142.85 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:01:37.379050 0.041865 udp 10.0.2.22 51868 <-> 147.156.82.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:38.380337 0.201408 udp 10.0.2.22 51868 <-> 70.180.235.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:39.381284 0.158458 udp 10.0.2.22 51868 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:40.383141 1.253216 udp 10.0.2.22 51868 <-> 208.101.72.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:41.374695 0.000000 udp 10.0.2.22 51868 -> 114.136.238.240 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:01:42.375790 3.004461 udp 10.0.2.22 51868 -> 79.27.166.246 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:01:43.377061 0.000000 udp 10.0.2.22 51868 -> 24.193.202.251 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:01:44.378601 0.173070 udp 10.0.2.22 51868 <-> 76.125.64.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:46.381787 0.135339 udp 10.0.2.22 51868 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:47.383084 0.159013 udp 10.0.2.22 51868 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:48.254079 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:01:48.374641 0.701732 udp 10.0.2.22 51868 <-> 92.229.124.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:49.376242 1.134228 udp 10.0.2.22 51868 <-> 5.34.126.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:51.378698 0.041076 udp 10.0.2.22 51868 <-> 78.90.253.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:52.380298 3.888172 udp 10.0.2.22 51868 <-> 68.97.115.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:53.381696 0.356922 udp 10.0.2.22 51868 <-> 114.38.157.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:54.382846 0.207403 udp 10.0.2.22 51868 <-> 66.237.94.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:55.374476 0.151209 udp 10.0.2.22 51868 <-> 98.25.25.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:56.375742 0.000000 udp 10.0.2.22 51868 -> 81.180.18.42 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:01:57.377707 0.045550 udp 10.0.2.22 51868 <-> 82.25.161.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:58.378658 0.047399 udp 10.0.2.22 51868 <-> 86.121.142.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:01:59.380014 0.000000 udp 10.0.2.22 51868 -> 24.60.37.90 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:00.381617 0.126359 udp 10.0.2.22 51868 <-> 92.247.91.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:02:01.382924 0.048495 udp 10.0.2.22 51868 <-> 85.232.158.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:02:02.374822 0.118860 udp 10.0.2.22 51868 <-> 84.120.186.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:02:03.375847 0.000000 udp 10.0.2.22 51868 -> 199.120.95.133 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:04.377253 0.000000 udp 10.0.2.22 51868 -> 79.112.79.194 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:05.378642 0.035994 udp 10.0.2.22 51868 <-> 81.180.18.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:02:06.380432 0.046431 udp 10.0.2.22 51868 <-> 82.25.161.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:02:07.381882 0.045876 udp 10.0.2.22 51868 <-> 86.121.142.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:02:08.383814 0.000000 udp 10.0.2.22 51868 -> 199.120.95.133 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:09.374573 0.559558 udp 10.0.2.22 51868 <-> 190.36.123.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:02:10.376591 1.000808 udp 10.0.2.22 51868 <-> 66.130.116.74 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:02:12.379320 0.310574 udp 10.0.2.22 51868 <-> 211.225.215.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:02:13.380399 0.480965 udp 10.0.2.22 51868 <-> 117.205.247.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:02:14.382452 0.162146 udp 10.0.2.22 51868 <-> 74.192.111.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:02:15.252941 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:02:15.383448 0.389590 udp 10.0.2.22 51868 <-> 220.102.212.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:02:16.374611 0.013981 udp 10.0.2.22 51868 <-> 89.212.87.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:02:17.376149 0.145354 udp 10.0.2.22 51868 <-> 67.80.216.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:02:18.377921 0.321864 udp 10.0.2.22 51868 <-> 58.8.166.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:02:19.378968 0.154302 udp 10.0.2.22 51868 <-> 173.28.68.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:02:20.380202 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:21.382002 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:22.383612 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:23.374929 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:24.376301 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:25.377432 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:26.378824 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:27.380464 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:28.382317 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:29.383155 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:30.374790 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:31.376603 0.103849 udp 10.0.2.22 51868 <-> 82.239.45.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:02:32.377672 0.254315 udp 10.0.2.22 51868 <-> 117.199.87.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:02:33.379039 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:34.380706 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:35.382563 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:36.383663 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:37.375343 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:38.376185 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:39.378257 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:40.379376 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:41.381016 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:42.252208 0.000142 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:02:42.381935 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:43.383405 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:44.374873 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:45.376335 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:46.378042 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:47.379783 0.064860 udp 10.0.2.22 51868 <-> 82.239.45.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:02:48.380665 0.277487 udp 10.0.2.22 51868 <-> 58.8.166.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:02:49.382418 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:50.383488 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:51.375096 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:52.376747 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:53.377665 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:54.379252 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:55.381017 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:56.382595 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:57.383668 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:58.375431 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:02:59.376431 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:03:00.378440 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:03:01.379410 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:03:02.381033 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:03:03.382467 0.067775 udp 10.0.2.22 51868 <-> 82.239.45.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:04.383507 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:03:05.375672 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:03:06.376417 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:03:07.378217 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:03:08.379903 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:03:09.250487 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:03:09.381102 2.993987 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:03:10.382237 2.994668 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:03:11.384256 0.153386 udp 10.0.2.22 51868 <-> 173.28.68.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:14.378505 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:03:15.379647 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:03:16.380967 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:03:17.382502 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:03:18.383899 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:03:19.375057 0.142775 udp 10.0.2.22 51868 <-> 76.100.52.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:20.376736 0.229694 udp 10.0.2.22 51868 <-> 75.54.70.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:21.378387 0.500624 udp 10.0.2.22 51868 <-> 201.213.98.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:22.379400 0.856274 udp 10.0.2.22 51868 <-> 27.4.145.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:23.380795 0.285633 udp 10.0.2.22 51868 <-> 186.94.84.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:24.382787 0.215500 udp 10.0.2.22 51868 <-> 115.252.37.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:25.384284 0.028375 udp 10.0.2.22 51868 <-> 77.70.127.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:26.375149 0.000000 udp 10.0.2.22 51868 -> 117.204.57.134 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:03:27.376761 1.161956 udp 10.0.2.22 51868 <-> 70.80.21.145 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:29.380028 0.027949 udp 10.0.2.22 51868 <-> 46.108.106.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:30.381001 0.331989 udp 10.0.2.22 51868 <-> 223.16.38.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:31.382524 0.240917 udp 10.0.2.22 51868 <-> 14.97.60.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:32.383942 0.365287 udp 10.0.2.22 51868 <-> 113.252.190.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:33.375168 0.201117 udp 10.0.2.22 51868 <-> 69.5.109.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:34.376706 0.157531 udp 10.0.2.22 51868 <-> 174.100.202.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:35.378212 0.000000 udp 10.0.2.22 51868 -> 14.97.33.49 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:03:36.249749 0.000114 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:03:36.379562 0.365081 udp 10.0.2.22 51868 <-> 1.160.137.24 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:37.381333 0.665097 udp 10.0.2.22 51868 <-> 184.91.50.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:38.382835 0.025137 udp 10.0.2.22 51868 <-> 85.130.45.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:39.384440 0.000000 udp 10.0.2.22 51868 -> 192.168.254.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:03:40.375236 0.378914 udp 10.0.2.22 51868 <-> 200.171.250.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:41.376667 0.293736 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:42.378974 3.003503 udp 10.0.2.22 51868 -> 189.111.30.68 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:03:43.380166 0.265692 udp 10.0.2.22 51868 <-> 190.193.222.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:44.381591 0.000000 udp 10.0.2.22 51868 -> 61.124.224.35 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:03:46.374342 1.163725 udp 10.0.2.22 51868 <-> 190.94.233.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:47.375378 0.000000 udp 10.0.2.22 51868 -> 79.40.192.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:03:48.377035 3.053528 udp 10.0.2.22 51868 <-> 5.151.60.73 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:49.378639 0.145277 udp 10.0.2.22 51868 <-> 174.108.78.50 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:50.379624 0.000000 udp 10.0.2.22 51868 -> 189.111.30.68 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:03:52.382504 0.265098 udp 10.0.2.22 51868 <-> 190.193.222.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:53.374005 0.139723 udp 10.0.2.22 51868 <-> 97.80.163.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:54.375829 0.177233 udp 10.0.2.22 51868 <-> 184.49.10.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:55.377444 0.000000 udp 10.0.2.22 51868 -> 123.201.133.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:03:56.378852 0.055103 udp 10.0.2.22 51868 <-> 94.253.254.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:57.380388 0.043507 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:03:58.381240 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:03:59.382838 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:04:00.374432 0.030964 udp 10.0.2.22 51868 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:01.375465 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:04:02.377236 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:04:03.258910 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:04:03.378742 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:04:04.380039 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:04:05.381192 0.471981 udp 10.0.2.22 51868 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:06.383245 0.370007 udp 10.0.2.22 51868 <-> 177.106.47.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:07.374823 0.061337 udp 10.0.2.22 51868 <-> 95.169.211.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:08.376123 0.000000 udp 10.0.2.22 51868 -> 74.71.101.40 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:04:09.377565 0.000000 udp 10.0.2.22 51868 -> 88.25.35.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:04:10.378668 0.005170 udp 10.0.2.22 51868 <-> 147.229.140.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:11.379819 3.030819 udp 10.0.2.22 51868 <-> 188.143.29.9 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:12.381761 0.068999 udp 10.0.2.22 51868 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:13.382707 0.142346 udp 10.0.2.22 51868 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:15.375725 1.164397 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:17.378505 0.000000 udp 10.0.2.22 51868 -> 74.71.101.40 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:04:18.380437 0.059846 udp 10.0.2.22 51868 <-> 95.169.211.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:19.381781 0.136696 udp 10.0.2.22 51868 <-> 98.204.133.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:20.383417 0.000000 udp 10.0.2.22 51868 -> 192.168.1.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:04:21.374433 0.000000 udp 10.0.2.22 51868 -> 88.25.35.17 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:04:22.375911 0.005211 udp 10.0.2.22 51868 <-> 147.229.140.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:23.377701 0.000000 udp 10.0.2.22 51868 -> 190.57.242.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:04:24.378920 0.306708 udp 10.0.2.22 51868 <-> 201.68.147.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:25.380610 0.000000 udp 10.0.2.22 51868 -> 90.232.129.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:04:26.381621 0.044751 udp 10.0.2.22 51868 <-> 86.18.63.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:27.383239 0.060722 udp 10.0.2.22 51868 <-> 95.169.211.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:28.374489 3.672738 udp 10.0.2.22 51868 <-> 202.140.211.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:29.376136 0.050952 udp 10.0.2.22 51868 <-> 79.114.8.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:30.256901 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:04:30.377620 0.039844 udp 10.0.2.22 51868 <-> 178.150.156.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:31.379085 0.000000 udp 10.0.2.22 51868 -> 192.168.1.10 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:04:32.380018 0.000000 udp 10.0.2.22 51868 -> 89.65.83.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:04:33.381709 0.037617 udp 10.0.2.22 51868 <-> 188.143.29.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:34.383009 0.000000 udp 10.0.2.22 51868 -> 115.240.45.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:04:35.374463 0.419177 udp 10.0.2.22 51868 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:36.376203 0.070775 udp 10.0.2.22 51868 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:37.377432 0.398804 udp 10.0.2.22 51868 <-> 109.186.128.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:38.379186 0.210645 udp 10.0.2.22 51868 <-> 71.92.129.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:39.380347 0.147251 udp 10.0.2.22 51868 <-> 70.82.157.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:40.381920 0.000000 udp 10.0.2.22 51868 -> 173.220.238.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:04:41.383659 0.000000 udp 10.0.2.22 51868 -> 174.69.157.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:04:42.374944 0.040177 udp 10.0.2.22 51868 <-> 46.10.189.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:43.376320 0.138785 udp 10.0.2.22 51868 <-> 91.105.64.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:44.377714 0.150855 udp 10.0.2.22 51868 <-> 208.53.224.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:45.379375 0.048092 udp 10.0.2.22 51868 <-> 89.235.244.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:46.380374 0.031076 udp 10.0.2.22 51868 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:47.381951 0.000000 udp 10.0.2.22 51868 -> 188.246.77.25 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:04:48.383149 0.000000 udp 10.0.2.22 51868 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:04:49.374854 0.000000 udp 10.0.2.22 51868 -> 195.189.250.151 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:04:50.375880 0.505950 udp 10.0.2.22 51868 <-> 1.172.59.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:51.447631 0.319023 udp 10.0.2.22 51868 <-> 119.173.79.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:52.449523 0.156217 udp 10.0.2.22 51868 <-> 72.239.246.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:53.450318 0.427948 udp 10.0.2.22 51868 <-> 181.177.210.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:54.452143 0.043125 udp 10.0.2.22 51868 <-> 5.15.59.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:55.453615 0.250882 udp 10.0.2.22 51868 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:04:56.444628 4.006546 udp 10.0.2.22 51868 -> 177.149.127.27 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:04:57.326051 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:04:57.446556 0.000000 udp 10.0.2.22 51868 -> 68.14.166.5 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:04:58.447696 0.000000 udp 10.0.2.22 51868 -> 115.240.45.11 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:04:59.449265 0.221378 udp 10.0.2.22 51868 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:01.452312 1.379567 udp 10.0.2.22 51868 <-> 186.191.29.30 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:03.445402 0.370059 udp 10.0.2.22 51868 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:04.446963 0.690041 udp 10.0.2.22 51868 <-> 60.62.114.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:05.448141 0.000000 udp 10.0.2.22 51868 -> 14.198.8.143 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:05:06.449132 0.000000 udp 10.0.2.22 51868 -> 190.73.247.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:05:07.450641 0.063009 udp 10.0.2.22 51868 <-> 85.84.242.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:08.451880 3.389551 udp 10.0.2.22 51868 <-> 61.227.65.204 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:09.453780 0.152876 udp 10.0.2.22 51868 <-> 78.247.174.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:10.445159 0.000000 udp 10.0.2.22 51868 -> 65.8.167.109 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:05:12.448023 0.461899 udp 10.0.2.22 51868 <-> 111.243.172.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:13.449127 0.395231 udp 10.0.2.22 51868 <-> 61.223.95.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:14.403184 3.001579 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 04:05:14.450487 0.022870 udp 10.0.2.22 51868 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:15.452053 0.143202 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:16.453671 0.358045 udp 10.0.2.22 51868 <-> 61.124.224.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:17.444890 0.052119 udp 10.0.2.22 51868 <-> 94.21.66.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:18.446253 0.000000 udp 10.0.2.22 51868 -> 85.185.188.194 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:05:19.448335 0.048691 udp 10.0.2.22 51868 <-> 95.91.31.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:20.449224 0.306803 udp 10.0.2.22 51868 <-> 114.181.159.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:21.410762 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:05:21.450880 0.097210 udp 10.0.2.22 51868 <-> 79.6.111.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:22.452362 0.400259 udp 10.0.2.22 51868 <-> 111.240.40.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:23.454061 0.059956 udp 10.0.2.22 51868 <-> 188.24.130.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:24.325281 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:05:24.445071 2.336475 udp 10.0.2.22 51868 <-> 123.241.89.243 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:25.446635 0.303788 udp 10.0.2.22 51868 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:27.449510 2.039307 udp 10.0.2.22 51868 <-> 188.254.136.142 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:28.451380 0.000000 udp 10.0.2.22 51868 -> 187.34.27.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:05:29.412116 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:05:30.453762 0.249560 udp 10.0.2.22 51868 <-> 190.153.152.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:31.445501 0.371095 udp 10.0.2.22 51868 <-> 111.249.249.198 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:32.446451 0.137910 udp 10.0.2.22 51868 <-> 111.91.84.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:33.448253 0.258301 udp 10.0.2.22 51868 <-> 49.206.155.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:34.449433 0.050798 udp 10.0.2.22 51868 <-> 93.152.154.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:35.450724 0.068277 udp 10.0.2.22 51868 <-> 85.230.38.241 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:36.452377 0.292000 udp 10.0.2.22 51868 <-> 24.232.15.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:37.453976 0.000000 udp 10.0.2.22 51868 -> 90.152.7.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:05:38.445183 0.162739 udp 10.0.2.22 51868 <-> 62.57.140.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:39.446890 0.411869 udp 10.0.2.22 51868 <-> 14.99.42.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:40.447912 1.548825 udp 10.0.2.22 51868 <-> 50.80.122.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:41.449418 0.174041 udp 10.0.2.22 51868 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:42.451015 0.146763 udp 10.0.2.22 51868 <-> 24.74.24.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:43.452468 0.246322 udp 10.0.2.22 51868 <-> 27.251.231.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:44.454265 0.048806 udp 10.0.2.22 51868 <-> 5.14.212.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:45.415361 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:05:45.445436 0.165974 udp 10.0.2.22 51868 <-> 173.25.161.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:46.446942 0.114588 udp 10.0.2.22 51868 <-> 79.6.111.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:47.448587 4.005108 udp 10.0.2.22 51868 <-> 95.85.162.22 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:48.449535 0.186327 udp 10.0.2.22 51868 <-> 199.117.183.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:49.450982 0.120635 udp 10.0.2.22 51868 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:50.452790 0.065553 udp 10.0.2.22 51868 <-> 188.241.23.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:51.323902 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:05:52.445171 1.081318 udp 10.0.2.22 51868 <-> 128.68.67.11 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:52.502086 0.000000 udp 10.0.2.22 51868 <- 95.85.162.22 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:05:54.447985 0.048604 udp 10.0.2.22 51868 <-> 81.226.204.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:55.450129 0.076972 udp 10.0.2.22 51868 <-> 77.27.210.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:56.451365 0.000000 udp 10.0.2.22 51868 -> 37.19.108.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:05:57.452317 0.000000 udp 10.0.2.22 51868 -> 76.109.136.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:05:58.453772 0.051799 udp 10.0.2.22 51868 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:05:59.445432 0.060296 udp 10.0.2.22 51868 <-> 178.149.181.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:00.447089 2.765897 udp 10.0.2.22 51868 <-> 122.50.160.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:01.448653 0.000000 udp 10.0.2.22 51868 -> 114.40.217.73 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:02.449997 0.362959 udp 10.0.2.22 51868 <-> 189.93.48.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:03.451179 0.047675 udp 10.0.2.22 51868 <-> 78.157.66.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:04.452407 0.049263 udp 10.0.2.22 51868 <-> 88.222.156.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:05.454507 0.433006 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:06.445414 0.255823 udp 10.0.2.22 51868 <-> 183.83.228.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:07.446798 0.159490 udp 10.0.2.22 51868 <-> 24.74.24.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:08.448615 0.527255 udp 10.0.2.22 51868 <-> 111.252.202.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:09.449724 0.345323 udp 10.0.2.22 51868 <-> 187.49.27.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:10.451365 0.624052 udp 10.0.2.22 51868 <-> 87.18.93.238 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:11.452977 0.000000 udp 10.0.2.22 51868 -> 74.56.6.140 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:12.454599 0.345892 udp 10.0.2.22 51868 <-> 190.193.54.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:13.445999 3.884553 udp 10.0.2.22 51868 <-> 92.64.64.212 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:14.447079 0.378609 udp 10.0.2.22 51868 <-> 111.188.22.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:16.449671 0.032741 udp 10.0.2.22 51868 <-> 94.231.32.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:17.421282 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:06:17.451370 0.359435 udp 10.0.2.22 51868 <-> 1.165.130.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:18.322802 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:06:18.453277 0.000000 udp 10.0.2.22 51868 -> 79.27.233.25 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:19.401185 0.000000 udp 10.0.2.22 51868 <- 92.64.64.212 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:19.444046 3.744520 udp 10.0.2.22 51868 <-> 202.140.211.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:20.445399 0.075836 udp 10.0.2.22 51868 <-> 77.27.210.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:21.446800 0.048452 udp 10.0.2.22 51868 <-> 188.246.77.25 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:22.448733 0.050697 udp 10.0.2.22 51868 <-> 88.222.198.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:23.450162 0.155967 udp 10.0.2.22 51868 <-> 202.71.27.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:24.451128 0.355878 udp 10.0.2.22 51868 <-> 1.73.157.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:25.453289 0.330118 udp 10.0.2.22 51868 <-> 1.163.129.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:26.444417 0.063916 udp 10.0.2.22 51868 <-> 82.130.171.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:27.445979 0.000000 udp 10.0.2.22 51868 -> 1.34.204.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:28.447245 0.000000 udp 10.0.2.22 51868 -> 76.206.16.81 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:29.448582 0.041380 udp 10.0.2.22 51868 <-> 83.250.76.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:30.450281 0.000000 udp 10.0.2.22 51868 -> 31.59.37.139 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:32.452870 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:33.444765 0.000060 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:33.444825 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:06:34.446159 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:35.446960 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:36.448376 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:37.450142 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:38.451973 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:39.452819 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:40.444690 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:41.445902 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:42.447095 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:43.449117 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:44.450241 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:45.321175 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:06:45.451785 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:46.452880 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:47.444355 0.078880 udp 10.0.2.22 51868 <-> 82.228.128.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:48.446329 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:49.447506 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:50.448817 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:51.450227 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:52.451762 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:53.453276 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:54.444565 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:06:55.445911 0.378809 udp 10.0.2.22 51868 <-> 124.12.35.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:56.447799 0.159812 udp 10.0.2.22 51868 <-> 66.30.121.102 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:57.448711 0.146564 udp 10.0.2.22 51868 <-> 69.122.87.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:58.450547 0.142419 udp 10.0.2.22 51868 <-> 24.47.139.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:06:59.452044 0.091860 udp 10.0.2.22 51868 <-> 89.205.104.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:07:00.453441 0.341259 udp 10.0.2.22 51868 <-> 115.242.160.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:07:02.445835 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:03.447884 0.316617 udp 10.0.2.22 51868 <-> 181.177.19.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:07:05.450649 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:06.451947 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:07.453278 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:08.445031 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:09.445959 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:10.447807 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:11.449365 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:12.320093 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:07:12.450934 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:13.451610 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:14.453084 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:15.444483 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:16.446731 4.005556 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:16.446808 4.005479 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 2 172 flow=Background 1970/01/01 04:07:17.447716 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:18.449447 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:19.450497 0.361037 udp 10.0.2.22 51868 <-> 59.149.197.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:07:21.453817 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:22.445156 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:23.446716 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:24.447656 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:25.449406 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:26.450443 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:27.451714 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:28.453700 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:29.445198 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:30.446409 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:31.447790 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:32.448993 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:33.450688 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:35.453554 0.000000 udp 10.0.2.22 51868 -> 78.157.87.145 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:35.784508 0.013243 udp 10.0.2.22 60016 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 04:07:35.798049 0.000000 udp 10.0.2.22 60017 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:36.444675 0.144082 udp 10.0.2.22 51868 <-> 130.15.154.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:07:37.446507 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:38.447828 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:39.449217 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:40.320637 0.000090 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:07:40.450993 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:41.452383 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:42.453624 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:43.445435 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:44.446570 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:45.448038 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:46.449213 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:47.450787 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:48.452436 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:49.453774 0.000062 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:07:49.453836 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:07:51.446607 0.264937 udp 10.0.2.22 51868 <-> 200.122.103.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:07:52.448079 0.159826 udp 10.0.2.22 51868 <-> 68.59.89.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:07:53.449429 0.359945 udp 10.0.2.22 51868 <-> 59.149.197.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:07:54.450826 0.173581 udp 10.0.2.22 51868 <-> 97.85.181.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:07:55.452375 0.116163 udp 10.0.2.22 51868 <-> 178.25.74.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:07:56.453526 0.135024 udp 10.0.2.22 51868 <-> 95.91.31.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:07:57.444880 0.153526 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:07:58.446839 0.175473 udp 10.0.2.22 51868 <-> 24.233.63.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:07:59.448333 0.166291 udp 10.0.2.22 51868 <-> 75.115.10.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:00.449606 0.337878 udp 10.0.2.22 51868 <-> 177.107.236.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:01.450608 0.367543 udp 10.0.2.22 51868 <-> 117.203.81.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:02.452797 0.169911 udp 10.0.2.22 51868 <-> 68.206.2.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:03.453555 0.046490 udp 10.0.2.22 51868 <-> 84.238.186.224 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:04.445755 0.057957 udp 10.0.2.22 51868 <-> 81.253.5.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:05.446939 1.169586 udp 10.0.2.22 51868 <-> 24.182.105.127 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:07.319704 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:08:07.449296 2.308864 udp 10.0.2.22 51868 <-> 58.152.190.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:08.451347 0.027033 udp 10.0.2.22 51868 <-> 178.48.110.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:09.452441 0.235211 udp 10.0.2.22 51868 <-> 24.37.209.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:10.454163 0.299246 udp 10.0.2.22 51868 <-> 165.132.238.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:11.445175 0.346491 udp 10.0.2.22 51868 <-> 14.53.244.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:12.447003 0.287089 udp 10.0.2.22 51868 <-> 115.161.4.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:13.448065 0.161106 udp 10.0.2.22 51868 <-> 98.103.195.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:14.449428 0.300341 udp 10.0.2.22 51868 <-> 60.62.152.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:15.450858 0.165494 udp 10.0.2.22 51868 <-> 68.206.2.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:16.452803 0.327409 udp 10.0.2.22 51868 <-> 219.116.88.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:17.453924 0.000000 udp 10.0.2.22 51868 -> 177.34.126.72 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:08:18.445300 0.630858 udp 10.0.2.22 51868 <-> 190.190.69.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:19.447124 0.435399 udp 10.0.2.22 51868 <-> 210.191.138.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:20.448388 0.000000 udp 10.0.2.22 51868 -> 106.209.10.121 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:08:21.449838 0.076109 udp 10.0.2.22 51868 <-> 46.37.84.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:22.451286 0.349804 udp 10.0.2.22 51868 <-> 60.238.117.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:23.452587 0.405363 udp 10.0.2.22 51868 <-> 121.167.236.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:24.453962 0.046413 udp 10.0.2.22 51868 <-> 78.88.33.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:25.445924 0.017153 udp 10.0.2.22 51868 <-> 88.132.62.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:26.446899 0.060023 udp 10.0.2.22 51868 <-> 5.12.105.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:27.447973 0.061279 udp 10.0.2.22 51868 <-> 85.122.147.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:28.449663 0.217985 udp 10.0.2.22 51868 <-> 71.197.74.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:29.450886 0.000000 udp 10.0.2.22 51868 -> 68.185.124.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:08:30.452807 0.000000 udp 10.0.2.22 51868 -> 186.22.32.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:08:31.454471 0.042807 udp 10.0.2.22 51868 <-> 62.20.193.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:32.445341 0.370059 udp 10.0.2.22 51868 <-> 113.254.24.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:33.446826 0.202807 udp 10.0.2.22 51868 <-> 66.184.241.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:34.328489 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:08:34.448406 0.363905 udp 10.0.2.22 51868 <-> 122.118.209.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:35.450112 0.326289 udp 10.0.2.22 51868 <-> 117.201.181.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:36.451766 0.356116 udp 10.0.2.22 51868 <-> 219.78.101.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:37.452368 0.358540 udp 10.0.2.22 51868 <-> 201.250.89.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:38.454183 0.000000 udp 10.0.2.22 51868 -> 98.240.160.218 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:08:39.445253 0.324762 udp 10.0.2.22 51868 <-> 186.11.18.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:40.447011 0.263370 udp 10.0.2.22 51868 <-> 201.235.247.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:41.448704 0.111961 udp 10.0.2.22 51868 <-> 24.253.132.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:42.449581 0.393802 udp 10.0.2.22 51868 <-> 211.178.220.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:43.451520 0.355462 udp 10.0.2.22 51868 <-> 219.78.101.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:44.452480 0.161458 udp 10.0.2.22 51868 <-> 98.240.160.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:45.453858 0.000000 udp 10.0.2.22 51868 -> 86.183.89.169 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:08:46.445537 0.319628 udp 10.0.2.22 51868 <-> 121.176.122.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:47.447312 0.463443 udp 10.0.2.22 51868 <-> 113.10.113.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:48.448746 0.137368 udp 10.0.2.22 51868 <-> 173.220.69.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:49.449936 0.053880 udp 10.0.2.22 51868 <-> 79.117.214.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:50.451273 0.384195 udp 10.0.2.22 51868 <-> 114.40.25.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:51.453123 0.000000 udp 10.0.2.22 51868 -> 79.7.112.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:08:52.444167 0.013413 udp 10.0.2.22 51868 <-> 89.102.235.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:53.445735 0.137851 udp 10.0.2.22 51868 <-> 69.115.113.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:54.446820 0.163377 udp 10.0.2.22 51868 <-> 49.143.252.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:55.448321 0.000000 udp 10.0.2.22 51868 -> 58.108.171.233 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:08:56.450332 0.229927 udp 10.0.2.22 51868 <-> 92.229.124.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:57.451833 0.050959 udp 10.0.2.22 51868 <-> 37.77.155.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:08:58.452614 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:08:59.444637 0.270221 udp 10.0.2.22 51868 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:00.445938 0.403219 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:01.327433 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:09:01.446991 0.121142 udp 10.0.2.22 51868 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:02.448522 0.173515 udp 10.0.2.22 51868 <-> 69.244.18.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:03.450242 0.000000 udp 10.0.2.22 51868 -> 186.133.240.193 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:09:04.451264 0.378640 udp 10.0.2.22 51868 <-> 61.223.95.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:05.452796 0.041306 udp 10.0.2.22 51868 <-> 85.30.169.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:06.444455 0.308184 udp 10.0.2.22 51868 <-> 210.128.207.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:07.445608 0.160979 udp 10.0.2.22 51868 <-> 184.91.50.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:08.447223 0.176589 udp 10.0.2.22 51868 <-> 62.68.100.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:09.448350 0.369803 udp 10.0.2.22 51868 <-> 220.127.161.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:10.449888 0.000000 udp 10.0.2.22 51868 -> 91.126.197.109 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:09:11.451245 0.050835 udp 10.0.2.22 51868 <-> 86.100.74.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:12.452912 0.220904 udp 10.0.2.22 51868 <-> 201.211.130.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:13.444810 0.000000 udp 10.0.2.22 51868 -> 213.66.160.150 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:09:14.445602 0.000000 udp 10.0.2.22 51868 -> 79.115.73.152 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:09:15.447556 0.032822 udp 10.0.2.22 51868 <-> 213.222.46.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:16.448803 0.035868 udp 10.0.2.22 51868 <-> 130.204.99.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:17.450553 0.161678 udp 10.0.2.22 51868 <-> 70.185.202.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:18.452051 0.377153 udp 10.0.2.22 51868 <-> 61.227.71.220 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:19.452820 0.000000 udp 10.0.2.22 51868 -> 2.180.111.100 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:09:20.444697 0.000000 udp 10.0.2.22 51868 -> 75.110.50.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:09:21.445606 4.510447 udp 10.0.2.22 51868 <-> 95.158.96.32 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:22.447377 0.046133 udp 10.0.2.22 51868 <-> 89.106.103.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:24.450179 0.357216 udp 10.0.2.22 51868 <-> 1.36.190.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:25.451969 0.060558 udp 10.0.2.22 51868 <-> 78.232.24.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:26.453164 0.051728 udp 10.0.2.22 51868 <-> 62.165.227.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:27.444817 0.053357 udp 10.0.2.22 51868 <-> 89.190.113.2 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:28.326004 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:09:28.446092 0.040774 udp 10.0.2.22 51868 <-> 85.30.169.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:29.447328 1.182805 udp 10.0.2.22 51868 <-> 66.19.62.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:30.448942 0.154552 udp 10.0.2.22 51868 <-> 24.158.210.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:31.450157 0.182032 udp 10.0.2.22 51868 <-> 166.230.66.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:32.451971 0.309772 udp 10.0.2.22 51868 <-> 189.79.248.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:33.453208 0.150366 udp 10.0.2.22 51868 <-> 98.226.172.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:34.444536 0.121584 udp 10.0.2.22 51868 <-> 24.102.154.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:35.446381 0.200816 udp 10.0.2.22 51868 <-> 174.1.110.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:36.447194 0.000000 udp 10.0.2.22 51868 -> 89.173.235.151 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:09:37.448944 0.353743 udp 10.0.2.22 51868 <-> 61.61.228.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:38.450250 0.319938 udp 10.0.2.22 51868 <-> 200.141.82.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:39.452028 0.152141 udp 10.0.2.22 51868 <-> 24.47.53.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:40.452978 0.034084 udp 10.0.2.22 51868 <-> 79.113.29.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:41.444988 0.164965 udp 10.0.2.22 51868 <-> 69.169.145.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:42.446282 0.144464 udp 10.0.2.22 51868 <-> 75.177.1.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:43.447488 0.996585 udp 10.0.2.22 51868 <-> 181.16.7.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:44.448756 0.211587 udp 10.0.2.22 51868 <-> 24.8.188.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:45.450366 0.531879 udp 10.0.2.22 51868 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:46.451785 0.045593 udp 10.0.2.22 51868 <-> 85.202.213.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:47.453428 2.055731 udp 10.0.2.22 51868 <-> 91.112.150.234 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:48.445022 0.119696 udp 10.0.2.22 51868 <-> 88.72.192.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:50.447852 0.317246 udp 10.0.2.22 51868 <-> 110.54.26.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:51.449256 0.394406 udp 10.0.2.22 51868 <-> 1.244.171.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:52.450900 0.166831 udp 10.0.2.22 51868 <-> 66.69.203.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:53.452030 0.141839 udp 10.0.2.22 51868 <-> 1.186.124.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:54.453843 0.168274 udp 10.0.2.22 51868 <-> 68.56.123.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:55.324999 0.000125 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:09:55.445054 0.271333 udp 10.0.2.22 51868 <-> 65.60.105.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:56.446540 0.418939 udp 10.0.2.22 51868 <-> 39.117.82.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:57.447409 0.168114 udp 10.0.2.22 51868 <-> 209.33.23.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:58.448989 0.099884 udp 10.0.2.22 51868 <-> 85.210.226.117 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:09:59.450275 2.887945 udp 10.0.2.22 51868 <-> 69.8.5.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:00.452421 0.288033 udp 10.0.2.22 51868 <-> 27.140.82.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:01.453161 0.106094 udp 10.0.2.22 51868 <-> 89.205.104.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:02.445193 0.000000 udp 10.0.2.22 51868 -> 66.130.9.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:10:03.446009 0.143798 udp 10.0.2.22 51868 <-> 75.177.1.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:04.448083 0.332100 udp 10.0.2.22 51868 <-> 183.96.40.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:05.449138 0.168873 udp 10.0.2.22 51868 <-> 96.63.219.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:06.450839 0.046803 udp 10.0.2.22 51868 <-> 89.42.88.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:07.452254 0.000000 udp 10.0.2.22 51868 -> 85.59.39.94 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:10:08.453696 1.133977 udp 10.0.2.22 51868 <-> 76.99.43.125 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:10.446535 0.183519 udp 10.0.2.22 51868 <-> 68.59.104.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:11.448013 0.000000 udp 10.0.2.22 51868 -> 75.130.142.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:10:12.449485 0.000000 udp 10.0.2.22 51868 -> 68.192.3.101 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:10:13.450735 4.309739 udp 10.0.2.22 51868 -> 85.185.254.81 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:10:17.760474 0.000000 icmp 172.10.10.14 0x0303 -> 10.0.2.22 0x5040 URP 192 1 70 flow=Background 1970/01/01 04:10:14.451824 0.139618 udp 10.0.2.22 51868 <-> 76.99.43.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:15.453433 0.156260 udp 10.0.2.22 51868 <-> 76.180.2.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:16.445545 0.151241 udp 10.0.2.22 51868 <-> 174.99.98.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:18.448337 0.122402 udp 10.0.2.22 51868 <-> 37.237.56.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:19.449036 0.193015 udp 10.0.2.22 51868 <-> 87.1.77.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:20.450737 0.349052 udp 10.0.2.22 51868 <-> 59.149.197.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:21.452122 0.205858 udp 10.0.2.22 51868 <-> 174.106.129.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:22.323317 0.000112 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:10:22.453421 1.936164 udp 10.0.2.22 51868 <-> 210.115.47.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:23.445493 0.075234 udp 10.0.2.22 51868 <-> 88.149.141.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:24.446566 0.000000 udp 10.0.2.22 51868 -> 1.160.137.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:10:25.447851 0.000000 udp 10.0.2.22 51868 -> 190.74.245.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:10:26.449079 0.116499 udp 10.0.2.22 51868 <-> 31.222.118.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:27.450995 0.164767 udp 10.0.2.22 51868 <-> 70.113.159.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:28.452194 0.167521 udp 10.0.2.22 51868 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:29.453922 0.168008 udp 10.0.2.22 51868 <-> 189.218.89.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:30.444861 0.292307 udp 10.0.2.22 51868 <-> 219.106.157.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:31.446524 0.143414 udp 10.0.2.22 51868 <-> 184.56.26.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:32.447976 0.290913 udp 10.0.2.22 51868 <-> 202.90.212.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:33.449507 0.102730 udp 10.0.2.22 51868 <-> 212.104.169.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:34.450620 0.851045 udp 10.0.2.22 51868 <-> 31.147.115.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:35.452010 0.000000 udp 10.0.2.22 51868 -> 69.8.5.125 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:10:36.453556 0.134769 udp 10.0.2.22 51868 <-> 69.126.67.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:37.445007 0.275844 udp 10.0.2.22 51868 <-> 181.166.240.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:38.446597 0.311721 udp 10.0.2.22 51868 <-> 180.221.77.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:39.448412 0.000000 udp 10.0.2.22 51868 -> 179.216.83.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:10:40.449619 0.292110 udp 10.0.2.22 51868 <-> 86.107.40.90 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:41.450929 0.143690 udp 10.0.2.22 51868 <-> 68.189.177.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:42.452308 0.360071 udp 10.0.2.22 51868 <-> 218.211.65.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:43.454096 0.146225 udp 10.0.2.22 51868 <-> 66.168.86.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:44.445441 0.308328 udp 10.0.2.22 51868 <-> 153.130.52.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:45.447037 0.147388 udp 10.0.2.22 51868 <-> 69.249.127.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:46.448338 0.345590 udp 10.0.2.22 51868 <-> 14.99.117.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:47.449279 0.000000 udp 10.0.2.22 51868 -> 36.232.100.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:10:48.451143 0.000000 udp 10.0.2.22 51868 -> 111.249.165.119 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:10:49.322319 0.000102 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:10:49.452423 0.195062 udp 10.0.2.22 51868 <-> 79.13.44.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:50.453950 0.052265 udp 10.0.2.22 51868 <-> 136.169.21.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:51.445523 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:10:52.446897 0.305385 udp 10.0.2.22 51868 <-> 14.96.118.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:53.448258 0.069103 udp 10.0.2.22 51868 <-> 46.185.30.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:54.450026 0.349741 udp 10.0.2.22 51868 <-> 61.126.229.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:55.451325 0.223959 udp 10.0.2.22 51868 <-> 125.62.101.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:56.452427 0.324397 udp 10.0.2.22 51868 <-> 2.228.29.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:57.454076 0.162297 udp 10.0.2.22 51868 <-> 68.56.21.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:58.445231 0.072352 udp 10.0.2.22 51868 <-> 79.109.136.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:10:59.446626 0.212378 udp 10.0.2.22 51868 <-> 186.91.237.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:11:00.448242 0.059259 udp 10.0.2.22 51868 <-> 213.164.122.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:11:01.450127 0.336731 udp 10.0.2.22 51868 <-> 113.37.177.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:11:02.451064 0.053708 udp 10.0.2.22 51868 <-> 88.180.62.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:11:03.452277 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:04.454188 4.997012 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:05.445560 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:06.447217 0.070798 udp 10.0.2.22 51868 <-> 82.249.156.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:11:07.448645 0.140334 udp 10.0.2.22 51868 <-> 192.226.164.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:11:08.450046 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:10.453073 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:11.454170 0.022051 udp 10.0.2.22 51868 <-> 161.53.207.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:11:12.445891 0.156991 udp 10.0.2.22 51868 <-> 114.79.189.229 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:11:13.447401 0.190593 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:11:14.448690 0.039648 udp 10.0.2.22 51868 <-> 109.87.128.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:11:15.450381 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:16.321133 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:11:16.451083 0.332356 udp 10.0.2.22 51868 <-> 75.241.210.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:11:17.452854 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:18.453998 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:19.445648 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:20.447313 0.136136 udp 10.0.2.22 51868 <-> 68.198.80.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:11:21.448833 0.268559 udp 10.0.2.22 51868 <-> 190.37.211.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:11:22.450031 0.318717 udp 10.0.2.22 51868 <-> 14.98.147.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:11:23.451366 0.155170 udp 10.0.2.22 51868 <-> 64.148.59.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:11:24.453167 0.000071 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:24.453238 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:11:25.444467 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:26.445773 0.137524 udp 10.0.2.22 51868 <-> 24.190.186.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:11:27.446785 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:28.449010 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:29.449951 0.000000 udp 10.0.2.22 51868 -> 190.73.13.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:30.451565 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:31.452740 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:32.444569 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:33.445680 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:34.447122 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:35.448795 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:36.450244 2.309273 udp 10.0.2.22 51868 <-> 200.156.104.7 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:11:37.451430 0.000000 udp 10.0.2.22 51868 -> 190.73.13.250 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:39.444348 0.024428 udp 10.0.2.22 51868 <-> 77.111.172.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:11:40.446072 0.053205 udp 10.0.2.22 51868 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:11:41.446941 0.030524 udp 10.0.2.22 51868 <-> 78.90.215.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:11:42.448692 0.325776 udp 10.0.2.22 51868 <-> 121.177.85.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:11:43.319584 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:11:43.450465 0.133586 udp 10.0.2.22 51868 <-> 82.61.103.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:11:44.451822 0.111751 udp 10.0.2.22 51868 <-> 37.45.40.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:11:45.453030 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:46.444107 4.006546 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:46.444171 4.006482 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 2 172 flow=Background 1970/01/01 04:11:48.447231 0.000000 udp 10.0.2.22 51868 -> 202.29.179.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:49.448934 0.151452 udp 10.0.2.22 51868 <-> 24.192.246.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:11:51.451447 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:52.453450 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:53.444254 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:54.446271 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:55.447600 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:56.448750 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:11:58.451789 0.438452 udp 10.0.2.22 51868 <-> 121.124.80.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:11:59.452915 0.000000 udp 10.0.2.22 51868 -> 85.104.86.50 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:12:00.444212 0.048641 udp 10.0.2.22 51868 <-> 78.157.75.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:01.445941 0.337154 udp 10.0.2.22 51868 <-> 122.134.49.223 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:02.447781 0.443951 udp 10.0.2.22 51868 <-> 14.97.57.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:03.448947 0.316225 udp 10.0.2.22 51868 <-> 202.163.180.220 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:04.450390 0.049772 udp 10.0.2.22 51868 <-> 80.56.160.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:05.451452 0.305679 udp 10.0.2.22 51868 <-> 219.117.119.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:06.453347 0.109509 udp 10.0.2.22 51868 <-> 176.200.165.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:07.445046 0.523395 udp 10.0.2.22 51868 <-> 1.161.164.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:08.445790 0.167483 udp 10.0.2.22 51868 <-> 96.2.150.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:09.447223 0.365178 udp 10.0.2.22 51868 <-> 27.3.164.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:10.318857 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:12:10.448719 0.184923 udp 10.0.2.22 51868 <-> 123.201.53.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:11.450363 0.000000 udp 10.0.2.22 51868 -> 14.97.84.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:12:12.451938 0.000000 udp 10.0.2.22 51868 -> 190.107.109.178 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:12:13.453425 0.991556 udp 10.0.2.22 51868 <-> 188.143.29.9 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:15.446126 0.326806 udp 10.0.2.22 51868 <-> 114.159.192.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:16.447324 0.042522 udp 10.0.2.22 51868 <-> 178.254.239.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:17.449318 0.031799 udp 10.0.2.22 51868 <-> 87.97.204.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:18.450820 0.040425 udp 10.0.2.22 51868 <-> 83.103.159.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:19.452251 0.000000 udp 10.0.2.22 51868 -> 203.194.104.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:12:20.453651 0.000000 udp 10.0.2.22 51868 -> 86.124.236.232 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:12:21.427313 3.001410 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 04:12:21.445055 1.586418 udp 10.0.2.22 51868 <-> 78.88.219.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:22.306892 0.000000 udp 10.0.2.22 51868 <- 14.97.84.3 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:12:22.445979 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:12:23.447648 0.133885 udp 10.0.2.22 51868 <-> 68.84.110.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:24.448749 1.042717 udp 10.0.2.22 51868 <-> 46.237.76.18 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:26.452290 0.074870 udp 10.0.2.22 51868 <-> 93.176.212.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:27.453349 0.235556 udp 10.0.2.22 51868 <-> 71.95.166.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:28.434639 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:12:28.444658 0.047433 udp 10.0.2.22 51868 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:29.446549 0.431140 udp 10.0.2.22 51868 <-> 179.44.1.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:30.447351 0.328968 udp 10.0.2.22 51868 <-> 61.4.170.48 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:31.449272 0.140674 udp 10.0.2.22 51868 <-> 1.186.124.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:32.450624 0.117090 udp 10.0.2.22 51868 <-> 178.122.189.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:33.452072 0.134718 udp 10.0.2.22 51868 <-> 98.221.57.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:34.453135 0.133814 udp 10.0.2.22 51868 <-> 68.84.110.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:35.445030 0.182730 udp 10.0.2.22 51868 <-> 142.217.34.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:36.436376 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:12:36.446437 0.013828 udp 10.0.2.22 51868 <-> 89.102.235.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:37.327417 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:12:37.448138 0.189550 udp 10.0.2.22 51868 <-> 75.57.156.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:38.449255 0.066746 udp 10.0.2.22 51868 <-> 82.225.28.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:39.450813 0.298263 udp 10.0.2.22 51868 <-> 182.165.97.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:40.452401 0.055663 udp 10.0.2.22 51868 <-> 79.116.171.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:41.453849 0.530099 udp 10.0.2.22 51868 <-> 117.232.156.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:42.444937 0.137068 udp 10.0.2.22 51868 <-> 98.221.57.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:43.446270 0.088339 udp 10.0.2.22 51868 <-> 109.53.205.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:44.448064 0.106321 udp 10.0.2.22 51868 <-> 145.236.151.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:45.449655 0.000000 udp 10.0.2.22 51868 -> 75.64.127.51 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:12:46.450904 0.140760 udp 10.0.2.22 51868 <-> 203.192.219.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:47.452229 0.150424 udp 10.0.2.22 51868 <-> 70.83.135.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:48.453304 0.000000 udp 10.0.2.22 51868 -> 202.92.172.161 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:12:49.444776 1.489261 udp 10.0.2.22 51868 <-> 171.207.158.212 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:50.446144 0.201547 udp 10.0.2.22 51868 <-> 24.230.219.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:51.447668 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:12:52.439029 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:12:52.449190 2.298643 udp 10.0.2.22 51868 <-> 186.9.5.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:53.450826 0.135362 udp 10.0.2.22 51868 <-> 65.96.181.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:54.452256 0.122271 udp 10.0.2.22 51868 <-> 24.157.98.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:55.453596 0.305749 udp 10.0.2.22 51868 <-> 122.27.202.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:56.445114 0.153089 udp 10.0.2.22 51868 <-> 67.198.84.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:57.446896 3.004118 udp 10.0.2.22 51868 -> 180.74.39.36 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:12:58.448289 0.036392 udp 10.0.2.22 51868 <-> 79.119.43.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:12:59.449351 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:13:01.452645 0.042957 udp 10.0.2.22 51868 <-> 188.254.158.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:02.453879 0.046134 udp 10.0.2.22 51868 <-> 86.125.172.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:03.445095 0.097632 udp 10.0.2.22 51868 <-> 77.232.161.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:04.326251 0.000138 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:13:04.446900 0.152467 udp 10.0.2.22 51868 <-> 173.197.148.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:05.447985 0.323111 udp 10.0.2.22 51868 <-> 59.28.105.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:06.449127 0.176822 udp 10.0.2.22 51868 <-> 72.23.74.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:07.451020 0.158713 udp 10.0.2.22 51868 <-> 98.214.56.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:08.452707 0.000000 udp 10.0.2.22 51868 -> 95.9.149.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:13:09.453784 0.139990 udp 10.0.2.22 51868 <-> 68.189.177.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:10.445655 1.574967 udp 10.0.2.22 51868 <-> 123.194.225.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:11.446982 0.306323 udp 10.0.2.22 51868 <-> 61.86.35.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:12.447965 0.218121 udp 10.0.2.22 51868 <-> 71.92.129.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:13.449916 0.000000 udp 10.0.2.22 51868 -> 164.90.161.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:13:14.451018 0.141768 udp 10.0.2.22 51868 <-> 203.194.97.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:15.452143 0.000000 udp 10.0.2.22 51868 -> 78.173.92.196 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:13:16.454205 1.140241 udp 10.0.2.22 51868 <-> 69.251.160.216 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:18.446817 0.000000 udp 10.0.2.22 51868 -> 123.248.233.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:13:19.448175 0.170595 udp 10.0.2.22 51868 <-> 98.197.173.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:20.449554 0.326754 udp 10.0.2.22 51868 <-> 113.42.119.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:21.451161 0.154565 udp 10.0.2.22 51868 <-> 24.138.62.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:22.452760 0.000000 udp 10.0.2.22 51868 -> 173.23.208.199 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:13:23.454235 1.135523 udp 10.0.2.22 51868 <-> 190.124.149.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:24.445013 0.058753 udp 10.0.2.22 51868 <-> 85.180.145.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:24.445186 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:13:25.446860 0.087399 udp 10.0.2.22 51868 <-> 82.130.204.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:26.447927 0.134036 udp 10.0.2.22 51868 <-> 79.10.154.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:27.449599 2.196717 udp 10.0.2.22 51868 <-> 31.185.126.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:28.450917 0.000000 udp 10.0.2.22 51868 -> 79.184.90.229 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:13:29.452837 0.349244 udp 10.0.2.22 51868 <-> 117.195.236.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:30.454162 0.606729 udp 10.0.2.22 51868 <-> 201.211.102.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:31.325195 0.000221 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:13:31.445239 0.311531 udp 10.0.2.22 51868 <-> 180.19.158.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:32.446857 1.454558 udp 10.0.2.22 51868 <-> 115.240.45.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:33.448583 0.116305 udp 10.0.2.22 51868 <-> 178.129.93.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:34.449442 0.000000 udp 10.0.2.22 51868 -> 119.241.9.117 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:13:35.451256 0.000000 udp 10.0.2.22 51868 -> 14.99.85.142 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:13:36.452683 0.449049 udp 10.0.2.22 51868 <-> 61.105.222.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:37.453743 0.130977 udp 10.0.2.22 51868 <-> 76.106.23.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:38.445266 0.278464 udp 10.0.2.22 51868 <-> 189.79.76.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:39.446852 0.610607 udp 10.0.2.22 51868 <-> 117.227.9.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:40.448306 0.155179 udp 10.0.2.22 51868 <-> 72.239.246.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:41.449680 0.000000 udp 10.0.2.22 51868 -> 66.127.176.202 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:13:42.451038 1.121966 udp 10.0.2.22 51868 <-> 88.48.221.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:43.452385 0.044526 udp 10.0.2.22 51868 <-> 5.13.90.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:44.454338 0.148270 udp 10.0.2.22 51868 <-> 24.138.62.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:45.445808 0.306063 udp 10.0.2.22 51868 <-> 103.250.17.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:46.446797 0.296172 udp 10.0.2.22 51868 <-> 190.191.188.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:47.448274 0.129671 udp 10.0.2.22 51868 <-> 78.85.176.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:48.449758 0.033848 udp 10.0.2.22 51868 <-> 143.225.236.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:49.451661 0.271208 udp 10.0.2.22 51868 <-> 178.89.70.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:50.453064 1.993031 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:51.454508 0.000000 udp 10.0.2.22 51868 -> 14.96.36.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:13:53.447096 0.045176 udp 10.0.2.22 51868 <-> 176.37.230.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:54.448344 1.125937 udp 10.0.2.22 51868 <-> 46.50.81.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:56.451188 0.542687 udp 10.0.2.22 51868 <-> 117.222.42.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:57.452540 0.154934 udp 10.0.2.22 51868 <-> 68.12.124.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:58.324248 0.000114 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:13:58.443913 0.272468 udp 10.0.2.22 51868 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:13:59.445948 0.229955 udp 10.0.2.22 51868 <-> 71.16.80.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:14:00.447150 1.090396 udp 10.0.2.22 51868 <-> 89.134.105.163 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:14:02.450191 0.000000 udp 10.0.2.22 51868 -> 177.34.126.72 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:03.451253 0.476402 udp 10.0.2.22 51868 <-> 210.199.112.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:14:04.452551 0.000000 udp 10.0.2.22 51868 -> 190.73.247.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:05.444292 0.068928 udp 10.0.2.22 51868 <-> 151.77.138.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:14:06.446020 0.390690 udp 10.0.2.22 51868 <-> 111.248.99.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:14:07.446911 0.064861 udp 10.0.2.22 51868 <-> 79.109.248.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:14:08.448530 0.418847 udp 10.0.2.22 51868 <-> 180.70.39.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:14:09.450098 0.366670 udp 10.0.2.22 51868 <-> 186.94.84.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:14:10.451391 0.000000 udp 10.0.2.22 51868 -> 72.59.246.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:11.452588 0.097288 udp 10.0.2.22 51868 <-> 62.177.243.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:14:12.444157 0.040741 udp 10.0.2.22 51868 <-> 5.15.140.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:14:13.445859 0.155792 udp 10.0.2.22 51868 <-> 96.20.190.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:14:14.446938 0.030571 udp 10.0.2.22 51868 <-> 193.48.122.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:14:15.448735 0.000000 udp 10.0.2.22 51868 -> 118.97.158.122 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:16.450108 0.336205 udp 10.0.2.22 51868 <-> 183.100.139.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:14:17.451258 0.058709 udp 10.0.2.22 51868 <-> 188.173.128.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:14:18.453434 0.000000 udp 10.0.2.22 51868 -> 197.204.128.121 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:19.444239 0.050832 udp 10.0.2.22 51868 <-> 37.77.155.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:14:20.445838 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:21.447287 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:22.448528 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:23.450483 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:24.451681 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:25.322693 0.000121 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:14:25.453166 0.159415 udp 10.0.2.22 51868 <-> 71.16.80.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:14:26.444571 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:27.445582 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:28.447111 0.000115 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:28.447226 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:14:29.448718 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:30.450411 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:31.452049 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:32.453074 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:33.444599 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:34.446478 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:35.447637 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:36.449082 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:37.450410 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:38.452054 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:39.453409 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:40.444244 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:41.445932 0.204196 udp 10.0.2.22 51868 <-> 184.167.204.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:14:42.447783 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:43.449069 0.000116 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:43.449185 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:14:44.450365 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:45.451811 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:46.452974 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:47.444368 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:48.446262 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:49.447459 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:50.448724 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:51.450625 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:52.321647 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:14:52.451779 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:53.453239 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:54.444438 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:55.445977 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:56.447546 0.147023 udp 10.0.2.22 51868 <-> 87.237.237.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:14:57.449011 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:58.450351 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:14:59.452081 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:00.453584 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:01.444616 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:02.445941 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:03.447628 0.064582 udp 10.0.2.22 51868 <-> 77.181.30.0 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:15:04.448971 0.291031 udp 10.0.2.22 51868 <-> 14.99.117.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:15:05.450207 2.100824 udp 10.0.2.22 51868 <-> 37.215.190.68 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:15:06.452322 0.209663 udp 10.0.2.22 51868 <-> 173.16.216.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:15:08.445127 2.241335 udp 10.0.2.22 51868 <-> 75.206.30.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:15:09.446303 0.211877 udp 10.0.2.22 51868 <-> 190.146.36.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:15:10.447551 0.034909 udp 10.0.2.22 51868 <-> 89.212.98.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:15:11.449072 0.099546 udp 10.0.2.22 51868 <-> 85.56.52.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:15:12.450557 1.176360 udp 10.0.2.22 51868 <-> 98.100.21.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:15:13.452388 0.410048 udp 10.0.2.22 51868 <-> 114.36.139.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:15:14.453308 0.138937 udp 10.0.2.22 51868 <-> 68.39.158.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:15:15.445315 0.311496 udp 10.0.2.22 51868 <-> 121.185.98.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:15:16.446366 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:17.447766 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:18.449085 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:19.320137 0.000129 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:15:19.450882 0.029277 udp 10.0.2.22 51868 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:15:20.452443 0.575563 udp 10.0.2.22 51868 <-> 190.17.84.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:15:21.453629 0.770796 udp 10.0.2.22 51868 <-> 177.123.193.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:15:22.444667 0.311293 udp 10.0.2.22 51868 <-> 121.185.98.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:15:23.446387 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:24.448217 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:25.449353 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:26.450697 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:27.452194 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:28.453667 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:29.445176 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:30.446341 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:31.447780 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:32.449132 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:33.450676 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:34.452630 0.000081 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:34.452711 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:15:35.453591 0.033101 udp 10.0.2.22 51868 <-> 178.79.32.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:15:36.444862 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:37.446947 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:38.448073 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:39.449071 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:40.451081 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:41.452136 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:42.453844 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:43.445018 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:44.446763 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:45.447984 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:46.318990 0.000127 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:15:46.449798 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:47.451267 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:49.453694 0.071778 udp 10.0.2.22 51868 <-> 85.87.224.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:15:50.445079 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:51.446854 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:52.447835 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:53.449359 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:55.452721 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:56.454447 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:57.445690 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:58.447258 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:15:59.448437 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:16:00.450101 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:16:01.451429 0.000109 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:16:01.451538 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:16:02.452713 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:16:03.454316 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:16:04.445577 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:16:05.447121 3.003704 udp 10.0.2.22 51868 -> 92.247.198.76 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:16:06.447915 0.612654 udp 10.0.2.22 51868 <-> 190.17.84.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:07.449539 4.325051 udp 10.0.2.22 51868 -> 181.26.2.68 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:16:11.774590 0.000000 icmp 181.26.2.68 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 04:16:09.452460 0.063716 udp 10.0.2.22 51868 <-> 89.39.152.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:10.453877 0.041184 udp 10.0.2.22 51868 <-> 212.233.239.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:12.446662 3.004631 udp 10.0.2.22 51868 -> 177.123.193.45 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:16:13.328351 0.000111 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:16:13.448068 3.070730 udp 10.0.2.22 51868 <-> 178.79.32.44 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:14.450014 4.321887 udp 10.0.2.22 51868 <-> 190.17.84.42 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:17.453894 2.034364 udp 10.0.2.22 51868 <-> 212.233.239.59 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:20.448570 0.000000 udp 10.0.2.22 51868 -> 89.39.152.62 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:16:21.450359 0.000000 udp 10.0.2.22 51868 -> 89.133.113.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:16:22.450934 0.083158 udp 10.0.2.22 51868 <-> 85.87.224.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:23.452998 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:16:24.453815 0.000000 udp 10.0.2.22 51868 -> 213.37.25.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:16:25.445942 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:16:26.447197 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:16:27.448661 0.039245 udp 10.0.2.22 51868 <-> 92.247.198.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:28.449555 0.320330 udp 10.0.2.22 51868 <-> 121.185.98.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:29.451216 0.070936 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:30.452978 0.158330 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:31.444487 0.312995 udp 10.0.2.22 51868 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:32.445589 0.000000 udp 10.0.2.22 51868 -> 87.205.40.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:16:33.447100 0.135179 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:34.448739 0.000000 udp 10.0.2.22 51868 -> 84.1.164.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:16:35.449779 0.000000 udp 10.0.2.22 51868 -> 79.183.172.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:16:36.451404 0.040097 udp 10.0.2.22 51868 <-> 46.237.64.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:37.452508 4.252315 udp 10.0.2.22 51868 <-> 142.136.206.4 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:38.444424 0.353339 udp 10.0.2.22 51868 <-> 190.75.86.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:39.445838 0.084985 udp 10.0.2.22 51868 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:40.326857 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:16:40.447320 0.892000 udp 10.0.2.22 51868 <-> 111.246.35.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:42.449882 0.000000 udp 10.0.2.22 51868 -> 87.205.40.252 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:16:43.451720 0.029741 udp 10.0.2.22 51868 <-> 78.90.215.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:44.452861 0.187219 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:45.444021 1.398244 udp 10.0.2.22 51868 <-> 142.136.206.4 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:47.447354 2.034405 udp 10.0.2.22 51868 <-> 77.70.120.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:48.448514 0.258069 udp 10.0.2.22 51868 <-> 87.205.40.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:50.451170 0.304682 udp 10.0.2.22 51868 <-> 190.75.86.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:51.453216 0.365492 udp 10.0.2.22 51868 <-> 153.130.209.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:52.444576 0.356844 udp 10.0.2.22 51868 <-> 218.35.15.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:53.445986 0.130485 udp 10.0.2.22 51868 <-> 66.225.183.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:54.446944 4.997878 udp 10.0.2.22 51868 -> 70.72.152.175 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:16:55.448717 0.000000 udp 10.0.2.22 51868 -> 67.78.29.162 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:16:56.450492 0.000000 udp 10.0.2.22 51868 -> 14.97.244.138 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:16:57.451428 0.267996 udp 10.0.2.22 51868 <-> 200.122.103.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:16:58.452739 0.207960 udp 10.0.2.22 51868 <-> 71.93.149.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:00.445726 0.000000 udp 10.0.2.22 51868 -> 83.166.192.144 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:17:01.447552 0.000000 udp 10.0.2.22 51868 -> 188.246.77.47 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:17:02.448855 4.996943 udp 10.0.2.22 51868 -> 82.59.115.62 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:17:03.450202 0.000000 udp 10.0.2.22 51868 -> 49.205.62.126 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:17:04.451481 0.100814 udp 10.0.2.22 51868 <-> 169.244.248.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:05.452775 1.013693 udp 10.0.2.22 51868 <-> 77.21.184.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:06.444778 3.583068 udp 10.0.2.22 51868 <-> 14.97.244.138 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:07.325623 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:17:07.643654 0.036968 udp 10.0.2.22 51868 <- 82.59.115.62 16464 RSP 0 0 3 2670 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:17:08.447149 0.045591 udp 10.0.2.22 51868 <-> 78.159.51.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:10.449928 0.121086 udp 10.0.2.22 51868 <-> 79.51.215.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:11.452082 0.747315 udp 10.0.2.22 51868 <-> 77.21.184.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:12.453435 0.146025 udp 10.0.2.22 51868 <-> 98.204.133.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:13.444950 0.053066 udp 10.0.2.22 51868 <-> 87.246.35.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:14.445818 0.302375 udp 10.0.2.22 51868 <-> 119.24.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:15.447384 1.057246 udp 10.0.2.22 51868 <-> 84.55.62.240 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:17.450410 0.142234 udp 10.0.2.22 51868 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:18.451567 0.162396 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:19.453330 0.301283 udp 10.0.2.22 51868 <-> 165.132.238.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:20.445019 0.000000 udp 10.0.2.22 51868 -> 85.84.74.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:17:21.445768 0.220630 udp 10.0.2.22 51868 <-> 2.193.195.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:22.447920 0.000000 udp 10.0.2.22 51868 -> 86.124.224.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:17:23.449011 0.301075 udp 10.0.2.22 51868 <-> 187.66.244.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:24.450532 1.006567 udp 10.0.2.22 51868 <-> 147.229.140.10 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:26.453490 0.037895 udp 10.0.2.22 51868 <-> 188.143.29.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:27.445052 0.000000 udp 10.0.2.22 51868 -> 114.39.39.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:17:28.446228 0.000000 udp 10.0.2.22 51868 -> 75.109.202.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:17:29.447736 0.024146 udp 10.0.2.22 51868 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:30.449487 0.154903 udp 10.0.2.22 51868 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:31.450187 0.000000 udp 10.0.2.22 51868 -> 5.12.192.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:17:32.451561 0.000000 udp 10.0.2.22 51868 -> 85.84.74.10 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:17:33.453251 0.000000 udp 10.0.2.22 51868 -> 89.132.14.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:17:34.324631 0.000149 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:17:34.444966 0.000000 udp 10.0.2.22 51868 -> 1.164.153.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:17:35.446541 0.055442 udp 10.0.2.22 51868 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:36.447902 1.427594 udp 10.0.2.22 51868 <-> 92.86.49.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:37.449288 0.303930 udp 10.0.2.22 51868 <-> 165.132.238.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:38.450818 0.149618 udp 10.0.2.22 51868 <-> 2.193.195.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:39.452235 0.128937 udp 10.0.2.22 51868 <-> 5.34.126.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:40.453110 0.037376 udp 10.0.2.22 51868 <-> 188.143.29.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:41.444690 0.085319 udp 10.0.2.22 51868 <-> 77.103.126.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:42.446224 0.000000 udp 10.0.2.22 51868 -> 62.221.143.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:17:43.447610 0.059111 udp 10.0.2.22 51868 <-> 77.122.51.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:44.449119 0.288073 udp 10.0.2.22 51868 <-> 122.102.232.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:45.450952 0.316786 udp 10.0.2.22 51868 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:46.452278 0.204664 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:47.453849 0.072645 udp 10.0.2.22 51868 <-> 85.85.71.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:48.444980 0.159719 udp 10.0.2.22 51868 <-> 75.86.159.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:49.446732 0.000000 udp 10.0.2.22 51868 -> 78.8.126.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:17:50.447517 0.000000 udp 10.0.2.22 51868 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:17:51.449464 0.655887 udp 10.0.2.22 51868 <-> 177.182.77.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:52.450713 0.152193 udp 10.0.2.22 51868 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:53.452436 0.297103 udp 10.0.2.22 51868 <-> 190.189.156.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:54.453707 0.464211 udp 10.0.2.22 51868 <-> 114.42.85.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:55.445489 0.195649 udp 10.0.2.22 51868 <-> 50.26.30.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:56.446587 1.970944 udp 10.0.2.22 51868 <-> 46.35.110.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:57.447559 0.062391 udp 10.0.2.22 51868 <-> 188.25.130.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:17:58.449323 0.000000 udp 10.0.2.22 51868 -> 95.59.106.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:17:59.450400 4.997363 udp 10.0.2.22 51868 <-> 68.179.181.73 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:00.452196 0.077132 udp 10.0.2.22 51868 <-> 188.2.105.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:01.323518 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:18:01.453274 1.993303 udp 10.0.2.22 51868 <-> 188.24.83.101 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:02.445130 0.162153 udp 10.0.2.22 51868 <-> 76.16.25.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:04.632394 0.000000 udp 10.0.2.22 51868 <- 68.179.181.73 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:18:05.449248 0.140565 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:06.450722 0.337228 udp 10.0.2.22 51868 <-> 223.16.38.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:07.452271 0.100554 udp 10.0.2.22 51868 <-> 94.253.231.246 16464 CON 0 0 5 3618 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:08.454160 0.087144 udp 10.0.2.22 51868 <-> 109.182.53.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:09.445315 0.171286 udp 10.0.2.22 51868 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:10.446452 0.127064 udp 10.0.2.22 51868 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:11.447689 0.194671 udp 10.0.2.22 51868 <-> 173.25.251.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:12.449661 0.141710 udp 10.0.2.22 51868 <-> 65.185.76.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:13.451046 0.056374 udp 10.0.2.22 51868 <-> 188.27.96.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:14.451952 0.434757 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:15.453800 0.000000 udp 10.0.2.22 51868 -> 96.26.92.222 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:18:16.445020 0.297601 udp 10.0.2.22 51868 <-> 119.24.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:17.446795 0.352600 udp 10.0.2.22 51868 <-> 59.127.131.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:18.447717 0.052128 udp 10.0.2.22 51868 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:19.449810 0.000000 udp 10.0.2.22 51868 -> 68.59.72.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:18:20.450947 0.051666 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:21.452157 0.000000 udp 10.0.2.22 51868 -> 61.70.234.252 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:18:22.453458 0.000000 udp 10.0.2.22 51868 -> 114.40.221.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:18:23.445217 1.001499 udp 10.0.2.22 51868 <-> 39.1.3.205 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:25.447886 0.058270 udp 10.0.2.22 51868 <-> 188.27.96.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:26.449869 2.002973 udp 10.0.2.22 51868 <-> 218.52.136.62 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:27.451485 0.000000 udp 10.0.2.22 51868 -> 77.239.80.162 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:18:28.322088 0.000134 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:18:29.453933 0.000000 udp 10.0.2.22 51868 -> 59.127.131.213 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:18:30.445253 0.392925 udp 10.0.2.22 51868 <-> 202.124.4.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:31.446822 0.000000 udp 10.0.2.22 51868 -> 68.59.72.41 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:18:32.448278 0.397878 udp 10.0.2.22 51868 <-> 111.252.202.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:33.449590 0.331559 udp 10.0.2.22 51868 <-> 110.134.178.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:34.450791 0.051435 udp 10.0.2.22 51868 <-> 158.129.7.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:35.452671 1.856928 udp 10.0.2.22 51868 <-> 122.100.80.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:36.453813 0.200344 udp 10.0.2.22 51868 <-> 24.209.250.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:37.445198 2.003039 udp 10.0.2.22 51868 -> 98.243.238.45 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:18:38.446819 0.297821 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:40.449785 4.037989 udp 10.0.2.22 51868 <-> 188.254.158.154 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:41.451259 0.000000 udp 10.0.2.22 51868 -> 188.131.27.193 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:18:42.452713 0.287988 udp 10.0.2.22 51868 <-> 42.124.159.198 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:43.453752 0.413280 udp 10.0.2.22 51868 <-> 190.179.200.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:45.446513 0.032262 udp 10.0.2.22 51868 <-> 5.53.170.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:46.448084 0.327173 udp 10.0.2.22 51868 <-> 123.217.243.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:47.449837 0.358779 udp 10.0.2.22 51868 <-> 177.107.236.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:48.451634 0.301889 udp 10.0.2.22 51868 <-> 46.209.216.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:49.452430 0.013748 udp 10.0.2.22 51868 <-> 188.230.145.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:50.454054 0.042116 udp 10.0.2.22 51868 <-> 147.156.178.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:51.445438 0.165451 udp 10.0.2.22 51868 <-> 66.68.188.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:52.446805 0.044935 udp 10.0.2.22 51868 <-> 147.143.129.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:53.448054 0.159099 udp 10.0.2.22 51868 <-> 74.193.135.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:53.516575 0.000000 udp 10.0.2.22 51868 <- 98.243.238.45 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:18:54.450123 0.120351 udp 10.0.2.22 51868 <-> 24.36.117.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:55.320687 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:18:55.451335 0.119823 udp 10.0.2.22 51868 <-> 141.101.8.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:56.452536 0.000000 udp 10.0.2.22 51868 -> 69.166.163.79 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:18:57.454466 0.823894 udp 10.0.2.22 51868 <-> 77.188.146.188 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:58.445524 0.172575 udp 10.0.2.22 51868 <-> 24.233.63.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:18:59.447331 0.136277 udp 10.0.2.22 51868 <-> 188.79.24.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:19:00.448501 4.997219 udp 10.0.2.22 51868 -> 69.248.152.15 16464 INT 0 3 174 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:01.450293 0.359913 udp 10.0.2.22 51868 <-> 118.165.202.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:19:03.452624 0.266957 udp 10.0.2.22 51868 <-> 177.182.77.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:19:04.443844 0.199948 udp 10.0.2.22 51868 <-> 24.233.63.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:19:06.447010 0.201185 udp 10.0.2.22 51868 <-> 76.115.116.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:19:07.448351 0.000000 udp 10.0.2.22 51868 -> 87.208.42.32 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:08.449712 0.000000 udp 10.0.2.22 51868 -> 69.248.152.15 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:09.451325 0.283157 udp 10.0.2.22 51868 <-> 177.182.77.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:19:10.452804 0.042609 udp 10.0.2.22 51868 <-> 46.175.231.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:19:11.444669 0.000000 udp 10.0.2.22 51868 -> 24.22.89.96 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:12.445351 1.356783 udp 10.0.2.22 51868 <-> 118.165.202.64 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:19:14.448733 0.296992 udp 10.0.2.22 51868 <-> 180.147.116.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:19:15.450038 0.259123 udp 10.0.2.22 51868 <-> 177.182.77.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:19:16.451514 0.000000 udp 10.0.2.22 51868 -> 202.78.234.118 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:17.452697 0.000000 udp 10.0.2.22 51868 -> 87.208.42.32 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:18.443975 0.388788 udp 10.0.2.22 51868 <-> 114.47.209.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:19:19.446059 0.139271 udp 10.0.2.22 51868 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:19:20.447462 0.284994 udp 10.0.2.22 51868 <-> 75.206.30.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:19:21.448940 1.283274 udp 10.0.2.22 51868 <-> 187.41.64.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:19:22.319953 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:19:22.450078 0.328992 udp 10.0.2.22 51868 <-> 59.0.192.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:19:23.451543 0.690560 udp 10.0.2.22 51868 <-> 117.201.119.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:19:24.453255 0.076227 udp 10.0.2.22 51868 <-> 37.250.202.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:19:25.444466 0.332548 udp 10.0.2.22 51868 <-> 114.180.181.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:19:26.445968 0.184202 udp 10.0.2.22 51868 <-> 190.141.176.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:19:27.447398 0.042241 udp 10.0.2.22 51868 <-> 147.156.162.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:19:28.449233 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:28.452722 3.000548 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 04:19:29.449899 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:30.451992 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:31.453118 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:32.444164 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:33.445636 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:34.447814 2.002332 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:35.449082 0.041886 udp 10.0.2.22 51868 <-> 81.226.88.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:19:35.459114 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:19:37.451360 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:38.452807 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:39.444198 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:40.446290 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:41.447032 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:42.448745 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:43.450115 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:43.460168 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:19:44.451432 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:45.453286 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:46.444813 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:47.445931 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:48.447718 0.000093 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:48.447811 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:19:49.318531 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:19:49.449026 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:50.450485 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:51.451973 0.034551 udp 10.0.2.22 51868 <-> 78.137.60.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:19:52.452913 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:53.445005 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:54.446349 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:55.447984 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:56.449196 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:57.450456 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:58.452135 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:59.453685 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:19:59.463408 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:20:01.446258 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:02.447369 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:03.449096 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:04.450717 4.996895 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:05.451564 2.994670 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:05.451641 2.994593 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 2 172 flow=Background 1970/01/01 04:20:06.453645 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:07.444617 0.049889 udp 10.0.2.22 51868 <-> 188.26.230.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:20:10.448911 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:11.450880 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:12.452335 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:13.453191 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:14.445026 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:15.446322 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:16.327878 0.000114 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:20:16.447780 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:17.449426 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:18.450981 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:19.452398 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:20.453585 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:21.444692 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:22.446165 0.172933 udp 10.0.2.22 51868 <-> 76.85.171.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:20:23.447847 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:24.449631 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:25.450509 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:26.452081 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:27.453466 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:28.445091 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:29.446465 0.000043 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:29.446508 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:20:30.448151 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:31.449385 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:31.469734 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:20:32.450874 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:33.452304 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:34.453878 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:35.445064 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:36.446145 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:37.448104 0.042388 udp 10.0.2.22 51868 <-> 147.156.162.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:20:38.448996 0.050157 udp 10.0.2.22 51868 <-> 188.26.230.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:20:39.450675 0.303476 udp 10.0.2.22 51868 <-> 180.199.67.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:20:40.451914 0.064139 udp 10.0.2.22 51868 <-> 83.213.201.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:20:41.454098 0.310768 udp 10.0.2.22 51868 <-> 122.102.133.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:20:42.445404 0.000000 udp 10.0.2.22 51868 -> 66.187.64.238 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:43.326224 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:20:43.446311 0.158975 udp 10.0.2.22 51868 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:20:44.448297 0.022184 udp 10.0.2.22 51868 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:20:45.449677 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:46.450590 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:47.451935 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:48.453458 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:49.445323 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:50.446780 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:52.449133 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:53.450886 0.000075 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:53.450961 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:20:54.452683 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:55.453746 0.000000 udp 10.0.2.22 51868 -> 186.94.17.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:56.444954 0.000000 udp 10.0.2.22 51868 -> 92.22.133.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:20:57.446967 0.160635 udp 10.0.2.22 51868 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:20:58.448470 0.051251 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:20:59.449179 0.037212 udp 10.0.2.22 51868 <-> 188.143.29.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:00.450699 0.326005 udp 10.0.2.22 51868 <-> 114.26.200.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:01.452122 0.067513 udp 10.0.2.22 51868 <-> 147.143.158.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:02.453798 3.217495 udp 10.0.2.22 51868 <-> 24.137.128.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:03.445631 0.169790 udp 10.0.2.22 51868 <-> 24.201.107.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:04.447138 0.760443 udp 10.0.2.22 51868 <-> 189.103.208.104 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:05.447815 0.000000 udp 10.0.2.22 51868 -> 72.0.251.222 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:21:06.449249 0.160030 udp 10.0.2.22 51868 <-> 69.140.208.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:07.450679 0.000000 udp 10.0.2.22 51868 -> 135.19.220.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:21:08.452292 4.337689 udp 10.0.2.22 51868 <-> 115.43.3.67 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:09.453593 1.993161 udp 10.0.2.22 51868 -> 14.96.36.18 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:21:10.324874 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:21:13.449619 2.090897 udp 10.0.2.22 51868 <-> 176.226.159.169 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:14.451270 0.000000 udp 10.0.2.22 51868 -> 89.25.112.106 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:21:16.454156 0.000000 udp 10.0.2.22 51868 -> 195.191.218.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:21:17.445169 1.055550 udp 10.0.2.22 51868 <-> 89.190.113.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:19.448158 0.443562 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:20.450036 0.000000 udp 10.0.2.22 51868 -> 198.91.171.183 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:21:21.450985 0.229268 udp 10.0.2.22 51868 <-> 123.237.166.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:22.452474 0.063749 udp 10.0.2.22 51868 <-> 84.236.148.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:23.454479 3.168453 udp 10.0.2.22 51868 <-> 113.193.163.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:24.445769 0.000000 udp 10.0.2.22 51868 -> 86.123.120.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:21:25.446822 0.000000 udp 10.0.2.22 51868 -> 220.143.102.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:21:26.448059 4.425099 udp 10.0.2.22 51868 <-> 118.168.126.14 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:27.449604 0.026865 udp 10.0.2.22 51868 <-> 85.130.45.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:28.451016 0.037780 udp 10.0.2.22 51868 <-> 5.15.210.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:29.452799 0.079910 udp 10.0.2.22 51868 <-> 87.120.215.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:31.445541 0.073539 udp 10.0.2.22 51868 <-> 86.126.32.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:32.447130 0.442008 udp 10.0.2.22 51868 <-> 14.99.156.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:33.448594 0.610544 udp 10.0.2.22 51868 <-> 220.53.176.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:34.450168 0.137969 udp 10.0.2.22 51868 <-> 76.11.8.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:35.450979 0.082745 udp 10.0.2.22 51868 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:36.452518 0.000000 udp 10.0.2.22 51868 -> 91.120.99.47 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:21:37.324180 0.000120 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:21:37.443831 0.165088 udp 10.0.2.22 51868 <-> 174.47.243.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:38.445587 0.030650 udp 10.0.2.22 51868 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:39.447186 1.001540 udp 10.0.2.22 51868 <-> 1.172.166.20 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:41.450298 0.381631 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:42.451434 0.143959 udp 10.0.2.22 51868 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:43.452845 4.997501 udp 10.0.2.22 51868 <-> 174.47.243.19 16464 CON 0 0 4 1064 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:45.445354 0.552465 udp 10.0.2.22 51868 <-> 190.17.84.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:46.447395 0.000000 udp 10.0.2.22 51868 -> 66.171.49.168 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:21:47.448657 1.210539 udp 10.0.2.22 51868 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:49.237292 0.022125 udp 10.0.2.22 51868 <- 174.47.243.19 16464 RSP 0 0 4 3560 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:21:49.451445 1.992971 udp 10.0.2.22 51868 <-> 85.152.244.7 16464 CON 0 0 9 6346 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:50.452778 0.000000 udp 10.0.2.22 51868 -> 186.14.134.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:21:52.445641 4.219263 udp 10.0.2.22 51868 <-> 111.119.245.60 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:53.447435 0.042577 udp 10.0.2.22 51868 <-> 87.252.173.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:54.448363 0.000000 udp 10.0.2.22 51868 -> 139.192.93.92 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:21:55.450094 0.413112 udp 10.0.2.22 51868 <-> 27.231.199.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:57.452749 0.731895 udp 10.0.2.22 51868 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:58.444501 0.059314 udp 10.0.2.22 51868 <-> 188.2.216.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:21:59.445692 0.320254 udp 10.0.2.22 51868 <-> 61.4.170.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:00.447661 0.309459 udp 10.0.2.22 51868 <-> 115.20.162.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:01.448540 0.317890 udp 10.0.2.22 51868 <-> 190.80.114.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:02.450240 0.456353 udp 10.0.2.22 51868 <-> 190.51.63.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:03.451742 0.301972 udp 10.0.2.22 51868 <-> 221.117.56.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:04.322994 0.000114 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:22:04.453534 0.041838 udp 10.0.2.22 51868 <-> 89.65.83.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:05.444356 0.362894 udp 10.0.2.22 51868 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:06.445936 0.050559 udp 10.0.2.22 51868 <-> 86.123.213.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:07.447423 0.045149 udp 10.0.2.22 51868 <-> 212.3.13.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:08.448696 0.303291 udp 10.0.2.22 51868 <-> 61.1.224.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:09.450576 0.143603 udp 10.0.2.22 51868 <-> 208.53.245.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:10.451282 0.519300 udp 10.0.2.22 51868 <-> 200.84.68.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:11.453060 0.165241 udp 10.0.2.22 51868 <-> 68.59.245.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:12.444810 0.082634 udp 10.0.2.22 51868 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:13.445715 0.233720 udp 10.0.2.22 51868 <-> 190.36.28.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:14.447246 0.000000 udp 10.0.2.22 51868 -> 120.138.104.123 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:22:15.448994 0.546996 udp 10.0.2.22 51868 <-> 89.229.25.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:16.449930 0.000000 udp 10.0.2.22 51868 -> 176.226.159.169 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:22:17.451608 0.101944 udp 10.0.2.22 51868 <-> 91.120.99.47 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:18.453473 0.106455 udp 10.0.2.22 51868 <-> 80.86.237.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:19.444654 0.000000 udp 10.0.2.22 51868 -> 175.156.228.110 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:22:20.446047 0.042091 udp 10.0.2.22 51868 <-> 147.143.158.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:21.447330 0.000000 udp 10.0.2.22 51868 -> 72.231.199.170 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:22:22.449281 0.062164 udp 10.0.2.22 51868 <-> 95.42.254.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:23.450627 0.166025 udp 10.0.2.22 51868 <-> 24.182.200.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:24.451512 0.000000 udp 10.0.2.22 51868 -> 86.204.140.243 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:22:25.453451 0.000000 udp 10.0.2.22 51868 -> 181.208.87.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:22:26.444440 0.312110 udp 10.0.2.22 51868 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:27.446465 0.051349 udp 10.0.2.22 51868 -> 176.121.203.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:22:27.497814 0.000000 icmp 176.121.203.12 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 04:22:28.447400 0.372313 udp 10.0.2.22 51868 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:29.449098 0.030144 udp 10.0.2.22 51868 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:30.450447 0.159750 udp 10.0.2.22 51868 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:31.321843 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:22:31.451777 0.149761 udp 10.0.2.22 51868 <-> 107.15.91.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:32.453240 0.364609 udp 10.0.2.22 51868 <-> 113.254.247.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:33.444804 0.057025 udp 10.0.2.22 51868 <-> 95.180.114.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:34.446287 0.398929 udp 10.0.2.22 51868 <-> 61.223.95.11 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:35.447487 0.000000 udp 10.0.2.22 51868 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:22:35.778221 0.011318 udp 10.0.2.22 60018 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 04:22:35.790001 0.000000 udp 10.0.2.22 60019 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:22:36.449168 0.000000 udp 10.0.2.22 51868 -> 177.149.127.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:22:37.450538 0.033027 udp 10.0.2.22 51868 <-> 62.221.143.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:38.452305 0.169490 udp 10.0.2.22 51868 <-> 69.245.13.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:39.453350 0.000000 udp 10.0.2.22 51868 -> 190.122.118.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:22:40.444737 0.044289 udp 10.0.2.22 51868 <-> 95.180.114.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:41.446392 2.349971 udp 10.0.2.22 51868 <-> 113.254.247.11 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:42.447885 0.116527 udp 10.0.2.22 51868 <-> 98.166.225.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:44.450483 0.056491 udp 10.0.2.22 51868 <-> 37.1.3.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:45.451968 0.321809 udp 10.0.2.22 51868 <-> 218.157.141.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:46.453777 0.000000 udp 10.0.2.22 51868 -> 75.13.86.72 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:22:47.444725 1.420451 udp 10.0.2.22 51868 <-> 189.54.14.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:48.446447 0.040472 udp 10.0.2.22 51868 <-> 188.254.207.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:49.447811 1.029851 udp 10.0.2.22 51868 <-> 77.70.5.144 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:51.450349 0.259376 udp 10.0.2.22 51868 <-> 151.233.128.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:52.451815 1.160040 udp 10.0.2.22 51868 <-> 65.27.180.216 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:54.444994 0.074802 udp 10.0.2.22 51868 <-> 79.118.60.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:55.446159 0.160995 udp 10.0.2.22 51868 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:56.447805 0.047009 udp 10.0.2.22 51868 <-> 78.97.7.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:57.448871 0.025621 udp 10.0.2.22 51868 <-> 84.26.131.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:58.320682 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:22:58.450398 0.697693 udp 10.0.2.22 51868 <-> 187.73.244.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:22:59.451736 0.346245 udp 10.0.2.22 51868 <-> 190.110.186.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:23:00.453206 0.328278 udp 10.0.2.22 51868 <-> 110.169.234.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:23:01.444982 0.337195 udp 10.0.2.22 51868 <-> 190.17.84.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:23:02.446705 0.000000 udp 10.0.2.22 51868 -> 189.79.170.44 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:23:03.447688 0.046550 udp 10.0.2.22 51868 <-> 95.87.201.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:23:04.449147 4.997375 udp 10.0.2.22 51868 <-> 178.233.165.34 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:23:05.450360 0.353907 udp 10.0.2.22 51868 <-> 113.253.23.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:23:06.452606 0.395132 udp 10.0.2.22 51868 <-> 190.17.84.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:23:07.453684 0.127219 udp 10.0.2.22 51868 <-> 77.78.227.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:23:08.445427 0.000000 udp 10.0.2.22 51868 -> 189.25.78.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:23:09.522864 0.000000 udp 10.0.2.22 51868 <- 178.233.165.34 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:23:10.447727 2.332968 udp 10.0.2.22 51868 <-> 189.79.170.44 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:23:11.449259 0.046663 udp 10.0.2.22 51868 <-> 95.87.201.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:23:13.451959 0.091249 udp 10.0.2.22 51868 <-> 213.231.117.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:23:14.453539 1.517489 udp 10.0.2.22 51868 <-> 175.35.18.93 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:23:16.446350 0.159484 udp 10.0.2.22 51868 <-> 174.100.71.86 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:23:17.448264 0.026164 udp 10.0.2.22 51868 <-> 85.130.46.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:23:18.449184 0.345099 udp 10.0.2.22 51868 <-> 122.49.247.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:23:19.450934 1.001129 udp 10.0.2.22 51868 <-> 216.45.40.102 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:23:21.453653 3.995519 udp 10.0.2.22 51868 -> 151.52.90.249 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:23:22.444984 4.005554 udp 10.0.2.22 51868 -> 84.1.164.249 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:23:23.446333 0.042955 udp 10.0.2.22 51868 <-> 89.65.83.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:23:24.448190 0.050224 udp 10.0.2.22 51868 <-> 5.14.121.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:23:25.319087 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:23:27.452576 0.000000 udp 10.0.2.22 51868 -> 71.12.81.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:23:28.453922 0.000000 udp 10.0.2.22 51868 -> 114.36.213.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:23:29.445510 0.061028 udp 10.0.2.22 51868 <-> 5.12.192.28 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:23:30.446941 0.307630 udp 10.0.2.22 51868 <-> 124.121.94.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:23:31.447848 3.004899 udp 10.0.2.22 51868 <-> 60.237.180.52 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:23:32.449334 0.000000 udp 10.0.2.22 51868 -> 118.6.66.92 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:23:33.451178 0.173520 udp 10.0.2.22 51868 <-> 108.167.33.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:23:36.445662 0.000000 udp 10.0.2.22 51868 -> 109.192.35.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:23:37.446826 0.000098 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:23:37.446924 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:23:38.448404 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:23:39.449941 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:23:40.451180 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:23:41.452696 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:23:42.453657 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:23:43.445612 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:23:44.446999 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:23:45.448166 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:23:46.449894 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:23:47.450904 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:23:48.452860 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:23:49.454005 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:23:50.445694 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:23:51.446719 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:23:52.328054 0.000115 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:23:52.448060 0.358065 udp 10.0.2.22 51868 <-> 111.254.125.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:23:53.449436 0.361723 udp 10.0.2.22 51868 <-> 1.170.94.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:23:54.450916 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:23:55.452415 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:23:56.454333 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:23:57.445408 0.497942 udp 10.0.2.22 51868 <-> 109.192.35.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:23:58.446801 0.347106 udp 10.0.2.22 51868 <-> 113.254.247.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:23:59.448419 0.044169 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:00.449679 0.303820 udp 10.0.2.22 51868 <-> 180.199.214.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:01.451566 4.060066 udp 10.0.2.22 51868 <-> 2.92.4.6 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:03.454032 2.255035 udp 10.0.2.22 51868 <-> 2.195.10.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:04.445788 0.000000 udp 10.0.2.22 51868 -> 201.254.97.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:24:06.448433 0.439280 udp 10.0.2.22 51868 <-> 175.35.18.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:07.449813 4.997233 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:24:08.451627 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:24:09.452440 0.536233 udp 10.0.2.22 51868 <-> 190.176.231.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:10.444173 0.037768 udp 10.0.2.22 51868 <-> 78.97.192.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:11.445570 0.000000 udp 10.0.2.22 51868 -> 86.122.145.73 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:24:13.448620 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:24:14.450169 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:24:15.451549 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:24:16.452829 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:24:17.444508 0.000000 udp 10.0.2.22 51868 -> 79.114.24.192 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:24:18.445524 0.154852 udp 10.0.2.22 51868 <-> 174.100.71.86 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:19.326899 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:24:19.447547 0.120296 udp 10.0.2.22 51868 <-> 98.166.225.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:20.448224 3.004266 udp 10.0.2.22 51868 <-> 114.166.187.138 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:21.450262 0.000000 udp 10.0.2.22 51868 -> 89.229.150.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:24:22.451301 0.000000 udp 10.0.2.22 51868 -> 75.109.202.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:24:24.444554 0.310870 udp 10.0.2.22 51868 <-> 150.162.192.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:25.446164 0.163044 udp 10.0.2.22 51868 <-> 70.185.202.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:26.447369 0.356251 udp 10.0.2.22 51868 <-> 219.78.101.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:27.448520 0.120361 udp 10.0.2.22 51868 <-> 141.101.8.126 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:28.450197 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:24:29.451251 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:24:30.453099 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:24:31.444151 1.073950 udp 10.0.2.22 51868 <-> 86.126.0.125 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:33.447257 0.000000 udp 10.0.2.22 51868 -> 90.46.9.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:24:34.448412 0.319803 udp 10.0.2.22 51868 <-> 101.63.214.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:35.450082 0.364914 udp 10.0.2.22 51868 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:36.451208 0.164223 udp 10.0.2.22 51868 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:37.452893 0.806267 udp 10.0.2.22 51868 <-> 184.21.195.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:38.444519 0.135838 udp 10.0.2.22 51868 <-> 68.197.121.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:39.445530 0.333078 udp 10.0.2.22 51868 <-> 14.99.127.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:40.447232 0.271878 udp 10.0.2.22 51868 <-> 75.25.1.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:42.450602 0.030700 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:43.451606 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:24:44.452773 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:24:45.444222 0.200612 udp 10.0.2.22 51868 <-> 201.209.115.220 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:46.445802 0.303522 udp 10.0.2.22 51868 <-> 124.109.194.224 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:47.327341 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:24:47.447246 0.384096 udp 10.0.2.22 51868 <-> 190.172.83.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:48.448732 0.000000 udp 10.0.2.22 51868 -> 188.254.153.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:24:49.450326 0.310963 udp 10.0.2.22 51868 <-> 211.225.215.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:50.451997 0.024553 udp 10.0.2.22 51868 <-> 94.213.199.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:51.453405 0.829896 udp 10.0.2.22 51868 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:52.444516 0.000000 udp 10.0.2.22 51868 -> 177.149.127.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:24:53.446144 0.000000 udp 10.0.2.22 51868 -> 184.45.38.230 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:24:54.447240 0.175107 udp 10.0.2.22 51868 <-> 74.56.191.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:55.449146 0.000000 udp 10.0.2.22 51868 -> 116.72.134.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:24:56.450372 0.276275 udp 10.0.2.22 51868 <-> 114.109.34.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:24:57.451667 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:24:58.453338 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:24:59.444321 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:25:00.446062 0.000125 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:25:00.446187 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:25:01.447375 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:25:02.449171 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:25:03.450652 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:25:04.451712 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:25:05.453154 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:25:06.444834 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:25:07.446471 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:25:09.448998 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:25:10.450641 0.000000 udp 10.0.2.22 51868 -> 114.40.25.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:25:11.451797 0.047265 udp 10.0.2.22 51868 <-> 89.2.226.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:12.453651 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:25:13.444373 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:25:14.326317 0.000142 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:25:14.446269 0.261159 udp 10.0.2.22 51868 <-> 114.109.34.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:15.447289 0.153103 udp 10.0.2.22 51868 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:16.448787 4.997448 udp 10.0.2.22 51868 -> 5.96.32.122 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:25:17.450668 0.300886 udp 10.0.2.22 51868 <-> 175.111.126.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:18.451896 0.000000 udp 10.0.2.22 51868 -> 179.92.227.198 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:25:19.453289 0.187627 udp 10.0.2.22 51868 <-> 173.23.12.75 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:20.444814 0.171225 udp 10.0.2.22 51868 <-> 50.80.10.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:22.447924 3.062356 udp 10.0.2.22 51868 <-> 93.118.196.219 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:23.448768 0.000000 udp 10.0.2.22 51868 -> 93.148.137.177 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:25:24.450891 0.000000 udp 10.0.2.22 51868 -> 124.123.201.98 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:25:26.453930 4.997082 udp 10.0.2.22 51868 <-> 190.219.0.107 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:27.445133 0.259299 udp 10.0.2.22 51868 <-> 94.45.99.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:28.446328 0.180459 udp 10.0.2.22 51868 <-> 173.23.12.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:29.448050 0.000000 udp 10.0.2.22 51868 -> 93.118.196.219 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:25:30.449105 0.170862 udp 10.0.2.22 51868 <-> 50.80.10.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:31.636308 0.000000 udp 10.0.2.22 51868 <- 190.219.0.107 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:25:32.451727 1.992823 udp 10.0.2.22 51868 -> 71.205.244.59 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:25:33.453868 4.996477 udp 10.0.2.22 51868 <-> 89.216.39.153 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:35.446320 0.153183 udp 10.0.2.22 51868 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:36.448197 0.313599 udp 10.0.2.22 51868 <-> 175.111.126.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:37.449108 0.000000 udp 10.0.2.22 51868 -> 124.123.201.98 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:25:38.498923 0.000000 udp 10.0.2.22 51868 <- 89.216.39.153 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:25:39.451932 0.144682 udp 10.0.2.22 51868 <-> 174.101.11.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:40.453894 2.131488 udp 10.0.2.22 51868 <-> 63.131.171.98 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:41.324935 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:25:41.445006 0.000000 udp 10.0.2.22 51868 -> 49.203.153.180 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:25:43.448111 0.168739 udp 10.0.2.22 51868 <-> 173.218.201.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:44.449657 0.261059 udp 10.0.2.22 51868 <-> 117.198.163.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:45.450574 0.114066 udp 10.0.2.22 51868 <-> 151.50.66.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:46.452368 0.344802 udp 10.0.2.22 51868 <-> 27.105.20.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:47.453719 0.152420 udp 10.0.2.22 51868 <-> 49.207.92.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:48.445395 0.415808 udp 10.0.2.22 51868 <-> 118.179.243.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:49.446469 0.378846 udp 10.0.2.22 51868 <-> 190.179.200.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:50.447988 4.319802 udp 10.0.2.22 51868 <-> 180.146.156.252 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:51.449488 2.144730 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:52.450742 0.310277 udp 10.0.2.22 51868 <-> 61.21.68.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:55.445219 0.650038 udp 10.0.2.22 51868 <-> 117.230.180.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:56.446918 0.038736 udp 10.0.2.22 51868 <-> 144.122.35.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:57.447997 0.639061 udp 10.0.2.22 51868 <-> 69.151.57.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:58.449098 0.306509 udp 10.0.2.22 51868 <-> 200.156.104.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:25:59.450614 0.162235 udp 10.0.2.22 51868 <-> 24.249.56.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:26:00.452689 0.000000 udp 10.0.2.22 51868 -> 82.137.57.187 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:01.453843 0.299104 udp 10.0.2.22 51868 <-> 14.54.173.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:26:02.445027 0.177813 udp 10.0.2.22 51868 <-> 75.66.196.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:26:03.446782 0.000000 udp 10.0.2.22 51868 -> 187.69.166.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:04.447795 0.280195 udp 10.0.2.22 51868 <-> 200.141.82.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:26:05.449158 0.226892 udp 10.0.2.22 51868 <-> 209.55.78.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:26:06.451152 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:07.452216 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:08.323984 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:26:08.454054 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:09.445250 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:11.448419 0.000115 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:11.448534 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:26:12.449654 4.997406 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:13.451000 0.383045 udp 10.0.2.22 51868 <-> 114.36.128.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:26:14.452400 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:16.445094 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:18.448198 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:19.449770 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:20.451418 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:21.452678 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:22.453803 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:23.445223 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:24.446588 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:25.448515 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:26.449653 0.000109 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:26.449762 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:26:27.451319 2.994358 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:28.452410 3.996196 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:29.453952 0.329594 udp 10.0.2.22 51868 <-> 186.10.29.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:26:31.447104 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:33.450149 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:34.451049 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:35.322531 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:26:35.452627 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:35.475363 3.002372 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 04:26:36.454201 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:37.445572 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:38.447166 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:40.449581 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:41.451604 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:42.452547 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:42.482808 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:26:43.444015 0.000126 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:43.444141 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:26:44.445441 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:45.446696 0.173379 udp 10.0.2.22 51868 <-> 124.123.13.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:26:46.448694 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:47.450112 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:48.451329 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:49.453050 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:50.444037 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:50.484335 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:26:51.445314 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:52.446808 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:53.448506 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:54.449747 0.324154 udp 10.0.2.22 51868 <-> 186.10.29.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:26:55.451367 0.000000 udp 10.0.2.22 51868 -> 71.80.71.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:56.452470 0.000000 udp 10.0.2.22 51868 -> 61.223.95.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:26:57.444641 0.191627 udp 10.0.2.22 51868 <-> 70.233.97.220 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:26:58.445512 0.163997 udp 10.0.2.22 51868 <-> 71.90.71.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:26:59.446789 0.989100 udp 10.0.2.22 51868 <-> 49.128.166.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:00.448706 0.118817 udp 10.0.2.22 51868 <-> 24.36.117.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:01.450167 0.047896 udp 10.0.2.22 51868 <-> 87.249.169.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:02.320985 0.000117 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:27:02.451301 0.000000 udp 10.0.2.22 51868 -> 84.90.96.164 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:27:03.452895 0.000000 udp 10.0.2.22 51868 -> 66.74.24.155 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:27:04.444333 0.185805 udp 10.0.2.22 51868 <-> 72.152.208.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:05.445882 0.000000 udp 10.0.2.22 51868 -> 180.147.116.143 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:27:06.446863 0.106799 udp 10.0.2.22 51868 <-> 87.2.181.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:06.487068 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:27:07.448483 0.638253 udp 10.0.2.22 51868 <-> 80.91.213.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:08.450208 0.162027 udp 10.0.2.22 51868 <-> 75.73.227.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:09.451874 4.046013 udp 10.0.2.22 51868 <-> 86.123.213.157 16464 CON 0 0 5 1954 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:10.452916 0.044395 udp 10.0.2.22 51868 <-> 5.20.66.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:12.446146 0.000000 udp 10.0.2.22 51868 -> 66.74.24.155 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:27:14.448548 0.170784 udp 10.0.2.22 51868 <-> 70.83.116.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:15.450505 0.129723 udp 10.0.2.22 51868 <-> 98.124.111.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:16.451724 0.079483 udp 10.0.2.22 51868 <-> 85.226.38.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:17.453051 0.297946 udp 10.0.2.22 51868 <-> 14.54.173.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:18.444107 0.166358 udp 10.0.2.22 51868 <-> 184.59.192.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:19.446099 0.166854 udp 10.0.2.22 51868 <-> 70.80.122.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:20.447261 0.353336 udp 10.0.2.22 51868 <-> 114.25.141.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:21.448939 0.139562 udp 10.0.2.22 51868 <-> 69.115.113.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:22.450531 2.166641 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:23.451707 0.000000 udp 10.0.2.22 51868 -> 68.114.151.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:27:25.444803 0.227999 udp 10.0.2.22 51868 <-> 190.78.21.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:26.446254 3.385639 udp 10.0.2.22 51868 <-> 114.36.128.153 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:27.447596 0.000000 udp 10.0.2.22 51868 -> 79.108.227.212 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:27:28.449090 0.276774 udp 10.0.2.22 51868 <-> 177.143.155.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:29.320028 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:27:30.451874 0.162459 udp 10.0.2.22 51868 <-> 98.243.163.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:31.453150 0.185638 udp 10.0.2.22 51868 <-> 207.134.228.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:32.444808 0.274747 udp 10.0.2.22 51868 <-> 190.151.62.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:33.446296 2.002238 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:27:34.447264 0.042932 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:36.450739 3.287188 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:37.452017 0.000000 udp 10.0.2.22 51868 -> 109.192.35.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:27:38.453528 0.140369 udp 10.0.2.22 51868 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:38.493850 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:27:40.446602 0.124091 udp 10.0.2.22 51868 <-> 88.37.113.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:41.447208 0.021443 udp 10.0.2.22 51868 <-> 109.90.62.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:42.448888 1.191475 udp 10.0.2.22 51868 <-> 91.120.105.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:43.450183 0.030502 udp 10.0.2.22 51868 <-> 80.219.71.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:44.452061 0.356545 udp 10.0.2.22 51868 <-> 86.64.209.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:45.453226 0.000000 udp 10.0.2.22 51868 -> 151.241.62.180 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:27:46.444953 0.142113 udp 10.0.2.22 51868 <-> 217.201.206.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:46.587423 0.000000 udp 10.0.2.22 51868 -> 112.186.250.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:27:46.587509 0.000000 udp 10.0.2.22 51868 -> 114.180.181.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:27:46.587588 0.000000 udp 10.0.2.22 51868 -> 98.243.163.113 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:27:46.587665 0.000000 udp 10.0.2.22 51868 -> 117.207.88.173 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:27:46.587747 0.000000 udp 10.0.2.22 51868 -> 68.82.170.144 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:27:46.587823 0.000000 udp 10.0.2.22 51868 -> 94.153.61.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:27:46.587899 0.000000 udp 10.0.2.22 51868 -> 69.116.80.50 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:27:46.587980 0.000000 udp 10.0.2.22 51868 -> 118.232.180.187 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:27:46.588061 0.000000 udp 10.0.2.22 51868 -> 89.190.113.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:27:46.588141 0.000000 udp 10.0.2.22 51868 -> 95.59.36.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:27:46.588230 0.000000 udp 10.0.2.22 51868 -> 203.133.221.82 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:27:46.588310 0.000000 udp 10.0.2.22 51868 -> 109.193.154.184 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:27:46.588389 0.000000 udp 10.0.2.22 51868 -> 90.154.230.144 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:27:46.588483 0.000000 udp 10.0.2.22 51868 -> 62.44.118.42 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:27:46.588560 0.000000 udp 10.0.2.22 51868 -> 89.133.113.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:27:46.588651 0.000000 udp 10.0.2.22 51868 -> 182.71.74.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:27:47.445816 1.240150 udp 10.0.2.22 51868 <-> 27.106.39.81 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:49.448866 1.287763 udp 10.0.2.22 51868 <-> 190.47.113.152 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:51.452309 0.146596 udp 10.0.2.22 51868 <-> 174.102.8.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:52.453020 3.065529 udp 10.0.2.22 51868 <-> 188.32.59.166 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:53.444930 0.049725 udp 10.0.2.22 51868 <-> 5.61.147.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:54.446169 1.250053 udp 10.0.2.22 51868 <-> 186.92.193.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:56.319230 0.000109 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:27:56.448925 0.197108 udp 10.0.2.22 51868 <-> 2.193.195.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:57.450868 0.143046 udp 10.0.2.22 51868 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:27:58.452287 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:27:59.453058 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:00.445082 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:01.446529 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:02.447787 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:03.449473 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:04.450528 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:05.451685 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:06.453143 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:07.445498 0.000000 udp 10.0.2.22 51868 -> 78.97.7.40 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:08.446611 0.314168 udp 10.0.2.22 51868 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:28:09.447823 0.491391 udp 10.0.2.22 51868 <-> 68.59.72.41 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:28:10.449109 3.145030 udp 10.0.2.22 51868 <-> 75.130.142.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:28:11.450478 0.044034 udp 10.0.2.22 51868 <-> 89.65.83.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:28:12.452099 0.048450 udp 10.0.2.22 51868 <-> 78.97.7.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:28:14.444630 0.000000 udp 10.0.2.22 51868 -> 95.220.247.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:15.446314 0.015304 udp 10.0.2.22 51868 <-> 161.53.118.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:28:16.448145 0.351606 udp 10.0.2.22 51868 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:28:17.448940 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:18.451078 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:19.452105 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:20.453307 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:21.445138 0.000103 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:21.445241 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:28:22.446455 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:23.327367 0.000102 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:28:23.448208 0.044880 udp 10.0.2.22 51868 <-> 89.65.83.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:28:24.449741 0.079864 udp 10.0.2.22 51868 <-> 193.68.211.45 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:28:25.451236 0.613672 udp 10.0.2.22 51868 <-> 68.59.72.41 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:28:26.452157 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:27.453417 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:28.445154 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:29.446893 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:30.448184 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:31.449234 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:32.450955 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:33.452379 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:34.453751 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:35.445187 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:37.448077 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:38.449351 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:39.451114 0.000079 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:39.451193 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:28:40.452609 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:41.454269 1.965442 udp 10.0.2.22 51868 <-> 179.216.83.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:28:42.444952 0.000000 udp 10.0.2.22 51868 -> 71.238.72.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:43.446624 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:44.447875 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:45.449957 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:46.451029 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:47.452492 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:48.453993 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:49.445170 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:50.326636 0.000129 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:28:50.447016 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:51.447799 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:52.449776 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:53.450944 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:54.452528 0.000125 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:54.452653 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:28:56.445123 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:28:57.446640 0.040460 udp 10.0.2.22 51868 <-> 89.65.83.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:28:58.448591 0.461258 udp 10.0.2.22 51868 <-> 190.37.118.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:28:59.449891 0.158729 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:29:00.451053 0.182296 udp 10.0.2.22 51868 <-> 2.193.195.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:29:01.452395 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:02.453831 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:03.445392 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:04.446682 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:05.448045 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:06.450078 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:07.450845 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:08.452609 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:09.453820 4.997506 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:10.445663 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:11.446655 0.000067 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:11.446722 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:29:12.448252 0.175336 udp 10.0.2.22 51868 <-> 2.193.195.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:29:13.449694 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:15.452768 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:16.443788 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:17.325067 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:29:17.445792 0.000125 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:17.445917 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:29:18.447050 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:19.448154 0.000000 udp 10.0.2.22 51868 -> 89.65.83.245 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:20.449750 0.139509 udp 10.0.2.22 51868 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:29:21.451249 1.016426 udp 10.0.2.22 51868 <-> 161.53.118.11 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:29:23.444298 0.066583 udp 10.0.2.22 51868 <-> 193.68.211.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:29:24.445794 0.046401 udp 10.0.2.22 51868 <-> 78.97.7.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:29:25.447171 0.000000 udp 10.0.2.22 51868 -> 68.59.72.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:26.448361 2.002988 udp 10.0.2.22 51868 <-> 95.220.247.249 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:29:27.450018 0.000000 udp 10.0.2.22 51868 -> 86.124.224.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:29.452684 0.000000 udp 10.0.2.22 51868 -> 89.65.83.245 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:30.444049 4.052487 udp 10.0.2.22 51868 <-> 78.97.7.40 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:29:31.445729 0.104409 udp 10.0.2.22 51868 <-> 90.232.129.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:29:32.447028 0.000000 udp 10.0.2.22 51868 -> 193.68.211.45 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:33.448717 3.290336 udp 10.0.2.22 51868 <-> 186.94.84.246 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:29:35.451306 0.000000 udp 10.0.2.22 51868 -> 89.65.83.245 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:37.444061 1.314323 udp 10.0.2.22 51868 <-> 220.129.38.30 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:29:39.447238 0.129484 udp 10.0.2.22 51868 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:29:40.448856 0.139822 udp 10.0.2.22 51868 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:29:41.450061 0.000000 udp 10.0.2.22 51868 -> 147.143.158.126 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:42.451948 0.292013 udp 10.0.2.22 51868 <-> 88.37.113.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:29:43.453305 4.166249 udp 10.0.2.22 51868 <-> 24.55.45.218 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:29:44.324582 0.000037 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:29:44.444263 0.839590 udp 10.0.2.22 51868 <-> 89.229.25.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:29:45.446082 0.000000 udp 10.0.2.22 51868 -> 147.32.83.216 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:46.447466 0.140150 udp 10.0.2.22 51868 <-> 209.203.200.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:29:48.450237 0.000000 udp 10.0.2.22 51868 -> 1.173.137.198 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:49.451754 4.996934 udp 10.0.2.22 51868 -> 202.78.81.194 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:50.452826 4.997567 udp 10.0.2.22 51868 -> 98.235.8.111 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:51.444323 0.000000 udp 10.0.2.22 51868 -> 147.143.158.126 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:52.446057 0.043961 udp 10.0.2.22 51868 <-> 188.27.165.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:29:53.447241 0.147089 udp 10.0.2.22 51868 <-> 24.209.250.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:29:56.451294 0.000000 udp 10.0.2.22 51868 -> 147.143.158.126 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:29:57.453335 0.395517 udp 10.0.2.22 51868 <-> 190.176.74.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:29:58.444592 3.004395 udp 10.0.2.22 51868 <-> 89.102.235.54 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:29:59.445737 0.042252 udp 10.0.2.22 51868 <-> 147.156.162.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:00.447366 1.872752 arp 10.0.2.22 who 169.254.223.41 INT 3 126 flow=Background-ARP 1970/01/01 04:30:02.449892 0.277511 udp 10.0.2.22 51868 <-> 186.221.45.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:03.451355 0.167077 udp 10.0.2.22 51868 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:04.452766 0.071577 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:05.444643 2.696033 udp 10.0.2.22 51868 <-> 14.97.213.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:06.446103 0.000000 udp 10.0.2.22 51868 -> 2.195.10.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:30:07.447509 0.881968 udp 10.0.2.22 51868 <-> 95.85.162.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:08.448887 0.000000 udp 10.0.2.22 51868 -> 61.223.95.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:30:09.450398 0.000000 udp 10.0.2.22 51868 -> 81.37.252.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:30:10.451756 0.155893 udp 10.0.2.22 51868 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:11.322828 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:30:11.453595 0.000000 udp 10.0.2.22 51868 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:30:12.444508 0.047767 udp 10.0.2.22 51868 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:13.445856 0.750919 udp 10.0.2.22 51868 <-> 95.85.162.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:14.447387 0.022277 udp 10.0.2.22 51868 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:15.449187 0.000000 udp 10.0.2.22 51868 -> 72.42.149.177 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:30:16.450466 0.049099 udp 10.0.2.22 51868 <-> 88.222.156.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:17.451843 0.000000 udp 10.0.2.22 51868 -> 75.64.127.51 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:30:18.453067 0.350035 udp 10.0.2.22 51868 <-> 113.254.247.11 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:19.444467 0.319833 udp 10.0.2.22 51868 <-> 220.129.38.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:20.445783 0.218050 udp 10.0.2.22 51868 <-> 115.118.162.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:21.447331 0.187332 udp 10.0.2.22 51868 <-> 74.216.190.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:22.449175 0.000000 udp 10.0.2.22 51868 -> 95.224.107.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:30:23.450105 0.000000 udp 10.0.2.22 51868 -> 86.123.54.53 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:30:24.452095 0.349539 udp 10.0.2.22 51868 <-> 113.254.247.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:25.453058 1.992927 udp 10.0.2.22 51868 -> 62.131.75.43 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:30:26.445155 0.141794 udp 10.0.2.22 51868 <-> 75.177.1.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:28.447705 2.156346 udp 10.0.2.22 51868 <-> 72.23.159.125 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:29.448930 0.161422 udp 10.0.2.22 51868 <-> 66.232.254.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:31.451962 0.166902 udp 10.0.2.22 51868 <-> 96.63.219.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:32.453041 0.000000 udp 10.0.2.22 51868 -> 1.168.250.38 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:30:33.444476 0.000000 udp 10.0.2.22 51868 -> 113.254.247.11 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:30:34.446513 0.379104 udp 10.0.2.22 51868 <-> 111.249.122.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:35.447973 0.000000 udp 10.0.2.22 51868 -> 5.12.11.55 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:30:36.448993 0.000000 udp 10.0.2.22 51868 -> 87.17.138.103 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:30:37.450658 0.000000 udp 10.0.2.22 51868 -> 219.250.186.133 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:30:38.322130 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:30:38.452104 0.113255 udp 10.0.2.22 51868 <-> 66.232.254.99 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:39.453915 0.162891 udp 10.0.2.22 51868 <-> 66.176.196.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:40.445103 0.160695 udp 10.0.2.22 51868 <-> 24.37.209.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:41.446343 0.053136 udp 10.0.2.22 51868 <-> 213.214.69.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:42.447412 0.154929 udp 10.0.2.22 51868 <-> 69.55.254.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:43.448954 0.425286 udp 10.0.2.22 51868 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:44.450863 0.138353 udp 10.0.2.22 51868 <-> 24.47.109.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:45.452222 0.058094 udp 10.0.2.22 51868 <-> 78.235.244.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:46.453275 0.056631 udp 10.0.2.22 51868 <-> 188.214.34.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:47.445191 2.002922 udp 10.0.2.22 51868 -> 212.98.191.56 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:30:48.446083 0.040659 udp 10.0.2.22 51868 <-> 195.178.240.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:50.449646 0.426104 udp 10.0.2.22 51868 <-> 177.149.127.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:51.451221 1.047990 udp 10.0.2.22 51868 <-> 190.11.144.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:52.452153 0.490589 udp 10.0.2.22 51868 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:53.453505 0.000000 udp 10.0.2.22 51868 -> 87.111.109.206 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:30:54.445237 0.000000 udp 10.0.2.22 51868 -> 1.53.54.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:30:55.446218 1.868374 udp 10.0.2.22 51868 <-> 195.174.174.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:56.447691 0.153775 udp 10.0.2.22 51868 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:57.448973 0.017863 udp 10.0.2.22 51868 <-> 84.118.6.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:30:58.450420 0.000000 udp 10.0.2.22 51868 -> 79.163.1.31 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:30:59.452447 0.000000 udp 10.0.2.22 51868 -> 71.225.111.82 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:31:00.453311 0.000000 udp 10.0.2.22 51868 -> 213.125.150.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:31:01.444810 0.000000 udp 10.0.2.22 51868 -> 1.34.204.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:31:02.446179 0.374643 udp 10.0.2.22 51868 <-> 113.252.190.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:03.448289 0.000000 udp 10.0.2.22 51868 -> 186.95.79.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:31:04.449164 0.000000 udp 10.0.2.22 51868 -> 213.181.48.240 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:31:05.320950 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:31:05.450721 0.000000 udp 10.0.2.22 51868 -> 178.167.99.54 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:31:06.452039 0.000000 udp 10.0.2.22 51868 -> 79.163.1.31 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:31:07.453386 2.367747 udp 10.0.2.22 51868 <-> 113.252.190.54 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:08.445163 3.003941 udp 10.0.2.22 51868 <-> 50.90.102.28 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:10.448278 0.000000 udp 10.0.2.22 51868 -> 213.125.150.34 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:31:12.450896 4.997075 udp 10.0.2.22 51868 -> 123.108.253.65 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:31:13.452187 0.000000 udp 10.0.2.22 51868 -> 213.181.48.240 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:31:14.453556 1.041340 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:16.446412 0.000000 udp 10.0.2.22 51868 -> 186.95.79.43 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:31:18.449679 0.119490 udp 10.0.2.22 51868 <-> 98.166.225.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:19.451168 0.310120 udp 10.0.2.22 51868 <-> 218.152.217.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:20.452471 0.406313 udp 10.0.2.22 51868 <-> 218.52.136.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:21.454186 0.267106 udp 10.0.2.22 51868 <-> 181.165.100.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:22.445147 0.374488 udp 10.0.2.22 51868 <-> 113.252.190.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:23.446886 0.000000 udp 10.0.2.22 51868 -> 63.147.47.73 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:31:24.457826 0.318145 udp 10.0.2.22 51868 <-> 1.34.204.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:25.459687 0.166651 udp 10.0.2.22 51868 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:26.461152 0.000000 udp 10.0.2.22 51868 -> 186.95.79.43 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:31:27.462586 0.061174 udp 10.0.2.22 51868 <-> 85.122.147.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:28.463705 0.184859 udp 10.0.2.22 51868 <-> 75.111.219.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:29.455266 0.156734 udp 10.0.2.22 51868 <-> 71.194.5.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:30.457239 0.287140 udp 10.0.2.22 51868 <-> 114.198.193.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:31.458776 0.036807 udp 10.0.2.22 51868 <-> 94.253.202.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:32.329497 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:31:32.459470 0.364757 udp 10.0.2.22 51868 <-> 124.12.35.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:33.461503 1.428050 udp 10.0.2.22 51868 <-> 201.254.97.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:34.462650 1.232531 udp 10.0.2.22 51868 <-> 96.2.150.29 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:36.455376 0.000000 udp 10.0.2.22 51868 -> 74.69.234.235 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:31:37.456949 0.000000 udp 10.0.2.22 51868 -> 119.234.181.70 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:31:38.458523 0.148635 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:39.459840 1.284667 udp 10.0.2.22 51868 <-> 201.254.97.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:40.461036 0.067371 udp 10.0.2.22 51868 <-> 87.121.108.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:41.462680 0.476635 udp 10.0.2.22 51868 <-> 210.119.21.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:42.453896 0.658372 udp 10.0.2.22 51868 <-> 181.208.75.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:43.455414 0.200648 udp 10.0.2.22 51868 <-> 87.3.175.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:44.456684 0.000000 udp 10.0.2.22 51868 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:31:45.458225 0.000000 udp 10.0.2.22 51868 -> 83.31.210.232 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:31:46.459777 0.349383 udp 10.0.2.22 51868 <-> 123.192.142.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:47.461064 0.373956 udp 10.0.2.22 51868 <-> 114.26.25.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:48.462676 0.071206 udp 10.0.2.22 51868 <-> 85.86.71.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:49.453935 0.364946 udp 10.0.2.22 51868 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:50.455483 0.119220 udp 10.0.2.22 51868 <-> 80.117.95.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:51.456844 0.119876 udp 10.0.2.22 51868 <-> 64.121.253.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:52.458315 0.157814 udp 10.0.2.22 51868 <-> 74.142.115.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:53.459863 0.050431 udp 10.0.2.22 51868 <-> 176.103.18.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:54.461508 0.000000 udp 10.0.2.22 51868 -> 109.192.35.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:31:55.462389 0.000000 udp 10.0.2.22 51868 -> 75.86.159.42 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:31:56.454575 0.000000 udp 10.0.2.22 51868 -> 2.184.92.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:31:57.455694 0.380889 udp 10.0.2.22 51868 <-> 180.215.78.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:58.456703 0.355862 udp 10.0.2.22 51868 <-> 187.69.91.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:31:59.337943 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:31:59.458525 3.074045 udp 10.0.2.22 51868 <-> 89.190.113.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:32:00.459569 0.058570 udp 10.0.2.22 51868 <-> 37.72.79.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:32:01.461022 0.000000 udp 10.0.2.22 51868 -> 94.55.46.63 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:03.454528 0.336689 udp 10.0.2.22 51868 <-> 126.115.117.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:32:04.455350 0.000000 udp 10.0.2.22 51868 -> 69.180.126.101 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:05.457457 0.000000 udp 10.0.2.22 51868 -> 210.170.30.83 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:06.458472 0.159121 udp 10.0.2.22 51868 <-> 74.129.39.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:32:08.461467 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:09.462982 0.000083 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:09.463065 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:32:10.454613 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:11.455773 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:12.456829 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:13.458571 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:14.460427 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:15.461237 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:16.462633 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:17.454703 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:18.455764 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:19.457064 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:20.458867 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:21.459774 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:22.461472 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:23.463270 0.173962 udp 10.0.2.22 51868 <-> 116.73.164.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:32:24.454206 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:25.455911 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:26.337371 0.000093 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:32:26.456975 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:27.459033 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:28.459960 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:29.461680 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:30.463560 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:32.456004 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:33.457374 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:34.458747 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:35.460567 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:36.461940 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:37.463277 0.000093 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:37.463370 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:32:38.454975 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:39.455775 0.221191 udp 10.0.2.22 51868 <-> 116.73.164.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:32:40.457216 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:41.458554 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:42.460351 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:43.461507 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:44.462843 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:45.454949 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:47.457526 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:48.458909 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:49.460628 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:50.461977 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:51.463351 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:52.454316 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:53.335554 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:32:53.455898 0.000130 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:53.456028 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:32:54.457843 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:55.459054 0.176107 udp 10.0.2.22 51868 <-> 116.73.164.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:32:56.460715 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:57.462177 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:58.463198 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:32:59.454965 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:00.455949 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:02.458707 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:03.460290 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:04.461749 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:05.463695 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:06.455139 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:07.455921 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:08.457675 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:09.458942 0.000087 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:09.459029 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:33:10.460701 4.996706 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:11.461917 0.199554 udp 10.0.2.22 51868 <-> 116.73.164.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:33:12.463476 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:13.455080 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:14.456257 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:16.459211 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:17.461059 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:19.463496 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:20.335052 0.000105 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:33:20.455218 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:21.456429 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:22.457848 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:23.458991 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:24.460653 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:25.461822 0.000096 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:25.461918 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:33:26.463604 4.997401 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:27.455274 0.178652 udp 10.0.2.22 51868 <-> 116.73.164.204 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:33:28.456824 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:29.457648 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:30.459573 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:32.462210 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:33.463497 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:34.455414 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:35.456269 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:37.459721 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:38.460497 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:39.462416 0.000040 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:39.462456 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:33:40.463630 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:41.455282 0.334965 udp 10.0.2.22 51868 <-> 116.73.164.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:33:42.456737 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:42.510020 3.000760 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 04:33:43.458494 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:44.459099 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:45.460605 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:46.462176 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:47.333500 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:33:47.463890 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:48.454975 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:49.456413 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:49.516606 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:33:50.457779 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:51.459662 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:52.460781 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:53.462384 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:54.463492 0.000087 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:54.463579 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:33:56.456929 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:33:57.457812 0.178486 udp 10.0.2.22 51868 <-> 116.73.164.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:33:57.517993 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:33:58.459954 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:00.463016 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:01.463619 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:02.455220 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:03.456962 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:04.458532 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:05.459352 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:06.461047 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:07.462319 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:08.463600 0.000097 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:08.463697 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:34:09.455304 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:10.457198 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:11.458243 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:12.459653 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:13.461116 0.175448 udp 10.0.2.22 51868 <-> 116.73.164.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:34:13.521362 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:34:14.332128 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:34:14.462689 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:15.453988 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:16.455655 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:17.457166 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:18.458156 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:19.460048 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:20.460891 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:21.463120 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:22.454110 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:24.457115 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:25.458151 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:26.460142 0.000114 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:26.460256 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:34:27.461565 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:28.463076 1.992231 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:29.453939 0.175452 udp 10.0.2.22 51868 <-> 116.73.164.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:34:31.457079 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:32.458178 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:33.459913 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:34.461261 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:35.463163 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:36.453865 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:37.455722 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:38.457491 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:39.458179 0.000056 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:39.458235 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:34:40.459619 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:41.331430 0.000143 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:34:41.461210 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:42.463028 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:43.453983 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:45.456878 0.173883 udp 10.0.2.22 51868 <-> 116.73.164.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:34:45.527122 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:34:46.458874 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:47.460125 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:48.461585 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:49.462904 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:50.454266 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:51.455822 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:52.457556 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:54.460379 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:55.461785 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:56.463246 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:57.454735 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:58.455691 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:59.457447 0.000093 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:34:59.457540 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:35:00.458735 2.002834 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:01.460196 0.177036 udp 10.0.2.22 51868 <-> 116.73.164.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:35:03.462809 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:04.454539 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:05.456014 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:06.457007 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:07.458887 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:08.330391 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:35:08.460210 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:09.461632 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:10.463175 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:11.454718 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:12.455767 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:13.457073 0.000152 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:13.457225 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:35:15.460725 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:16.462027 0.181019 udp 10.0.2.22 51868 <-> 116.73.164.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:35:17.463074 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:18.454311 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:19.456053 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:20.457125 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:21.459097 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:23.461942 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:24.463364 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:25.454649 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:26.456484 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:27.457480 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:28.459298 0.000068 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:28.459366 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:35:29.460297 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:30.462201 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:31.463475 0.201690 udp 10.0.2.22 51868 <-> 116.73.164.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:35:32.454609 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:33.455833 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:34.457911 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:35.328832 0.000092 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:35:35.459288 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:36.460118 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:37.461701 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:38.463165 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:39.454457 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:40.456333 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:41.457795 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:43.460713 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:44.462341 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:45.463281 0.000146 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:45.463427 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:35:46.454650 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:47.456463 0.254955 udp 10.0.2.22 51868 <-> 116.73.164.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:35:48.457396 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:49.458980 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:50.460880 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:52.463151 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:53.455089 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:54.456307 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:55.458059 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:56.458987 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:57.460329 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:58.461784 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:35:59.463329 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:00.454807 0.000104 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:00.454911 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:36:01.456511 4.005683 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:02.337579 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:36:02.457677 0.191767 udp 10.0.2.22 51868 <-> 116.73.164.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:36:03.459207 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:04.460775 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:06.463350 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:07.454969 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:08.456749 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:09.458155 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:10.459627 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:11.460487 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:12.462761 0.000125 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:12.462886 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:36:13.464001 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:14.454998 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:15.456765 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:17.459116 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:18.461144 0.210288 udp 10.0.2.22 51868 <-> 116.73.164.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:36:19.462577 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:20.463593 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:21.454895 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:22.456929 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:23.457918 0.180764 udp 10.0.2.22 51868 <-> 74.62.165.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:36:24.459147 0.166039 udp 10.0.2.22 51868 <-> 178.7.212.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:36:25.461102 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:26.462164 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:27.463744 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:28.455096 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:29.336515 0.000093 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:36:29.457014 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:30.458058 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:31.459763 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:32.461021 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:33.462191 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:34.463931 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:35.455466 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:36.456917 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:37.457862 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:38.459630 4.997390 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:39.460858 3.035666 udp 10.0.2.22 51868 <-> 83.250.76.130 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:36:40.462574 0.000000 udp 10.0.2.22 51868 -> 64.22.43.119 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:41.464089 0.054066 udp 10.0.2.22 51868 <-> 188.213.162.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:36:44.457923 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:45.459339 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:46.461476 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:47.462777 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:48.453916 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:49.455290 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:36:50.456779 0.353086 udp 10.0.2.22 51868 <-> 70.239.90.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:36:51.458187 0.056405 udp 10.0.2.22 51868 <-> 195.238.118.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:36:52.459991 0.226260 udp 10.0.2.22 51868 <-> 177.224.174.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:36:53.461074 0.151983 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:36:54.462739 0.051516 udp 10.0.2.22 51868 <-> 84.54.174.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:36:55.454025 0.234545 udp 10.0.2.22 51868 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:36:56.395177 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:36:56.515444 0.420936 udp 10.0.2.22 51868 <-> 70.239.90.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:36:57.516813 0.615618 udp 10.0.2.22 51868 <-> 213.133.17.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:36:58.518313 0.086484 udp 10.0.2.22 51868 <-> 89.247.36.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:36:59.519575 0.000000 udp 10.0.2.22 51868 -> 177.160.72.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:00.521042 0.093208 udp 10.0.2.22 51868 <-> 85.84.74.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:37:01.522842 0.000000 udp 10.0.2.22 51868 -> 70.28.18.68 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:02.514496 0.316204 udp 10.0.2.22 51868 <-> 115.250.85.69 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:37:03.515323 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:04.517106 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:05.518258 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:06.519631 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:07.521333 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:08.522824 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:09.514217 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:10.515609 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:11.517212 0.000057 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:11.517269 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:37:13.519938 0.000000 udp 10.0.2.22 51868 -> 213.133.17.151 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:14.521275 0.168275 udp 10.0.2.22 51868 <-> 68.226.220.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:37:15.522838 0.000000 udp 10.0.2.22 51868 -> 177.160.72.10 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:16.514085 0.084641 udp 10.0.2.22 51868 <-> 89.247.36.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:37:17.515538 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:18.516879 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:20.520135 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:21.521544 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:22.522839 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:23.394172 0.000131 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:37:23.514836 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:24.517127 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:25.517532 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:26.519103 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:27.520401 0.000085 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:27.520486 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:37:28.521545 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:29.523211 0.000000 udp 10.0.2.22 51868 -> 177.160.72.10 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:30.514761 0.000000 udp 10.0.2.22 51868 -> 139.0.190.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:31.515561 0.000000 udp 10.0.2.22 51868 -> 95.227.199.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:32.517179 0.247648 udp 10.0.2.22 51868 <-> 186.92.62.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:37:33.518745 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:34.520438 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:35.521339 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:35.852512 0.021814 udp 10.0.2.22 60020 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 04:37:35.874636 0.000000 udp 10.0.2.22 60021 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:36.522975 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:37.514845 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:38.516014 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:39.517645 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:40.519049 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:41.520476 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:42.521981 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:43.522844 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:45.515950 0.000000 udp 10.0.2.22 51868 -> 114.45.242.54 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:46.517953 0.021715 udp 10.0.2.22 51868 <-> 5.146.110.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:37:47.518658 0.485863 udp 10.0.2.22 51868 <-> 123.24.179.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:37:48.520225 0.069022 udp 10.0.2.22 51868 <-> 87.53.166.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:37:49.521992 0.041139 udp 10.0.2.22 51868 <-> 78.90.253.110 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:37:50.392982 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:37:50.522902 0.211166 udp 10.0.2.22 51868 <-> 186.95.159.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:37:51.514409 1.115749 udp 10.0.2.22 51868 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:37:52.515756 0.328710 udp 10.0.2.22 51868 <-> 115.244.237.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:37:53.517461 0.064150 udp 10.0.2.22 51868 <-> 94.42.125.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:37:54.519200 0.179891 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:37:55.520296 0.000000 udp 10.0.2.22 51868 -> 117.206.250.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:37:56.522252 0.283051 udp 10.0.2.22 51868 <-> 70.180.235.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:37:57.524590 0.117284 udp 10.0.2.22 51868 <-> 79.13.89.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:37:58.514452 1.252925 udp 10.0.2.22 51868 <-> 91.120.105.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:37:59.516546 0.081082 udp 10.0.2.22 51868 <-> 85.152.226.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:00.517332 1.244076 udp 10.0.2.22 51868 <-> 84.1.20.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:01.518996 0.000000 udp 10.0.2.22 51868 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:38:02.520504 3.296537 udp 10.0.2.22 51868 <-> 94.183.154.11 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:03.522268 0.140743 udp 10.0.2.22 51868 <-> 75.138.193.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:04.523244 0.000000 udp 10.0.2.22 51868 -> 109.91.102.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:38:06.516308 0.244576 udp 10.0.2.22 51868 <-> 174.47.243.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:07.517479 0.000000 udp 10.0.2.22 51868 -> 201.231.197.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:38:08.518858 1.800168 udp 10.0.2.22 51868 <-> 113.193.24.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:09.520337 1.100059 udp 10.0.2.22 51868 <-> 84.1.20.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:10.521994 0.268369 udp 10.0.2.22 51868 <-> 190.246.8.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:11.523670 0.392814 udp 10.0.2.22 51868 <-> 1.168.39.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:12.515099 0.269909 udp 10.0.2.22 51868 <-> 183.87.216.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:13.516056 0.458025 udp 10.0.2.22 51868 <-> 111.243.172.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:14.517715 1.313554 udp 10.0.2.22 51868 <-> 202.94.59.146 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:16.520483 0.134306 udp 10.0.2.22 51868 <-> 71.7.230.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:17.392118 0.000115 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:38:17.521945 0.051219 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:18.523306 0.191486 udp 10.0.2.22 51868 <-> 65.65.137.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:19.515017 0.076044 udp 10.0.2.22 51868 <-> 78.69.117.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:20.516101 0.000000 udp 10.0.2.22 51868 -> 82.59.115.62 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:38:21.517712 0.301589 udp 10.0.2.22 51868 <-> 114.198.193.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:22.519415 0.161583 udp 10.0.2.22 51868 <-> 68.226.188.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:23.520843 0.238001 udp 10.0.2.22 51868 <-> 186.89.117.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:24.522260 0.346598 udp 10.0.2.22 51868 <-> 1.174.151.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:25.523318 0.325106 udp 10.0.2.22 51868 <-> 14.35.232.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:26.515336 0.308239 udp 10.0.2.22 51868 <-> 94.183.154.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:27.516402 0.000000 udp 10.0.2.22 51868 -> 184.59.170.99 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:38:28.518028 0.164136 udp 10.0.2.22 51868 <-> 111.91.69.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:29.519608 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:38:30.521012 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:38:31.522382 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:38:32.523554 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:38:33.514935 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:38:34.516477 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:38:35.518057 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:38:36.519199 0.167862 udp 10.0.2.22 51868 <-> 24.201.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:37.520899 0.000000 udp 10.0.2.22 51868 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:38:38.522164 1.993048 udp 10.0.2.22 51868 -> 79.27.166.246 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:38:39.524226 0.101330 udp 10.0.2.22 51868 <-> 151.77.179.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:41.516355 0.174424 udp 10.0.2.22 51868 <-> 69.244.18.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:42.518114 4.254147 udp 10.0.2.22 51868 <-> 187.245.107.235 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:43.519285 4.322294 udp 10.0.2.22 51868 <-> 37.19.157.109 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:44.390952 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:38:44.520587 0.312738 udp 10.0.2.22 51868 <-> 49.251.197.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:45.522710 0.060310 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:48.516412 0.219832 udp 10.0.2.22 51868 <-> 208.110.33.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:49.518398 0.367057 udp 10.0.2.22 51868 <-> 36.229.173.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:50.519578 0.024080 udp 10.0.2.22 51868 <-> 83.84.66.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:51.521222 0.000000 udp 10.0.2.22 51868 -> 68.199.17.61 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:38:52.522032 0.072240 udp 10.0.2.22 51868 <-> 193.68.211.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:53.523622 0.028426 udp 10.0.2.22 51868 <-> 149.172.200.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:54.515043 0.298821 udp 10.0.2.22 51868 <-> 118.15.72.67 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:55.516344 0.072643 udp 10.0.2.22 51868 <-> 79.165.97.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:56.518106 0.136275 udp 10.0.2.22 51868 <-> 66.232.101.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:57.519985 0.136174 udp 10.0.2.22 51868 <-> 75.109.75.198 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:58.521175 0.623628 udp 10.0.2.22 51868 <-> 190.18.110.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:38:59.522705 0.135802 udp 10.0.2.22 51868 <-> 76.116.43.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:00.523904 0.070012 udp 10.0.2.22 51868 <-> 78.50.39.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:01.515262 0.315663 udp 10.0.2.22 51868 <-> 14.96.93.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:02.517098 0.395407 udp 10.0.2.22 51868 <-> 59.161.67.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:03.518073 4.006130 udp 10.0.2.22 51868 <-> 219.85.206.217 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:04.519829 0.000000 udp 10.0.2.22 51868 -> 202.78.234.118 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:39:05.521097 0.039799 udp 10.0.2.22 51868 <-> 79.114.130.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:06.522704 0.400841 udp 10.0.2.22 51868 <-> 1.170.44.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:08.515181 0.256744 udp 10.0.2.22 51868 <-> 186.89.3.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:09.516708 1.166993 udp 10.0.2.22 51868 <-> 190.189.63.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:10.518494 0.137616 udp 10.0.2.22 51868 <-> 24.47.109.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:11.389129 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:39:11.519583 0.235050 udp 10.0.2.22 51868 <-> 74.195.15.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:12.521013 0.049966 udp 10.0.2.22 51868 <-> 188.27.211.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:13.522886 0.277271 udp 10.0.2.22 51868 <-> 187.2.136.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:14.524133 1.174409 udp 10.0.2.22 51868 <-> 76.109.136.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:16.517243 0.043295 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:17.517998 0.307565 udp 10.0.2.22 51868 <-> 116.70.168.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:18.519434 0.261700 udp 10.0.2.22 51868 <-> 87.18.240.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:19.521021 0.448677 udp 10.0.2.22 51868 <-> 14.96.93.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:20.522946 0.076935 udp 10.0.2.22 51868 <-> 134.249.0.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:21.514369 0.049901 udp 10.0.2.22 51868 <-> 79.114.6.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:22.515528 0.142954 udp 10.0.2.22 51868 <-> 216.49.23.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:23.517241 0.108960 udp 10.0.2.22 51868 <-> 79.33.64.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:24.518696 0.145948 udp 10.0.2.22 51868 <-> 24.209.250.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:25.519961 0.161282 udp 10.0.2.22 51868 <-> 95.58.150.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:26.521420 0.055921 udp 10.0.2.22 51868 <-> 86.122.152.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:27.523028 0.159122 udp 10.0.2.22 51868 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:28.514396 0.000000 udp 10.0.2.22 51868 -> 190.189.63.86 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:39:29.515536 0.044542 udp 10.0.2.22 51868 <-> 193.150.231.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:30.517134 0.000000 udp 10.0.2.22 51868 -> 68.186.141.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:39:31.518303 0.369824 udp 10.0.2.22 51868 <-> 83.21.115.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:32.519987 0.198474 udp 10.0.2.22 51868 <-> 46.225.75.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:33.521483 0.075412 udp 10.0.2.22 51868 <-> 81.9.181.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:34.523140 0.078488 udp 10.0.2.22 51868 <-> 130.204.169.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:35.514353 1.242258 udp 10.0.2.22 51868 <-> 190.189.63.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:36.515304 0.044704 udp 10.0.2.22 51868 <-> 193.150.231.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:37.516725 0.173635 udp 10.0.2.22 51868 <-> 103.10.224.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:38.398158 0.000124 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:39:38.518780 0.149873 udp 10.0.2.22 51868 <-> 67.242.194.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:39.519717 0.212106 udp 10.0.2.22 51868 <-> 115.252.37.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:40.521729 0.000000 udp 10.0.2.22 51868 -> 201.253.169.140 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:39:41.522531 0.139498 udp 10.0.2.22 51868 <-> 24.191.109.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:42.514010 0.067609 udp 10.0.2.22 51868 <-> 88.203.26.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:43.515949 0.000000 udp 10.0.2.22 51868 -> 69.151.57.84 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:39:44.516843 0.167012 udp 10.0.2.22 51868 <-> 173.17.64.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:45.518509 0.138978 udp 10.0.2.22 51868 <-> 1.186.124.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:46.520443 0.108150 udp 10.0.2.22 51868 <-> 79.126.186.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:47.521153 0.066049 udp 10.0.2.22 51868 <-> 31.222.118.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:48.523047 0.065085 udp 10.0.2.22 51868 <-> 86.121.142.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:49.514166 0.323482 udp 10.0.2.22 51868 <-> 203.202.216.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:50.516119 0.057974 udp 10.0.2.22 51868 <-> 37.72.79.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:51.516984 0.294648 udp 10.0.2.22 51868 <-> 118.87.119.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:52.518889 0.366897 udp 10.0.2.22 51868 <-> 36.229.173.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:53.520103 0.233001 udp 10.0.2.22 51868 <-> 186.92.240.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:54.521166 0.000000 udp 10.0.2.22 51868 -> 118.6.66.92 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:39:55.523177 0.095607 udp 10.0.2.22 51868 <-> 62.99.117.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:56.514645 0.045581 udp 10.0.2.22 51868 <-> 89.42.88.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:57.515668 1.297743 udp 10.0.2.22 51868 <-> 92.47.228.113 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:58.517458 0.042918 udp 10.0.2.22 51868 <-> 86.125.61.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:39:59.518741 0.043273 udp 10.0.2.22 51868 <-> 178.148.139.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:00.520343 0.243686 udp 10.0.2.22 51868 <-> 186.92.240.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:01.521283 0.170775 udp 10.0.2.22 51868 <-> 71.63.13.85 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:02.523189 0.028364 udp 10.0.2.22 51868 <-> 95.111.72.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:03.514667 0.375905 udp 10.0.2.22 51868 <-> 75.248.210.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:04.515571 0.344226 udp 10.0.2.22 51868 <-> 187.69.91.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:05.397013 0.000037 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:40:05.517719 0.000000 udp 10.0.2.22 51868 -> 2.185.124.124 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:40:06.518569 0.368093 udp 10.0.2.22 51868 <-> 61.56.177.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:07.520092 2.003331 udp 10.0.2.22 51868 -> 151.241.6.39 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:40:08.521608 0.144125 udp 10.0.2.22 51868 <-> 69.119.241.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:10.514620 0.036335 udp 10.0.2.22 51868 <-> 89.44.100.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:11.515852 0.431208 udp 10.0.2.22 51868 <-> 180.40.200.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:12.517607 0.334976 udp 10.0.2.22 51868 <-> 183.103.133.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:13.518706 0.000000 udp 10.0.2.22 51868 -> 174.68.99.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:40:14.520171 0.043205 udp 10.0.2.22 51868 <-> 77.20.104.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:15.521934 1.993057 udp 10.0.2.22 51868 -> 116.74.2.21 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:40:16.523052 0.037814 udp 10.0.2.22 51868 <-> 5.15.210.30 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:18.516191 0.160689 udp 10.0.2.22 51868 <-> 72.239.246.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:19.517750 0.208072 udp 10.0.2.22 51868 <-> 71.95.45.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:20.518857 0.186342 udp 10.0.2.22 51868 <-> 98.140.253.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:21.520596 0.180587 udp 10.0.2.22 51868 <-> 174.55.72.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:22.521576 0.141196 udp 10.0.2.22 51868 <-> 70.63.221.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:23.522860 0.294699 udp 10.0.2.22 51868 <-> 181.177.210.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:24.514365 0.000000 udp 10.0.2.22 51868 -> 31.147.129.54 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:40:25.515880 0.000000 udp 10.0.2.22 51868 -> 78.48.156.84 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:40:26.517739 0.029615 udp 10.0.2.22 51868 <-> 87.97.204.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:27.519356 0.056883 udp 10.0.2.22 51868 <-> 37.1.3.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:28.520640 0.000000 udp 10.0.2.22 51868 -> 120.139.152.104 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:40:29.522020 0.261423 udp 10.0.2.22 51868 <-> 187.240.83.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:30.523364 0.260743 udp 10.0.2.22 51868 <-> 74.73.20.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:31.514436 0.209542 udp 10.0.2.22 51868 <-> 24.7.146.40 16464 CON 0 0 2 668 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:32.395682 0.000099 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:40:32.516235 0.344246 udp 10.0.2.22 51868 <-> 181.177.210.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:33.517419 0.307235 udp 10.0.2.22 51868 <-> 171.96.66.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:34.519028 0.080634 udp 10.0.2.22 51868 <-> 188.2.216.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:35.520104 0.145653 udp 10.0.2.22 51868 <-> 24.144.247.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:36.522059 0.025893 udp 10.0.2.22 51868 <-> 84.118.201.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:37.523602 0.000000 udp 10.0.2.22 51868 -> 98.67.228.85 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:40:38.515109 0.241253 udp 10.0.2.22 51868 <-> 105.227.253.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:39.516622 0.143855 udp 10.0.2.22 51868 <-> 75.177.1.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:40.518104 0.407930 udp 10.0.2.22 51868 <-> 187.26.195.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:41.518749 0.545774 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:42.520925 0.144183 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:43.522119 0.041314 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:44.523638 0.362387 udp 10.0.2.22 51868 <-> 109.186.128.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:45.514586 0.000000 udp 10.0.2.22 51868 -> 151.237.7.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:40:46.516625 0.140395 udp 10.0.2.22 51868 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:47.517458 0.042510 udp 10.0.2.22 51868 <-> 89.98.118.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:48.519403 0.000000 udp 10.0.2.22 51868 -> 117.206.120.185 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:40:49.520887 0.133039 udp 10.0.2.22 51868 <-> 68.39.15.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:49.593655 3.001082 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 04:40:50.522250 0.347010 udp 10.0.2.22 51868 <-> 126.115.117.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:51.523334 0.000000 udp 10.0.2.22 51868 -> 88.172.55.175 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:40:52.515300 0.172915 udp 10.0.2.22 51868 <-> 24.201.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:53.516022 0.074146 udp 10.0.2.22 51868 <-> 151.16.39.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:54.517608 0.056071 udp 10.0.2.22 51868 <-> 86.122.152.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:55.519033 0.157258 udp 10.0.2.22 51868 <-> 96.19.238.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:40:56.520342 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:40:56.600778 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:40:57.522531 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:40:58.523505 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:40:59.395075 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:40:59.514813 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:00.516396 0.091415 udp 10.0.2.22 51868 <-> 151.52.90.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:41:01.518198 0.199760 udp 10.0.2.22 51868 <-> 72.201.124.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:41:02.519419 0.370823 udp 10.0.2.22 51868 <-> 81.226.243.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:41:03.520438 0.232196 udp 10.0.2.22 51868 <-> 71.102.80.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:41:04.521832 0.236203 udp 10.0.2.22 51868 <-> 186.112.163.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:41:04.602183 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:41:05.523343 0.000000 udp 10.0.2.22 51868 -> 81.147.68.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:06.515247 0.418207 udp 10.0.2.22 51868 <-> 14.98.65.34 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:41:07.516608 0.000000 udp 10.0.2.22 51868 -> 114.177.121.164 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:08.517639 0.000000 udp 10.0.2.22 51868 -> 115.242.141.141 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:09.518996 0.648130 udp 10.0.2.22 51868 <-> 111.248.57.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:41:10.520594 0.000000 udp 10.0.2.22 51868 -> 14.97.235.115 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:11.522342 0.000000 udp 10.0.2.22 51868 -> 89.143.76.91 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:12.523493 1.459286 udp 10.0.2.22 51868 <-> 181.28.59.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:41:13.515214 0.000000 udp 10.0.2.22 51868 -> 115.23.220.122 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:14.516396 0.034106 udp 10.0.2.22 51868 <-> 93.103.63.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:41:15.518107 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:16.519636 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:18.522196 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:19.523556 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:20.514958 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:20.605090 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:41:21.516800 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:22.517922 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:23.519710 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:24.520840 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:25.522648 4.997043 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:25.522761 4.996930 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 2 172 flow=Background 1970/01/01 04:41:26.393683 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:41:26.523453 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:27.514871 0.148467 udp 10.0.2.22 51868 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:41:29.518309 0.383206 udp 10.0.2.22 51868 <-> 14.98.65.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:41:31.520897 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:32.522661 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:33.524041 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:34.515268 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:35.516601 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:36.518358 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:37.519332 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:38.520855 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:40.523944 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:41.515121 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:42.516501 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:43.518269 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:44.519559 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:45.520883 0.060229 udp 10.0.2.22 51868 <-> 83.252.84.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:41:46.522372 0.000117 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:46.522489 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:41:47.524176 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:48.515333 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:49.516730 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:50.518213 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:51.519874 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:52.520989 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:52.611073 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:41:53.392621 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:41:53.522402 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:54.513763 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:55.515191 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:56.517143 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:57.518456 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:58.519682 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:41:59.521271 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:00.522806 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:01.514382 0.147365 udp 10.0.2.22 51868 <-> 24.151.157.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:42:02.515796 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:04.518202 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:05.519951 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:06.521488 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:07.522829 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:08.514263 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:09.515247 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:10.517014 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:11.518437 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:12.519932 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:13.521363 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:14.522907 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:15.514379 0.000051 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:15.514430 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:42:16.515928 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:17.517085 0.350423 udp 10.0.2.22 51868 <-> 14.98.65.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:42:18.518499 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:19.520252 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:20.521308 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:21.392586 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:42:21.523204 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:22.514435 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:23.515693 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:24.517028 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:25.518908 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:26.520332 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:27.521562 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:28.522932 0.000152 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:28.523084 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:42:30.516225 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:31.517721 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:32.518503 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:33.520512 0.149556 udp 10.0.2.22 51868 <-> 24.151.157.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:42:34.521376 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:35.523253 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:36.514654 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:37.515996 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:38.517004 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:39.518848 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:40.520196 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:41.521411 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:42.523347 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:43.515068 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:44.516140 0.000108 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:44.516248 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:42:46.519281 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:47.520548 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:48.391592 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:42:48.521593 4.996941 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:49.522801 0.033790 udp 10.0.2.22 51868 <-> 93.103.63.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:42:50.514723 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:51.516145 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:52.517685 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:54.520637 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:55.521972 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:56.523300 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:42:57.514296 0.147093 udp 10.0.2.22 51868 <-> 24.151.157.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:42:58.516299 1.161378 udp 10.0.2.22 51868 <-> 190.189.63.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:42:59.517236 0.027231 udp 10.0.2.22 51868 <-> 84.112.159.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:00.519138 0.000000 udp 10.0.2.22 51868 -> 190.139.224.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:43:01.520637 0.480373 udp 10.0.2.22 51868 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:02.521654 0.000000 udp 10.0.2.22 51868 -> 151.237.7.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:43:03.523453 0.000000 udp 10.0.2.22 51868 -> 190.79.50.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:43:04.514722 0.342567 udp 10.0.2.22 51868 <-> 78.251.143.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:05.515961 1.325474 udp 10.0.2.22 51868 <-> 1.175.217.230 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:07.519080 0.432220 udp 10.0.2.22 51868 <-> 5.200.228.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:08.520947 0.366541 udp 10.0.2.22 51868 <-> 27.105.20.121 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:09.521956 0.000000 udp 10.0.2.22 51868 -> 98.17.196.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:43:10.523883 0.421247 udp 10.0.2.22 51868 <-> 114.47.47.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:11.514458 0.044200 udp 10.0.2.22 51868 <-> 24.132.8.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:12.516155 0.306980 udp 10.0.2.22 51868 <-> 200.156.104.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:13.518152 0.150063 udp 10.0.2.22 51868 <-> 49.207.105.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:14.518896 0.063883 udp 10.0.2.22 51868 <-> 213.37.119.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:15.390485 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:43:15.520244 0.284965 udp 10.0.2.22 51868 <-> 218.45.34.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:16.521964 0.000000 udp 10.0.2.22 51868 -> 2.180.93.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:43:17.523253 0.550566 udp 10.0.2.22 51868 <-> 184.229.182.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:18.514987 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:43:19.516501 0.000068 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:43:19.516569 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:43:20.517765 1.306208 udp 10.0.2.22 51868 <-> 201.26.157.193 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:22.520424 0.294375 udp 10.0.2.22 51868 <-> 124.47.100.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:23.521895 0.312469 udp 10.0.2.22 51868 <-> 150.162.97.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:24.523764 0.926067 udp 10.0.2.22 51868 <-> 27.4.8.19 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:25.514663 0.135456 udp 10.0.2.22 51868 <-> 68.84.213.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:26.516037 0.435873 udp 10.0.2.22 51868 <-> 114.47.47.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:27.517791 0.221814 udp 10.0.2.22 51868 <-> 71.228.145.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:28.519366 0.379191 udp 10.0.2.22 51868 <-> 61.223.150.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:29.520852 0.072541 udp 10.0.2.22 51868 <-> 62.99.108.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:30.522497 0.168057 udp 10.0.2.22 51868 <-> 67.177.97.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:31.523914 0.435646 udp 10.0.2.22 51868 <-> 210.57.250.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:32.514742 0.283190 udp 10.0.2.22 51868 <-> 95.81.41.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:33.516350 0.339911 udp 10.0.2.22 51868 <-> 61.4.170.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:34.518109 0.017930 udp 10.0.2.22 51868 <-> 94.113.109.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:35.519350 0.211400 udp 10.0.2.22 51868 <-> 76.172.91.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:36.520864 0.000000 udp 10.0.2.22 51868 -> 63.230.209.182 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:43:37.522104 0.000000 udp 10.0.2.22 51868 -> 87.199.48.84 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:43:38.523235 0.372972 udp 10.0.2.22 51868 <-> 14.98.57.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:39.515169 0.311122 udp 10.0.2.22 51868 <-> 121.134.52.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:40.516805 0.168913 udp 10.0.2.22 51868 <-> 76.188.147.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:41.517957 0.152669 udp 10.0.2.22 51868 <-> 50.202.4.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:42.388977 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:43:42.519399 0.048403 udp 10.0.2.22 51868 <-> 89.235.213.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:43.520537 0.028273 udp 10.0.2.22 51868 <-> 80.98.70.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:44.521965 0.142999 udp 10.0.2.22 51868 <-> 66.57.113.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:45.523796 0.156128 udp 10.0.2.22 51868 <-> 76.180.211.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:46.515225 0.184164 udp 10.0.2.22 51868 <-> 184.189.232.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:47.516255 0.205179 udp 10.0.2.22 51868 <-> 64.130.190.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:48.517955 0.454060 udp 10.0.2.22 51868 <-> 115.244.237.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:49.519219 0.039558 udp 10.0.2.22 51868 <-> 89.215.37.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:50.520999 0.000000 udp 10.0.2.22 51868 -> 76.115.145.87 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:43:51.522591 0.061966 udp 10.0.2.22 51868 <-> 86.126.2.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:52.523462 0.322315 udp 10.0.2.22 51868 <-> 117.214.170.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:53.515071 0.388810 udp 10.0.2.22 51868 <-> 211.206.235.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:54.516498 0.043528 udp 10.0.2.22 51868 <-> 95.90.35.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:55.518384 1.045645 udp 10.0.2.22 51868 <-> 123.201.102.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:56.519598 0.337957 udp 10.0.2.22 51868 <-> 219.160.245.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:57.520987 0.143523 udp 10.0.2.22 51868 <-> 24.138.62.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:58.522426 0.191241 udp 10.0.2.22 51868 <-> 96.31.126.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:43:59.524120 0.170165 udp 10.0.2.22 51868 <-> 217.203.186.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:00.515134 0.313246 udp 10.0.2.22 51868 <-> 27.127.165.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:01.516298 0.323453 udp 10.0.2.22 51868 <-> 61.208.214.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:02.517751 0.301834 udp 10.0.2.22 51868 <-> 103.7.151.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:03.519532 0.091562 udp 10.0.2.22 51868 <-> 85.56.52.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:04.521197 0.000000 udp 10.0.2.22 51868 -> 112.197.226.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:44:05.522257 0.000000 udp 10.0.2.22 51868 -> 75.66.196.194 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:44:06.524165 0.322790 udp 10.0.2.22 51868 <-> 61.124.224.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:07.515084 0.184558 udp 10.0.2.22 51868 <-> 64.130.190.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:08.516480 3.311982 udp 10.0.2.22 51868 <-> 68.217.244.67 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:09.398251 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:44:09.517984 2.326978 udp 10.0.2.22 51868 <-> 180.147.116.143 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:12.522749 0.143764 udp 10.0.2.22 51868 <-> 5.25.135.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:13.523866 0.153518 udp 10.0.2.22 51868 <-> 74.57.34.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:14.515393 0.217937 udp 10.0.2.22 51868 <-> 76.94.114.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:15.516967 0.208075 udp 10.0.2.22 51868 <-> 71.197.77.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:16.518519 0.134771 udp 10.0.2.22 51868 <-> 69.116.245.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:17.519518 0.032457 udp 10.0.2.22 51868 <-> 151.100.97.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:18.521567 0.044585 udp 10.0.2.22 51868 <-> 78.97.131.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:19.522827 0.046673 udp 10.0.2.22 51868 <-> 46.237.92.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:20.524005 0.203011 udp 10.0.2.22 51868 <-> 96.31.126.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:21.515409 0.051348 udp 10.0.2.22 51868 <-> 84.192.201.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:22.517157 0.163132 udp 10.0.2.22 51868 <-> 174.102.8.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:23.518218 0.069131 udp 10.0.2.22 51868 <-> 93.72.70.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:24.519950 0.759229 udp 10.0.2.22 51868 <-> 112.197.242.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:25.521229 0.159788 udp 10.0.2.22 51868 <-> 98.251.126.224 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:26.522512 0.305992 udp 10.0.2.22 51868 <-> 115.242.226.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:27.513876 4.144623 udp 10.0.2.22 51868 <-> 75.130.142.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:28.515624 4.005404 udp 10.0.2.22 51868 -> 94.55.168.31 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:44:29.516695 0.000000 udp 10.0.2.22 51868 -> 213.136.170.7 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:44:30.518584 0.129298 udp 10.0.2.22 51868 <-> 68.39.15.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:33.522916 0.000000 udp 10.0.2.22 51868 -> 217.203.17.7 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:44:34.514262 0.000000 udp 10.0.2.22 51868 -> 188.94.82.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:44:35.515355 0.162853 udp 10.0.2.22 51868 <-> 183.83.32.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:36.396702 0.000137 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:44:36.517315 4.996506 udp 10.0.2.22 51868 <-> 59.30.196.223 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:37.518631 0.154790 udp 10.0.2.22 51868 <-> 71.234.18.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:38.519806 0.000000 udp 10.0.2.22 51868 -> 61.223.95.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:44:39.521188 0.160985 udp 10.0.2.22 51868 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:40.522450 0.015115 udp 10.0.2.22 51868 <-> 161.53.118.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:41.822953 0.000000 udp 10.0.2.22 51868 <- 59.30.196.223 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:44:42.515588 0.162337 udp 10.0.2.22 51868 <-> 120.138.104.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:43.516983 2.048697 udp 10.0.2.22 51868 <-> 78.84.143.174 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:44.518683 0.000000 udp 10.0.2.22 51868 -> 74.57.34.145 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:44:46.521122 0.154681 udp 10.0.2.22 51868 <-> 184.91.17.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:47.522849 0.154597 udp 10.0.2.22 51868 <-> 96.20.123.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:48.514538 0.169449 udp 10.0.2.22 51868 <-> 108.167.33.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:49.515841 0.000000 udp 10.0.2.22 51868 -> 203.218.113.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:44:50.517028 0.323791 udp 10.0.2.22 51868 <-> 219.70.207.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:51.518484 0.135645 udp 10.0.2.22 51868 <-> 69.116.245.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:52.180503 0.000000 udp 10.0.2.22 51868 <- 74.57.34.145 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:44:52.520268 0.145799 udp 10.0.2.22 51868 <-> 68.193.213.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:53.521712 0.323481 udp 10.0.2.22 51868 <-> 186.93.97.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:54.523165 0.000000 udp 10.0.2.22 51868 -> 98.127.236.231 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:44:55.513943 0.141223 udp 10.0.2.22 51868 <-> 76.100.52.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:56.515789 0.286471 udp 10.0.2.22 51868 <-> 76.187.28.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:57.516984 0.134284 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:44:58.518817 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:44:59.519706 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:00.521758 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:01.522656 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:02.514570 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:03.395229 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:45:03.516058 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:04.517217 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:05.518400 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:06.520017 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:07.521536 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:08.523081 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:09.514481 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:10.515483 2.003054 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:11.517197 0.159654 udp 10.0.2.22 51868 <-> 50.90.85.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:45:13.520177 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:14.521927 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:15.522883 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:16.514695 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:17.516033 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:19.518940 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:20.519910 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:21.522031 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:22.522800 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:23.514548 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:24.515864 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:25.517505 0.000049 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:25.517554 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:45:26.518625 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:27.520361 0.373063 udp 10.0.2.22 51868 <-> 118.165.202.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:45:28.521421 0.165378 udp 10.0.2.22 51868 <-> 50.90.85.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:45:29.523337 1.156164 udp 10.0.2.22 51868 <-> 181.28.59.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:45:30.514854 0.221662 udp 10.0.2.22 51868 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:45:31.395462 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:45:31.516163 0.156448 udp 10.0.2.22 51868 <-> 68.113.165.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:45:32.517795 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:33.519171 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:34.520446 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:35.522102 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:36.523199 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:37.514427 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:38.516488 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:39.517625 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:40.519095 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:41.520068 0.000050 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:41.520118 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:45:43.523349 0.180997 udp 10.0.2.22 51868 <-> 209.42.67.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:45:44.515182 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:45.516240 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:46.518067 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:47.519015 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:48.520121 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:50.523227 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:51.514592 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:52.516338 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:53.517908 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:54.518771 3.995996 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:55.520739 0.000062 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:55.520801 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:45:56.522040 4.997366 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:45:57.523407 4.997391 udp 10.0.2.22 51868 <-> 209.42.67.95 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:45:58.395002 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:45:59.516340 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:46:00.517564 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:46:03.522474 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:46:04.523703 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:46:05.515116 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:46:06.516100 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:46:07.518268 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:46:08.519220 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:46:09.520709 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:46:10.522452 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:46:11.523542 0.000110 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:46:11.523652 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:46:13.516388 1.341680 udp 10.0.2.22 51868 <-> 117.18.205.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:14.518056 0.373506 udp 10.0.2.22 51868 <-> 205.164.3.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:15.518948 3.335610 udp 10.0.2.22 51868 <-> 179.44.1.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:16.520522 0.000000 udp 10.0.2.22 51868 -> 61.223.95.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:46:17.522013 0.047108 udp 10.0.2.22 51868 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:18.523420 0.276361 udp 10.0.2.22 51868 <-> 114.109.34.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:19.515175 0.150423 udp 10.0.2.22 51868 <-> 71.47.172.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:20.516713 0.571748 udp 10.0.2.22 51868 <-> 113.19.209.251 16464 CON 0 0 2 668 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:21.518155 0.341507 udp 10.0.2.22 51868 <-> 119.157.152.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:22.519413 0.161354 udp 10.0.2.22 51868 <-> 71.61.103.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:23.520535 0.072414 udp 10.0.2.22 51868 <-> 80.242.107.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:24.522587 0.337763 udp 10.0.2.22 51868 <-> 99.206.80.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:25.393127 0.000037 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:46:25.523416 0.160808 udp 10.0.2.22 51868 <-> 174.64.185.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:26.515202 0.056645 udp 10.0.2.22 51868 <-> 86.122.145.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:27.516947 0.189003 udp 10.0.2.22 51868 <-> 68.224.37.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:28.518307 0.677453 udp 10.0.2.22 51868 <-> 200.101.111.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:29.519305 2.386381 udp 10.0.2.22 51868 <-> 27.5.88.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:30.521097 0.343964 udp 10.0.2.22 51868 <-> 118.4.119.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:31.522385 0.150153 udp 10.0.2.22 51868 <-> 2.193.159.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:32.524095 3.033921 udp 10.0.2.22 51868 <-> 89.215.37.125 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:33.514838 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:46:34.516995 0.000000 udp 10.0.2.22 51868 -> 116.75.23.119 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:46:36.519191 0.322511 udp 10.0.2.22 51868 <-> 111.217.235.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:37.520866 0.101304 udp 10.0.2.22 51868 <-> 85.84.129.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:38.522440 0.308672 udp 10.0.2.22 51868 <-> 14.55.192.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:39.523789 0.144760 udp 10.0.2.22 51868 <-> 71.206.190.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:40.397838 0.000000 udp 10.0.2.22 51868 <- 116.75.23.119 16464 RSP 0 0 1 610 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:46:40.515039 0.346685 udp 10.0.2.22 51868 <-> 105.227.253.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:41.516881 0.605387 udp 10.0.2.22 51868 <-> 117.227.9.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:42.517860 1.169504 udp 10.0.2.22 51868 <-> 76.106.208.214 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:44.521283 0.490316 udp 10.0.2.22 51868 <-> 116.203.108.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:45.522740 0.000000 udp 10.0.2.22 51868 -> 117.204.49.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:46:46.523563 0.000000 udp 10.0.2.22 51868 -> 63.131.171.98 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:46:47.515365 0.070358 udp 10.0.2.22 51868 <-> 85.152.248.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:48.517065 0.065546 udp 10.0.2.22 51868 <-> 188.241.23.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:49.517974 0.058333 udp 10.0.2.22 51868 <-> 31.44.194.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:50.519975 0.057764 udp 10.0.2.22 51868 <-> 92.37.126.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:51.521266 0.161924 udp 10.0.2.22 51868 <-> 173.28.51.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:52.392007 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:46:52.522238 0.124445 udp 10.0.2.22 51868 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:53.524158 0.174742 udp 10.0.2.22 51868 <-> 71.229.16.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:54.515284 0.191009 udp 10.0.2.22 51868 <-> 123.201.207.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:55.517177 0.167873 udp 10.0.2.22 51868 <-> 76.106.208.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:56.518477 0.143913 udp 10.0.2.22 51868 <-> 24.185.38.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:57.519338 0.000000 udp 10.0.2.22 51868 -> 174.59.159.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:46:58.520786 0.065265 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:46:59.522744 0.000000 udp 10.0.2.22 51868 -> 190.73.247.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:47:00.513918 0.060917 udp 10.0.2.22 51868 <-> 84.56.163.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:01.515810 0.164678 udp 10.0.2.22 51868 <-> 68.52.86.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:02.516806 0.000000 udp 10.0.2.22 51868 -> 198.91.171.183 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:47:03.518701 0.341109 udp 10.0.2.22 51868 <-> 27.105.29.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:04.519623 0.028806 udp 10.0.2.22 51868 <-> 46.126.199.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:05.521239 0.000000 udp 10.0.2.22 51868 -> 216.110.251.115 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:47:06.522957 2.994290 udp 10.0.2.22 51868 -> 24.22.89.96 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:47:07.514346 0.000000 udp 10.0.2.22 51868 -> 83.21.115.57 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:47:08.515472 0.203983 udp 10.0.2.22 51868 <-> 76.115.116.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:10.518684 0.974013 udp 10.0.2.22 51868 <-> 77.21.184.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:11.519485 1.737879 udp 10.0.2.22 51868 <-> 123.194.225.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:12.521163 0.290946 udp 10.0.2.22 51868 <-> 89.2.226.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:13.522762 0.172692 udp 10.0.2.22 51868 <-> 49.205.152.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:14.513920 0.150275 udp 10.0.2.22 51868 <-> 24.47.109.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:15.515417 0.135727 udp 10.0.2.22 51868 <-> 66.232.101.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:16.516795 0.170051 udp 10.0.2.22 51868 <-> 74.193.210.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:17.518666 0.000000 udp 10.0.2.22 51868 -> 178.205.27.117 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:47:18.519539 0.294773 udp 10.0.2.22 51868 <-> 126.122.50.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:19.390820 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:47:19.521245 0.040876 udp 10.0.2.22 51868 <-> 188.246.78.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:20.522651 0.099820 udp 10.0.2.22 51868 <-> 79.7.112.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:21.513896 0.038278 udp 10.0.2.22 51868 <-> 213.112.230.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:22.515668 0.000000 udp 10.0.2.22 51868 -> 94.70.24.122 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:47:23.517264 0.538757 udp 10.0.2.22 51868 <-> 61.105.222.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:24.518386 0.044312 udp 10.0.2.22 51868 <-> 93.183.153.48 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:25.520222 0.158978 udp 10.0.2.22 51868 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:26.521692 0.040025 udp 10.0.2.22 51868 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:27.523300 1.159151 udp 10.0.2.22 51868 <-> 201.46.150.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:28.514543 0.000000 udp 10.0.2.22 51868 -> 190.51.63.52 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:47:29.515573 0.613582 udp 10.0.2.22 51868 <-> 201.81.192.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:30.516791 0.269991 udp 10.0.2.22 51868 <-> 49.249.11.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:31.518621 2.076798 udp 10.0.2.22 51868 <-> 177.100.44.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:32.520348 0.491281 udp 10.0.2.22 51868 <-> 121.247.55.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:33.521103 3.420132 udp 10.0.2.22 51868 <-> 117.198.83.244 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:34.522922 0.000000 udp 10.0.2.22 51868 -> 87.22.111.95 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:47:35.514103 0.142169 udp 10.0.2.22 51868 <-> 114.79.142.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:37.517100 0.000000 udp 10.0.2.22 51868 -> 94.228.236.50 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:47:38.518737 0.646751 udp 10.0.2.22 51868 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:39.519724 0.127069 udp 10.0.2.22 51868 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:40.521302 0.348331 udp 10.0.2.22 51868 <-> 183.179.22.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:41.522628 0.160241 udp 10.0.2.22 51868 <-> 188.2.29.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:42.514041 0.106564 udp 10.0.2.22 51868 <-> 79.7.112.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:43.515823 0.399024 udp 10.0.2.22 51868 <-> 114.36.89.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:44.516933 0.359151 udp 10.0.2.22 51868 <-> 1.165.76.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:45.518805 0.000000 udp 10.0.2.22 51868 -> 88.132.62.75 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:47:46.389857 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:47:46.520104 0.048912 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:47.521864 0.028837 udp 10.0.2.22 51868 <-> 46.126.199.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:48.523397 0.000000 udp 10.0.2.22 51868 -> 87.121.108.52 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:47:49.514126 0.061705 udp 10.0.2.22 51868 <-> 92.87.69.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:50.515694 0.054556 udp 10.0.2.22 51868 <-> 212.142.84.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:51.517111 0.305725 udp 10.0.2.22 51868 <-> 59.190.46.251 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:52.518814 0.153372 udp 10.0.2.22 51868 <-> 116.73.204.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:53.519904 0.327086 udp 10.0.2.22 51868 <-> 101.0.73.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:54.521594 0.177415 udp 10.0.2.22 51868 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:55.522722 0.151537 udp 10.0.2.22 51868 <-> 37.218.56.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:56.514385 0.206184 udp 10.0.2.22 51868 <-> 75.70.148.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:56.617812 3.001401 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 04:47:57.516324 0.172192 udp 10.0.2.22 51868 <-> 76.188.147.66 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:58.517787 0.308345 udp 10.0.2.22 51868 <-> 180.199.214.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:47:59.518812 0.152211 udp 10.0.2.22 51868 <-> 76.16.25.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:00.520014 0.335131 udp 10.0.2.22 51868 <-> 121.134.52.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:01.521627 0.000000 udp 10.0.2.22 51868 -> 1.186.119.171 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:48:02.522835 0.134668 udp 10.0.2.22 51868 <-> 24.34.66.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:03.514326 0.000000 udp 10.0.2.22 51868 -> 114.152.76.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:48:03.624781 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:48:04.515819 0.433803 udp 10.0.2.22 51868 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:05.517355 0.000000 udp 10.0.2.22 51868 -> 27.107.205.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:48:06.518579 0.606670 udp 10.0.2.22 51868 <-> 219.81.225.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:07.520757 0.153296 udp 10.0.2.22 51868 <-> 97.84.210.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:08.521915 0.000000 udp 10.0.2.22 51868 -> 195.84.248.129 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:48:09.523104 0.377298 udp 10.0.2.22 51868 <-> 14.98.10.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:10.514542 3.004485 udp 10.0.2.22 51868 -> 120.138.104.123 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:48:11.515795 0.000000 udp 10.0.2.22 51868 -> 95.57.165.122 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:48:11.626347 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:48:12.517409 0.048104 udp 10.0.2.22 51868 <-> 80.80.41.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:13.388632 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:48:14.520439 0.029899 udp 10.0.2.22 51868 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:15.521731 0.038957 udp 10.0.2.22 51868 <-> 78.128.44.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:16.522994 0.039086 udp 10.0.2.22 51868 <-> 185.22.137.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:17.514695 0.000000 udp 10.0.2.22 51868 -> 85.104.86.50 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:48:18.515912 0.189910 udp 10.0.2.22 51868 <-> 72.201.124.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:19.517864 0.308141 udp 10.0.2.22 51868 <-> 119.173.79.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:20.519076 0.190500 udp 10.0.2.22 51868 <-> 76.14.200.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:21.520615 0.000000 udp 10.0.2.22 51868 -> 96.63.150.197 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:48:22.521656 0.321240 udp 10.0.2.22 51868 <-> 121.152.3.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:23.523710 3.490299 udp 10.0.2.22 51868 <-> 186.18.149.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:24.515108 0.000000 udp 10.0.2.22 51868 -> 114.36.227.145 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:48:25.516179 0.179784 udp 10.0.2.22 51868 <-> 31.69.197.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:26.517904 0.000000 udp 10.0.2.22 51868 -> 79.4.26.31 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:48:27.518755 0.195446 udp 10.0.2.22 51868 <-> 68.191.141.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:27.629187 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:48:28.520205 0.309468 udp 10.0.2.22 51868 <-> 183.176.3.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:29.522260 0.000000 udp 10.0.2.22 51868 -> 190.17.84.42 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:48:30.523693 0.166735 udp 10.0.2.22 51868 <-> 65.25.223.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:31.514895 0.480183 udp 10.0.2.22 51868 <-> 180.176.116.112 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:32.516557 0.000000 udp 10.0.2.22 51868 -> 27.107.54.160 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:48:33.517596 0.416423 udp 10.0.2.22 51868 <-> 111.191.15.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:34.519416 0.135858 udp 10.0.2.22 51868 <-> 71.195.64.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:35.520918 3.995579 udp 10.0.2.22 51868 -> 75.64.127.51 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:48:36.522316 4.026237 udp 10.0.2.22 51868 <-> 87.97.132.72 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:37.523704 0.158097 udp 10.0.2.22 51868 <-> 24.75.169.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:38.514816 0.000000 udp 10.0.2.22 51868 -> 59.94.19.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:48:40.397244 0.000195 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:48:41.518877 0.274933 udp 10.0.2.22 51868 <-> 190.193.54.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:42.520629 1.626126 udp 10.0.2.22 51868 <-> 49.249.22.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:43.521964 0.046787 udp 10.0.2.22 51868 <-> 95.87.232.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:44.523206 0.450394 udp 10.0.2.22 51868 <-> 117.214.188.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:45.515333 0.000000 udp 10.0.2.22 51868 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:48:46.516533 0.324396 udp 10.0.2.22 51868 <-> 109.192.35.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:47.517498 0.504422 udp 10.0.2.22 51868 <-> 111.243.172.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:48.518976 0.063827 udp 10.0.2.22 51868 <-> 178.172.251.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:49.521067 0.025536 udp 10.0.2.22 51868 <-> 84.118.201.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:50.522087 0.066181 udp 10.0.2.22 51868 <-> 94.190.190.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:51.524151 0.000000 udp 10.0.2.22 51868 -> 66.187.64.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:48:52.515257 2.002920 udp 10.0.2.22 51868 -> 177.149.127.27 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:48:53.516188 0.051561 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:55.519520 2.061313 udp 10.0.2.22 51868 <-> 31.44.194.248 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:56.520783 0.065258 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:58.523386 0.130509 udp 10.0.2.22 51868 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:48:59.515226 0.000000 udp 10.0.2.22 51868 -> 50.90.102.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:48:59.635165 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:49:00.516700 0.338868 udp 10.0.2.22 51868 <-> 94.183.154.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:49:01.518451 0.257721 udp 10.0.2.22 51868 <-> 123.201.191.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:49:02.519792 0.169954 udp 10.0.2.22 51868 <-> 50.71.21.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:49:03.520913 0.028533 udp 10.0.2.22 51868 <-> 78.42.252.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:49:04.522202 0.154089 udp 10.0.2.22 51868 <-> 50.90.85.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:49:05.523535 0.212448 udp 10.0.2.22 51868 <-> 50.168.18.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:49:06.515149 0.642556 udp 10.0.2.22 51868 <-> 62.18.227.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:49:07.396321 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:49:07.516756 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:08.517731 0.221664 udp 10.0.2.22 51868 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:49:09.519344 0.127748 udp 10.0.2.22 51868 <-> 173.81.25.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:49:10.521160 0.000000 udp 10.0.2.22 51868 -> 162.0.48.117 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:11.522002 0.000000 udp 10.0.2.22 51868 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:12.523937 0.151714 udp 10.0.2.22 51868 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:49:13.515590 0.000052 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:13.515642 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:49:14.516338 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:15.517790 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:16.519772 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:17.521355 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:18.522858 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:19.523810 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:20.515226 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:21.516688 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:22.518281 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:23.519319 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:24.520799 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:25.522799 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:26.523711 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:27.515233 0.153584 udp 10.0.2.22 51868 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:49:28.517062 0.163550 udp 10.0.2.22 51868 <-> 68.47.0.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:49:29.518281 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:30.519446 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:31.521420 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:32.522241 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:33.513928 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:34.395204 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:49:34.515085 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:35.517188 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:36.518284 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:37.519674 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:38.520924 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:39.522653 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:40.514275 0.000135 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:40.514410 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:49:41.515167 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:42.517146 0.000000 udp 10.0.2.22 51868 -> 71.224.230.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:43.518781 0.000000 udp 10.0.2.22 51868 -> 111.240.40.248 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:44.519893 0.177956 udp 10.0.2.22 51868 <-> 116.73.207.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:49:45.521571 0.248092 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:49:46.522580 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:47.514282 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:48.515774 0.000067 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:48.515841 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:49:49.517032 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:50.518418 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:51.519517 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:52.521265 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:53.522920 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:54.514453 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:55.515334 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:56.517261 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:57.518405 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:49:58.519736 0.167189 udp 10.0.2.22 51868 <-> 68.47.0.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:49:59.521712 0.000000 udp 10.0.2.22 51868 -> 151.77.179.244 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:50:00.522731 0.051594 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:01.394334 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:50:01.514114 0.000000 udp 10.0.2.22 51868 -> 111.240.40.248 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:50:02.515345 0.000000 udp 10.0.2.22 51868 -> 90.50.187.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:50:03.516812 0.000000 udp 10.0.2.22 51868 -> 69.244.18.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:50:04.518578 0.312678 udp 10.0.2.22 51868 <-> 116.203.122.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:05.520321 0.616514 udp 10.0.2.22 51868 <-> 108.230.246.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:06.521089 0.226699 udp 10.0.2.22 51868 <-> 186.112.163.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:07.522799 0.045466 udp 10.0.2.22 51868 <-> 5.13.90.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:08.514642 0.143418 udp 10.0.2.22 51868 <-> 96.20.190.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:09.516003 0.015553 udp 10.0.2.22 51868 <-> 164.8.108.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:10.517040 0.156537 udp 10.0.2.22 51868 <-> 66.31.49.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:11.518785 0.078046 udp 10.0.2.22 51868 <-> 81.9.181.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:12.520126 0.000000 udp 10.0.2.22 51868 -> 213.115.252.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:50:13.521507 0.000000 udp 10.0.2.22 51868 -> 5.14.151.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:50:14.522842 0.425489 udp 10.0.2.22 51868 <-> 220.80.230.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:15.514021 0.549310 udp 10.0.2.22 51868 <-> 117.204.147.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:16.516105 0.060668 udp 10.0.2.22 51868 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:17.517310 0.000000 udp 10.0.2.22 51868 -> 124.109.194.224 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:50:18.518446 0.000000 udp 10.0.2.22 51868 -> 24.37.68.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:50:19.520157 0.000000 udp 10.0.2.22 51868 -> 83.213.98.224 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:50:20.521308 0.039647 udp 10.0.2.22 51868 <-> 178.150.156.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:21.522819 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:50:22.514312 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:50:23.516005 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:50:24.517263 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:50:25.518602 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:50:26.520207 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:50:27.521800 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:50:28.392860 0.000112 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:50:28.523269 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:50:29.514634 0.000000 udp 10.0.2.22 51868 -> 172.243.34.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:50:30.515666 0.039689 udp 10.0.2.22 51868 <-> 178.150.156.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:31.517586 0.000000 udp 10.0.2.22 51868 -> 89.142.152.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:50:32.518481 1.619394 udp 10.0.2.22 51868 <-> 115.245.98.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:33.520029 0.341357 udp 10.0.2.22 51868 <-> 118.171.70.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:34.522063 0.082292 udp 10.0.2.22 51868 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:35.522785 0.069650 udp 10.0.2.22 51868 <-> 188.171.6.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:36.514838 0.399807 udp 10.0.2.22 51868 <-> 61.19.25.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:37.516209 0.117233 udp 10.0.2.22 51868 <-> 87.6.245.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:38.517168 0.266584 udp 10.0.2.22 51868 <-> 190.16.12.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:39.518522 0.304787 udp 10.0.2.22 51868 <-> 186.90.110.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:40.519983 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:50:41.521421 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:50:42.523259 0.051522 udp 10.0.2.22 51868 <-> 150.214.25.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:43.514308 0.351940 udp 10.0.2.22 51868 <-> 1.172.59.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:44.516460 0.030794 udp 10.0.2.22 51868 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:45.517848 0.376895 udp 10.0.2.22 51868 <-> 114.32.65.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:46.519044 0.211603 udp 10.0.2.22 51868 <-> 75.85.120.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:47.520561 0.283834 udp 10.0.2.22 51868 <-> 190.72.55.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:48.521890 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:50:49.522943 0.069354 udp 10.0.2.22 51868 <-> 188.171.6.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:50.514674 0.000000 udp 10.0.2.22 51868 -> 177.227.173.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:50:51.516132 0.387513 udp 10.0.2.22 51868 <-> 114.46.235.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:52.517717 0.289851 udp 10.0.2.22 51868 <-> 190.191.188.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:53.519318 2.064962 udp 10.0.2.22 51868 <-> 177.100.44.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:54.520510 1.017003 udp 10.0.2.22 51868 <-> 164.8.204.62 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:55.391310 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:50:56.523631 0.000000 udp 10.0.2.22 51868 -> 174.59.159.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:50:57.514904 0.143714 udp 10.0.2.22 51868 <-> 24.47.109.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:58.516566 0.113442 udp 10.0.2.22 51868 <-> 24.253.132.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:50:59.517372 0.161861 udp 10.0.2.22 51868 <-> 75.69.111.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:00.518911 0.000000 udp 10.0.2.22 51868 -> 192.226.149.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:51:01.520873 0.164157 udp 10.0.2.22 51868 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:02.522031 0.029256 udp 10.0.2.22 51868 <-> 80.98.243.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:03.523355 0.000000 udp 10.0.2.22 51868 -> 50.134.240.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:51:04.515044 0.318761 udp 10.0.2.22 51868 <-> 218.47.116.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:05.516609 0.049628 udp 10.0.2.22 51868 <-> 147.163.93.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:06.517670 0.187487 udp 10.0.2.22 51868 <-> 123.238.141.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:07.519484 0.157028 udp 10.0.2.22 51868 <-> 75.69.111.115 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:08.520647 2.913976 udp 10.0.2.22 51868 <-> 24.137.128.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:09.522188 0.000000 udp 10.0.2.22 51868 -> 50.134.240.23 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:51:10.523390 0.000000 udp 10.0.2.22 51868 -> 174.59.159.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:51:11.514689 3.390989 udp 10.0.2.22 51868 <-> 114.45.242.54 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:12.516647 0.000000 udp 10.0.2.22 51868 -> 123.238.141.58 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:51:13.517553 0.155384 udp 10.0.2.22 51868 <-> 75.69.111.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:15.520576 0.167488 udp 10.0.2.22 51868 <-> 75.66.130.254 16464 CON 0 0 2 388 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:16.522032 0.315850 udp 10.0.2.22 51868 <-> 116.64.43.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:17.523359 0.164386 udp 10.0.2.22 51868 <-> 50.142.117.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:18.515112 0.745745 udp 10.0.2.22 51868 <-> 174.113.145.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:19.516677 0.272619 udp 10.0.2.22 51868 <-> 190.193.56.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:20.518031 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:51:21.518914 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:51:22.390436 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:51:22.520443 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:51:23.522286 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:51:24.523874 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:51:25.514753 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:51:26.516514 0.000130 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:51:26.516644 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:51:28.519268 0.000000 udp 10.0.2.22 51868 -> 220.143.222.54 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:51:29.521183 0.000000 udp 10.0.2.22 51868 -> 76.11.24.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:51:30.522228 0.000000 udp 10.0.2.22 51868 -> 98.103.131.154 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:51:31.524015 0.207223 udp 10.0.2.22 51868 <-> 67.164.82.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:32.515115 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:51:33.516474 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:51:34.517941 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:51:35.519150 4.997772 udp 10.0.2.22 51868 <-> 24.47.109.126 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:36.520662 0.492422 udp 10.0.2.22 51868 <-> 220.143.222.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:37.522411 0.000000 udp 10.0.2.22 51868 -> 207.70.166.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:51:38.523845 0.438364 udp 10.0.2.22 51868 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:39.515261 0.000000 udp 10.0.2.22 51868 -> 78.70.192.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:51:40.658388 0.000000 udp 10.0.2.22 51868 <- 24.47.109.126 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:51:41.518136 0.157816 udp 10.0.2.22 51868 <-> 98.223.203.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:42.519338 0.072159 udp 10.0.2.22 51868 <-> 188.94.82.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:43.520831 0.000000 udp 10.0.2.22 51868 -> 70.94.206.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:51:44.522224 0.038720 udp 10.0.2.22 51868 <-> 89.215.95.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:45.523764 0.055412 udp 10.0.2.22 51868 <-> 83.141.175.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:46.515162 0.362067 udp 10.0.2.22 51868 <-> 201.71.53.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:47.516425 0.214129 udp 10.0.2.22 51868 <-> 24.7.146.40 16464 CON 0 0 2 668 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:48.518430 0.174912 udp 10.0.2.22 51868 <-> 68.3.157.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:49.389144 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:51:49.519763 0.150627 udp 10.0.2.22 51868 <-> 96.20.123.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:50.520986 0.080433 udp 10.0.2.22 51868 <-> 176.8.46.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:51.522578 0.000000 udp 10.0.2.22 51868 -> 111.254.125.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:51:52.523524 0.165614 udp 10.0.2.22 51868 <-> 24.118.222.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:53.515488 0.394317 udp 10.0.2.22 51868 <-> 186.54.122.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:54.516623 0.311915 udp 10.0.2.22 51868 <-> 190.203.75.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:55.517950 0.048009 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:56.519299 0.160963 udp 10.0.2.22 51868 <-> 76.188.147.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:57.521510 0.274581 udp 10.0.2.22 51868 <-> 181.31.92.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:58.522163 0.069117 udp 10.0.2.22 51868 <-> 85.152.226.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:51:59.524017 0.148395 udp 10.0.2.22 51868 <-> 70.80.99.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:00.515138 0.000000 udp 10.0.2.22 51868 -> 213.97.10.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:52:01.516412 0.325774 udp 10.0.2.22 51868 <-> 151.24.43.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:02.518551 0.411151 udp 10.0.2.22 51868 <-> 61.56.177.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:03.519882 0.264881 udp 10.0.2.22 51868 <-> 186.136.213.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:04.520854 0.094660 udp 10.0.2.22 51868 <-> 84.108.234.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:05.522213 0.168554 udp 10.0.2.22 51868 <-> 66.131.189.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:06.514022 0.178171 udp 10.0.2.22 51868 <-> 183.82.213.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:07.515252 0.000000 udp 10.0.2.22 51868 -> 113.19.209.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:52:08.517205 0.137863 udp 10.0.2.22 51868 <-> 68.192.112.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:09.518534 0.033521 udp 10.0.2.22 51868 <-> 212.37.176.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:10.519730 0.197249 udp 10.0.2.22 51868 <-> 75.66.196.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:11.521011 0.150335 udp 10.0.2.22 51868 <-> 66.131.206.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:12.522920 1.028903 udp 10.0.2.22 51868 <-> 14.97.60.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:13.513740 0.363344 udp 10.0.2.22 51868 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:14.515228 0.154627 udp 10.0.2.22 51868 <-> 69.127.160.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:15.516724 0.062246 udp 10.0.2.22 51868 <-> 92.87.69.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:16.398533 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:52:16.518521 0.000000 udp 10.0.2.22 51868 -> 103.246.241.86 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:52:17.519529 0.065277 udp 10.0.2.22 51868 <-> 188.241.23.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:18.521458 0.068477 udp 10.0.2.22 51868 <-> 87.126.141.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:19.522399 1.806182 udp 10.0.2.22 51868 <-> 179.216.83.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:20.514348 0.000000 udp 10.0.2.22 51868 -> 207.42.135.185 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:52:21.515200 0.358793 udp 10.0.2.22 51868 <-> 183.179.22.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:22.516803 0.331647 udp 10.0.2.22 51868 <-> 218.40.70.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:23.518580 0.211770 udp 10.0.2.22 51868 <-> 186.89.74.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:24.520132 0.000000 udp 10.0.2.22 51868 -> 24.63.83.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:52:25.521282 0.189479 udp 10.0.2.22 51868 <-> 50.66.54.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:26.522838 0.459110 udp 10.0.2.22 51868 <-> 177.59.77.204 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:27.514147 0.051607 udp 10.0.2.22 51868 <-> 90.228.224.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:28.515756 0.000000 udp 10.0.2.22 51868 -> 212.108.245.100 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:52:29.517144 0.051904 udp 10.0.2.22 51868 <-> 81.225.87.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:30.518137 0.135486 udp 10.0.2.22 51868 <-> 76.123.37.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:31.519878 0.000000 udp 10.0.2.22 51868 -> 79.116.248.144 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:52:32.521341 0.139094 udp 10.0.2.22 51868 <-> 67.242.95.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:33.522575 0.133057 udp 10.0.2.22 51868 <-> 68.33.34.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:34.514173 0.113140 udp 10.0.2.22 51868 <-> 169.244.248.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:35.515514 0.000000 udp 10.0.2.22 51868 -> 89.65.112.187 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:52:35.845990 0.011293 udp 10.0.2.22 60022 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 04:52:35.857569 0.000000 udp 10.0.2.22 60023 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:52:36.517167 0.065807 udp 10.0.2.22 51868 <-> 31.222.118.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:37.518236 0.199611 udp 10.0.2.22 51868 <-> 50.26.30.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:38.519957 0.339573 udp 10.0.2.22 51868 <-> 182.155.52.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:39.521249 0.094273 udp 10.0.2.22 51868 <-> 88.161.227.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:40.522988 0.178823 udp 10.0.2.22 51868 <-> 75.66.196.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:41.514187 0.140852 udp 10.0.2.22 51868 <-> 217.57.158.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:42.515817 0.254354 udp 10.0.2.22 51868 <-> 123.237.188.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:43.397001 0.000134 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:52:43.516814 0.170084 udp 10.0.2.22 51868 <-> 108.183.69.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:44.518846 0.000000 udp 10.0.2.22 51868 -> 82.250.219.132 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:52:45.520222 0.154927 udp 10.0.2.22 51868 <-> 24.60.166.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:46.521160 0.172793 udp 10.0.2.22 51868 <-> 82.244.99.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:47.523133 1.456334 udp 10.0.2.22 51868 <-> 187.122.89.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:48.514604 0.151081 udp 10.0.2.22 51868 <-> 50.88.67.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:49.515961 1.195831 udp 10.0.2.22 51868 <-> 108.167.33.98 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:51.519041 0.064331 udp 10.0.2.22 51868 <-> 78.239.29.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:52.520295 0.036317 udp 10.0.2.22 51868 <-> 78.70.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:53.521525 0.155865 udp 10.0.2.22 51868 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:54.522813 0.381062 udp 10.0.2.22 51868 <-> 61.126.229.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:55.514489 0.138515 udp 10.0.2.22 51868 <-> 68.42.12.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:56.516133 0.151190 udp 10.0.2.22 51868 <-> 67.80.216.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:57.517001 0.141608 udp 10.0.2.22 51868 <-> 96.37.226.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:58.519123 0.132219 udp 10.0.2.22 51868 <-> 68.33.34.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:52:59.519838 0.044242 udp 10.0.2.22 51868 <-> 31.19.152.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:53:00.521672 0.293741 udp 10.0.2.22 51868 <-> 116.64.43.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:53:01.523036 0.000000 udp 10.0.2.22 51868 -> 5.232.230.174 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:02.514685 2.002309 udp 10.0.2.22 51868 -> 178.127.102.19 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:03.515948 2.033949 udp 10.0.2.22 51868 <-> 77.70.120.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:53:06.520315 0.000000 udp 10.0.2.22 51868 -> 50.26.127.53 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:07.522036 0.172343 udp 10.0.2.22 51868 <-> 95.57.52.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:53:08.523165 0.148772 udp 10.0.2.22 51868 <-> 50.155.109.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:53:09.514747 0.187667 udp 10.0.2.22 51868 <-> 70.45.231.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:53:10.395974 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:53:10.515947 0.392317 udp 10.0.2.22 51868 <-> 201.209.178.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:53:11.517111 0.038053 udp 10.0.2.22 51868 <-> 78.128.39.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:53:12.518876 0.000000 udp 10.0.2.22 51868 -> 188.24.130.240 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:13.520617 4.996786 udp 10.0.2.22 51868 -> 70.94.206.5 16464 INT 0 3 174 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:14.521983 0.030085 udp 10.0.2.22 51868 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:53:15.522996 2.275065 udp 10.0.2.22 51868 <-> 5.200.238.27 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:53:18.700757 1.161653 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:53:20.520548 0.771767 udp 10.0.2.22 51868 <-> 2.69.41.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:53:21.521634 0.159741 udp 10.0.2.22 51868 <-> 95.58.150.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:53:22.523198 0.273259 udp 10.0.2.22 51868 <-> 187.37.104.223 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:53:23.514465 0.000000 udp 10.0.2.22 51868 -> 5.200.238.27 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:24.516113 0.470221 udp 10.0.2.22 51868 <-> 70.184.95.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:53:25.518001 0.113711 udp 10.0.2.22 51868 <-> 88.72.192.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:53:26.518925 0.000000 udp 10.0.2.22 51868 -> 177.227.173.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:28.521519 0.143991 udp 10.0.2.22 51868 <-> 76.99.43.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:53:29.523358 0.000000 udp 10.0.2.22 51868 -> 190.202.252.202 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:30.514951 0.000000 udp 10.0.2.22 51868 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:31.516122 4.006180 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:32.517685 0.000000 udp 10.0.2.22 51868 -> 195.62.0.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:33.518738 3.996114 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:34.520412 0.306243 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:53:36.523328 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:37.394410 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:53:38.516223 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:39.517796 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:40.519028 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:41.520666 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:42.521889 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:43.523794 0.000000 udp 10.0.2.22 51868 -> 27.132.7.111 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:44.514984 0.000000 udp 10.0.2.22 51868 -> 69.248.152.15 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:45.515973 0.272179 udp 10.0.2.22 51868 <-> 181.31.103.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:53:46.517462 0.302190 udp 10.0.2.22 51868 <-> 190.202.252.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:53:47.518989 0.177707 udp 10.0.2.22 51868 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:53:48.520873 0.000000 udp 10.0.2.22 51868 -> 95.220.247.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:49.522364 0.306215 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:53:50.523695 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:52.516190 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:53.518244 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:54.519305 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:55.520368 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:56.521778 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:57.523338 0.000063 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:57.523401 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:53:58.515375 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:53:59.516516 3.280015 udp 10.0.2.22 51868 <-> 181.31.103.184 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:00.518085 0.000000 udp 10.0.2.22 51868 -> 27.132.7.111 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:54:01.519792 0.250420 udp 10.0.2.22 51868 <-> 190.202.252.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:03.522076 0.000000 udp 10.0.2.22 51868 -> 75.109.202.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:54:04.393076 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:54:04.523972 1.223315 udp 10.0.2.22 51868 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:05.514891 0.000000 udp 10.0.2.22 51868 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:54:06.516454 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:54:07.518291 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:54:08.519365 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:54:09.521061 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:54:10.521960 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:54:11.523663 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:54:12.515054 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:54:13.516226 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:54:14.518067 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:54:15.519825 0.000000 udp 10.0.2.22 51868 -> 114.40.25.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:54:16.520658 0.000000 udp 10.0.2.22 51868 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:54:17.522544 0.000000 udp 10.0.2.22 51868 -> 75.109.202.251 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:54:18.524257 0.365240 udp 10.0.2.22 51868 <-> 220.142.10.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:19.515225 0.000000 udp 10.0.2.22 51868 -> 95.220.247.249 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:54:20.517026 0.055081 udp 10.0.2.22 51868 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:21.518305 0.277420 udp 10.0.2.22 51868 <-> 187.66.244.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:22.519365 3.203435 udp 10.0.2.22 51868 <-> 72.129.64.189 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:23.521050 0.036812 udp 10.0.2.22 51868 <-> 89.133.113.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:24.522748 0.142521 udp 10.0.2.22 51868 <-> 24.201.226.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:26.515177 0.049927 udp 10.0.2.22 51868 <-> 217.77.28.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:27.516688 0.000000 udp 10.0.2.22 51868 -> 124.244.188.138 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:54:28.518196 0.088615 udp 10.0.2.22 51868 <-> 176.8.201.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:29.519247 2.945368 udp 10.0.2.22 51868 <-> 90.227.35.57 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:30.520656 0.038689 udp 10.0.2.22 51868 <-> 89.133.113.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:31.392254 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:54:32.523794 0.047041 udp 10.0.2.22 51868 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:33.515123 0.234016 udp 10.0.2.22 51868 <-> 176.237.169.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:34.516535 0.000000 udp 10.0.2.22 51868 -> 77.38.98.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:54:35.517831 0.050829 udp 10.0.2.22 51868 <-> 79.113.238.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:36.520038 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:54:37.521308 0.000000 udp 10.0.2.22 51868 -> 116.49.123.84 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:54:38.522570 0.196383 udp 10.0.2.22 51868 <-> 76.92.155.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:39.514113 0.111808 udp 10.0.2.22 51868 <-> 178.122.80.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:40.515257 0.000000 udp 10.0.2.22 51868 -> 118.86.35.54 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:54:41.517351 1.356637 udp 10.0.2.22 51868 <-> 113.253.23.41 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:43.519835 0.211636 udp 10.0.2.22 51868 <-> 75.85.212.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:44.521392 0.024014 udp 10.0.2.22 51868 <-> 194.94.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:45.522736 0.082356 udp 10.0.2.22 51868 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:46.513971 0.044456 udp 10.0.2.22 51868 <-> 176.37.230.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:47.515173 0.292285 udp 10.0.2.22 51868 <-> 61.1.224.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:48.516844 0.032206 udp 10.0.2.22 51868 <-> 178.79.16.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:49.518504 3.003996 udp 10.0.2.22 51868 -> 194.14.10.10 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:54:50.519926 0.000000 udp 10.0.2.22 51868 -> 98.250.1.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:54:51.521250 0.082457 udp 10.0.2.22 51868 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:53.514044 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:54:54.515627 0.215739 udp 10.0.2.22 51868 <-> 76.109.136.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:55.517087 0.389843 udp 10.0.2.22 51868 <-> 123.192.49.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:56.518574 0.029911 udp 10.0.2.22 51868 <-> 87.97.204.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:54:57.520124 2.994096 udp 10.0.2.22 51868 -> 79.7.112.69 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:54:58.391335 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:54:58.521143 0.000000 udp 10.0.2.22 51868 -> 122.174.82.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:54:59.522809 0.315791 udp 10.0.2.22 51868 <-> 119.231.181.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:01.515351 0.312511 udp 10.0.2.22 51868 <-> 14.97.202.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:02.517266 0.104197 udp 10.0.2.22 51868 <-> 93.155.151.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:03.518125 1.204867 udp 10.0.2.22 51868 <-> 50.26.127.53 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:03.641463 3.011379 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 04:55:05.521047 1.048839 udp 10.0.2.22 51868 <-> 77.89.104.107 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:07.514079 0.647860 udp 10.0.2.22 51868 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:08.515433 0.163847 udp 10.0.2.22 51868 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:09.516988 0.031222 udp 10.0.2.22 51868 <-> 89.64.246.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:10.518627 0.284026 udp 10.0.2.22 51868 <-> 190.47.113.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:10.659030 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:55:11.520095 1.198236 udp 10.0.2.22 51868 <-> 186.182.96.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:12.521742 3.385968 udp 10.0.2.22 51868 <-> 114.38.103.70 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:13.522643 0.320281 udp 10.0.2.22 51868 <-> 182.155.14.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:14.514192 0.000000 udp 10.0.2.22 51868 -> 173.180.203.114 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:55:16.517178 0.060662 udp 10.0.2.22 51868 <-> 84.252.22.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:17.518265 4.057751 udp 10.0.2.22 51868 <-> 92.87.69.43 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:18.519938 0.000000 udp 10.0.2.22 51868 -> 14.98.230.133 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:55:18.660212 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:55:19.521238 0.173338 udp 10.0.2.22 51868 <-> 76.107.65.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:20.522735 0.074880 udp 10.0.2.22 51868 <-> 88.203.26.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:22.515606 0.051365 udp 10.0.2.22 51868 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:23.517144 0.178731 udp 10.0.2.22 51868 <-> 174.48.245.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:24.519012 0.060115 udp 10.0.2.22 51868 <-> 88.179.198.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:25.389496 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:55:25.520555 0.305737 udp 10.0.2.22 51868 <-> 118.83.47.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:26.521186 0.161519 udp 10.0.2.22 51868 <-> 72.184.24.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:27.523211 0.024746 udp 10.0.2.22 51868 <-> 89.133.190.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:28.514402 0.369467 udp 10.0.2.22 51868 <-> 201.186.166.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:29.515972 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:55:30.516950 0.817423 udp 10.0.2.22 51868 <-> 84.1.20.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:31.518782 0.000000 udp 10.0.2.22 51868 -> 75.34.59.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:55:32.519809 0.000000 udp 10.0.2.22 51868 -> 217.203.17.7 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:55:33.521604 0.000000 udp 10.0.2.22 51868 -> 173.218.218.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:55:34.522722 0.000000 udp 10.0.2.22 51868 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:55:34.663268 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:55:36.516051 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:55:37.517113 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:55:38.518443 0.228125 udp 10.0.2.22 51868 <-> 190.75.86.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:39.519850 0.127430 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:40.521311 0.450360 udp 10.0.2.22 51868 <-> 61.227.20.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:41.522975 0.150044 udp 10.0.2.22 51868 <-> 216.123.168.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:42.514609 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:55:43.515895 0.000000 udp 10.0.2.22 51868 -> 190.75.56.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:55:44.517864 0.073590 udp 10.0.2.22 51868 <-> 88.165.10.238 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:45.518949 0.063486 udp 10.0.2.22 51868 <-> 88.179.198.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:46.520196 0.028376 udp 10.0.2.22 51868 <-> 151.237.7.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:47.521993 0.313252 udp 10.0.2.22 51868 <-> 189.111.30.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:48.523497 2.241298 udp 10.0.2.22 51868 <-> 98.140.253.64 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:49.514277 0.154996 udp 10.0.2.22 51868 <-> 96.20.190.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:51.517131 0.213439 udp 10.0.2.22 51868 <-> 50.193.233.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:52.388423 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:55:52.518975 0.376354 udp 10.0.2.22 51868 <-> 180.70.39.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:53.520282 0.168937 udp 10.0.2.22 51868 <-> 69.243.233.159 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:54.522198 0.059861 udp 10.0.2.22 51868 <-> 77.81.10.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:55.523184 0.071521 udp 10.0.2.22 51868 <-> 78.52.17.197 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:56.514676 0.027341 udp 10.0.2.22 51868 <-> 80.98.70.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:57.515753 0.317972 udp 10.0.2.22 51868 <-> 187.101.38.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:58.517489 4.163447 udp 10.0.2.22 51868 <-> 98.214.215.233 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:55:59.519154 0.053253 udp 10.0.2.22 51868 <-> 94.52.120.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:00.520810 0.000000 udp 10.0.2.22 51868 -> 87.223.115.244 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:56:01.521944 0.154936 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:03.514733 0.037108 udp 10.0.2.22 51868 <-> 87.96.140.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:04.516386 0.145530 udp 10.0.2.22 51868 <-> 24.228.169.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:05.517299 4.030161 udp 10.0.2.22 51868 <-> 194.94.79.240 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:06.519360 0.076402 udp 10.0.2.22 51868 <-> 79.109.248.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:06.669075 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 04:56:07.520705 0.297802 udp 10.0.2.22 51868 <-> 201.214.63.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:08.521570 0.038271 udp 10.0.2.22 51868 <-> 87.96.140.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:10.514910 0.151353 udp 10.0.2.22 51868 <-> 98.214.215.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:11.516069 0.301348 udp 10.0.2.22 51868 <-> 153.183.74.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:12.517646 0.036792 udp 10.0.2.22 51868 <-> 81.161.245.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:13.519570 0.120636 udp 10.0.2.22 51868 <-> 82.56.162.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:14.520524 0.145141 udp 10.0.2.22 51868 <-> 24.75.169.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:15.522305 0.296599 udp 10.0.2.22 51868 <-> 114.198.193.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:16.523679 0.162960 udp 10.0.2.22 51868 <-> 75.73.227.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:17.514896 0.000000 udp 10.0.2.22 51868 -> 5.12.192.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:56:18.516138 0.322118 udp 10.0.2.22 51868 <-> 122.29.17.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:19.397179 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:56:19.517867 0.180028 udp 10.0.2.22 51868 <-> 68.6.74.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:20.519061 0.204802 udp 10.0.2.22 51868 <-> 71.227.148.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:21.520687 0.203468 udp 10.0.2.22 51868 <-> 189.192.237.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:22.521992 0.000000 udp 10.0.2.22 51868 -> 41.217.236.39 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:56:23.523243 0.115304 udp 10.0.2.22 51868 <-> 128.164.237.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:24.514888 0.139246 udp 10.0.2.22 51868 <-> 24.45.223.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:25.516730 3.366625 udp 10.0.2.22 51868 <-> 60.244.133.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:26.517605 0.631006 udp 10.0.2.22 51868 <-> 186.88.174.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:27.519143 0.166341 udp 10.0.2.22 51868 <-> 62.57.203.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:28.520444 0.153251 udp 10.0.2.22 51868 <-> 64.53.138.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:29.522543 0.000000 udp 10.0.2.22 51868 -> 179.167.11.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:56:30.523336 4.997557 udp 10.0.2.22 51868 <-> 78.251.143.19 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:31.514992 0.148939 udp 10.0.2.22 51868 <-> 124.123.242.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:32.516568 0.000000 udp 10.0.2.22 51868 -> 92.80.198.39 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:56:33.517527 3.385168 udp 10.0.2.22 51868 <-> 187.11.102.37 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:34.519589 0.000000 udp 10.0.2.22 51868 -> 84.54.171.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:56:37.523840 0.053299 udp 10.0.2.22 51868 <-> 31.176.247.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:38.515181 0.000000 udp 10.0.2.22 51868 -> 1.34.204.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:56:39.516198 0.000000 udp 10.0.2.22 51868 -> 201.13.113.78 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:56:40.518045 0.044620 udp 10.0.2.22 51868 <-> 86.121.142.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:41.519236 1.176689 udp 10.0.2.22 51868 <-> 46.248.74.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:42.520733 0.000000 udp 10.0.2.22 51868 -> 202.78.234.118 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:56:43.521962 0.000000 udp 10.0.2.22 51868 -> 95.59.36.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:56:44.523769 0.042562 udp 10.0.2.22 51868 <-> 188.230.65.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:45.514762 0.350734 udp 10.0.2.22 51868 <-> 14.199.234.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:46.396507 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:56:46.516201 0.182264 udp 10.0.2.22 51868 <-> 223.223.153.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:47.518223 0.000000 udp 10.0.2.22 51868 -> 117.203.81.131 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:56:48.519581 0.000000 udp 10.0.2.22 51868 -> 86.179.10.139 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:56:49.521159 0.177784 udp 10.0.2.22 51868 <-> 174.102.72.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:50.522052 0.142281 udp 10.0.2.22 51868 <-> 74.88.128.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:51.523851 0.528649 udp 10.0.2.22 51868 <-> 190.38.124.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:52.515144 0.287472 udp 10.0.2.22 51868 <-> 179.219.214.223 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:53.516423 3.342512 udp 10.0.2.22 51868 <-> 82.245.78.248 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:54.518084 1.852475 udp 10.0.2.22 51868 <-> 187.18.249.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:55.519391 0.000000 udp 10.0.2.22 51868 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:56:57.522630 0.154506 udp 10.0.2.22 51868 <-> 24.60.166.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:58.524092 0.091058 udp 10.0.2.22 51868 <-> 95.247.200.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:56:59.515314 2.051234 udp 10.0.2.22 51868 <-> 147.163.93.48 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:00.516492 0.286760 udp 10.0.2.22 51868 <-> 177.100.111.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:02.519323 0.363207 udp 10.0.2.22 51868 <-> 190.160.244.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:03.520633 0.055656 udp 10.0.2.22 51868 <-> 109.87.252.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:04.522460 0.128258 udp 10.0.2.22 51868 <-> 94.197.198.227 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:05.524089 0.268496 udp 10.0.2.22 51868 <-> 201.210.93.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:06.515393 0.984378 udp 10.0.2.22 51868 <-> 1.22.38.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:07.517043 0.375421 udp 10.0.2.22 51868 <-> 36.236.170.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:08.518394 0.374198 udp 10.0.2.22 51868 <-> 114.36.70.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:09.519795 3.044363 udp 10.0.2.22 51868 <-> 203.218.113.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:10.521261 0.045371 udp 10.0.2.22 51868 <-> 78.239.42.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:11.522393 0.039532 udp 10.0.2.22 51868 <-> 185.22.137.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:12.514261 0.305774 udp 10.0.2.22 51868 <-> 122.215.8.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:13.394897 0.000098 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:57:13.515193 0.332110 udp 10.0.2.22 51868 <-> 123.216.46.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:14.517059 2.136228 udp 10.0.2.22 51868 <-> 219.90.107.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:15.518589 0.000000 udp 10.0.2.22 51868 -> 50.80.122.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:57:16.519845 0.164163 udp 10.0.2.22 51868 <-> 74.77.32.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:17.520872 0.306570 udp 10.0.2.22 51868 <-> 210.194.128.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:18.522382 0.300904 udp 10.0.2.22 51868 <-> 126.60.193.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:19.513874 0.195267 udp 10.0.2.22 51868 <-> 148.204.134.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:20.515470 0.057518 udp 10.0.2.22 51868 <-> 109.87.240.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:21.516710 0.384320 udp 10.0.2.22 51868 <-> 114.40.25.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:22.518494 0.000000 udp 10.0.2.22 51868 -> 95.247.200.242 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:57:23.520110 0.186668 udp 10.0.2.22 51868 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:24.521511 0.319697 udp 10.0.2.22 51868 <-> 124.121.94.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:25.522843 4.153615 udp 10.0.2.22 51868 <-> 74.199.89.82 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:26.514525 0.392950 udp 10.0.2.22 51868 <-> 114.27.218.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:27.515152 0.221175 udp 10.0.2.22 51868 <-> 50.193.233.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:28.516877 0.342070 udp 10.0.2.22 51868 <-> 182.221.14.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:30.519760 0.367239 udp 10.0.2.22 51868 <-> 180.177.43.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:31.520925 0.154594 udp 10.0.2.22 51868 <-> 66.31.49.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:32.522903 0.039428 udp 10.0.2.22 51868 <-> 213.119.25.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:33.513906 0.376636 udp 10.0.2.22 51868 <-> 49.159.227.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:34.515902 0.000000 udp 10.0.2.22 51868 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:57:35.516928 0.296004 udp 10.0.2.22 51868 <-> 114.198.193.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:36.518108 0.048258 udp 10.0.2.22 51868 <-> 5.14.212.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:37.519696 2.003059 udp 10.0.2.22 51868 -> 101.63.83.29 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:57:38.521353 0.211196 udp 10.0.2.22 51868 <-> 46.48.181.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:40.394157 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:57:40.514104 0.061135 udp 10.0.2.22 51868 <-> 84.55.7.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:41.515697 1.204649 udp 10.0.2.22 51868 <-> 103.251.50.39 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:57:44.519581 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:57:45.521655 0.000074 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:57:45.521729 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:57:46.522809 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:57:47.514438 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:57:48.515421 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:57:49.517261 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:57:50.518236 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:57:51.520242 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:57:52.521267 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:57:53.523210 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:57:54.514136 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:57:55.515651 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:57:56.517183 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:57:57.518360 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:57:58.520231 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:57:59.521219 0.000000 udp 10.0.2.22 51868 -> 70.70.164.40 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:58:00.522948 2.126869 udp 10.0.2.22 51868 <-> 24.156.248.202 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:01.514545 0.071395 udp 10.0.2.22 51868 <-> 85.84.74.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:03.517068 2.979362 udp 10.0.2.22 51868 <-> 189.120.229.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:04.518938 0.032319 udp 10.0.2.22 51868 <-> 178.150.4.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:05.519852 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:58:05.751947 0.000000 udp 10.0.2.22 51868 <- 70.70.164.40 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:58:06.521452 0.154417 udp 10.0.2.22 51868 <-> 174.100.71.86 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:07.393158 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:58:07.522828 0.062346 udp 10.0.2.22 51868 <-> 82.233.157.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:08.514248 0.153869 udp 10.0.2.22 51868 <-> 123.201.113.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:09.516014 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:58:10.517791 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:58:11.518832 0.000097 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:58:11.518929 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:58:12.520521 0.057616 udp 10.0.2.22 51868 <-> 5.61.147.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:13.521698 0.430117 udp 10.0.2.22 51868 <-> 178.239.112.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:14.522720 0.170370 udp 10.0.2.22 51868 <-> 124.123.13.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:15.514321 0.184433 udp 10.0.2.22 51868 <-> 108.167.33.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:16.516206 0.168854 udp 10.0.2.22 51868 <-> 116.73.164.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:17.517263 0.125640 udp 10.0.2.22 51868 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:18.518694 0.000000 udp 10.0.2.22 51868 -> 95.87.232.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:58:19.520416 0.334188 udp 10.0.2.22 51868 <-> 1.163.90.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:20.521404 0.151943 udp 10.0.2.22 51868 <-> 98.239.205.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:21.522868 0.135589 udp 10.0.2.22 51868 <-> 68.39.158.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:22.514205 0.037025 udp 10.0.2.22 51868 <-> 87.96.140.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:23.515714 0.278407 udp 10.0.2.22 51868 <-> 189.39.150.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:24.517145 0.165173 udp 10.0.2.22 51868 <-> 207.134.187.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:25.518787 0.405331 udp 10.0.2.22 51868 <-> 118.179.243.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:26.520127 0.331239 udp 10.0.2.22 51868 <-> 126.115.117.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:27.521781 0.274424 udp 10.0.2.22 51868 <-> 14.97.76.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:28.522848 0.549906 udp 10.0.2.22 51868 <-> 218.226.32.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:29.514501 0.000000 udp 10.0.2.22 51868 -> 2.185.156.219 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:58:30.515783 0.401891 udp 10.0.2.22 51868 <-> 75.205.23.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:31.517149 0.074511 udp 10.0.2.22 51868 -> 178.156.36.68 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:58:31.591660 0.000000 icmp 178.156.36.68 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 04:58:32.519015 0.020565 udp 10.0.2.22 51868 <-> 176.198.111.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:33.520047 0.060741 udp 10.0.2.22 51868 <-> 93.105.14.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:34.391240 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:58:34.521975 2.993786 udp 10.0.2.22 51868 <-> 75.243.16.247 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:35.523141 3.281389 udp 10.0.2.22 51868 <-> 201.214.63.238 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:36.514602 0.163317 udp 10.0.2.22 51868 <-> 85.86.73.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:39.518966 0.082281 udp 10.0.2.22 51868 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:40.520798 0.000000 udp 10.0.2.22 51868 -> 112.201.169.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:58:41.521558 0.144505 udp 10.0.2.22 51868 <-> 96.37.228.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:42.523224 2.003226 udp 10.0.2.22 51868 <-> 188.175.96.90 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:45.517898 0.200407 udp 10.0.2.22 51868 <-> 75.80.36.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:46.518753 0.158277 udp 10.0.2.22 51868 <-> 65.27.180.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:47.520302 0.054621 udp 10.0.2.22 51868 <-> 79.116.188.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:48.522371 0.000000 udp 10.0.2.22 51868 -> 81.37.252.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:58:49.523327 0.303467 udp 10.0.2.22 51868 <-> 1.186.113.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:50.515192 0.323795 udp 10.0.2.22 51868 <-> 219.109.69.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:51.516241 0.067697 udp 10.0.2.22 51868 <-> 79.109.106.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:52.517965 2.300563 udp 10.0.2.22 51868 <-> 186.23.120.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:53.519065 0.056128 udp 10.0.2.22 51868 <-> 193.238.38.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:54.520577 0.000000 udp 10.0.2.22 51868 -> 161.6.244.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:58:55.522352 0.209959 udp 10.0.2.22 51868 <-> 190.156.182.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:56.523141 0.161560 udp 10.0.2.22 51868 <-> 183.83.132.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:57.515031 0.426584 udp 10.0.2.22 51868 <-> 220.80.230.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:58:58.516192 0.000000 udp 10.0.2.22 51868 -> 77.239.79.78 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:58:59.517767 0.298650 udp 10.0.2.22 51868 <-> 105.141.73.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:00.519536 0.061103 udp 10.0.2.22 51868 <-> 86.124.236.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:01.390070 0.000092 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:59:01.520411 0.300162 udp 10.0.2.22 51868 <-> 60.47.222.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:02.522309 0.190935 udp 10.0.2.22 51868 <-> 5.158.63.46 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:03.523791 0.046498 udp 10.0.2.22 51868 <-> 89.190.113.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:04.515215 0.351593 udp 10.0.2.22 51868 <-> 58.114.251.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:05.516147 0.154385 udp 10.0.2.22 51868 <-> 103.25.171.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:06.518017 0.305743 udp 10.0.2.22 51868 <-> 60.56.88.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:07.519175 0.305095 udp 10.0.2.22 51868 <-> 165.132.238.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:08.520679 0.395491 udp 10.0.2.22 51868 <-> 219.103.176.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:09.522027 0.341325 udp 10.0.2.22 51868 <-> 122.121.111.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:10.523819 0.155924 udp 10.0.2.22 51868 <-> 66.229.239.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:11.515206 0.578719 udp 10.0.2.22 51868 <-> 117.195.1.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:12.516416 0.207894 udp 10.0.2.22 51868 <-> 98.234.66.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:13.518262 0.365246 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:14.519718 0.096555 udp 10.0.2.22 51868 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:15.520436 1.233743 udp 10.0.2.22 51868 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:16.522024 4.479158 udp 10.0.2.22 51868 <-> 162.0.48.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:17.524048 0.000061 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:59:17.524109 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:59:18.515192 0.155615 udp 10.0.2.22 51868 <-> 24.61.172.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:19.516908 0.000000 udp 10.0.2.22 51868 -> 186.56.226.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:59:20.517964 0.370452 udp 10.0.2.22 51868 <-> 88.236.237.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:21.519633 0.088091 udp 10.0.2.22 51868 <-> 94.41.217.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:22.521033 0.148488 udp 10.0.2.22 51868 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:23.521978 0.426837 udp 10.0.2.22 51868 <-> 181.18.188.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:24.524099 1.121179 udp 10.0.2.22 51868 <-> 190.198.20.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:25.515090 0.000000 udp 10.0.2.22 51868 -> 72.231.199.170 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:59:26.516805 0.382999 udp 10.0.2.22 51868 <-> 201.71.53.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:27.518359 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:59:28.389659 0.000090 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:59:28.519515 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:59:29.521076 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:59:30.522105 0.000000 udp 10.0.2.22 51868 -> 183.87.216.134 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:59:31.523828 0.000064 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:59:31.523892 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 04:59:32.515189 0.104302 udp 10.0.2.22 51868 <-> 109.52.179.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:33.516411 1.171524 udp 10.0.2.22 51868 <-> 190.198.20.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:34.518147 0.000000 udp 10.0.2.22 51868 -> 92.247.198.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:59:35.519772 0.216934 udp 10.0.2.22 51868 <-> 190.219.20.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:36.521295 1.001095 udp 10.0.2.22 51868 <-> 183.87.216.134 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:38.523955 0.379400 udp 10.0.2.22 51868 <-> 61.230.171.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:39.514979 0.000000 udp 10.0.2.22 51868 -> 76.206.16.81 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:59:40.517014 0.023060 udp 10.0.2.22 51868 <-> 84.118.6.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:41.518057 0.000000 udp 10.0.2.22 51868 -> 89.34.99.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:59:42.519648 0.000000 udp 10.0.2.22 51868 -> 88.227.94.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:59:43.521414 0.157447 udp 10.0.2.22 51868 <-> 97.101.194.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:44.522891 0.182932 udp 10.0.2.22 51868 <-> 183.87.216.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:45.513741 0.143972 udp 10.0.2.22 51868 <-> 70.44.250.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:46.515284 0.320539 udp 10.0.2.22 51868 <-> 219.110.97.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:47.516758 0.200445 udp 10.0.2.22 51868 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:48.518024 0.052965 udp 10.0.2.22 51868 <-> 46.253.3.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:49.519452 0.043576 udp 10.0.2.22 51868 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:50.520881 0.165661 udp 10.0.2.22 51868 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:51.522298 0.000000 udp 10.0.2.22 51868 -> 78.157.7.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:59:52.514153 0.219023 udp 10.0.2.22 51868 <-> 200.84.191.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:53.515058 0.000000 udp 10.0.2.22 51868 -> 91.120.99.47 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:59:54.516988 0.394486 udp 10.0.2.22 51868 <-> 61.223.208.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:55.398323 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 04:59:55.518588 0.324393 udp 10.0.2.22 51868 <-> 123.176.138.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:56.519427 0.440756 udp 10.0.2.22 51868 <-> 183.179.52.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:57.521073 0.316966 udp 10.0.2.22 51868 <-> 121.131.107.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 04:59:58.522467 0.000000 udp 10.0.2.22 51868 -> 190.189.201.39 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 04:59:59.513953 0.000000 udp 10.0.2.22 51868 -> 89.190.113.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:00:00.515556 0.000000 udp 10.0.2.22 51868 -> 181.33.204.144 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:00:01.517019 0.000000 udp 10.0.2.22 51868 -> 80.242.107.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:00:02.518125 0.193141 udp 10.0.2.22 51868 <-> 75.135.51.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:03.520056 0.000000 udp 10.0.2.22 51868 -> 69.122.169.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:00:04.521144 0.090520 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:05.522539 0.147020 udp 10.0.2.22 51868 <-> 108.202.146.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:06.513792 0.074344 udp 10.0.2.22 51868 <-> 46.161.100.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:07.515328 0.162578 udp 10.0.2.22 51868 <-> 74.193.135.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:08.517182 4.180602 udp 10.0.2.22 51868 <-> 84.228.222.43 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:09.518256 0.088551 udp 10.0.2.22 51868 <-> 87.122.54.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:10.520281 0.297456 udp 10.0.2.22 51868 <-> 71.89.115.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:11.581676 0.038072 udp 10.0.2.22 51868 <-> 188.254.170.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:13.574438 0.149567 udp 10.0.2.22 51868 <-> 68.193.113.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:14.575802 0.000000 udp 10.0.2.22 51868 -> 151.25.195.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:00:15.577327 0.170078 udp 10.0.2.22 51868 <-> 50.158.29.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:16.578705 0.274103 udp 10.0.2.22 51868 <-> 190.37.93.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:17.580289 0.000000 udp 10.0.2.22 51868 -> 118.179.243.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:00:18.581676 0.043222 udp 10.0.2.22 51868 <-> 195.70.108.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:19.583031 0.586151 udp 10.0.2.22 51868 <-> 117.212.242.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:20.574441 0.347921 udp 10.0.2.22 51868 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:21.576033 0.289312 udp 10.0.2.22 51868 <-> 190.163.19.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:22.456630 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:00:22.577226 0.246211 udp 10.0.2.22 51868 <-> 96.26.211.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:23.578457 1.080565 udp 10.0.2.22 51868 <-> 85.84.142.38 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:25.581199 0.035265 udp 10.0.2.22 51868 <-> 89.133.232.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:26.583208 3.222088 udp 10.0.2.22 51868 <-> 75.193.62.134 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:27.574394 0.262094 udp 10.0.2.22 51868 <-> 201.210.93.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:28.575644 0.734498 udp 10.0.2.22 51868 <-> 173.214.226.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:30.578869 0.146802 udp 10.0.2.22 51868 <-> 98.30.47.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:31.579994 4.997184 udp 10.0.2.22 51868 <-> 31.222.118.75 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:32.581404 0.000000 udp 10.0.2.22 51868 -> 161.6.244.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:00:33.583263 0.000000 udp 10.0.2.22 51868 -> 94.190.190.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:00:34.574477 0.000000 udp 10.0.2.22 51868 -> 201.74.112.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:00:35.576027 0.272232 udp 10.0.2.22 51868 <-> 201.210.93.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:36.639710 0.000000 udp 10.0.2.22 51868 <- 31.222.118.75 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:00:37.578857 0.165726 udp 10.0.2.22 51868 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:38.580144 0.415747 udp 10.0.2.22 51868 <-> 187.104.29.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:39.582053 0.000000 udp 10.0.2.22 51868 -> 187.54.217.65 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:00:40.582981 1.992749 udp 10.0.2.22 51868 <-> 5.146.110.49 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:41.574858 0.146691 udp 10.0.2.22 51868 <-> 107.10.164.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:43.577025 0.000000 udp 10.0.2.22 51868 -> 161.6.244.22 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:00:44.578919 0.064115 udp 10.0.2.22 51868 <-> 94.190.190.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:45.580503 1.151118 udp 10.0.2.22 51868 <-> 67.184.116.232 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:47.583063 0.017368 udp 10.0.2.22 51868 <-> 88.132.62.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:48.574633 0.155855 udp 10.0.2.22 51868 <-> 66.130.116.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:49.456160 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:00:49.576209 0.040841 udp 10.0.2.22 51868 <-> 91.67.136.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:50.577362 0.000000 udp 10.0.2.22 51868 -> 70.30.90.88 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:00:51.578598 0.000000 udp 10.0.2.22 51868 -> 49.125.254.167 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:00:52.580474 3.108031 udp 10.0.2.22 51868 <-> 195.238.118.241 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:53.581710 0.293215 udp 10.0.2.22 51868 <-> 85.225.6.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:56.576165 3.171925 udp 10.0.2.22 51868 <-> 173.188.107.246 16464 CON 0 0 6 3676 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:57.577260 0.279843 udp 10.0.2.22 51868 <-> 201.210.93.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:00:58.578781 4.033393 udp 10.0.2.22 51868 <-> 89.77.207.117 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:00.581671 0.000000 udp 10.0.2.22 51868 -> 187.54.217.65 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:01:01.583139 0.000000 udp 10.0.2.22 51868 -> 75.193.62.134 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:01:03.575854 0.147877 udp 10.0.2.22 51868 <-> 67.184.116.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:04.577576 0.000000 udp 10.0.2.22 51868 -> 89.40.192.221 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:01:05.579215 0.121971 udp 10.0.2.22 51868 <-> 195.238.118.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:06.580656 0.000000 udp 10.0.2.22 51868 -> 161.6.244.22 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:01:07.581594 1.066010 udp 10.0.2.22 51868 <-> 94.190.190.26 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:09.574547 0.814774 udp 10.0.2.22 51868 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:10.576589 4.158903 udp 10.0.2.22 51868 <-> 98.30.47.92 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:11.577291 0.506782 udp 10.0.2.22 51868 <-> 187.104.29.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:12.578745 0.040608 udp 10.0.2.22 51868 <-> 89.77.207.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:15.583519 0.069111 udp 10.0.2.22 51868 <-> 37.113.123.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:16.454496 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:01:16.574903 0.301585 udp 10.0.2.22 51868 <-> 180.198.167.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:17.576325 0.308078 udp 10.0.2.22 51868 <-> 115.87.51.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:18.577386 3.004456 udp 10.0.2.22 51868 -> 174.93.156.248 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:01:19.579361 0.000000 udp 10.0.2.22 51868 -> 201.250.139.133 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:01:20.580885 0.273060 udp 10.0.2.22 51868 <-> 179.223.86.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:22.583266 0.025394 udp 10.0.2.22 51868 <-> 109.193.41.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:23.574771 0.026002 udp 10.0.2.22 51868 <-> 85.130.45.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:24.576339 0.035631 udp 10.0.2.22 51868 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:25.577763 0.000000 udp 10.0.2.22 51868 -> 174.93.156.248 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:01:26.578978 0.190962 udp 10.0.2.22 51868 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:27.580637 0.393016 udp 10.0.2.22 51868 <-> 115.241.81.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:28.582271 0.000000 udp 10.0.2.22 51868 -> 36.86.100.163 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:01:29.583851 0.148642 udp 10.0.2.22 51868 <-> 70.80.21.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:30.575156 0.302304 udp 10.0.2.22 51868 <-> 175.177.220.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:31.576551 0.393785 udp 10.0.2.22 51868 <-> 36.238.196.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:32.577888 0.355982 udp 10.0.2.22 51868 <-> 201.212.133.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:33.579024 0.184642 udp 10.0.2.22 51868 <-> 74.135.11.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:34.580479 0.053847 udp 10.0.2.22 51868 <-> 78.232.24.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:35.582135 0.000000 udp 10.0.2.22 51868 -> 173.25.163.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:01:36.583405 0.310885 udp 10.0.2.22 51868 <-> 27.106.71.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:37.575153 3.004249 udp 10.0.2.22 51868 -> 106.209.10.121 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:01:38.576300 1.017296 udp 10.0.2.22 51868 <-> 89.177.210.121 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:41.581071 0.041132 udp 10.0.2.22 51868 <-> 212.233.239.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:42.582515 0.162487 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:43.453064 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:01:43.583652 0.701177 udp 10.0.2.22 51868 <-> 190.208.110.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:44.575216 0.000000 udp 10.0.2.22 51868 -> 177.54.140.9 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:01:45.576773 0.000000 udp 10.0.2.22 51868 -> 49.249.87.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:01:46.577957 0.000000 udp 10.0.2.22 51868 -> 75.109.202.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:01:47.579078 0.000000 udp 10.0.2.22 51868 -> 81.33.31.243 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:01:48.580682 0.354573 udp 10.0.2.22 51868 <-> 109.192.35.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:49.582534 0.368747 udp 10.0.2.22 51868 <-> 111.254.125.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:50.583656 0.331039 udp 10.0.2.22 51868 <-> 219.169.100.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:51.575051 0.000000 udp 10.0.2.22 51868 -> 190.49.238.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:01:52.576435 0.166194 udp 10.0.2.22 51868 <-> 49.205.122.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:53.578153 0.000000 udp 10.0.2.22 51868 -> 86.124.236.232 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:01:54.579670 0.382184 udp 10.0.2.22 51868 <-> 114.46.235.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:55.580712 0.000000 udp 10.0.2.22 51868 -> 190.60.53.110 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:01:56.582221 2.253994 udp 10.0.2.22 51868 <-> 177.100.111.28 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:01:57.583584 0.000000 udp 10.0.2.22 51868 -> 139.228.161.48 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:02:00.577978 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:02:01.579344 0.000100 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:02:01.579444 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:02:02.581107 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:02:03.582626 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:02:04.583526 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:02:05.575058 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:02:06.576696 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:02:07.578571 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:02:08.579696 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:02:09.580686 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:02:10.452313 0.000100 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:02:10.582845 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:02:10.736391 3.000782 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 05:02:11.584128 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:02:12.575135 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:02:13.576553 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:02:14.578061 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:02:15.579731 0.040808 udp 10.0.2.22 51868 <-> 46.223.92.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:16.581241 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:02:17.582836 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:02:17.742471 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:02:18.573629 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:02:19.575356 0.783145 udp 10.0.2.22 51868 <-> 99.196.156.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:20.577092 0.196760 udp 10.0.2.22 51868 <-> 173.25.251.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:21.578511 0.168264 udp 10.0.2.22 51868 <-> 183.83.66.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:22.579366 0.296371 udp 10.0.2.22 51868 <-> 189.47.93.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:23.581085 0.163275 udp 10.0.2.22 51868 <-> 71.89.115.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:24.582924 0.312510 udp 10.0.2.22 51868 <-> 150.162.97.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:25.573764 2.003267 udp 10.0.2.22 51868 -> 70.28.5.179 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:02:25.744501 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:02:26.575991 0.166434 udp 10.0.2.22 51868 <-> 66.190.71.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:28.578605 0.057426 udp 10.0.2.22 51868 <-> 93.115.75.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:29.580041 0.306566 udp 10.0.2.22 51868 <-> 122.130.170.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:30.580947 0.000000 udp 10.0.2.22 51868 -> 190.38.55.194 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:02:31.582601 0.568217 udp 10.0.2.22 51868 <-> 175.38.83.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:32.574103 0.362274 udp 10.0.2.22 51868 <-> 221.151.31.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:33.575747 0.326338 udp 10.0.2.22 51868 <-> 14.97.116.2 16464 CON 0 0 5 3618 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:34.576857 0.079076 udp 10.0.2.22 51868 -> 86.127.123.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:02:34.655933 0.000000 icmp 86.127.123.245 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 05:02:35.578232 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:02:36.580057 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:02:37.451255 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:02:37.581135 0.026164 udp 10.0.2.22 51868 <-> 88.80.117.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:38.582732 0.397031 udp 10.0.2.22 51868 <-> 111.243.187.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:39.574209 0.319646 udp 10.0.2.22 51868 <-> 180.56.125.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:40.575548 0.064820 udp 10.0.2.22 51868 <-> 176.101.9.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:41.576852 0.139060 udp 10.0.2.22 51868 <-> 68.196.3.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:41.747350 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:02:42.578140 0.519938 udp 10.0.2.22 51868 <-> 173.216.251.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:43.580393 0.439730 udp 10.0.2.22 51868 <-> 203.171.229.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:44.581422 2.077688 udp 10.0.2.22 51868 <-> 94.41.58.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:45.583225 0.107145 udp 10.0.2.22 51868 <-> 46.35.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:47.575524 2.068347 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:48.577234 0.155942 udp 10.0.2.22 51868 <-> 87.13.151.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:50.580281 0.270640 udp 10.0.2.22 51868 <-> 190.36.28.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:51.581672 0.222037 udp 10.0.2.22 51868 <-> 46.249.104.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:52.583230 0.895901 udp 10.0.2.22 51868 <-> 187.66.244.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:53.574436 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:02:54.575708 0.139235 udp 10.0.2.22 51868 <-> 69.122.5.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:55.577455 0.152237 udp 10.0.2.22 51868 <-> 216.123.168.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:56.579019 0.336946 udp 10.0.2.22 51868 <-> 183.97.44.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:57.579945 0.039980 udp 10.0.2.22 51868 <-> 46.10.189.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:58.581455 0.483195 udp 10.0.2.22 51868 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:02:59.582810 0.149219 udp 10.0.2.22 51868 <-> 107.15.91.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:00.574016 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:03:01.575707 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:03:02.576957 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:03:03.578588 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:03:04.450139 0.000113 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:03:04.580158 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:03:05.581290 0.854823 udp 10.0.2.22 51868 <-> 115.132.136.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:06.622884 0.328063 udp 10.0.2.22 51868 <-> 117.201.99.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:07.614806 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:03:08.616066 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:03:09.617710 0.055801 udp 10.0.2.22 51868 <-> 94.253.238.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:10.618933 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:03:11.620261 0.310512 udp 10.0.2.22 51868 <-> 123.225.58.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:12.621710 0.607094 udp 10.0.2.22 51868 <-> 115.132.136.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:13.622777 0.000000 udp 10.0.2.22 51868 -> 79.117.106.187 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:03:13.793130 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:03:14.614201 0.061287 udp 10.0.2.22 51868 <-> 82.137.57.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:15.615954 0.247578 udp 10.0.2.22 51868 <-> 187.63.102.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:16.617091 0.147787 udp 10.0.2.22 51868 <-> 72.231.172.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:17.619191 1.505819 udp 10.0.2.22 51868 <-> 69.59.89.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:18.620470 0.084982 udp 10.0.2.22 51868 <-> 86.44.130.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:19.621884 0.000000 udp 10.0.2.22 51868 -> 71.43.117.142 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:03:20.623441 0.294951 udp 10.0.2.22 51868 <-> 60.37.183.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:21.614667 0.000000 udp 10.0.2.22 51868 -> 27.2.138.119 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:03:22.615710 0.301324 udp 10.0.2.22 51868 <-> 165.132.238.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:23.617156 0.000000 udp 10.0.2.22 51868 -> 71.89.50.92 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:03:24.619107 0.047134 udp 10.0.2.22 51868 <-> 5.14.105.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:25.620330 1.215757 udp 10.0.2.22 51868 <-> 69.59.89.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:26.621866 0.566385 udp 10.0.2.22 51868 <-> 27.2.138.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:27.623410 0.000000 udp 10.0.2.22 51868 -> 24.249.57.180 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:03:28.614598 0.170308 udp 10.0.2.22 51868 <-> 49.143.252.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:29.615788 2.003339 udp 10.0.2.22 51868 -> 109.199.236.29 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:03:30.617527 4.997184 udp 10.0.2.22 51868 <-> 177.100.111.28 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:31.488666 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:03:32.620642 0.086310 udp 10.0.2.22 51868 <-> 94.153.59.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:33.622024 3.350294 udp 10.0.2.22 51868 <-> 202.164.158.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:34.622982 0.036152 udp 10.0.2.22 51868 <-> 94.253.141.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:35.888408 0.000000 udp 10.0.2.22 51868 <- 177.100.111.28 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:03:36.615954 4.880253 udp 10.0.2.22 51868 <-> 86.56.0.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:37.617961 0.037125 udp 10.0.2.22 51868 <-> 188.254.186.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:38.618914 0.122547 udp 10.0.2.22 51868 <-> 151.52.90.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:39.620133 0.000000 udp 10.0.2.22 51868 -> 27.2.138.119 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:03:40.621877 0.333283 udp 10.0.2.22 51868 <-> 125.4.22.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:41.623642 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:03:42.614805 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:03:43.616346 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:03:44.618017 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:03:45.618907 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:03:46.621074 0.000000 udp 10.0.2.22 51868 -> 78.8.126.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:03:47.622265 0.171412 udp 10.0.2.22 51868 <-> 183.83.176.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:48.623259 0.235047 udp 10.0.2.22 51868 <-> 190.39.51.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:49.615078 0.000000 udp 10.0.2.22 51868 -> 77.38.98.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:03:50.616408 0.378490 udp 10.0.2.22 51868 <-> 177.182.77.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:51.618160 0.046193 udp 10.0.2.22 51868 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:52.618891 0.000000 udp 10.0.2.22 51868 -> 177.149.127.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:03:53.620517 3.325154 udp 10.0.2.22 51868 <-> 150.162.192.27 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:54.642145 0.031197 udp 10.0.2.22 51868 <-> 87.97.204.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:55.643255 0.234451 udp 10.0.2.22 51868 <-> 190.39.51.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:57.636070 2.052919 udp 10.0.2.22 51868 <-> 147.163.93.48 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:03:58.517418 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:03:58.637910 0.077017 udp 10.0.2.22 51868 <-> 86.121.142.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:00.640862 0.146684 udp 10.0.2.22 51868 <-> 80.180.171.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:01.641819 0.476092 udp 10.0.2.22 51868 <-> 117.205.146.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:02.643263 0.000000 udp 10.0.2.22 51868 -> 208.101.81.78 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:04:03.634963 0.164738 udp 10.0.2.22 51868 <-> 74.58.240.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:04.636245 0.000000 udp 10.0.2.22 51868 -> 24.57.55.50 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:04:05.637552 0.075780 udp 10.0.2.22 51868 <-> 85.84.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:06.639194 0.071956 udp 10.0.2.22 51868 <-> 109.182.129.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:07.641036 0.000000 udp 10.0.2.22 51868 -> 111.249.165.119 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:04:08.641870 0.164538 udp 10.0.2.22 51868 <-> 79.6.214.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:09.643665 0.164961 udp 10.0.2.22 51868 <-> 75.67.90.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:10.635144 0.264840 udp 10.0.2.22 51868 <-> 201.211.132.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:11.636703 0.397013 udp 10.0.2.22 51868 <-> 1.238.134.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:12.638144 0.359350 udp 10.0.2.22 51868 <-> 81.226.243.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:13.639858 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:04:14.640794 0.023806 udp 10.0.2.22 51868 <-> 194.94.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:15.642498 0.056157 udp 10.0.2.22 51868 <-> 195.238.118.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:16.643922 0.067080 udp 10.0.2.22 51868 <-> 95.220.247.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:17.635101 0.000000 udp 10.0.2.22 51868 -> 75.109.202.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:04:18.636554 0.145921 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:19.638161 0.000000 udp 10.0.2.22 51868 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:04:20.639368 3.139701 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:21.640825 1.325307 udp 10.0.2.22 51868 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:22.642385 0.232208 udp 10.0.2.22 51868 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:24.635441 0.144590 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:25.516671 0.097170 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:04:25.666477 0.136767 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:26.668533 0.056205 udp 10.0.2.22 51868 <-> 195.238.118.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:27.669221 0.000000 udp 10.0.2.22 51868 -> 75.109.202.251 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:04:28.671005 0.022850 udp 10.0.2.22 51868 <-> 194.94.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:29.672420 0.082620 udp 10.0.2.22 51868 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:30.673738 0.000000 udp 10.0.2.22 51868 -> 187.209.36.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:04:31.665507 0.778500 udp 10.0.2.22 51868 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:32.666587 0.254976 udp 10.0.2.22 51868 <-> 151.233.128.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:33.668636 0.322577 udp 10.0.2.22 51868 <-> 14.99.190.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:34.669633 0.172069 udp 10.0.2.22 51868 <-> 72.252.170.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:35.671228 0.257854 udp 10.0.2.22 51868 <-> 187.38.122.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:36.672663 0.511008 udp 10.0.2.22 51868 <-> 24.123.44.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:37.674245 0.596972 udp 10.0.2.22 51868 <-> 219.77.148.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:38.665459 0.038354 udp 10.0.2.22 51868 <-> 87.254.183.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:39.666623 0.141037 udp 10.0.2.22 51868 <-> 66.57.118.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:40.667984 0.058514 udp 10.0.2.22 51868 <-> 82.160.201.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:41.669601 0.025898 udp 10.0.2.22 51868 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:42.671031 0.040058 udp 10.0.2.22 51868 <-> 5.15.233.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:43.672699 3.018743 udp 10.0.2.22 51868 <-> 89.212.235.90 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:44.673788 0.000000 udp 10.0.2.22 51868 -> 117.213.69.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:04:45.665669 0.326878 udp 10.0.2.22 51868 <-> 182.155.52.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:47.668399 0.000000 udp 10.0.2.22 51868 -> 79.7.112.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:04:48.669750 0.040397 udp 10.0.2.22 51868 <-> 5.15.233.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:49.670864 0.176758 udp 10.0.2.22 51868 <-> 174.102.72.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:50.672415 0.329546 udp 10.0.2.22 51868 <-> 182.155.52.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:51.664006 0.023820 udp 10.0.2.22 51868 <-> 80.218.193.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:52.545488 0.000100 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:04:52.665190 0.000000 udp 10.0.2.22 51868 -> 66.187.64.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:04:53.666934 0.000000 udp 10.0.2.22 51868 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:04:54.668567 3.167454 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:55.669468 0.000000 udp 10.0.2.22 51868 -> 82.137.14.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:04:56.671388 0.219353 udp 10.0.2.22 51868 <-> 117.213.69.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:58.664242 0.097068 udp 10.0.2.22 51868 <-> 78.15.186.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:04:59.665393 0.049867 udp 10.0.2.22 51868 <-> 85.204.248.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:00.666986 3.053305 udp 10.0.2.22 51868 <-> 147.156.24.77 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:01.668548 0.039605 udp 10.0.2.22 51868 <-> 89.215.37.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:04.673039 0.155059 udp 10.0.2.22 51868 <-> 77.224.108.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:05.663922 0.221614 udp 10.0.2.22 51868 <-> 46.48.147.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:06.665891 0.322120 udp 10.0.2.22 51868 <-> 61.19.25.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:07.667067 0.134998 udp 10.0.2.22 51868 <-> 173.81.217.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:08.668738 0.320129 udp 10.0.2.22 51868 <-> 187.56.212.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:09.669630 0.019280 udp 10.0.2.22 51868 <-> 88.132.62.75 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:10.671076 0.660265 udp 10.0.2.22 51868 <-> 79.121.110.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:11.672947 1.474094 udp 10.0.2.22 51868 <-> 117.218.93.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:12.664493 0.085577 udp 10.0.2.22 51868 <-> 94.153.61.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:13.665962 0.164042 udp 10.0.2.22 51868 <-> 98.226.145.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:14.667037 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:05:15.668465 0.152288 udp 10.0.2.22 51868 <-> 27.106.112.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:16.669698 0.047595 udp 10.0.2.22 51868 <-> 178.250.32.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:17.671860 0.476257 udp 10.0.2.22 51868 <-> 210.119.21.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:18.672927 0.000000 udp 10.0.2.22 51868 -> 105.141.78.222 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:05:19.544028 0.000126 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:05:19.664713 0.299603 udp 10.0.2.22 51868 <-> 49.250.97.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:20.665702 0.405677 udp 10.0.2.22 51868 <-> 2.185.124.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:21.667002 1.131113 udp 10.0.2.22 51868 <-> 195.62.0.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:23.670485 1.195000 udp 10.0.2.22 51868 <-> 71.93.103.242 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:25.672864 0.335269 udp 10.0.2.22 51868 <-> 182.221.14.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:26.664712 0.304279 udp 10.0.2.22 51868 <-> 186.53.206.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:27.666322 0.069116 udp 10.0.2.22 51868 <-> 79.116.226.87 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:28.667550 1.217871 udp 10.0.2.22 51868 <-> 190.75.69.196 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:30.670096 0.118381 udp 10.0.2.22 51868 <-> 84.228.222.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:31.671645 0.000000 udp 10.0.2.22 51868 -> 70.173.137.57 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:05:32.673084 0.178265 udp 10.0.2.22 51868 <-> 183.83.228.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:33.664106 0.201427 udp 10.0.2.22 51868 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:34.666247 0.155857 udp 10.0.2.22 51868 <-> 78.50.238.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:35.667083 0.273447 udp 10.0.2.22 51868 <-> 76.91.58.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:36.668930 0.163082 udp 10.0.2.22 51868 <-> 68.187.152.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:37.670127 0.038389 udp 10.0.2.22 51868 <-> 78.128.44.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:38.671367 0.037720 udp 10.0.2.22 51868 <-> 5.15.202.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:39.672762 0.300453 udp 10.0.2.22 51868 <-> 27.127.165.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:40.664162 0.410282 udp 10.0.2.22 51868 <-> 72.15.127.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:41.666098 0.186500 udp 10.0.2.22 51868 <-> 50.80.10.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:42.667187 0.318473 udp 10.0.2.22 51868 <-> 222.144.110.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:43.669148 0.000000 udp 10.0.2.22 51868 -> 190.38.55.194 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:05:44.670163 0.175923 udp 10.0.2.22 51868 <-> 72.252.170.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:45.671490 0.000000 udp 10.0.2.22 51868 -> 125.230.213.212 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:05:46.543002 0.000138 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:05:46.672958 0.120258 udp 10.0.2.22 51868 <-> 95.237.20.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:47.664797 0.049879 udp 10.0.2.22 51868 <-> 217.77.28.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:48.665976 0.159489 udp 10.0.2.22 51868 <-> 70.63.221.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:49.667113 0.000000 udp 10.0.2.22 51868 -> 190.51.63.52 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:05:50.668752 0.203435 udp 10.0.2.22 51868 <-> 24.68.141.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:51.670651 0.080646 udp 10.0.2.22 51868 <-> 95.37.151.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:52.671830 1.703372 udp 10.0.2.22 51868 <-> 188.167.110.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:54.664791 0.000000 udp 10.0.2.22 51868 -> 190.73.247.209 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:05:55.666149 0.034601 udp 10.0.2.22 51868 <-> 130.204.169.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:56.667182 0.148789 udp 10.0.2.22 51868 <-> 49.204.171.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:57.668682 0.000000 udp 10.0.2.22 51868 -> 79.113.238.143 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:05:58.670364 0.334839 udp 10.0.2.22 51868 <-> 110.134.54.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:05:59.671707 0.286114 udp 10.0.2.22 51868 <-> 115.241.22.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:00.672938 0.305522 udp 10.0.2.22 51868 <-> 110.133.137.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:01.664555 0.048765 udp 10.0.2.22 51868 <-> 89.69.212.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:02.665810 0.146980 udp 10.0.2.22 51868 <-> 69.116.92.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:03.667742 3.171101 udp 10.0.2.22 51868 <-> 66.25.88.248 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:04.669034 0.000000 udp 10.0.2.22 51868 -> 88.8.149.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:06:05.670738 0.314101 udp 10.0.2.22 51868 <-> 124.39.69.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:07.673167 0.156513 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:08.664637 0.204627 udp 10.0.2.22 51868 <-> 69.145.217.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:09.666143 0.682314 udp 10.0.2.22 51868 <-> 202.29.178.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:10.667299 0.000000 udp 10.0.2.22 51868 -> 115.242.246.199 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:06:11.668987 0.036873 udp 10.0.2.22 51868 <-> 147.143.129.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:12.670708 0.015360 udp 10.0.2.22 51868 <-> 164.8.108.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:13.542031 0.000114 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:06:13.671894 0.170763 udp 10.0.2.22 51868 <-> 68.207.184.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:14.673310 1.139648 udp 10.0.2.22 51868 <-> 82.61.165.16 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:16.666883 0.144119 udp 10.0.2.22 51868 <-> 46.161.106.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:17.667543 0.061294 udp 10.0.2.22 51868 <-> 85.122.147.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:18.669049 0.000000 udp 10.0.2.22 51868 -> 217.201.107.202 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:06:19.670993 0.292769 udp 10.0.2.22 51868 <-> 61.1.224.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:20.672555 0.036616 udp 10.0.2.22 51868 <-> 79.117.54.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:21.673313 0.000000 udp 10.0.2.22 51868 -> 24.242.53.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:06:22.664758 2.611357 udp 10.0.2.22 51868 <-> 115.250.90.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:23.666594 0.205847 udp 10.0.2.22 51868 <-> 148.204.134.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:24.667829 1.001195 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:06:26.670904 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:06:27.671771 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:06:28.673630 4.997194 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:06:29.664652 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:06:30.666300 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:06:31.668123 0.213627 udp 10.0.2.22 51868 <-> 208.126.231.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:32.669495 0.422026 udp 10.0.2.22 51868 <-> 118.47.82.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:34.672390 0.176986 udp 10.0.2.22 51868 <-> 98.196.143.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:35.673711 0.190368 udp 10.0.2.22 51868 <-> 75.135.53.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:36.665072 0.131780 udp 10.0.2.22 51868 <-> 74.195.15.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:37.666305 0.144597 udp 10.0.2.22 51868 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:38.667615 0.064360 udp 10.0.2.22 51868 <-> 81.190.230.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:39.669294 0.067933 udp 10.0.2.22 51868 <-> 85.86.151.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:40.540207 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:06:40.670913 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:06:41.672467 0.071371 udp 10.0.2.22 51868 <-> 78.186.207.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:42.673401 0.200343 udp 10.0.2.22 51868 <-> 216.197.194.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:43.665211 0.169022 udp 10.0.2.22 51868 <-> 66.190.71.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:44.666754 1.672644 udp 10.0.2.22 51868 <-> 103.20.67.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:45.667675 0.065146 udp 10.0.2.22 51868 <-> 84.126.6.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:46.669630 0.168252 udp 10.0.2.22 51868 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:47.670640 0.230556 udp 10.0.2.22 51868 <-> 151.74.145.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:48.672420 1.159536 udp 10.0.2.22 51868 <-> 98.184.128.60 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:50.665105 0.415596 udp 10.0.2.22 51868 <-> 117.221.2.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:51.666952 0.000000 udp 10.0.2.22 51868 -> 124.120.104.139 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:06:52.668037 0.000000 udp 10.0.2.22 51868 -> 198.179.118.149 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:06:53.669739 0.151902 udp 10.0.2.22 51868 <-> 174.108.102.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:54.670759 0.045819 udp 10.0.2.22 51868 <-> 78.96.210.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:55.672620 0.399236 udp 10.0.2.22 51868 <-> 61.224.15.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:56.673946 0.035463 udp 10.0.2.22 51868 <-> 89.44.100.160 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:57.665202 0.238534 udp 10.0.2.22 51868 <-> 188.158.175.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:58.666787 2.025444 udp 10.0.2.22 51868 <-> 130.83.54.17 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:06:59.668287 0.000000 udp 10.0.2.22 51868 -> 109.54.36.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:07:01.671232 0.000000 udp 10.0.2.22 51868 -> 60.62.93.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:07:02.672678 0.110254 udp 10.0.2.22 51868 <-> 80.135.44.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:03.674071 0.000000 udp 10.0.2.22 51868 -> 91.98.179.116 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:07:04.665222 0.144589 udp 10.0.2.22 51868 <-> 46.233.24.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:05.666626 0.000000 udp 10.0.2.22 51868 -> 93.151.1.154 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:07:06.668288 0.155669 udp 10.0.2.22 51868 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:07.539044 0.000106 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:07:07.669377 0.318341 udp 10.0.2.22 51868 <-> 58.114.242.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:08.671170 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:07:09.672866 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:07:10.673722 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:07:11.665032 0.550386 udp 10.0.2.22 51868 <-> 190.37.55.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:12.666924 0.200515 udp 10.0.2.22 51868 <-> 50.27.74.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:13.668439 0.412318 udp 10.0.2.22 51868 <-> 59.25.69.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:14.669865 0.000000 udp 10.0.2.22 51868 -> 50.72.211.214 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:07:15.670849 0.308756 udp 10.0.2.22 51868 <-> 220.116.148.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:16.672662 0.070318 udp 10.0.2.22 51868 <-> 77.21.244.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:17.674266 0.046019 udp 10.0.2.22 51868 <-> 77.103.126.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:18.665722 0.305865 udp 10.0.2.22 51868 <-> 117.194.199.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:19.666808 0.000000 udp 10.0.2.22 51868 -> 173.199.234.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:07:20.668668 1.174470 udp 10.0.2.22 51868 <-> 50.172.110.194 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:22.670919 0.067755 udp 10.0.2.22 51868 <-> 85.84.46.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:23.672421 0.074574 udp 10.0.2.22 51868 <-> 95.104.232.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:24.664154 0.195137 udp 10.0.2.22 51868 <-> 178.79.11.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:25.665213 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:07:26.666578 0.196856 udp 10.0.2.22 51868 <-> 70.234.170.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:27.668436 0.438979 udp 10.0.2.22 51868 <-> 189.15.62.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:28.670146 0.166107 udp 10.0.2.22 51868 <-> 69.169.145.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:29.671316 0.159324 udp 10.0.2.22 51868 <-> 75.143.148.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:30.672864 0.062312 udp 10.0.2.22 51868 <-> 78.246.60.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:31.663953 0.424799 udp 10.0.2.22 51868 <-> 119.200.155.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:32.665377 0.351664 udp 10.0.2.22 51868 <-> 14.97.203.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:33.667076 0.000000 udp 10.0.2.22 51868 -> 82.53.86.86 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:07:34.548457 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:07:34.668453 0.051942 udp 10.0.2.22 51868 <-> 89.190.113.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:35.669775 0.064080 udp 10.0.2.22 51868 <-> 79.116.226.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:36.000782 0.022430 udp 10.0.2.22 60024 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 05:07:36.023529 0.000000 udp 10.0.2.22 60025 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:07:36.671367 0.155814 udp 10.0.2.22 51868 <-> 75.115.30.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:37.672896 0.000000 udp 10.0.2.22 51868 -> 115.118.162.35 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:07:38.663944 1.007270 udp 10.0.2.22 51868 <-> 116.72.251.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:39.665617 0.360945 udp 10.0.2.22 51868 <-> 200.175.212.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:40.667140 0.148290 udp 10.0.2.22 51868 <-> 74.55.169.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:41.668521 0.038954 udp 10.0.2.22 51868 <-> 89.215.36.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:42.669612 0.047898 udp 10.0.2.22 51868 <-> 62.113.14.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:43.671526 0.358961 udp 10.0.2.22 51868 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:44.672621 0.085224 udp 10.0.2.22 51868 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:45.663929 0.000000 udp 10.0.2.22 51868 -> 203.115.67.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:07:46.665778 0.310535 udp 10.0.2.22 51868 <-> 49.251.197.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:47.667028 0.138756 udp 10.0.2.22 51868 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:48.668624 0.553759 udp 10.0.2.22 51868 <-> 92.229.124.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:49.670313 0.000000 udp 10.0.2.22 51868 -> 111.240.96.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:07:50.671299 0.212625 udp 10.0.2.22 51868 <-> 72.42.160.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:51.672561 0.000000 udp 10.0.2.22 51868 -> 203.115.67.241 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:07:52.664280 0.000000 udp 10.0.2.22 51868 -> 49.251.197.242 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:07:53.666037 0.000000 udp 10.0.2.22 51868 -> 62.113.14.245 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:07:54.666980 0.358279 udp 10.0.2.22 51868 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:55.668343 0.556868 udp 10.0.2.22 51868 <-> 92.229.124.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:56.670076 2.965580 udp 10.0.2.22 51868 <-> 84.123.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:57.671639 0.521466 udp 10.0.2.22 51868 <-> 2.133.185.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:58.673231 0.399955 udp 10.0.2.22 51868 <-> 111.240.96.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:07:59.664039 0.000000 udp 10.0.2.22 51868 -> 69.247.73.216 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:08:00.666322 0.313576 udp 10.0.2.22 51868 <-> 14.98.240.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:01.547150 0.000114 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:08:01.666966 0.330114 udp 10.0.2.22 51868 <-> 218.216.247.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:02.668587 3.995833 udp 10.0.2.22 51868 -> 202.29.179.25 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:08:03.670053 0.400596 udp 10.0.2.22 51868 <-> 190.247.155.53 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:04.671234 0.375711 udp 10.0.2.22 51868 <-> 5.200.238.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:05.673179 0.000000 udp 10.0.2.22 51868 -> 82.132.101.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:08:07.665963 0.430709 udp 10.0.2.22 51868 <-> 221.80.185.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:08.667158 0.400808 udp 10.0.2.22 51868 <-> 218.226.32.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:09.668523 0.000000 udp 10.0.2.22 51868 -> 202.29.179.25 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:08:10.670354 0.308987 udp 10.0.2.22 51868 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:11.671801 0.174086 udp 10.0.2.22 51868 <-> 24.113.18.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:12.672750 0.000000 udp 10.0.2.22 51868 -> 46.249.179.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:08:13.664887 0.000000 udp 10.0.2.22 51868 -> 24.156.199.153 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:08:14.666289 1.269121 udp 10.0.2.22 51868 <-> 186.92.193.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:15.667533 0.000000 udp 10.0.2.22 51868 -> 92.250.178.152 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:08:16.668761 1.783402 udp 10.0.2.22 51868 <-> 14.97.20.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:17.670056 0.542404 udp 10.0.2.22 51868 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:18.671745 0.000000 udp 10.0.2.22 51868 -> 115.135.134.197 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:08:19.672779 0.137872 udp 10.0.2.22 51868 <-> 24.47.109.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:20.664390 0.175204 udp 10.0.2.22 51868 <-> 65.24.129.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:21.665970 0.145880 udp 10.0.2.22 51868 <-> 69.206.137.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:22.667189 0.306372 udp 10.0.2.22 51868 <-> 190.208.117.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:23.669167 0.279958 udp 10.0.2.22 51868 <-> 181.167.242.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:24.670009 0.162397 udp 10.0.2.22 51868 <-> 120.138.104.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:25.672120 0.000000 udp 10.0.2.22 51868 -> 180.215.92.106 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:08:26.673250 0.224360 udp 10.0.2.22 51868 <-> 103.250.137.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:27.664999 0.037991 udp 10.0.2.22 51868 <-> 95.90.170.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:28.545512 0.000128 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:08:28.666065 0.071741 udp 10.0.2.22 51868 <-> 88.203.26.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:29.667601 0.856312 udp 10.0.2.22 51868 <-> 117.254.14.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:30.669165 0.000000 udp 10.0.2.22 51868 -> 173.25.232.169 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:08:31.670608 0.949800 udp 10.0.2.22 51868 <-> 89.250.204.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:32.671919 1.048007 udp 10.0.2.22 51868 <-> 89.42.88.115 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:34.664369 0.091661 udp 10.0.2.22 51868 <-> 188.2.216.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:35.665786 0.000000 udp 10.0.2.22 51868 -> 46.35.110.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:08:36.667602 0.223207 udp 10.0.2.22 51868 <-> 24.23.11.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:37.669305 0.973528 udp 10.0.2.22 51868 <-> 177.180.213.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:38.670811 0.132396 udp 10.0.2.22 51868 <-> 70.187.76.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:39.671963 0.034035 udp 10.0.2.22 51868 <-> 178.79.32.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:40.673509 0.530272 udp 10.0.2.22 51868 <-> 187.104.29.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:41.664855 0.542064 udp 10.0.2.22 51868 <-> 70.239.90.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:42.666683 0.144567 udp 10.0.2.22 51868 <-> 96.37.228.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:43.667857 0.000000 udp 10.0.2.22 51868 -> 117.230.180.196 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:08:44.668955 0.292415 udp 10.0.2.22 51868 <-> 124.36.145.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:45.670850 0.251360 udp 10.0.2.22 51868 <-> 182.160.7.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:46.672148 0.211930 udp 10.0.2.22 51868 <-> 67.174.109.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:47.673060 2.008316 udp 10.0.2.22 51868 <-> 161.53.118.11 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:48.664845 0.000000 udp 10.0.2.22 51868 -> 174.59.159.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:08:50.667539 0.000000 udp 10.0.2.22 51868 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:08:51.669291 0.067076 udp 10.0.2.22 51868 <-> 95.220.247.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:52.670539 0.149503 udp 10.0.2.22 51868 <-> 96.27.40.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:53.671889 0.506163 udp 10.0.2.22 51868 <-> 92.36.202.144 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:54.673727 0.045916 udp 10.0.2.22 51868 <-> 86.122.80.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:55.545124 0.000120 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:08:55.665122 0.000000 udp 10.0.2.22 51868 -> 125.0.196.146 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:08:56.666053 0.309611 udp 10.0.2.22 51868 <-> 121.171.34.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:57.667874 0.085180 udp 10.0.2.22 51868 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:58.668986 0.065985 udp 10.0.2.22 51868 <-> 86.126.2.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:08:59.671093 0.000000 udp 10.0.2.22 51868 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:09:00.671957 0.000000 udp 10.0.2.22 51868 -> 125.0.196.146 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:09:01.673229 0.201846 udp 10.0.2.22 51868 <-> 2.133.183.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:02.665144 0.181417 udp 10.0.2.22 51868 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:03.666264 0.000000 udp 10.0.2.22 51868 -> 62.194.156.220 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:09:04.667892 0.000000 udp 10.0.2.22 51868 -> 186.124.217.244 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:09:05.668915 0.044507 udp 10.0.2.22 51868 <-> 176.37.230.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:06.671088 3.059295 udp 10.0.2.22 51868 <-> 188.25.121.82 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:07.672033 0.000000 udp 10.0.2.22 51868 -> 190.124.133.66 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:09:08.673732 0.068996 udp 10.0.2.22 51868 <-> 95.107.216.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:10.666831 3.688470 udp 10.0.2.22 51868 <-> 113.193.163.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:11.667565 0.293873 udp 10.0.2.22 51868 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:12.669141 0.151437 udp 10.0.2.22 51868 <-> 98.25.25.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:13.670941 0.411220 udp 10.0.2.22 51868 <-> 188.2.135.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:14.672594 0.042485 udp 10.0.2.22 51868 <-> 195.70.108.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:15.673740 0.137133 udp 10.0.2.22 51868 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:16.664786 0.087799 udp 10.0.2.22 51868 <-> 37.215.59.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:17.666436 1.371450 udp 10.0.2.22 51868 <-> 14.98.146.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:17.848957 3.002404 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 05:09:18.668130 0.140130 udp 10.0.2.22 51868 <-> 1.186.112.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:19.669633 0.000000 udp 10.0.2.22 51868 -> 59.95.137.61 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:09:20.670599 2.081773 udp 10.0.2.22 51868 <-> 58.152.190.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:21.672023 0.758942 udp 10.0.2.22 51868 <-> 98.67.186.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:22.543317 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:09:22.673600 0.000000 udp 10.0.2.22 51868 -> 114.47.109.155 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:09:23.664873 0.291552 udp 10.0.2.22 51868 <-> 190.39.135.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:24.666608 0.000000 udp 10.0.2.22 51868 -> 94.191.227.146 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:09:24.856774 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:09:25.668269 0.141571 udp 10.0.2.22 51868 <-> 203.192.228.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:26.669556 1.090724 udp 10.0.2.22 51868 <-> 89.250.204.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:27.670559 0.146218 udp 10.0.2.22 51868 <-> 96.32.168.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:28.672246 0.545509 udp 10.0.2.22 51868 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:29.673481 0.030329 udp 10.0.2.22 51868 <-> 89.137.97.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:30.665548 2.573713 udp 10.0.2.22 51868 <-> 50.27.216.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:31.666367 0.136558 udp 10.0.2.22 51868 <-> 24.185.176.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:32.667834 0.027184 udp 10.0.2.22 51868 <-> 84.26.131.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:32.858080 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:09:33.669875 0.000000 udp 10.0.2.22 51868 -> 115.241.80.144 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:09:34.670970 3.154190 udp 10.0.2.22 51868 <-> 50.128.173.120 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:35.672561 0.327543 udp 10.0.2.22 51868 <-> 200.146.193.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:36.674066 0.000000 udp 10.0.2.22 51868 -> 71.192.132.121 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:09:38.666665 2.304545 udp 10.0.2.22 51868 <-> 116.193.131.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:39.668343 0.077263 udp 10.0.2.22 51868 <-> 85.84.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:40.669893 0.027735 udp 10.0.2.22 51868 <-> 84.26.131.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:41.671106 0.171877 udp 10.0.2.22 51868 <-> 66.169.204.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:42.672301 0.276019 udp 10.0.2.22 51868 <-> 187.66.17.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:43.674412 1.152085 udp 10.0.2.22 51868 <-> 98.240.160.218 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:45.666860 0.000000 udp 10.0.2.22 51868 -> 95.90.170.142 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:09:46.668521 1.330882 udp 10.0.2.22 51868 <-> 190.72.54.234 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:48.671124 0.451715 udp 10.0.2.22 51868 <-> 1.186.112.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:48.861264 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:09:49.542486 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:09:49.672895 1.910865 udp 10.0.2.22 51868 <-> 189.54.80.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:50.673893 0.054537 udp 10.0.2.22 51868 <-> 78.131.54.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:51.665486 0.064147 udp 10.0.2.22 51868 <-> 141.101.8.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:52.666735 0.164248 udp 10.0.2.22 51868 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:53.668467 0.065045 udp 10.0.2.22 51868 <-> 95.77.141.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:54.669850 0.181708 udp 10.0.2.22 51868 <-> 66.69.203.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:55.670868 0.324347 udp 10.0.2.22 51868 <-> 187.15.59.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:56.672410 0.077921 udp 10.0.2.22 51868 <-> 85.84.1.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:57.663959 0.030550 udp 10.0.2.22 51868 <-> 195.189.250.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:58.665844 2.404528 udp 10.0.2.22 51868 <-> 190.142.240.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:09:59.667013 0.228511 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:10:00.668042 0.221909 udp 10.0.2.22 51868 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:10:01.670105 0.165484 udp 10.0.2.22 51868 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:10:02.671422 0.857899 udp 10.0.2.22 51868 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:10:03.672929 0.298973 udp 10.0.2.22 51868 <-> 181.165.62.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:10:04.664040 0.355299 udp 10.0.2.22 51868 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:10:05.665400 0.000000 udp 10.0.2.22 51868 -> 86.124.224.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:06.667354 0.025786 udp 10.0.2.22 51868 <-> 85.130.45.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:10:07.668585 0.333983 udp 10.0.2.22 51868 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:10:08.669752 0.000000 udp 10.0.2.22 51868 -> 112.119.39.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:09.671333 0.000000 udp 10.0.2.22 51868 -> 37.28.248.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:10.672607 0.270558 udp 10.0.2.22 51868 <-> 179.210.57.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:10:11.663841 2.029868 udp 10.0.2.22 51868 <-> 134.3.82.19 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:10:12.666032 0.063684 udp 10.0.2.22 51868 -> 84.2.240.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:12.729716 0.000000 icmp 84.2.240.11 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 05:10:14.668145 0.000000 udp 10.0.2.22 51868 -> 68.93.156.151 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:15.669998 0.559905 udp 10.0.2.22 51868 <-> 117.195.250.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:10:16.541192 0.000278 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:10:16.671164 0.000000 udp 10.0.2.22 51868 -> 188.24.154.55 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:17.672472 0.000000 udp 10.0.2.22 51868 -> 113.252.237.106 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:18.664156 0.145968 udp 10.0.2.22 51868 <-> 24.209.250.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:10:19.665409 0.034408 udp 10.0.2.22 51868 <-> 89.133.232.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:10:20.666878 0.183205 udp 10.0.2.22 51868 <-> 206.253.49.252 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:10:20.867338 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:10:21.668352 0.155574 udp 10.0.2.22 51868 <-> 68.11.163.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:10:22.669724 0.098534 udp 10.0.2.22 51868 <-> 79.3.85.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:10:23.671965 0.000000 udp 10.0.2.22 51868 -> 60.238.117.126 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:24.673097 0.000000 udp 10.0.2.22 51868 -> 199.188.251.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:25.664115 0.162764 udp 10.0.2.22 51868 <-> 68.57.136.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:10:26.665718 0.000000 udp 10.0.2.22 51868 -> 117.220.18.112 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:27.667491 0.000000 udp 10.0.2.22 51868 -> 83.21.115.57 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:28.668629 0.212035 udp 10.0.2.22 51868 <-> 76.8.103.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:10:29.670307 1.450022 udp 10.0.2.22 51868 <-> 181.165.238.182 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:10:31.673069 0.000045 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:31.673114 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:10:32.664062 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:33.665680 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:34.667326 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:35.668920 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:36.669874 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:37.671386 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:39.664090 0.164947 udp 10.0.2.22 51868 <-> 24.182.200.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:10:40.665906 0.044172 udp 10.0.2.22 51868 <-> 62.177.243.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:10:41.667535 0.049365 udp 10.0.2.22 51868 <-> 88.222.170.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:10:42.668685 0.023189 udp 10.0.2.22 51868 <-> 82.132.101.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:10:43.669882 0.144850 udp 10.0.2.22 51868 <-> 74.90.138.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:10:44.541531 0.000105 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:10:44.671724 0.144990 udp 10.0.2.22 51868 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:10:45.673395 0.172153 udp 10.0.2.22 51868 <-> 174.47.243.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:10:46.664672 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:47.665826 0.136009 udp 10.0.2.22 51868 <-> 24.0.91.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:10:48.667212 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:49.668721 0.000081 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:49.668802 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:10:50.670462 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:51.671775 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:52.673531 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:53.664228 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:54.666208 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:55.667243 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:56.668952 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:57.670414 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:58.671769 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:10:59.673233 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:00.664670 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:02.667611 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:03.668933 0.085829 udp 10.0.2.22 51868 <-> 151.21.8.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:11:04.670424 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:05.671620 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:06.672948 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:07.664366 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:08.666531 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:09.667227 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:10.669015 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:11.540698 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:11:12.672181 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:13.673604 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:14.664638 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:15.666557 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:16.667366 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:17.669294 0.000167 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:17.669461 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:11:18.670296 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:19.672026 0.084247 udp 10.0.2.22 51868 <-> 151.21.8.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:11:20.673355 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:21.664490 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:22.666575 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:24.669130 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:25.670530 0.000076 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:25.670606 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:11:26.672173 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:27.673084 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:28.664779 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:29.666287 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:30.667460 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:31.668883 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:32.670471 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:33.672366 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:34.673860 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:35.665298 0.155466 udp 10.0.2.22 51868 <-> 24.193.20.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:11:36.666164 0.333221 udp 10.0.2.22 51868 <-> 180.146.156.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:11:37.668151 0.000000 udp 10.0.2.22 51868 -> 114.37.112.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:38.539201 0.000102 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:11:38.669117 4.254046 udp 10.0.2.22 51868 <-> 177.224.174.245 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:11:39.670819 0.265932 udp 10.0.2.22 51868 <-> 179.209.89.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:11:40.671928 1.327597 udp 10.0.2.22 51868 <-> 27.6.163.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:11:41.673323 0.354454 udp 10.0.2.22 51868 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:11:42.665277 1.063598 udp 10.0.2.22 51868 <-> 93.80.0.31 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:11:44.667866 0.000000 udp 10.0.2.22 51868 -> 174.47.243.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:45.669529 0.097422 udp 10.0.2.22 51868 <-> 151.21.8.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:11:46.670918 0.471775 udp 10.0.2.22 51868 <-> 183.178.125.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:11:47.672379 0.339232 udp 10.0.2.22 51868 <-> 202.78.81.194 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:11:48.673730 0.296561 udp 10.0.2.22 51868 <-> 27.127.165.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:11:49.665008 0.073795 udp 10.0.2.22 51868 <-> 62.99.108.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:11:50.666789 0.227120 udp 10.0.2.22 51868 <-> 74.220.242.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:11:51.668176 0.124488 udp 10.0.2.22 51868 <-> 173.81.29.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:11:52.669273 0.000000 udp 10.0.2.22 51868 -> 83.5.231.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:53.670778 0.317593 udp 10.0.2.22 51868 <-> 112.169.196.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:11:54.672446 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:55.673933 0.000044 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:55.673977 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:11:57.666665 0.142142 udp 10.0.2.22 51868 <-> 65.185.171.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:11:58.667851 0.000000 udp 10.0.2.22 51868 -> 190.206.94.148 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:11:59.669159 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:12:00.670798 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:12:01.672506 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:12:02.673690 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:12:03.665605 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:12:04.666707 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:12:05.548102 0.000113 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:12:05.668130 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:12:06.669186 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:12:07.670955 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:12:08.672721 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:12:09.673903 0.098238 udp 10.0.2.22 51868 <-> 213.231.17.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:11.666709 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:12:12.667895 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:12:13.669217 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:12:14.670686 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:12:15.672330 0.391594 udp 10.0.2.22 51868 <-> 190.206.94.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:16.673760 0.180354 udp 10.0.2.22 51868 <-> 202.62.87.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:17.665222 0.000000 udp 10.0.2.22 51868 -> 36.229.51.229 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:12:18.666783 0.210943 udp 10.0.2.22 51868 <-> 108.210.184.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:19.668112 0.175045 udp 10.0.2.22 51868 <-> 50.140.79.220 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:20.669584 0.170313 udp 10.0.2.22 51868 <-> 66.69.203.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:21.671026 0.038393 udp 10.0.2.22 51868 <-> 78.128.39.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:22.672406 0.000000 udp 10.0.2.22 51868 -> 31.47.136.150 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:12:23.674285 0.271738 udp 10.0.2.22 51868 <-> 179.235.4.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:24.665312 0.054435 udp 10.0.2.22 51868 <-> 89.230.228.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:25.666826 0.188849 udp 10.0.2.22 51868 <-> 94.205.1.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:26.668374 0.135955 udp 10.0.2.22 51868 <-> 76.116.162.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:27.669928 0.032323 udp 10.0.2.22 51868 <-> 195.189.250.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:28.671140 0.164937 udp 10.0.2.22 51868 <-> 50.140.79.220 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:29.672630 0.328414 udp 10.0.2.22 51868 <-> 122.209.168.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:30.664188 2.174412 udp 10.0.2.22 51868 <-> 72.23.74.216 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:31.665404 1.522314 udp 10.0.2.22 51868 <-> 173.217.236.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:32.546983 0.000144 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:12:33.668086 0.051219 udp 10.0.2.22 51868 <-> 5.14.213.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:34.669903 0.642064 udp 10.0.2.22 51868 <-> 115.242.50.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:35.671061 0.327766 udp 10.0.2.22 51868 <-> 67.172.193.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:36.672560 0.359318 udp 10.0.2.22 51868 <-> 111.249.122.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:37.663922 0.173244 udp 10.0.2.22 51868 <-> 74.161.16.231 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:38.665456 0.031020 udp 10.0.2.22 51868 <-> 87.97.204.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:39.666751 0.309537 udp 10.0.2.22 51868 <-> 153.132.3.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:40.668427 0.277195 udp 10.0.2.22 51868 <-> 117.198.95.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:41.670069 0.000000 udp 10.0.2.22 51868 -> 27.4.137.125 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:12:42.671243 0.255639 udp 10.0.2.22 51868 <-> 77.210.37.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:43.672744 0.159233 udp 10.0.2.22 51868 <-> 70.185.202.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:44.664211 0.080323 udp 10.0.2.22 51868 <-> 82.249.7.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:45.665661 1.221196 udp 10.0.2.22 51868 <-> 181.166.124.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:46.666697 0.368059 udp 10.0.2.22 51868 <-> 124.11.230.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:47.668269 0.488253 udp 10.0.2.22 51868 <-> 111.248.97.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:48.670049 0.152773 udp 10.0.2.22 51868 <-> 27.106.112.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:49.671263 0.154179 udp 10.0.2.22 51868 <-> 74.129.39.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:50.672444 0.053710 udp 10.0.2.22 51868 <-> 78.239.42.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:51.663854 0.126753 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:52.665480 0.136980 udp 10.0.2.22 51868 <-> 67.85.150.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:53.666923 0.373641 udp 10.0.2.22 51868 <-> 111.251.8.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:54.668489 0.211068 udp 10.0.2.22 51868 <-> 117.216.189.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:55.670057 0.051112 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:56.671556 0.188319 udp 10.0.2.22 51868 <-> 173.17.3.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:57.673089 0.155282 udp 10.0.2.22 51868 <-> 68.46.230.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:58.664575 0.325875 udp 10.0.2.22 51868 <-> 61.46.123.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:12:59.545746 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:12:59.665703 0.061813 udp 10.0.2.22 51868 <-> 46.242.0.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:00.667525 0.000000 udp 10.0.2.22 51868 -> 71.93.147.124 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:13:01.668729 0.000000 udp 10.0.2.22 51868 -> 97.88.243.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:13:02.669942 3.329704 udp 10.0.2.22 51868 <-> 142.136.206.4 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:03.671140 0.000000 udp 10.0.2.22 51868 -> 85.185.188.194 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:13:04.672944 0.139380 udp 10.0.2.22 51868 <-> 1.186.125.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:06.665606 0.100297 udp 10.0.2.22 51868 <-> 212.225.185.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:07.667378 2.002365 udp 10.0.2.22 51868 <-> 84.232.15.200 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:08.668796 3.391461 udp 10.0.2.22 51868 <-> 201.160.70.249 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:10.671180 2.994911 udp 10.0.2.22 51868 -> 175.35.78.248 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:13:12.664731 0.102677 udp 10.0.2.22 51868 <-> 89.138.92.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:14.667321 0.226669 udp 10.0.2.22 51868 <-> 84.232.15.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:15.668987 0.000000 udp 10.0.2.22 51868 -> 208.99.142.222 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:13:16.670106 0.368681 udp 10.0.2.22 51868 <-> 166.154.87.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:17.671746 0.655615 udp 10.0.2.22 51868 <-> 24.123.44.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:18.673036 0.153463 udp 10.0.2.22 51868 <-> 24.179.39.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:19.363008 0.000000 udp 10.0.2.22 51868 <- 85.185.188.194 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:13:19.664500 0.082950 udp 10.0.2.22 51868 <-> 85.86.237.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:20.665782 0.110724 udp 10.0.2.22 51868 <-> 79.13.181.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:21.667525 0.189936 udp 10.0.2.22 51868 <-> 79.182.127.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:22.668734 0.121589 udp 10.0.2.22 51868 <-> 77.106.75.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:23.670762 0.168402 udp 10.0.2.22 51868 <-> 173.18.114.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:24.671856 0.072751 udp 10.0.2.22 51868 <-> 94.78.185.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:25.672999 0.184840 udp 10.0.2.22 51868 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:26.544388 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:13:26.664223 4.185414 udp 10.0.2.22 51868 <-> 200.91.50.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:27.666076 0.237700 udp 10.0.2.22 51868 <-> 115.252.37.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:28.667080 0.071420 udp 10.0.2.22 51868 <-> 85.86.151.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:29.669238 0.360633 udp 10.0.2.22 51868 <-> 107.42.209.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:30.670304 0.000000 udp 10.0.2.22 51868 -> 217.211.215.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:13:31.671807 0.000000 udp 10.0.2.22 51868 -> 76.125.64.235 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:13:32.673078 0.153199 udp 10.0.2.22 51868 <-> 24.247.114.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:33.664525 0.000000 udp 10.0.2.22 51868 -> 150.162.192.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:13:34.666303 3.438100 udp 10.0.2.22 51868 <-> 115.240.193.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:35.667120 0.000000 udp 10.0.2.22 51868 -> 158.181.168.138 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:13:36.669282 0.056984 udp 10.0.2.22 51868 <-> 94.156.106.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:37.670014 0.000000 udp 10.0.2.22 51868 -> 183.82.152.227 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:13:38.672151 0.269211 udp 10.0.2.22 51868 <-> 177.100.111.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:39.673235 0.038306 udp 10.0.2.22 51868 <-> 84.197.172.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:40.664691 0.218593 udp 10.0.2.22 51868 <-> 76.170.240.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:41.666223 0.000000 udp 10.0.2.22 51868 -> 173.25.251.171 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:13:42.667263 0.204637 udp 10.0.2.22 51868 <-> 76.91.133.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:43.668686 0.044299 udp 10.0.2.22 51868 <-> 78.96.210.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:44.670688 0.140234 udp 10.0.2.22 51868 <-> 68.199.156.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:45.671774 0.028923 udp 10.0.2.22 51868 <-> 37.49.40.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:46.673563 0.000000 udp 10.0.2.22 51868 -> 81.147.68.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:13:47.664752 0.099676 udp 10.0.2.22 51868 <-> 89.138.92.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:48.666056 0.297602 udp 10.0.2.22 51868 <-> 2.185.247.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:49.667758 0.411466 udp 10.0.2.22 51868 <-> 202.22.222.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:50.669182 0.354579 udp 10.0.2.22 51868 <-> 182.155.52.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:51.670163 0.050134 udp 10.0.2.22 51868 <-> 78.232.24.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:52.672052 0.000000 udp 10.0.2.22 51868 -> 177.103.7.177 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:13:53.543491 0.000125 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:13:53.673490 0.000000 udp 10.0.2.22 51868 -> 93.183.191.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:13:54.664551 0.000000 udp 10.0.2.22 51868 -> 81.147.68.37 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:13:55.666162 0.100290 udp 10.0.2.22 51868 <-> 89.138.92.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:56.667341 0.063205 udp 10.0.2.22 51868 <-> 92.87.69.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:57.669375 1.251694 udp 10.0.2.22 51868 <-> 98.67.228.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:58.670403 0.050549 udp 10.0.2.22 51868 <-> 78.232.24.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:13:59.672179 0.373833 udp 10.0.2.22 51868 <-> 207.190.82.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:00.673531 0.000000 udp 10.0.2.22 51868 -> 190.38.66.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:14:01.665154 0.000000 udp 10.0.2.22 51868 -> 81.147.68.37 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:14:02.666585 0.191124 udp 10.0.2.22 51868 <-> 183.83.168.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:03.667667 0.047760 udp 10.0.2.22 51868 <-> 77.102.200.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:04.669230 2.002706 udp 10.0.2.22 51868 -> 93.67.245.241 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:14:05.670487 0.136237 udp 10.0.2.22 51868 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:07.673557 2.280089 udp 10.0.2.22 51868 <-> 58.9.41.18 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:08.664969 0.051978 udp 10.0.2.22 51868 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:10.667725 0.102009 udp 10.0.2.22 51868 <-> 169.244.248.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:11.669527 0.166270 udp 10.0.2.22 51868 <-> 67.11.253.92 16464 CON 0 0 2 528 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:12.670445 0.232561 udp 10.0.2.22 51868 <-> 190.78.39.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:13.671971 4.997353 udp 10.0.2.22 51868 -> 87.20.151.163 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:14:14.673930 4.535620 udp 10.0.2.22 51868 <-> 24.140.90.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:15.664919 0.293754 udp 10.0.2.22 51868 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:16.666498 0.000000 udp 10.0.2.22 51868 -> 82.137.57.187 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:14:17.668128 0.000000 udp 10.0.2.22 51868 -> 88.156.110.133 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:14:18.753606 0.000000 udp 10.0.2.22 51868 <- 87.20.151.163 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:14:19.670596 0.038917 udp 10.0.2.22 51868 <-> 130.204.143.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:20.541590 0.000120 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:14:20.671913 0.400269 udp 10.0.2.22 51868 <-> 114.45.53.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:21.673667 0.215746 udp 10.0.2.22 51868 <-> 177.226.87.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:22.665291 0.145320 udp 10.0.2.22 51868 <-> 24.44.159.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:23.666402 0.371397 udp 10.0.2.22 51868 <-> 222.166.20.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:24.667915 0.099145 udp 10.0.2.22 51868 <-> 79.36.229.153 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:25.669663 0.369723 udp 10.0.2.22 51868 <-> 212.108.245.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:26.670610 0.000000 udp 10.0.2.22 51868 -> 75.109.202.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:14:27.672590 0.050971 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:28.674031 0.379127 udp 10.0.2.22 51868 <-> 1.172.59.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:29.665283 0.181502 udp 10.0.2.22 51868 <-> 74.196.247.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:30.666885 0.131665 udp 10.0.2.22 51868 <-> 31.22.218.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:31.668254 0.173530 udp 10.0.2.22 51868 <-> 49.207.120.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:32.669626 0.351164 udp 10.0.2.22 51868 <-> 1.36.190.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:33.671086 0.073657 udp 10.0.2.22 51868 <-> 62.99.40.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:34.672631 0.058666 udp 10.0.2.22 51868 <-> 79.173.34.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:35.673967 0.000000 udp 10.0.2.22 51868 -> 179.144.52.44 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:14:36.665567 0.064711 udp 10.0.2.22 51868 <-> 79.115.168.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:37.666858 0.296631 udp 10.0.2.22 51868 <-> 165.132.238.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:38.668412 0.057503 udp 10.0.2.22 51868 <-> 81.202.147.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:39.669291 0.444199 udp 10.0.2.22 51868 <-> 125.4.9.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:40.671306 0.307391 udp 10.0.2.22 51868 <-> 27.142.181.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:41.672414 0.000000 udp 10.0.2.22 51868 -> 46.10.153.78 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:14:42.674179 0.987492 udp 10.0.2.22 51868 <-> 114.48.146.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:43.664897 0.274785 udp 10.0.2.22 51868 <-> 187.39.132.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:44.666671 0.057355 udp 10.0.2.22 51868 <-> 81.190.230.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:45.668485 0.000000 udp 10.0.2.22 51868 -> 79.121.110.96 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:14:46.669629 0.000000 udp 10.0.2.22 51868 -> 189.68.137.88 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:14:47.540690 0.000137 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:14:47.671363 0.329077 udp 10.0.2.22 51868 <-> 114.162.72.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:48.672399 0.322274 udp 10.0.2.22 51868 <-> 116.70.168.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:49.673831 0.157960 udp 10.0.2.22 51868 <-> 75.139.7.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:50.665637 1.174726 udp 10.0.2.22 51868 <-> 69.243.233.159 16464 CON 0 0 4 1616 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:52.668363 0.000000 udp 10.0.2.22 51868 -> 106.194.67.148 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:14:53.669904 0.521578 udp 10.0.2.22 51868 <-> 114.76.142.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:14:54.671304 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:14:55.672608 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:14:56.674073 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:14:57.665014 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:14:58.666923 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:14:59.668611 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:15:00.669880 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:15:01.670772 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:15:02.672693 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:15:03.664220 0.000000 udp 10.0.2.22 51868 -> 75.132.170.75 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:15:04.665453 0.146759 udp 10.0.2.22 51868 <-> 216.36.28.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:05.666957 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:15:06.668739 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:15:07.669665 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:15:08.671574 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:15:09.672858 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:15:10.664033 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:15:11.665130 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:15:12.667076 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:15:13.668480 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:15:14.539829 0.000106 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:15:14.669977 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:15:16.672679 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:15:17.663834 0.000082 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:15:17.663916 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:15:18.666038 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:15:19.666692 0.164970 udp 10.0.2.22 51868 <-> 75.132.170.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:20.668552 0.153978 udp 10.0.2.22 51868 <-> 216.36.28.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:21.669874 0.152574 udp 10.0.2.22 51868 <-> 66.31.49.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:22.671089 0.163023 udp 10.0.2.22 51868 <-> 173.18.163.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:23.672405 0.154535 udp 10.0.2.22 51868 <-> 24.247.114.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:24.664099 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:15:25.665444 0.094256 udp 10.0.2.22 51868 <-> 37.72.21.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:26.667362 0.340518 udp 10.0.2.22 51868 <-> 177.137.187.220 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:27.668316 0.048877 udp 10.0.2.22 51868 <-> 81.190.173.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:28.669608 0.047639 udp 10.0.2.22 51868 <-> 80.56.160.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:29.671378 0.191383 udp 10.0.2.22 51868 <-> 24.139.142.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:30.672504 0.060228 udp 10.0.2.22 51868 <-> 213.167.1.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:31.664031 0.036875 udp 10.0.2.22 51868 <-> 188.254.186.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:32.665668 0.042142 udp 10.0.2.22 51868 <-> 81.162.231.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:33.666976 0.318593 udp 10.0.2.22 51868 <-> 219.115.125.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:34.668273 0.045367 udp 10.0.2.22 51868 <-> 178.150.200.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:35.669985 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:15:36.671319 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:15:37.673173 0.072498 udp 10.0.2.22 51868 <-> 82.19.125.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:38.664137 0.147773 udp 10.0.2.22 51868 <-> 74.55.169.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:39.666109 0.145035 udp 10.0.2.22 51868 <-> 216.106.231.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:40.666875 0.062073 udp 10.0.2.22 51868 <-> 79.116.225.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:41.538373 0.000139 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:15:41.668279 0.495216 udp 10.0.2.22 51868 <-> 60.231.84.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:42.670252 0.028860 udp 10.0.2.22 51868 <-> 85.121.1.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:43.671868 0.077833 udp 10.0.2.22 51868 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:44.673091 0.000000 udp 10.0.2.22 51868 -> 151.52.90.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:15:45.664542 0.129823 udp 10.0.2.22 51868 <-> 158.46.108.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:46.665963 0.340201 udp 10.0.2.22 51868 <-> 42.148.35.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:47.667077 1.032896 udp 10.0.2.22 51868 <-> 72.141.22.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:48.668924 0.203593 udp 10.0.2.22 51868 <-> 98.247.242.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:49.670491 3.693143 udp 10.0.2.22 51868 <-> 177.143.155.110 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:50.671763 2.022153 udp 10.0.2.22 51868 <-> 95.111.109.155 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:53.665698 0.056889 udp 10.0.2.22 51868 <-> 109.104.184.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:54.667140 0.087706 udp 10.0.2.22 51868 <-> 37.19.42.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:55.668834 0.049903 udp 10.0.2.22 51868 <-> 78.60.155.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:56.670684 0.160591 udp 10.0.2.22 51868 <-> 50.90.85.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:15:57.671665 0.000000 udp 10.0.2.22 51868 -> 82.227.89.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:15:58.673532 0.000000 udp 10.0.2.22 51868 -> 60.47.220.165 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:15:59.664585 0.202198 udp 10.0.2.22 51868 <-> 78.58.198.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:00.666148 0.052180 udp 10.0.2.22 51868 <-> 188.25.126.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:01.667316 0.048524 udp 10.0.2.22 51868 <-> 178.254.205.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:02.668697 0.077891 udp 10.0.2.22 51868 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:03.670143 0.056839 udp 10.0.2.22 51868 <-> 83.252.84.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:04.671650 0.051463 udp 10.0.2.22 51868 <-> 81.232.31.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:05.672837 0.192484 udp 10.0.2.22 51868 <-> 50.27.74.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:06.664484 0.078425 udp 10.0.2.22 51868 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:07.666146 0.000000 udp 10.0.2.22 51868 -> 117.200.179.86 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:16:08.547085 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:16:08.667094 1.122983 udp 10.0.2.22 51868 <-> 213.182.120.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:09.668968 0.355299 udp 10.0.2.22 51868 <-> 14.96.64.73 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:10.670356 0.280237 udp 10.0.2.22 51868 <-> 189.39.150.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:11.671653 0.000000 udp 10.0.2.22 51868 -> 198.91.171.183 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:16:12.672919 0.271500 udp 10.0.2.22 51868 <-> 27.251.231.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:13.664348 0.000000 udp 10.0.2.22 51868 -> 188.167.110.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:16:14.665948 0.160433 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:15.667484 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:16:16.668755 0.124183 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:17.670465 0.074586 udp 10.0.2.22 51868 <-> 188.94.82.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:18.672039 0.054929 udp 10.0.2.22 51868 <-> 217.10.134.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:19.673030 0.141435 udp 10.0.2.22 51868 <-> 83.26.168.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:20.664744 0.166763 udp 10.0.2.22 51868 <-> 42.201.183.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:21.666213 0.000000 udp 10.0.2.22 51868 -> 111.243.119.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:16:22.667310 0.415897 udp 10.0.2.22 51868 <-> 211.211.69.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:23.669429 0.054841 udp 10.0.2.22 51868 <-> 78.225.90.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:24.670650 0.000000 udp 10.0.2.22 51868 -> 172.243.34.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:16:24.873580 3.001390 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 05:16:25.671620 0.084755 udp 10.0.2.22 51868 <-> 88.206.21.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:26.673112 0.336005 udp 10.0.2.22 51868 <-> 153.183.74.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:27.665110 0.222844 udp 10.0.2.22 51868 <-> 178.122.72.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:28.666197 0.159828 udp 10.0.2.22 51868 <-> 98.214.56.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:29.667331 0.063964 udp 10.0.2.22 51868 <-> 79.116.226.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:30.668970 0.050259 udp 10.0.2.22 51868 <-> 147.163.93.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:31.670220 1.042373 udp 10.0.2.22 51868 <-> 68.207.92.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:31.881165 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:16:32.672434 0.287584 udp 10.0.2.22 51868 <-> 117.213.222.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:33.673206 0.192961 udp 10.0.2.22 51868 <-> 69.62.15.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:34.665115 0.314414 udp 10.0.2.22 51868 <-> 14.96.60.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:35.546153 0.000120 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:16:35.665957 0.441121 udp 10.0.2.22 51868 <-> 24.68.141.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:36.667822 0.110143 udp 10.0.2.22 51868 <-> 82.61.45.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:37.669284 0.039344 udp 10.0.2.22 51868 <-> 89.65.137.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:38.670451 0.000000 udp 10.0.2.22 51868 -> 36.86.100.163 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:16:39.671680 0.150344 udp 10.0.2.22 51868 <-> 174.109.218.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:39.882197 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:16:40.673694 0.366253 udp 10.0.2.22 51868 <-> 101.141.138.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:41.664874 0.052579 udp 10.0.2.22 51868 <-> 188.231.220.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:42.666745 0.281165 udp 10.0.2.22 51868 <-> 103.250.17.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:43.667688 0.040180 udp 10.0.2.22 51868 <-> 46.10.189.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:44.669618 0.145321 udp 10.0.2.22 51868 <-> 79.235.121.82 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:45.670289 0.365326 udp 10.0.2.22 51868 <-> 187.69.166.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:46.671989 0.000000 udp 10.0.2.22 51868 -> 219.19.32.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:16:47.673595 0.364446 udp 10.0.2.22 51868 <-> 1.175.43.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:48.664755 3.517358 udp 10.0.2.22 51868 <-> 205.164.3.155 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:49.666661 0.274579 udp 10.0.2.22 51868 <-> 190.19.174.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:50.667640 0.175091 udp 10.0.2.22 51868 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:52.671054 0.000000 udp 10.0.2.22 51868 -> 60.231.84.237 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:16:53.672057 0.462894 udp 10.0.2.22 51868 <-> 187.56.212.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:54.673252 0.217627 udp 10.0.2.22 51868 <-> 223.180.119.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:55.665279 0.029142 udp 10.0.2.22 51868 <-> 78.90.170.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:55.885249 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:16:56.666106 0.000000 udp 10.0.2.22 51868 -> 24.44.107.170 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:16:57.667820 0.000000 udp 10.0.2.22 51868 -> 116.202.180.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:16:58.669217 0.298904 udp 10.0.2.22 51868 <-> 58.64.48.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:16:59.670673 0.055165 udp 10.0.2.22 51868 <-> 212.142.84.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:17:00.672332 0.919999 udp 10.0.2.22 51868 <-> 62.196.29.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:17:01.673991 0.125233 udp 10.0.2.22 51868 <-> 216.21.193.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:17:02.544528 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:17:02.665038 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:03.666884 0.095101 udp 10.0.2.22 51868 <-> 37.215.59.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:17:04.667874 4.997088 udp 10.0.2.22 51868 -> 114.25.141.16 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:05.669632 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:06.670874 0.000103 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:06.670977 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:17:07.672226 0.263383 udp 10.0.2.22 51868 <-> 190.195.85.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:17:08.673376 0.000000 udp 10.0.2.22 51868 -> 216.16.119.227 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:10.034809 0.000000 udp 10.0.2.22 51868 <- 114.25.141.16 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:10.667026 0.065296 udp 10.0.2.22 51868 <-> 85.217.232.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:17:11.667817 0.151381 udp 10.0.2.22 51868 <-> 74.57.34.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:17:12.669735 0.088508 udp 10.0.2.22 51868 <-> 85.155.41.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:17:13.670983 0.918329 udp 10.0.2.22 51868 <-> 66.186.166.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:17:14.672547 0.169144 udp 10.0.2.22 51868 <-> 76.188.147.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:17:15.674025 0.154571 udp 10.0.2.22 51868 <-> 96.23.154.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:17:16.665347 0.265229 udp 10.0.2.22 51868 <-> 189.25.78.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:17:17.666590 0.076294 udp 10.0.2.22 51868 <-> 85.86.64.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:17:18.668494 0.299712 udp 10.0.2.22 51868 <-> 42.147.5.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:17:19.669278 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:20.670920 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:21.672073 0.000114 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:21.672187 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:17:22.674050 1.992797 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:23.665182 0.132977 udp 10.0.2.22 51868 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:17:25.668410 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:26.669573 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:27.671366 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:27.891955 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:17:28.672136 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:29.543884 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:17:29.673950 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:30.665764 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:31.667051 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:32.668429 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:33.670033 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:34.671046 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:35.672861 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:36.663903 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:37.665716 0.000073 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:37.665789 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:17:39.668511 0.024573 udp 10.0.2.22 51868 <-> 89.215.186.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:17:40.669391 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:41.671284 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:42.672256 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:43.664084 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:44.665710 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:45.667027 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:46.668131 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:47.669756 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:48.670865 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:49.672369 0.000175 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:49.672544 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:17:51.665868 0.134266 udp 10.0.2.22 51868 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:17:52.667019 0.103740 udp 10.0.2.22 51868 <-> 178.137.200.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:17:53.668542 0.000000 udp 10.0.2.22 51868 -> 188.241.23.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:54.669886 0.000000 udp 10.0.2.22 51868 -> 79.11.180.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:55.671225 4.997057 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:17:56.542845 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:17:56.672849 0.302360 udp 10.0.2.22 51868 <-> 42.147.5.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:17:57.663806 0.000000 udp 10.0.2.22 51868 -> 83.221.86.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:17:58.665247 0.134503 udp 10.0.2.22 51868 <-> 95.59.36.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:17:59.667352 0.074998 udp 10.0.2.22 51868 <-> 85.84.74.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:00.827483 0.000000 udp 10.0.2.22 51868 <- 71.238.72.5 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:18:01.670006 2.286089 udp 10.0.2.22 51868 <-> 69.55.254.108 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:02.671112 0.037872 udp 10.0.2.22 51868 <-> 94.253.202.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:04.664201 0.084950 udp 10.0.2.22 51868 <-> 78.58.198.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:05.665387 0.145172 udp 10.0.2.22 51868 <-> 67.86.90.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:06.667026 0.034007 udp 10.0.2.22 51868 <-> 178.79.32.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:07.668811 0.332287 udp 10.0.2.22 51868 <-> 5.200.228.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:08.670015 0.229298 udp 10.0.2.22 51868 <-> 117.197.209.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:09.671153 0.512475 udp 10.0.2.22 51868 <-> 117.200.93.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:10.673169 0.082176 udp 10.0.2.22 51868 <-> 78.70.192.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:11.663967 0.237802 udp 10.0.2.22 51868 <-> 187.63.102.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:12.665955 0.063104 udp 10.0.2.22 51868 <-> 188.104.226.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:13.667293 0.171410 udp 10.0.2.22 51868 <-> 66.68.188.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:14.668992 0.126613 udp 10.0.2.22 51868 <-> 67.193.95.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:15.669870 1.157917 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:17.673303 0.000000 udp 10.0.2.22 51868 -> 72.2.207.180 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:18:18.664149 0.352194 udp 10.0.2.22 51868 <-> 223.19.124.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:19.665726 0.036561 udp 10.0.2.22 51868 <-> 94.253.202.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:20.667282 0.000000 udp 10.0.2.22 51868 -> 79.7.112.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:18:21.669055 0.000000 udp 10.0.2.22 51868 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:18:22.669772 0.000000 udp 10.0.2.22 51868 -> 111.92.96.70 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:18:23.540981 0.000093 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:18:23.671766 0.060280 udp 10.0.2.22 51868 <-> 84.55.13.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:24.672852 0.224200 udp 10.0.2.22 51868 <-> 190.200.0.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:25.664072 0.077285 udp 10.0.2.22 51868 <-> 85.84.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:26.665725 0.138704 udp 10.0.2.22 51868 <-> 203.192.243.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:27.667407 0.000000 udp 10.0.2.22 51868 -> 188.2.135.85 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:18:28.668520 0.506143 udp 10.0.2.22 51868 <-> 219.109.128.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:29.670221 0.000000 udp 10.0.2.22 51868 -> 85.87.224.89 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:18:30.672000 0.091069 udp 10.0.2.22 51868 <-> 194.123.75.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:31.673503 0.058846 udp 10.0.2.22 51868 <-> 188.173.128.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:32.664507 0.162998 udp 10.0.2.22 51868 <-> 98.212.118.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:33.666081 0.291909 udp 10.0.2.22 51868 <-> 96.22.131.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:34.667593 0.038244 udp 10.0.2.22 51868 <-> 147.143.129.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:35.669017 0.160631 udp 10.0.2.22 51868 <-> 71.89.50.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:36.670013 0.507113 udp 10.0.2.22 51868 <-> 219.109.128.152 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:37.672024 0.011793 udp 10.0.2.22 51868 <-> 212.59.229.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:38.673265 0.796280 udp 10.0.2.22 51868 <-> 91.240.43.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:39.664903 0.142464 udp 10.0.2.22 51868 <-> 68.82.179.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:40.665710 0.000000 udp 10.0.2.22 51868 -> 223.177.19.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:18:41.667103 0.162137 udp 10.0.2.22 51868 <-> 79.6.214.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:42.669168 0.000000 udp 10.0.2.22 51868 -> 201.86.129.167 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:18:43.670389 0.293800 udp 10.0.2.22 51868 <-> 14.99.45.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:44.671752 0.145181 udp 10.0.2.22 51868 <-> 24.209.250.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:45.673218 0.000000 udp 10.0.2.22 51868 -> 68.84.213.147 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:18:46.665033 0.153575 udp 10.0.2.22 51868 <-> 24.236.248.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:47.666257 0.180266 udp 10.0.2.22 51868 <-> 50.73.12.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:48.667391 0.000000 udp 10.0.2.22 51868 -> 114.47.109.155 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:18:49.669011 0.475046 udp 10.0.2.22 51868 <-> 117.200.93.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:50.539868 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:18:50.670707 0.068922 udp 10.0.2.22 51868 <-> 78.57.221.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:51.671909 0.260530 udp 10.0.2.22 51868 <-> 177.192.55.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:52.673171 0.045112 udp 10.0.2.22 51868 <-> 178.117.252.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:53.664391 0.263120 udp 10.0.2.22 51868 <-> 179.210.57.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:54.666623 0.343764 udp 10.0.2.22 51868 <-> 2.187.80.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:55.667230 0.486201 udp 10.0.2.22 51868 <-> 184.91.50.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:56.668995 0.140589 udp 10.0.2.22 51868 <-> 50.169.208.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:57.670566 0.251384 udp 10.0.2.22 51868 <-> 49.249.11.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:18:58.672245 0.000000 udp 10.0.2.22 51868 -> 74.68.63.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:18:59.673479 0.000000 udp 10.0.2.22 51868 -> 98.203.127.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:00.665075 0.169164 udp 10.0.2.22 51868 <-> 74.56.64.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:19:01.666349 0.155175 udp 10.0.2.22 51868 <-> 71.61.202.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:19:02.667287 0.354452 udp 10.0.2.22 51868 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:19:03.669457 0.302557 udp 10.0.2.22 51868 <-> 125.198.237.48 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:19:04.670634 0.000000 udp 10.0.2.22 51868 -> 186.95.110.191 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:05.671794 0.000129 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:05.671923 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:19:06.673142 2.641390 udp 10.0.2.22 51868 <-> 62.248.2.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:19:07.664626 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:08.666120 0.103318 udp 10.0.2.22 51868 <-> 88.247.23.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:19:09.667506 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:10.668915 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:11.670307 0.052449 udp 10.0.2.22 51868 <-> 79.115.141.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:19:12.671827 0.289528 udp 10.0.2.22 51868 <-> 110.134.145.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:19:13.673633 0.416769 udp 10.0.2.22 51868 <-> 184.229.182.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:19:14.664917 0.134470 udp 10.0.2.22 51868 <-> 140.193.57.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:19:15.666420 0.928519 udp 10.0.2.22 51868 <-> 27.58.29.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:19:16.667597 0.447374 udp 10.0.2.22 51868 <-> 58.232.86.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:19:17.539329 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:19:17.669200 0.019329 udp 10.0.2.22 51868 <-> 161.53.202.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:19:18.670669 0.193340 udp 10.0.2.22 51868 <-> 128.218.187.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:19:19.672090 2.050302 udp 10.0.2.22 51868 <-> 88.170.100.48 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:19:20.673279 3.048311 udp 10.0.2.22 51868 <-> 83.141.175.60 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:19:22.666279 0.165925 udp 10.0.2.22 51868 <-> 71.45.74.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:19:24.669610 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:25.671094 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:26.672523 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:27.673887 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:28.665354 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:29.666384 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:30.667781 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:31.669174 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:32.670657 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:33.671981 3.995632 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:34.674009 1.992639 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:35.665143 0.056313 udp 10.0.2.22 51868 <-> 88.170.100.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:19:38.669171 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:39.670734 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:40.672155 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:41.673483 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:42.665144 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:43.666311 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:44.547821 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:19:44.667649 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:45.669410 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:46.670529 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:47.672167 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:48.673494 0.000077 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:48.673571 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:19:49.665007 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:50.666489 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:19:51.668040 0.158381 udp 10.0.2.22 51868 <-> 84.55.13.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:19:52.669371 1.030442 udp 10.0.2.22 51868 <-> 27.5.180.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:19:53.670904 0.211459 udp 10.0.2.22 51868 <-> 98.238.155.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:19:54.672330 0.264045 udp 10.0.2.22 51868 <-> 181.167.199.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:19:55.674041 0.163715 udp 10.0.2.22 51868 <-> 68.103.85.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:19:56.665139 0.061881 udp 10.0.2.22 51868 <-> 83.195.175.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:19:57.666596 0.277736 udp 10.0.2.22 51868 <-> 190.191.235.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:19:58.667788 0.400480 udp 10.0.2.22 51868 <-> 126.86.87.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:19:59.670111 0.049433 udp 10.0.2.22 51868 <-> 88.222.155.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:00.671065 0.000000 udp 10.0.2.22 51868 -> 106.206.252.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:20:01.672783 0.136171 udp 10.0.2.22 51868 <-> 95.59.84.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:02.674088 0.153807 udp 10.0.2.22 51868 <-> 75.115.10.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:03.665795 0.157291 udp 10.0.2.22 51868 <-> 71.64.195.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:04.666454 0.411084 udp 10.0.2.22 51868 <-> 121.166.87.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:05.668093 2.002817 udp 10.0.2.22 51868 -> 98.28.249.251 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:20:06.669768 0.207893 udp 10.0.2.22 51868 <-> 76.169.87.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:08.672931 0.342112 udp 10.0.2.22 51868 <-> 223.19.173.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:09.663910 0.261491 udp 10.0.2.22 51868 <-> 115.242.22.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:10.665130 0.462749 udp 10.0.2.22 51868 <-> 60.228.64.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:11.546984 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:20:11.667085 0.030313 udp 10.0.2.22 51868 <-> 80.98.243.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:12.668650 0.730681 udp 10.0.2.22 51868 <-> 200.127.30.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:13.669413 0.063202 udp 10.0.2.22 51868 <-> 62.43.7.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:14.671276 0.163277 udp 10.0.2.22 51868 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:15.672899 1.400300 udp 10.0.2.22 51868 <-> 66.115.90.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:16.663949 0.416398 udp 10.0.2.22 51868 <-> 61.67.20.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:17.665251 0.000000 udp 10.0.2.22 51868 -> 77.78.239.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:20:18.667060 0.040357 udp 10.0.2.22 51868 <-> 94.21.54.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:19.668411 0.151706 udp 10.0.2.22 51868 <-> 50.121.173.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:20.669894 0.273693 udp 10.0.2.22 51868 <-> 14.97.241.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:21.670945 0.149978 udp 10.0.2.22 51868 <-> 216.123.168.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:22.672892 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:20:23.663809 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:20:24.665293 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:20:25.666823 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:20:26.668777 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:20:27.669991 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:20:28.671367 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:20:29.673134 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:20:30.663782 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:20:31.665479 0.000000 udp 10.0.2.22 51868 -> 151.65.35.184 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:20:32.666990 0.339038 udp 10.0.2.22 51868 <-> 119.24.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:33.668372 0.066599 udp 10.0.2.22 51868 <-> 151.15.164.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:34.669546 0.061160 udp 10.0.2.22 51868 <-> 95.173.34.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:35.671216 0.135560 udp 10.0.2.22 51868 <-> 69.123.17.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:36.672615 0.307409 udp 10.0.2.22 51868 <-> 200.156.104.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:37.664502 0.200442 udp 10.0.2.22 51868 <-> 61.95.250.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:38.545140 0.000093 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:20:38.665685 0.163857 udp 10.0.2.22 51868 <-> 24.249.56.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:39.667092 0.164684 udp 10.0.2.22 51868 <-> 75.132.170.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:40.668820 0.315173 udp 10.0.2.22 51868 <-> 117.217.41.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:41.670126 0.285527 udp 10.0.2.22 51868 <-> 190.151.62.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:42.671557 0.026110 udp 10.0.2.22 51868 <-> 80.219.71.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:43.673120 0.037348 udp 10.0.2.22 51868 <-> 188.254.186.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:44.664565 0.059532 udp 10.0.2.22 51868 <-> 79.116.248.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:45.665525 0.086792 udp 10.0.2.22 51868 <-> 90.233.175.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:46.666884 0.167491 udp 10.0.2.22 51868 <-> 50.11.204.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:47.668532 0.200325 udp 10.0.2.22 51868 <-> 61.95.250.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:48.670338 0.000000 udp 10.0.2.22 51868 -> 213.217.46.100 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:20:49.671612 0.380444 udp 10.0.2.22 51868 <-> 123.110.35.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:50.673240 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:20:51.663970 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:20:52.665430 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:20:53.667253 0.082617 udp 10.0.2.22 51868 <-> 79.36.229.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:54.668436 0.042468 udp 10.0.2.22 51868 <-> 147.156.194.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:55.670159 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:20:56.671194 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:20:57.673063 0.295777 udp 10.0.2.22 51868 <-> 75.197.131.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:20:58.664075 0.000000 udp 10.0.2.22 51868 -> 60.56.154.77 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:20:59.665708 0.317473 udp 10.0.2.22 51868 <-> 180.19.71.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:00.667203 0.060453 udp 10.0.2.22 51868 <-> 95.46.217.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:01.669123 0.000000 udp 10.0.2.22 51868 -> 76.188.182.141 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:21:02.670506 0.148530 udp 10.0.2.22 51868 <-> 173.86.134.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:03.671838 0.200277 udp 10.0.2.22 51868 <-> 61.95.250.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:04.673499 0.138628 udp 10.0.2.22 51868 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:05.544571 0.000110 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:21:05.665381 0.027435 udp 10.0.2.22 51868 <-> 46.108.106.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:06.665865 0.000000 udp 10.0.2.22 51868 -> 101.63.18.74 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:21:07.667017 0.052542 udp 10.0.2.22 51868 <-> 46.55.137.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:08.668693 0.166863 udp 10.0.2.22 51868 <-> 150.201.62.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:09.670392 0.168692 udp 10.0.2.22 51868 <-> 41.33.182.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:10.671311 0.000000 udp 10.0.2.22 51868 -> 178.212.144.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:21:11.673349 0.046808 udp 10.0.2.22 51868 <-> 46.237.92.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:12.664856 0.000000 udp 10.0.2.22 51868 -> 62.18.119.165 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:21:13.665829 0.146679 udp 10.0.2.22 51868 <-> 76.127.185.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:14.667716 0.189095 udp 10.0.2.22 51868 <-> 190.144.82.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:15.668814 0.203639 udp 10.0.2.22 51868 <-> 188.119.78.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:16.669975 0.086959 udp 10.0.2.22 51868 <-> 94.153.61.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:17.671566 0.069204 udp 10.0.2.22 51868 <-> 81.9.181.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:18.673288 0.355844 udp 10.0.2.22 51868 <-> 189.110.71.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:19.664630 0.332436 udp 10.0.2.22 51868 <-> 61.22.141.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:20.666032 0.000000 udp 10.0.2.22 51868 -> 89.142.152.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:21:21.667503 4.997091 udp 10.0.2.22 51868 -> 92.229.124.245 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:21:22.669078 0.000000 udp 10.0.2.22 51868 -> 115.245.98.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:21:23.670334 4.756962 udp 10.0.2.22 51868 <-> 75.187.154.240 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:24.672085 0.000000 udp 10.0.2.22 51868 -> 173.10.166.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:21:25.673087 0.086630 udp 10.0.2.22 51868 <-> 85.84.74.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:27.302602 0.000000 udp 10.0.2.22 51868 <- 92.229.124.245 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:21:28.667269 0.000000 udp 10.0.2.22 51868 -> 212.181.65.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:21:29.668818 0.401074 udp 10.0.2.22 51868 <-> 111.254.125.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:30.670364 0.568893 udp 10.0.2.22 51868 <-> 177.180.213.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:31.672072 0.153378 udp 10.0.2.22 51868 <-> 72.239.167.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:32.543069 0.000109 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:21:32.673412 0.000000 udp 10.0.2.22 51868 -> 89.246.6.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:21:33.664593 0.000000 udp 10.0.2.22 51868 -> 109.54.36.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:21:34.666196 0.000000 udp 10.0.2.22 51868 -> 2.92.4.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:21:35.667248 0.005376 udp 10.0.2.22 51868 <-> 147.229.140.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:36.668769 0.000000 udp 10.0.2.22 51868 -> 103.29.116.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:21:37.670675 0.051904 udp 10.0.2.22 51868 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:38.671992 0.064598 udp 10.0.2.22 51868 <-> 176.101.9.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:39.673542 0.480801 udp 10.0.2.22 51868 <-> 117.214.188.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:40.665151 0.528075 udp 10.0.2.22 51868 <-> 61.224.128.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:41.665883 0.000000 udp 10.0.2.22 51868 -> 67.85.178.216 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:21:42.667888 0.153635 udp 10.0.2.22 51868 <-> 66.190.218.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:43.669452 0.102946 udp 10.0.2.22 51868 <-> 85.65.239.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:44.670809 0.374454 udp 10.0.2.22 51868 <-> 117.213.69.71 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:45.671945 0.349787 udp 10.0.2.22 51868 <-> 190.185.220.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:46.673631 0.148756 udp 10.0.2.22 51868 <-> 49.207.111.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:47.664558 0.062772 udp 10.0.2.22 51868 <-> 85.66.114.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:48.666240 0.000000 udp 10.0.2.22 51868 -> 217.201.26.127 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:21:49.667742 0.029865 udp 10.0.2.22 51868 <-> 84.26.131.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:50.669043 0.342317 udp 10.0.2.22 51868 <-> 223.19.173.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:51.670297 0.000000 udp 10.0.2.22 51868 -> 92.229.124.245 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:21:52.671822 2.080217 udp 10.0.2.22 51868 <-> 151.52.90.249 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:53.673554 0.156327 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:55.666310 0.000000 udp 10.0.2.22 51868 -> 79.27.166.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:21:56.667572 0.519941 udp 10.0.2.22 51868 <-> 190.185.220.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:57.669014 1.420654 udp 10.0.2.22 51868 <-> 201.74.126.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:21:58.670931 0.000000 udp 10.0.2.22 51868 -> 65.49.160.73 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:21:59.541949 0.000116 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:21:59.672020 0.359313 udp 10.0.2.22 51868 <-> 118.130.233.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:00.673574 0.156487 udp 10.0.2.22 51868 <-> 72.239.167.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:01.665320 0.313755 udp 10.0.2.22 51868 <-> 27.141.208.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:02.666624 0.207202 udp 10.0.2.22 51868 <-> 190.26.100.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:03.667901 0.315504 udp 10.0.2.22 51868 <-> 110.134.178.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:04.669072 0.018451 udp 10.0.2.22 51868 <-> 178.200.244.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:05.671016 0.073978 udp 10.0.2.22 51868 <-> 62.99.117.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:06.672092 0.336766 udp 10.0.2.22 51868 <-> 77.52.110.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:07.674078 0.000000 udp 10.0.2.22 51868 -> 218.164.173.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:22:08.665191 0.000000 udp 10.0.2.22 51868 -> 118.169.110.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:22:09.666625 0.074243 udp 10.0.2.22 51868 <-> 79.165.97.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:10.667835 0.000000 udp 10.0.2.22 51868 -> 24.48.118.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:22:11.669117 0.000000 udp 10.0.2.22 51868 -> 64.121.149.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:22:12.670697 0.039593 udp 10.0.2.22 51868 <-> 87.207.149.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:13.672271 0.398166 udp 10.0.2.22 51868 <-> 61.223.150.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:14.673941 0.160202 udp 10.0.2.22 51868 <-> 96.59.16.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:15.664802 0.236332 udp 10.0.2.22 51868 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:16.666605 0.042081 udp 10.0.2.22 51868 <-> 147.156.178.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:17.668302 0.000000 udp 10.0.2.22 51868 -> 135.19.220.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:22:18.669092 0.049814 udp 10.0.2.22 51868 <-> 176.97.51.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:19.670804 0.193217 udp 10.0.2.22 51868 <-> 68.226.220.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:20.672207 0.029111 udp 10.0.2.22 51868 <-> 80.98.243.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:21.673596 0.000000 udp 10.0.2.22 51868 -> 90.45.222.74 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:22:22.665376 0.179145 udp 10.0.2.22 51868 <-> 75.111.219.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:23.666689 0.475394 udp 10.0.2.22 51868 <-> 181.185.0.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:24.667712 0.000000 udp 10.0.2.22 51868 -> 78.70.192.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:22:25.669407 0.143496 udp 10.0.2.22 51868 <-> 66.168.86.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:26.541102 0.000131 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:22:26.671027 0.359680 udp 10.0.2.22 51868 <-> 114.26.249.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:27.672048 0.163423 udp 10.0.2.22 51868 <-> 69.204.114.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:28.674032 0.131952 udp 10.0.2.22 51868 <-> 78.8.74.85 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:29.665382 0.338403 udp 10.0.2.22 51868 <-> 190.134.44.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:30.666930 0.151892 udp 10.0.2.22 51868 <-> 69.125.160.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:31.668229 0.398660 udp 10.0.2.22 51868 <-> 190.172.83.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:32.669510 0.038331 udp 10.0.2.22 51868 <-> 78.128.39.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:33.670736 0.020972 udp 10.0.2.22 51868 <-> 95.222.234.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:34.672655 0.311354 udp 10.0.2.22 51868 <-> 221.117.56.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:35.674179 0.490081 udp 10.0.2.22 51868 <-> 178.239.112.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:35.994606 0.011422 udp 10.0.2.22 60026 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 05:22:36.006365 0.000000 udp 10.0.2.22 60027 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:22:36.665025 0.000000 udp 10.0.2.22 51868 -> 70.67.177.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:22:37.666814 0.345029 udp 10.0.2.22 51868 <-> 115.242.69.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:38.668315 0.080304 udp 10.0.2.22 51868 <-> 77.27.54.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:39.669408 0.338343 udp 10.0.2.22 51868 <-> 223.19.124.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:40.671447 3.995475 udp 10.0.2.22 51868 -> 166.159.168.43 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:22:41.672448 1.993230 udp 10.0.2.22 51868 -> 189.79.248.64 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:22:42.664147 4.141039 udp 10.0.2.22 51868 <-> 95.85.160.40 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:45.668045 3.168413 udp 10.0.2.22 51868 <-> 68.116.158.67 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:47.671069 0.101826 udp 10.0.2.22 51868 <-> 80.86.237.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:49.663794 0.245620 udp 10.0.2.22 51868 <-> 95.85.160.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:50.665707 1.290569 udp 10.0.2.22 51868 <-> 1.11.158.62 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:52.668014 0.166823 udp 10.0.2.22 51868 <-> 68.59.89.183 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:53.539727 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:22:53.669729 0.132677 udp 10.0.2.22 51868 <-> 50.157.214.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:54.671357 1.001374 udp 10.0.2.22 51868 <-> 189.79.248.64 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:55.233734 0.000000 udp 10.0.2.22 51868 <- 166.159.168.43 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:22:56.663766 0.061087 udp 10.0.2.22 51868 <-> 5.12.11.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:57.665441 0.233890 udp 10.0.2.22 51868 <-> 64.250.220.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:22:58.666925 0.000000 udp 10.0.2.22 51868 -> 24.226.112.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:22:59.668567 0.290391 udp 10.0.2.22 51868 <-> 1.11.158.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:00.669803 0.288216 udp 10.0.2.22 51868 <-> 201.95.31.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:01.671040 0.000000 udp 10.0.2.22 51868 -> 61.223.150.97 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:23:02.673081 0.146411 udp 10.0.2.22 51868 <-> 96.23.154.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:03.664318 0.095596 udp 10.0.2.22 51868 <-> 85.228.144.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:04.665334 0.129959 udp 10.0.2.22 51868 <-> 174.66.197.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:05.666762 0.183861 udp 10.0.2.22 51868 <-> 108.167.33.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:06.668517 0.000000 udp 10.0.2.22 51868 -> 201.250.139.133 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:23:07.669806 0.021309 udp 10.0.2.22 51868 <-> 5.158.182.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:08.671110 0.138394 udp 10.0.2.22 51868 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:09.672559 2.994274 udp 10.0.2.22 51868 <-> 175.35.78.248 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:10.664256 0.291989 udp 10.0.2.22 51868 <-> 49.202.66.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:11.665748 0.000000 udp 10.0.2.22 51868 -> 79.13.238.238 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:23:13.668559 1.210448 udp 10.0.2.22 51868 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:14.670196 0.144796 udp 10.0.2.22 51868 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:15.671117 0.290258 udp 10.0.2.22 51868 <-> 186.67.39.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:16.672903 0.334647 udp 10.0.2.22 51868 <-> 190.207.39.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:17.663910 0.051941 udp 10.0.2.22 51868 <-> 46.249.179.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:18.665689 0.000000 udp 10.0.2.22 51868 -> 180.215.148.131 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:23:19.667300 0.038958 udp 10.0.2.22 51868 <-> 77.23.50.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:20.538644 0.000112 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:23:20.668429 0.154678 udp 10.0.2.22 51868 <-> 97.101.194.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:21.669801 0.000120 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:23:21.669921 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:23:22.671716 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:23:23.673302 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:23:24.664364 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:23:25.665838 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:23:26.666994 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:23:27.668492 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:23:28.670070 0.087667 udp 10.0.2.22 51868 <-> 95.238.196.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:29.671590 0.062830 udp 10.0.2.22 51868 <-> 93.114.228.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:30.672615 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:23:31.664062 0.301034 udp 10.0.2.22 51868 <-> 171.96.35.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:31.897325 3.001520 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 05:23:32.665643 0.144203 udp 10.0.2.22 51868 <-> 107.5.46.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:33.667350 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:23:34.668700 4.155346 udp 10.0.2.22 51868 <-> 72.200.63.3 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:35.670095 0.444116 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:36.671489 0.000124 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:23:36.671613 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:23:37.673601 0.000000 udp 10.0.2.22 51868 -> 109.54.36.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:23:38.905159 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:23:39.666276 0.296572 udp 10.0.2.22 51868 <-> 190.191.188.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:40.667259 0.158561 udp 10.0.2.22 51868 <-> 98.226.145.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:41.668645 0.168927 udp 10.0.2.22 51868 <-> 24.200.185.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:42.670444 1.630995 udp 10.0.2.22 51868 <-> 14.96.168.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:43.672011 0.154545 udp 10.0.2.22 51868 <-> 98.213.124.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:44.673435 0.058745 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:45.664206 0.070080 udp 10.0.2.22 51868 <-> 2.228.29.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:46.666171 0.162795 udp 10.0.2.22 51868 <-> 75.67.171.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:46.906170 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:23:47.546955 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:23:47.667721 0.171477 udp 10.0.2.22 51868 <-> 70.81.218.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:48.668584 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:23:49.670279 0.228426 udp 10.0.2.22 51868 <-> 184.167.226.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:50.671549 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:23:51.673149 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:23:52.664509 0.316139 udp 10.0.2.22 51868 <-> 219.121.216.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:53.666052 0.424025 udp 10.0.2.22 51868 <-> 220.80.230.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:54.667952 0.138416 udp 10.0.2.22 51868 <-> 31.23.167.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:55.669130 0.667690 udp 10.0.2.22 51868 <-> 14.98.187.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:56.670273 0.044059 udp 10.0.2.22 51868 <-> 151.237.7.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:57.671556 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:23:58.673041 0.028072 udp 10.0.2.22 51868 <-> 46.238.15.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:23:59.664318 0.158243 udp 10.0.2.22 51868 <-> 67.251.65.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:00.665954 0.045939 udp 10.0.2.22 51868 <-> 94.26.34.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:01.667327 0.000000 udp 10.0.2.22 51868 -> 111.246.219.55 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:24:02.669209 0.351652 udp 10.0.2.22 51868 <-> 112.104.162.224 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:02.909651 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:24:04.672216 0.156263 udp 10.0.2.22 51868 <-> 98.223.254.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:05.673472 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:24:06.664464 0.352465 udp 10.0.2.22 51868 <-> 115.241.222.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:08.667632 1.577489 udp 10.0.2.22 51868 <-> 202.78.236.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:09.668753 0.032760 udp 10.0.2.22 51868 <-> 195.211.10.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:10.670593 0.669312 udp 10.0.2.22 51868 <-> 181.165.62.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:11.672171 0.144309 udp 10.0.2.22 51868 <-> 24.215.121.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:12.673414 0.297076 udp 10.0.2.22 51868 <-> 106.187.65.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:13.665122 0.040573 udp 10.0.2.22 51868 <-> 87.207.149.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:14.546069 0.000102 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:24:14.666020 0.315528 udp 10.0.2.22 51868 <-> 189.47.93.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:15.667524 0.000000 udp 10.0.2.22 51868 -> 115.124.226.38 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:24:16.668874 0.066104 udp 10.0.2.22 51868 <-> 77.81.224.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:17.670698 0.037379 udp 10.0.2.22 51868 <-> 88.129.222.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:18.671620 0.135609 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:19.673830 0.164859 udp 10.0.2.22 51868 <-> 49.205.21.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:20.664923 0.000000 udp 10.0.2.22 51868 -> 80.86.237.121 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:24:21.666075 0.171434 udp 10.0.2.22 51868 <-> 103.250.148.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:22.667431 0.051400 udp 10.0.2.22 51868 <-> 84.62.69.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:23.668832 0.140060 udp 10.0.2.22 51868 <-> 70.60.118.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:24.670506 0.053038 udp 10.0.2.22 51868 <-> 46.55.178.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:25.672134 0.181845 udp 10.0.2.22 51868 <-> 183.82.213.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:26.673435 0.074608 udp 10.0.2.22 51868 <-> 85.85.71.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:27.664574 0.135628 udp 10.0.2.22 51868 <-> 162.17.224.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:28.666633 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:24:29.667671 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:24:30.669140 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:24:31.670710 2.003072 udp 10.0.2.22 51868 <-> 79.118.99.98 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:32.672315 3.995658 udp 10.0.2.22 51868 <-> 79.117.40.95 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:34.665181 0.175651 udp 10.0.2.22 51868 <-> 184.49.10.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:34.915446 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:24:35.666473 0.000000 udp 10.0.2.22 51868 -> 180.215.142.230 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:24:37.669153 0.180526 udp 10.0.2.22 51868 <-> 183.82.213.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:38.671016 0.000000 udp 10.0.2.22 51868 -> 5.12.93.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:24:39.672134 0.168072 udp 10.0.2.22 51868 <-> 75.66.83.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:40.673544 0.034652 udp 10.0.2.22 51868 -> 109.193.34.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:24:40.708196 0.000000 icmp 109.193.34.10 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 05:24:41.544564 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:24:41.665047 0.042315 udp 10.0.2.22 51868 <-> 79.117.40.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:42.666776 0.047085 udp 10.0.2.22 51868 <-> 178.254.244.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:43.667556 0.000000 udp 10.0.2.22 51868 -> 79.118.99.98 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:24:44.669480 4.997091 udp 10.0.2.22 51868 <-> 46.55.178.26 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:45.670552 0.071254 udp 10.0.2.22 51868 <-> 85.85.71.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:46.672532 0.022198 udp 10.0.2.22 51868 <-> 46.5.250.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:47.673903 1.167976 udp 10.0.2.22 51868 <-> 75.66.83.78 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:49.713833 0.000000 udp 10.0.2.22 51868 <- 46.55.178.26 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:24:50.668309 0.285923 udp 10.0.2.22 51868 <-> 181.165.62.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:51.669421 0.072263 udp 10.0.2.22 51868 <-> 85.85.71.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:52.671084 0.000000 udp 10.0.2.22 51868 -> 95.244.159.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:24:53.672240 0.177833 udp 10.0.2.22 51868 <-> 184.49.10.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:54.673413 0.000000 udp 10.0.2.22 51868 -> 180.215.142.230 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:24:55.665396 0.144457 udp 10.0.2.22 51868 <-> 65.188.252.224 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:56.666239 0.252874 udp 10.0.2.22 51868 <-> 182.160.7.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:57.668474 0.000000 udp 10.0.2.22 51868 -> 112.197.226.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:24:58.669141 0.033513 udp 10.0.2.22 51868 <-> 77.23.164.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:24:59.671157 0.047823 udp 10.0.2.22 51868 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:00.672504 0.000000 udp 10.0.2.22 51868 -> 79.151.119.230 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:25:01.673693 0.056433 udp 10.0.2.22 51868 <-> 89.28.48.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:02.665288 0.140596 udp 10.0.2.22 51868 <-> 2.192.119.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:03.666985 0.321705 udp 10.0.2.22 51868 <-> 118.111.60.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:04.667786 1.626442 udp 10.0.2.22 51868 <-> 61.27.135.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:05.455157 0.000000 udp 10.0.2.22 51868 <- 180.215.142.230 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:25:05.669434 0.000000 udp 10.0.2.22 51868 -> 70.189.102.205 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:25:06.670904 1.215151 udp 10.0.2.22 51868 <-> 24.23.11.39 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:08.543391 0.000105 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:25:08.664158 0.000000 udp 10.0.2.22 51868 -> 5.200.214.123 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:25:09.665732 0.029180 udp 10.0.2.22 51868 <-> 85.121.1.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:10.666805 0.049918 udp 10.0.2.22 51868 <-> 178.254.244.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:11.668471 1.660736 udp 10.0.2.22 51868 <-> 201.172.18.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:12.669400 0.049805 udp 10.0.2.22 51868 <-> 212.45.82.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:13.671055 0.039681 udp 10.0.2.22 51868 <-> 147.143.243.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:14.672762 2.058575 udp 10.0.2.22 51868 <-> 81.233.138.112 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:15.664130 0.000000 udp 10.0.2.22 51868 -> 76.171.144.238 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:25:17.667042 0.066682 udp 10.0.2.22 51868 <-> 85.86.71.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:18.668200 4.019556 udp 10.0.2.22 51868 <-> 89.33.186.176 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:19.670020 4.997327 udp 10.0.2.22 51868 -> 116.202.140.224 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:25:20.671554 0.000000 udp 10.0.2.22 51868 -> 5.200.214.123 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:25:21.672429 0.240717 udp 10.0.2.22 51868 <-> 66.130.116.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:23.665132 0.127482 udp 10.0.2.22 51868 <-> 24.204.248.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:25.668423 0.000000 udp 10.0.2.22 51868 -> 202.71.20.56 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:25:26.669918 0.391672 udp 10.0.2.22 51868 <-> 120.75.28.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:27.671555 2.064808 udp 10.0.2.22 51868 <-> 134.249.0.46 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:28.672830 4.996844 udp 10.0.2.22 51868 <-> 212.45.82.45 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:30.665504 4.187295 udp 10.0.2.22 51868 <-> 98.165.26.52 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:31.667065 0.046179 udp 10.0.2.22 51868 <-> 178.254.244.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:32.668253 0.231278 udp 10.0.2.22 51868 <-> 190.36.193.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:33.719863 0.000000 udp 10.0.2.22 51868 <- 212.45.82.45 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:25:35.542090 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:25:35.672732 1.031838 udp 10.0.2.22 51868 <-> 147.143.243.34 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:37.665209 0.284800 udp 10.0.2.22 51868 <-> 27.140.82.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:38.666846 0.043191 udp 10.0.2.22 51868 <-> 178.254.244.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:39.668194 1.001322 udp 10.0.2.22 51868 <-> 98.165.26.52 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:41.671217 0.144513 udp 10.0.2.22 51868 <-> 68.199.44.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:42.672648 0.000000 udp 10.0.2.22 51868 -> 79.118.4.204 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:25:43.664171 0.461009 udp 10.0.2.22 51868 <-> 208.1.38.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:44.665270 1.001934 udp 10.0.2.22 51868 <-> 89.36.248.251 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:46.668567 0.000000 udp 10.0.2.22 51868 -> 181.33.224.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:25:47.670353 0.000000 udp 10.0.2.22 51868 -> 76.85.171.149 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:25:48.671324 0.044767 udp 10.0.2.22 51868 <-> 89.136.139.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:49.672948 0.137910 udp 10.0.2.22 51868 <-> 72.226.92.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:50.664343 0.133334 udp 10.0.2.22 51868 <-> 5.34.126.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:51.665864 0.365252 udp 10.0.2.22 51868 <-> 61.38.0.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:52.667040 0.174928 udp 10.0.2.22 51868 <-> 71.229.16.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:53.668916 0.022380 udp 10.0.2.22 51868 <-> 78.42.190.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:54.669979 0.260528 udp 10.0.2.22 51868 <-> 115.253.72.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:55.671326 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:25:56.672873 0.089779 udp 10.0.2.22 51868 <-> 188.47.231.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:57.664541 0.000000 udp 10.0.2.22 51868 -> 89.143.76.91 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:25:58.665783 0.398133 udp 10.0.2.22 51868 <-> 61.22.169.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:25:59.666867 0.271601 udp 10.0.2.22 51868 <-> 201.210.93.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:00.668871 0.000000 udp 10.0.2.22 51868 -> 27.4.11.61 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:26:01.670401 0.215659 udp 10.0.2.22 51868 <-> 78.8.74.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:02.541074 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:26:02.671440 0.780541 udp 10.0.2.22 51868 <-> 111.92.96.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:03.673227 0.316004 udp 10.0.2.22 51868 <-> 59.93.53.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:04.664580 0.206541 udp 10.0.2.22 51868 <-> 66.237.94.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:05.666053 0.312259 udp 10.0.2.22 51868 <-> 122.209.168.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:06.667504 0.057578 udp 10.0.2.22 51868 <-> 95.65.118.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:07.668832 0.000000 udp 10.0.2.22 51868 -> 68.235.158.113 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:26:08.669949 0.197716 udp 10.0.2.22 51868 <-> 190.141.176.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:09.671254 0.000000 udp 10.0.2.22 51868 -> 75.64.127.51 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:26:10.673509 0.284272 udp 10.0.2.22 51868 <-> 187.37.104.223 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:11.664188 0.000000 udp 10.0.2.22 51868 -> 41.191.121.161 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:26:12.666275 0.067392 udp 10.0.2.22 51868 <-> 82.130.171.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:13.667430 0.000000 udp 10.0.2.22 51868 -> 92.87.69.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:26:14.669138 0.157474 udp 10.0.2.22 51868 <-> 76.16.185.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:15.670563 0.000000 udp 10.0.2.22 51868 -> 69.24.115.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:26:16.671973 0.000000 udp 10.0.2.22 51868 -> 76.71.36.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:26:17.672737 0.000000 udp 10.0.2.22 51868 -> 98.80.235.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:26:18.664315 0.000000 udp 10.0.2.22 51868 -> 80.238.103.77 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:26:19.665578 0.101253 udp 10.0.2.22 51868 <-> 89.138.92.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:20.667592 0.000000 udp 10.0.2.22 51868 -> 220.142.10.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:26:21.668494 0.000000 udp 10.0.2.22 51868 -> 186.14.134.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:26:22.670182 3.550441 udp 10.0.2.22 51868 <-> 31.166.226.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:23.671555 0.000000 udp 10.0.2.22 51868 -> 5.61.147.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:26:24.673482 0.215191 udp 10.0.2.22 51868 <-> 200.82.151.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:25.664399 0.134692 udp 10.0.2.22 51868 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:26.666178 0.075731 udp 10.0.2.22 51868 <-> 85.84.89.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:27.667384 1.826263 udp 10.0.2.22 51868 <-> 113.193.24.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:28.669037 0.410043 udp 10.0.2.22 51868 <-> 201.13.95.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:29.540216 0.000122 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:26:29.670836 0.270830 udp 10.0.2.22 51868 <-> 200.109.206.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:30.671437 0.159428 udp 10.0.2.22 51868 <-> 85.225.6.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:31.673067 0.222356 udp 10.0.2.22 51868 <-> 188.79.24.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:32.664349 0.163908 udp 10.0.2.22 51868 <-> 65.34.172.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:33.666117 0.333804 udp 10.0.2.22 51868 <-> 153.135.216.223 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:34.011048 0.000000 udp 10.0.2.22 51868 <- 69.24.115.33 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:26:34.667183 1.001595 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:36.670478 0.211347 udp 10.0.2.22 51868 <-> 24.2.42.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:37.672064 3.180184 udp 10.0.2.22 51868 <-> 27.58.178.94 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:38.673161 0.076906 udp 10.0.2.22 51868 <-> 83.228.41.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:39.664681 0.000000 udp 10.0.2.22 51868 -> 93.103.231.107 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:26:41.667291 0.167378 udp 10.0.2.22 51868 <-> 183.83.111.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:42.669285 0.153601 udp 10.0.2.22 51868 <-> 98.226.145.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:43.670701 0.000000 udp 10.0.2.22 51868 -> 201.221.100.105 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:26:44.671670 0.158022 udp 10.0.2.22 51868 <-> 76.16.185.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:45.673380 0.000000 udp 10.0.2.22 51868 -> 109.192.35.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:26:46.664904 0.000000 udp 10.0.2.22 51868 -> 78.8.126.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:26:47.666164 0.211256 udp 10.0.2.22 51868 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:48.668066 0.046664 udp 10.0.2.22 51868 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:49.668863 0.236465 udp 10.0.2.22 51868 <-> 187.79.34.127 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:50.670386 0.000000 udp 10.0.2.22 51868 -> 208.88.216.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:26:51.671812 0.223167 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:52.674565 0.163953 udp 10.0.2.22 51868 <-> 124.123.13.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:53.665008 0.378185 udp 10.0.2.22 51868 <-> 200.82.151.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:54.666156 0.047464 udp 10.0.2.22 51868 <-> 31.19.39.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:55.667372 0.273332 udp 10.0.2.22 51868 <-> 189.5.61.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:56.539105 0.000121 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:26:56.669622 0.176147 udp 10.0.2.22 51868 <-> 24.144.18.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:57.670878 0.000000 udp 10.0.2.22 51868 -> 89.250.204.178 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:26:58.671927 0.092357 udp 10.0.2.22 51868 <-> 31.131.86.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:26:59.673240 4.020796 udp 10.0.2.22 51868 <-> 115.240.193.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:00.664553 0.419137 udp 10.0.2.22 51868 <-> 114.136.238.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:01.666029 0.000000 udp 10.0.2.22 51868 -> 199.120.95.133 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:27:02.667959 0.376856 udp 10.0.2.22 51868 <-> 49.48.101.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:03.669494 0.039772 udp 10.0.2.22 51868 <-> 31.19.152.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:04.670926 0.032034 udp 10.0.2.22 51868 <-> 91.65.196.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:05.672103 0.162323 udp 10.0.2.22 51868 <-> 76.188.30.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:06.673192 0.054256 udp 10.0.2.22 51868 <-> 89.137.77.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:07.664628 4.005920 udp 10.0.2.22 51868 <-> 189.121.186.200 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:08.666061 0.158027 udp 10.0.2.22 51868 <-> 68.59.89.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:09.668124 0.000000 udp 10.0.2.22 51868 -> 177.59.233.75 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:27:10.668921 0.190381 udp 10.0.2.22 51868 <-> 183.82.213.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:12.671841 0.142890 udp 10.0.2.22 51868 <-> 98.235.43.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:13.673841 0.377556 udp 10.0.2.22 51868 <-> 123.110.35.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:14.004645 0.000000 udp 10.0.2.22 51868 <- 189.121.186.200 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:27:14.665223 0.492202 udp 10.0.2.22 51868 <-> 201.213.98.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:15.666712 0.143759 udp 10.0.2.22 51868 <-> 74.66.76.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:16.668022 0.195761 udp 10.0.2.22 51868 <-> 71.92.82.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:17.669127 0.300295 udp 10.0.2.22 51868 <-> 27.140.6.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:18.670792 0.373253 udp 10.0.2.22 51868 <-> 223.19.173.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:19.672010 0.429648 udp 10.0.2.22 51868 <-> 175.119.240.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:20.673736 0.043463 udp 10.0.2.22 51868 <-> 178.79.11.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:21.664723 0.128671 udp 10.0.2.22 51868 <-> 174.66.197.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:22.666872 0.144767 udp 10.0.2.22 51868 <-> 64.53.138.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:23.547887 0.000107 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:27:23.667918 0.158418 udp 10.0.2.22 51868 <-> 50.90.85.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:24.669710 0.000000 udp 10.0.2.22 51868 -> 81.37.252.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:27:25.670746 0.086233 udp 10.0.2.22 51868 <-> 37.215.59.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:26.671942 0.000000 udp 10.0.2.22 51868 -> 87.8.31.151 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:27:27.673703 0.410521 udp 10.0.2.22 51868 <-> 175.213.179.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:28.665220 2.049443 udp 10.0.2.22 51868 <-> 109.199.236.29 16464 CON 0 0 6 3676 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:29.666443 0.025949 udp 10.0.2.22 51868 <-> 85.121.1.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:31.669499 0.190020 udp 10.0.2.22 51868 <-> 68.109.145.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:32.671075 0.234679 udp 10.0.2.22 51868 <-> 190.207.61.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:33.672730 3.027232 udp 10.0.2.22 51868 <-> 120.141.112.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:34.673734 0.257481 udp 10.0.2.22 51868 <-> 186.92.2.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:35.664909 0.033355 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:36.666797 0.154462 udp 10.0.2.22 51868 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:37.668106 0.000133 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:27:37.668239 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:27:38.669898 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:27:39.671029 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:27:40.672636 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:27:41.663569 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:27:42.665703 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:27:43.666523 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:27:44.668457 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:27:45.669860 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:27:46.670825 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:27:47.672663 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:27:48.664309 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:27:49.665437 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:27:50.546724 0.000124 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:27:50.666621 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:27:51.667985 0.314149 udp 10.0.2.22 51868 <-> 114.159.192.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:27:52.669307 0.000080 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:27:52.669387 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:27:53.670941 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:27:54.672175 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:27:55.664064 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:27:56.665075 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:27:57.667051 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:27:58.668347 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:27:59.669657 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:00.670829 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:01.672743 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:02.663722 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:04.667138 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:05.667995 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:06.669878 3.995729 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:07.671114 0.392780 udp 10.0.2.22 51868 <-> 14.96.31.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:28:08.672594 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:09.663722 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:11.666964 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:13.670068 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:14.671343 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:15.672780 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:16.663820 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:17.665376 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:18.547174 0.000093 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:28:18.666907 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:19.668205 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:20.670350 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:21.671277 0.000097 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:21.671374 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:28:22.672837 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:23.663871 0.127309 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:28:24.666061 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:25.666843 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:27.670057 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:28.671217 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:29.673239 0.000059 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:29.673298 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:28:30.664173 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:31.665451 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:32.666992 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:33.668683 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:34.670420 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:35.671120 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:36.673186 4.997300 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:37.664681 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:38.665927 0.889878 udp 10.0.2.22 51868 <-> 184.63.214.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:28:39.667179 0.000043 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:39.667222 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:28:40.668333 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:42.671831 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:43.673111 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:44.664259 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:45.545845 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:28:45.665764 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:46.667260 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:47.668700 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:48.670198 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:49.671862 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:50.673212 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:51.664736 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:53.667002 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:54.669122 0.000000 udp 10.0.2.22 51868 -> 116.73.207.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:55.670387 1.762554 udp 10.0.2.22 51868 <-> 184.63.214.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:28:56.672124 0.000000 udp 10.0.2.22 51868 -> 67.193.64.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:57.672797 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:58.664249 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:28:59.665922 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:29:00.667417 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:29:01.668966 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:29:02.670755 0.123558 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:03.671439 0.000000 udp 10.0.2.22 51868 -> 78.128.125.130 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:29:04.673579 0.000000 udp 10.0.2.22 51868 -> 98.217.103.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:29:05.664567 0.196014 udp 10.0.2.22 51868 <-> 66.173.32.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:06.666156 0.226712 udp 10.0.2.22 51868 <-> 117.200.173.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:07.667239 0.144299 udp 10.0.2.22 51868 <-> 64.53.138.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:08.669108 0.028461 udp 10.0.2.22 51868 <-> 95.111.72.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:09.670557 0.166908 udp 10.0.2.22 51868 -> 66.231.32.51 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:29:09.837465 0.000000 icmp 66.231.32.51 0x0303 -> 10.0.2.22 0x5040 URP 192 1 70 flow=Background 1970/01/01 05:29:10.671814 1.244998 udp 10.0.2.22 51868 <-> 79.36.252.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:11.673136 0.049441 udp 10.0.2.22 51868 <-> 147.163.93.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:12.544507 0.000101 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:29:12.664569 0.023343 udp 10.0.2.22 51868 <-> 5.146.110.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:13.666449 0.158489 udp 10.0.2.22 51868 <-> 82.48.76.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:14.667638 0.149160 udp 10.0.2.22 51868 <-> 208.53.224.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:15.669311 0.154110 udp 10.0.2.22 51868 <-> 24.112.203.78 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:16.670781 0.072882 udp 10.0.2.22 51868 <-> 46.185.23.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:17.672026 0.000000 udp 10.0.2.22 51868 -> 86.126.0.125 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:29:18.673510 0.163046 udp 10.0.2.22 51868 <-> 49.205.62.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:19.664665 0.383202 udp 10.0.2.22 51868 <-> 190.206.235.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:20.666421 0.041781 udp 10.0.2.22 51868 <-> 188.25.221.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:21.667690 0.140344 udp 10.0.2.22 51868 <-> 209.203.200.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:22.669025 0.169515 udp 10.0.2.22 51868 <-> 72.252.170.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:23.670842 0.000000 udp 10.0.2.22 51868 -> 139.0.190.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:29:24.672350 0.162456 udp 10.0.2.22 51868 <-> 49.204.144.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:25.673424 0.000000 udp 10.0.2.22 51868 -> 93.183.191.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:29:26.665280 0.174557 udp 10.0.2.22 51868 <-> 66.190.120.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:27.666844 1.627112 udp 10.0.2.22 51868 <-> 24.68.141.101 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:28.667954 0.120816 udp 10.0.2.22 51868 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:29.669726 0.142546 udp 10.0.2.22 51868 <-> 69.115.199.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:30.670488 0.329764 udp 10.0.2.22 51868 <-> 124.84.53.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:31.672167 0.169968 udp 10.0.2.22 51868 <-> 68.51.132.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:32.673891 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:29:33.665232 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:29:34.666170 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:29:35.667754 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:29:36.669423 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:29:38.672200 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:29:39.543034 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:29:39.673717 0.000000 udp 10.0.2.22 51868 -> 142.136.206.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:29:40.664770 0.000044 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:29:40.664814 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:29:41.666066 2.282546 udp 10.0.2.22 51868 <-> 76.109.136.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:42.667589 0.000000 udp 10.0.2.22 51868 -> 190.203.106.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:29:44.670833 0.045300 udp 10.0.2.22 51868 <-> 5.13.94.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:45.671806 0.359997 udp 10.0.2.22 51868 <-> 109.186.128.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:46.673506 0.305283 udp 10.0.2.22 51868 <-> 165.132.238.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:47.665340 0.000000 udp 10.0.2.22 51868 -> 91.158.13.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:29:48.726686 0.485421 udp 10.0.2.22 51868 <-> 92.229.124.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:49.727819 0.344765 udp 10.0.2.22 51868 <-> 123.192.49.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:50.729205 0.157928 udp 10.0.2.22 51868 <-> 66.72.190.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:51.731172 0.384530 udp 10.0.2.22 51868 <-> 125.224.37.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:52.732197 0.231495 udp 10.0.2.22 51868 <-> 184.167.226.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:53.733423 1.146920 udp 10.0.2.22 51868 <-> 24.59.225.47 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:55.726540 1.629388 udp 10.0.2.22 51868 <-> 68.102.125.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:57.429118 0.793289 udp 10.0.2.22 51868 <-> 99.196.156.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:58.430757 0.047902 udp 10.0.2.22 51868 <-> 178.19.29.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:29:59.431695 0.159843 udp 10.0.2.22 51868 <-> 68.54.122.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:00.433619 0.319595 udp 10.0.2.22 51868 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:01.435025 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:30:02.426522 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:30:03.427904 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:30:04.429328 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:30:05.430998 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:30:06.432256 0.095571 udp 10.0.2.22 51868 <-> 78.242.194.110 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:07.303182 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:30:07.433059 0.548991 udp 10.0.2.22 51868 <-> 14.97.3.20 16464 CON 0 0 5 3618 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:08.435086 0.156111 udp 10.0.2.22 51868 <-> 96.20.190.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:09.426141 0.052773 udp 10.0.2.22 51868 <-> 87.246.35.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:10.428088 0.410445 udp 10.0.2.22 51868 <-> 211.206.235.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:11.429529 0.357432 udp 10.0.2.22 51868 <-> 175.181.110.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:12.430484 0.327648 udp 10.0.2.22 51868 <-> 110.134.54.73 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:13.432077 0.032255 udp 10.0.2.22 51868 <-> 195.189.250.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:14.433682 0.105056 udp 10.0.2.22 51868 <-> 87.14.65.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:15.424776 0.000000 udp 10.0.2.22 51868 -> 165.132.238.33 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:30:16.426468 0.000000 udp 10.0.2.22 51868 -> 92.87.69.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:30:17.428143 0.314251 udp 10.0.2.22 51868 <-> 124.36.145.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:18.428887 0.218647 udp 10.0.2.22 51868 <-> 78.134.49.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:19.430833 0.164908 udp 10.0.2.22 51868 <-> 183.83.168.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:20.431925 0.164302 udp 10.0.2.22 51868 <-> 24.249.56.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:21.433595 0.000000 udp 10.0.2.22 51868 -> 108.132.224.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:30:22.425277 0.949144 udp 10.0.2.22 51868 <-> 49.213.47.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:23.426798 0.000000 udp 10.0.2.22 51868 -> 111.242.160.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:30:24.427696 0.470557 udp 10.0.2.22 51868 <-> 27.3.107.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:25.429359 0.160264 udp 10.0.2.22 51868 <-> 98.240.160.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:26.430501 0.060316 udp 10.0.2.22 51868 <-> 151.15.58.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:27.432541 0.121059 udp 10.0.2.22 51868 <-> 5.43.104.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:28.433823 0.000000 udp 10.0.2.22 51868 -> 178.125.93.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:30:29.425247 0.060535 udp 10.0.2.22 51868 <-> 79.116.225.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:30.426220 0.193548 udp 10.0.2.22 51868 <-> 24.59.225.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:31.428203 0.046530 udp 10.0.2.22 51868 <-> 95.158.97.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:32.429033 0.204042 udp 10.0.2.22 51868 <-> 190.218.20.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:33.431035 0.049418 udp 10.0.2.22 51868 <-> 88.222.156.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:34.302400 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:30:34.432287 1.992856 udp 10.0.2.22 51868 -> 222.165.6.9 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:30:35.433908 0.225286 udp 10.0.2.22 51868 <-> 96.31.197.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:37.426838 0.000000 udp 10.0.2.22 51868 -> 114.143.57.175 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:30:38.428263 0.032781 udp 10.0.2.22 51868 <-> 151.100.96.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:39.429391 0.000000 udp 10.0.2.22 51868 -> 14.96.46.212 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:30:39.683254 3.000877 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 05:30:40.430633 0.431745 udp 10.0.2.22 51868 <-> 190.51.63.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:41.432074 0.176019 udp 10.0.2.22 51868 <-> 166.230.66.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:42.434178 0.417518 udp 10.0.2.22 51868 <-> 218.166.213.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:43.425070 0.076598 udp 10.0.2.22 51868 <-> 81.233.138.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:44.426264 1.100559 udp 10.0.2.22 51868 <-> 176.240.148.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:45.427860 0.449950 udp 10.0.2.22 51868 <-> 31.11.182.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:46.429632 0.090072 udp 10.0.2.22 51868 <-> 62.106.23.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:46.690154 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:30:47.431174 0.399083 udp 10.0.2.22 51868 <-> 201.209.178.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:49.433912 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:30:50.425050 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:30:51.426440 2.067633 udp 10.0.2.22 51868 <-> 82.238.239.57 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:52.428464 0.152051 udp 10.0.2.22 51868 <-> 71.203.98.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:54.430626 0.031515 udp 10.0.2.22 51868 <-> 89.16.139.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:54.691868 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:30:55.432410 0.409683 udp 10.0.2.22 51868 <-> 49.156.243.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:56.433906 0.197452 udp 10.0.2.22 51868 <-> 71.93.103.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:30:57.425630 0.000000 udp 10.0.2.22 51868 -> 117.221.0.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:30:58.426960 0.000000 udp 10.0.2.22 51868 -> 113.254.247.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:30:59.427839 0.245134 udp 10.0.2.22 51868 <-> 190.254.197.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:00.429569 0.093566 udp 10.0.2.22 51868 -> 79.148.234.50 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:31:00.523135 0.000000 icmp 79.148.234.50 0x0303 -> 10.0.2.22 0x5040 URP 192 1 70 flow=Background 1970/01/01 05:31:01.300698 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:31:01.431131 0.358654 udp 10.0.2.22 51868 <-> 187.67.29.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:02.432273 0.061370 udp 10.0.2.22 51868 <-> 150.214.24.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:03.433812 0.150028 udp 10.0.2.22 51868 <-> 50.148.31.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:04.425566 0.461927 udp 10.0.2.22 51868 <-> 218.166.213.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:05.426661 0.000000 udp 10.0.2.22 51868 -> 91.15.138.45 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:31:06.428600 0.335610 udp 10.0.2.22 51868 <-> 182.225.0.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:07.429802 0.117416 udp 10.0.2.22 51868 <-> 24.36.65.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:08.431156 0.158277 udp 10.0.2.22 51868 <-> 108.176.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:09.432362 1.776611 udp 10.0.2.22 51868 <-> 190.203.106.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:10.434260 0.354867 udp 10.0.2.22 51868 <-> 219.78.101.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:10.694453 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:31:11.425589 1.859727 udp 10.0.2.22 51868 <-> 188.110.102.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:12.426960 0.152809 udp 10.0.2.22 51868 <-> 24.59.225.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:13.428329 0.000000 udp 10.0.2.22 51868 -> 2.177.249.115 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:31:14.429964 3.058033 udp 10.0.2.22 51868 <-> 213.214.69.42 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:15.430841 0.000000 udp 10.0.2.22 51868 -> 177.39.62.54 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:31:16.432818 0.034103 udp 10.0.2.22 51868 <-> 85.186.104.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:18.425190 0.097179 udp 10.0.2.22 51868 <-> 82.242.39.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:19.427207 4.154400 udp 10.0.2.22 51868 <-> 66.130.116.74 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:20.428564 0.269137 udp 10.0.2.22 51868 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:22.431184 0.106683 udp 10.0.2.22 51868 <-> 89.216.39.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:24.434334 0.168583 udp 10.0.2.22 51868 <-> 72.23.77.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:25.425813 0.136338 udp 10.0.2.22 51868 <-> 76.11.100.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:26.427120 0.230970 udp 10.0.2.22 51868 <-> 70.226.198.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:27.428724 0.313577 udp 10.0.2.22 51868 <-> 182.155.52.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:28.299362 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:31:28.430227 0.000000 udp 10.0.2.22 51868 -> 83.83.126.95 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:31:29.431504 0.045681 udp 10.0.2.22 51868 <-> 178.148.77.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:30.432547 0.324426 udp 10.0.2.22 51868 <-> 118.108.87.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:31.434232 0.030808 udp 10.0.2.22 51868 <-> 89.16.139.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:32.425366 2.405872 udp 10.0.2.22 51868 <-> 195.174.102.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:33.427061 0.174807 udp 10.0.2.22 51868 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:34.428144 0.000000 udp 10.0.2.22 51868 -> 14.96.108.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:31:35.430342 0.000000 udp 10.0.2.22 51868 -> 69.63.231.53 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:31:36.431093 0.345833 udp 10.0.2.22 51868 <-> 64.234.32.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:37.432471 0.143190 udp 10.0.2.22 51868 <-> 66.168.86.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:38.434156 0.000000 udp 10.0.2.22 51868 -> 177.173.17.111 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:31:39.425594 0.377384 udp 10.0.2.22 51868 <-> 111.253.65.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:40.426788 0.140830 udp 10.0.2.22 51868 <-> 216.36.152.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:41.428599 0.241399 udp 10.0.2.22 51868 <-> 24.149.57.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:42.429653 0.209243 udp 10.0.2.22 51868 <-> 64.234.32.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:42.700193 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:31:43.431646 0.310743 udp 10.0.2.22 51868 <-> 150.162.192.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:44.432992 0.914681 udp 10.0.2.22 51868 <-> 74.77.183.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:45.434284 0.097580 udp 10.0.2.22 51868 <-> 82.130.204.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:46.425792 1.604826 udp 10.0.2.22 51868 <-> 179.224.85.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:47.426916 0.170212 udp 10.0.2.22 51868 <-> 173.197.240.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:48.428736 0.403754 udp 10.0.2.22 51868 <-> 126.60.193.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:49.429717 0.000000 udp 10.0.2.22 51868 -> 117.212.54.140 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:31:50.431505 0.452674 udp 10.0.2.22 51868 <-> 1.22.199.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:51.432681 0.266792 udp 10.0.2.22 51868 <-> 181.165.212.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:52.434423 1.121137 udp 10.0.2.22 51868 <-> 75.109.75.198 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:54.427252 0.000076 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:31:54.427328 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:31:55.308333 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:31:55.428922 0.057007 udp 10.0.2.22 51868 <-> 84.32.149.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:56.430473 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:31:57.431849 0.173302 udp 10.0.2.22 51868 <-> 173.198.147.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:58.433081 0.059295 udp 10.0.2.22 51868 <-> 94.253.254.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:31:59.434539 0.032275 udp 10.0.2.22 51868 <-> 89.215.228.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:32:00.426246 0.197797 udp 10.0.2.22 51868 <-> 81.180.18.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:32:01.427679 0.036771 udp 10.0.2.22 51868 <-> 178.79.32.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:32:02.428405 0.359720 udp 10.0.2.22 51868 <-> 180.176.70.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:32:03.430332 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:04.431895 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:05.433482 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:06.434938 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:07.426302 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:08.427285 0.038702 udp 10.0.2.22 51868 <-> 89.71.3.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:32:09.428665 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:10.429942 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:11.431396 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:12.433192 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:13.434844 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:14.426014 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:15.427322 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:16.428520 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:17.430597 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:18.431437 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:19.433024 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:20.434978 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:21.426563 0.000089 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:21.426652 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:32:22.306968 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:32:22.427619 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:24.430731 0.037689 udp 10.0.2.22 51868 <-> 89.71.3.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:32:25.432138 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:26.433422 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:27.434451 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:28.426265 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:29.427646 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:30.429212 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:31.430593 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:32.431656 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:33.432959 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:34.435187 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:35.426050 0.000107 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:35.426157 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:32:36.427539 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:38.430534 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:39.431979 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:40.433765 0.341985 udp 10.0.2.22 51868 <-> 111.249.165.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:32:41.434695 0.261804 udp 10.0.2.22 51868 <-> 186.89.74.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:32:42.426556 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:43.427553 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:44.429227 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:45.430482 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:46.432140 0.000062 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:46.432202 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:32:47.433712 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:48.425155 0.112744 udp 10.0.2.22 51868 <-> 95.75.23.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:32:49.306480 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:32:49.426359 0.000000 udp 10.0.2.22 51868 -> 186.88.103.177 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:50.428060 0.082439 udp 10.0.2.22 51868 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:32:51.429231 0.175295 udp 10.0.2.22 51868 <-> 76.107.65.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:32:52.430999 0.093471 udp 10.0.2.22 51868 <-> 41.33.182.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:32:53.432112 0.043841 udp 10.0.2.22 51868 <-> 91.187.79.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:32:54.433365 0.122707 udp 10.0.2.22 51868 <-> 70.188.21.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:32:56.426747 0.000000 udp 10.0.2.22 51868 -> 186.92.164.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:57.428048 0.265424 udp 10.0.2.22 51868 <-> 190.246.10.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:32:58.429215 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:32:59.430823 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:33:00.431976 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:33:01.434006 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:33:03.426430 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:33:04.427819 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:33:05.429045 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:33:06.430778 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:33:07.432452 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:33:08.433512 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:33:09.425090 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:33:10.426266 0.000093 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:33:10.426359 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:33:11.428307 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:33:12.429250 4.404285 udp 10.0.2.22 51868 <-> 186.92.164.37 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:13.430527 0.233298 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:14.431949 0.172059 udp 10.0.2.22 51868 <-> 178.79.11.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:15.433378 0.050421 udp 10.0.2.22 51868 <-> 46.253.3.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:16.305024 0.000120 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:33:17.426769 0.163702 udp 10.0.2.22 51868 <-> 49.205.17.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:18.427818 0.154245 udp 10.0.2.22 51868 <-> 71.80.71.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:19.429178 0.159495 udp 10.0.2.22 51868 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:20.430948 0.798624 udp 10.0.2.22 51868 <-> 184.21.195.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:21.432736 0.000000 udp 10.0.2.22 51868 -> 80.38.116.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:33:22.433711 0.268263 udp 10.0.2.22 51868 <-> 179.223.104.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:23.425428 0.396257 udp 10.0.2.22 51868 <-> 61.223.208.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:24.427002 0.046689 udp 10.0.2.22 51868 <-> 95.87.201.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:25.428234 2.003030 udp 10.0.2.22 51868 <-> 87.120.215.67 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:26.429167 0.262604 udp 10.0.2.22 51868 <-> 179.210.57.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:28.432613 0.000000 udp 10.0.2.22 51868 -> 114.37.112.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:33:29.433613 0.431921 udp 10.0.2.22 51868 <-> 220.60.160.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:30.425251 0.151216 udp 10.0.2.22 51868 <-> 74.135.11.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:31.426750 0.246973 udp 10.0.2.22 51868 <-> 177.226.26.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:32.428295 0.141095 udp 10.0.2.22 51868 <-> 24.193.20.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:33.429279 0.181213 udp 10.0.2.22 51868 <-> 49.205.152.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:34.431075 0.215453 udp 10.0.2.22 51868 <-> 96.2.150.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:35.432429 0.403396 udp 10.0.2.22 51868 <-> 124.47.100.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:36.434236 0.182477 udp 10.0.2.22 51868 <-> 72.197.28.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:37.425686 0.804156 udp 10.0.2.22 51868 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:38.426670 0.532801 udp 10.0.2.22 51868 <-> 85.179.124.254 16464 CON 0 0 6 4508 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:39.428291 0.021977 udp 10.0.2.22 51868 <-> 83.84.241.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:40.429559 1.274495 udp 10.0.2.22 51868 <-> 180.215.132.198 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:41.431375 0.298439 udp 10.0.2.22 51868 <-> 189.103.84.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:42.432281 0.330546 udp 10.0.2.22 51868 <-> 220.156.8.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:43.304013 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:33:43.434029 0.000000 udp 10.0.2.22 51868 -> 211.208.134.174 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:33:44.425613 0.052039 udp 10.0.2.22 51868 <-> 89.229.90.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:45.426880 0.141232 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:46.428368 0.153106 udp 10.0.2.22 51868 <-> 216.186.178.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:47.429652 1.294542 udp 10.0.2.22 51868 <-> 180.215.93.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:48.431418 0.059038 udp 10.0.2.22 51868 <-> 85.224.154.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:49.432920 0.414577 udp 10.0.2.22 51868 <-> 1.168.39.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:50.433693 0.151103 udp 10.0.2.22 51868 <-> 98.226.172.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:51.425241 0.182841 udp 10.0.2.22 51868 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:52.426612 1.416004 udp 10.0.2.22 51868 <-> 190.198.147.65 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:54.430034 0.000000 udp 10.0.2.22 51868 -> 147.32.83.216 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:33:55.431097 0.055789 udp 10.0.2.22 51868 <-> 188.27.165.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:56.432691 0.168142 udp 10.0.2.22 51868 <-> 74.67.189.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:57.434412 0.150487 udp 10.0.2.22 51868 <-> 75.76.12.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:58.425270 1.158378 udp 10.0.2.22 51868 <-> 74.196.247.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:33:59.427104 0.000000 udp 10.0.2.22 51868 -> 113.193.164.96 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:34:00.428177 0.000000 udp 10.0.2.22 51868 -> 31.147.129.54 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:34:01.429503 0.000000 udp 10.0.2.22 51868 -> 14.97.213.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:34:02.431173 0.576028 udp 10.0.2.22 51868 <-> 189.39.150.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:03.432678 0.074359 udp 10.0.2.22 51868 <-> 109.197.98.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:04.434323 0.194500 udp 10.0.2.22 51868 <-> 5.158.63.46 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:05.425281 0.318754 udp 10.0.2.22 51868 <-> 180.220.170.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:06.426784 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:34:07.428378 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:34:08.430420 0.416913 udp 10.0.2.22 51868 <-> 180.70.39.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:09.431237 2.575986 udp 10.0.2.22 51868 <-> 203.218.113.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:10.302437 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:34:10.432951 0.000000 udp 10.0.2.22 51868 -> 82.63.210.61 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:34:10.674155 0.000000 udp 10.0.2.22 51868 <- 113.193.164.96 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:34:11.434395 0.163119 udp 10.0.2.22 51868 <-> 49.204.144.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:12.425992 4.333470 udp 10.0.2.22 51868 <-> 182.155.52.71 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:13.427165 0.056241 udp 10.0.2.22 51868 <-> 91.211.110.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:14.428842 0.165221 udp 10.0.2.22 51868 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:15.429868 0.233141 udp 10.0.2.22 51868 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:17.432988 1.936183 udp 10.0.2.22 51868 <-> 74.235.137.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:18.434236 0.340701 udp 10.0.2.22 51868 <-> 124.218.17.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:19.425580 0.054339 udp 10.0.2.22 51868 <-> 78.131.54.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:20.427308 0.135400 udp 10.0.2.22 51868 <-> 68.84.110.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:21.428682 0.000000 udp 10.0.2.22 51868 -> 14.97.20.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:34:22.430164 0.045143 udp 10.0.2.22 51868 <-> 5.12.93.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:23.431290 0.214130 udp 10.0.2.22 51868 <-> 69.247.73.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:24.432893 0.088208 udp 10.0.2.22 51868 <-> 151.70.121.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:25.434599 0.312491 udp 10.0.2.22 51868 <-> 114.162.153.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:26.426090 0.080358 udp 10.0.2.22 51868 <-> 77.21.244.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:27.427468 0.391409 udp 10.0.2.22 51868 <-> 121.200.180.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:28.428749 0.175348 udp 10.0.2.22 51868 <-> 76.84.156.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:29.430214 0.302273 udp 10.0.2.22 51868 <-> 219.114.23.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:30.431240 0.405606 udp 10.0.2.22 51868 <-> 175.198.68.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:31.433011 0.000000 udp 10.0.2.22 51868 -> 5.15.167.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:34:32.434532 0.000000 udp 10.0.2.22 51868 -> 70.94.206.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:34:33.425951 0.000000 udp 10.0.2.22 51868 -> 173.180.203.114 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:34:34.427652 0.129310 udp 10.0.2.22 51868 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:35.428609 0.053968 udp 10.0.2.22 51868 <-> 83.250.76.130 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:36.430059 0.311979 udp 10.0.2.22 51868 <-> 62.87.129.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:37.301904 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:34:37.431641 0.138175 udp 10.0.2.22 51868 <-> 76.117.140.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:38.433494 0.262520 udp 10.0.2.22 51868 <-> 186.91.202.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:39.434455 0.033949 udp 10.0.2.22 51868 <-> 89.133.113.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:40.425765 0.396460 udp 10.0.2.22 51868 <-> 126.86.87.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:41.427353 0.157300 udp 10.0.2.22 51868 <-> 50.88.67.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:42.428841 0.459053 udp 10.0.2.22 51868 <-> 114.51.16.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:43.430413 2.002470 udp 10.0.2.22 51868 <-> 180.19.158.116 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:44.431448 0.000000 udp 10.0.2.22 51868 -> 189.6.137.102 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:34:46.434413 0.409516 udp 10.0.2.22 51868 <-> 177.106.37.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:47.426397 0.300495 udp 10.0.2.22 51868 <-> 115.242.103.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:48.427706 0.169904 udp 10.0.2.22 51868 <-> 184.170.169.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:49.429002 0.048193 udp 10.0.2.22 51868 <-> 80.56.160.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:50.430633 0.163241 udp 10.0.2.22 51868 <-> 66.227.200.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:51.431981 0.040828 udp 10.0.2.22 51868 <-> 84.107.143.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:52.432958 0.391689 udp 10.0.2.22 51868 <-> 200.37.182.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:53.434927 0.171581 udp 10.0.2.22 51868 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:54.425861 0.023932 udp 10.0.2.22 51868 <-> 46.223.92.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:55.427287 0.252747 udp 10.0.2.22 51868 <-> 82.59.56.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:56.429015 0.152466 udp 10.0.2.22 51868 <-> 98.25.25.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:57.430030 0.025445 udp 10.0.2.22 51868 <-> 84.107.67.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:58.431828 0.032082 udp 10.0.2.22 51868 <-> 89.215.228.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:34:59.432960 0.346221 udp 10.0.2.22 51868 <-> 218.250.127.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:00.434563 0.398638 udp 10.0.2.22 51868 <-> 61.223.95.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:01.425766 0.109834 udp 10.0.2.22 51868 <-> 85.52.64.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:02.427280 0.337655 udp 10.0.2.22 51868 <-> 201.92.6.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:03.429274 0.694981 udp 10.0.2.22 51868 <-> 117.212.54.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:04.300588 0.000099 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:35:04.430603 0.149819 udp 10.0.2.22 51868 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:05.431934 3.059292 udp 10.0.2.22 51868 <-> 188.241.23.13 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:06.432964 0.000000 udp 10.0.2.22 51868 -> 151.54.11.146 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:35:09.427726 0.050033 udp 10.0.2.22 51868 <-> 78.56.191.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:10.428816 0.270849 udp 10.0.2.22 51868 <-> 75.0.0.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:11.430443 0.835845 udp 10.0.2.22 51868 <-> 117.212.54.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:12.431632 0.673036 udp 10.0.2.22 51868 <-> 181.164.143.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:13.433449 0.123253 udp 10.0.2.22 51868 <-> 95.251.35.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:14.435117 0.310639 udp 10.0.2.22 51868 <-> 119.24.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:15.426058 0.849027 udp 10.0.2.22 51868 <-> 75.49.209.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:16.427466 0.158487 udp 10.0.2.22 51868 <-> 206.74.136.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:17.429453 0.142574 udp 10.0.2.22 51868 <-> 70.15.231.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:18.430671 0.057377 udp 10.0.2.22 51868 <-> 78.234.37.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:19.431943 0.156467 udp 10.0.2.22 51868 <-> 71.239.17.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:20.433090 2.182172 udp 10.0.2.22 51868 <-> 174.108.49.15 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:21.425050 0.248064 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:23.427615 0.253869 udp 10.0.2.22 51868 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:24.429564 0.148448 udp 10.0.2.22 51868 <-> 24.45.223.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:25.430420 0.131906 udp 10.0.2.22 51868 <-> 74.73.20.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:26.432544 0.352059 udp 10.0.2.22 51868 <-> 186.11.18.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:27.433653 0.390096 udp 10.0.2.22 51868 <-> 186.92.209.69 16464 CON 0 0 5 3618 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:28.425046 0.000000 udp 10.0.2.22 51868 -> 95.37.151.63 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:35:29.429098 0.370957 udp 10.0.2.22 51868 <-> 61.207.180.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:30.427766 0.444148 udp 10.0.2.22 51868 <-> 117.226.223.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:31.309213 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:35:31.428890 0.000000 udp 10.0.2.22 51868 -> 216.146.251.206 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:35:32.430944 0.182713 udp 10.0.2.22 51868 <-> 142.217.34.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:33.432078 0.324993 udp 10.0.2.22 51868 <-> 182.155.14.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:34.433504 0.060686 udp 10.0.2.22 51868 <-> 188.24.154.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:35.425241 0.383048 udp 10.0.2.22 51868 <-> 122.118.71.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:36.426344 0.055768 udp 10.0.2.22 51868 <-> 79.98.138.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:37.427804 0.431364 udp 10.0.2.22 51868 <-> 98.251.112.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:38.429612 1.000980 udp 10.0.2.22 51868 <-> 111.253.168.140 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:40.431833 0.404685 udp 10.0.2.22 51868 <-> 114.41.96.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:41.433779 0.357541 udp 10.0.2.22 51868 <-> 221.151.31.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:42.425583 0.173930 udp 10.0.2.22 51868 <-> 24.233.63.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:43.426660 0.045178 udp 10.0.2.22 51868 <-> 89.98.118.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:44.427586 0.201835 udp 10.0.2.22 51868 <-> 192.136.201.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:45.429098 0.150230 udp 10.0.2.22 51868 <-> 67.240.133.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:46.430493 0.000000 udp 10.0.2.22 51868 -> 95.180.26.125 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:35:47.432421 0.221653 udp 10.0.2.22 51868 <-> 123.236.82.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:48.433387 0.052329 udp 10.0.2.22 51868 <-> 178.79.16.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:49.425412 0.558727 udp 10.0.2.22 51868 <-> 186.94.66.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:50.426217 0.065744 udp 10.0.2.22 51868 <-> 188.241.23.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:51.427879 0.171224 udp 10.0.2.22 51868 <-> 5.158.63.46 16464 CON 0 0 2 668 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:52.429374 2.365811 udp 10.0.2.22 51868 <-> 117.238.202.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:53.430654 0.049553 udp 10.0.2.22 51868 <-> 78.60.155.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:54.432382 0.000000 udp 10.0.2.22 51868 -> 77.244.39.54 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:35:55.433733 0.174255 udp 10.0.2.22 51868 <-> 199.73.102.160 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:56.424857 0.264883 udp 10.0.2.22 51868 <-> 201.17.76.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:57.426883 0.000000 udp 10.0.2.22 51868 -> 85.84.74.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:35:58.307623 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:35:58.428199 0.049669 udp 10.0.2.22 51868 <-> 178.148.77.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:35:59.429204 0.046007 udp 10.0.2.22 51868 <-> 95.77.177.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:36:00.430908 1.058281 udp 10.0.2.22 51868 <-> 94.253.249.75 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:36:02.434059 0.000000 udp 10.0.2.22 51868 -> 94.123.229.142 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:03.425564 0.000000 udp 10.0.2.22 51868 -> 89.96.96.163 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:04.426404 0.170654 udp 10.0.2.22 51868 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:36:05.428350 0.165039 udp 10.0.2.22 51868 <-> 173.217.91.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:36:06.429390 0.329154 udp 10.0.2.22 51868 <-> 220.156.8.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:36:07.431365 1.393510 udp 10.0.2.22 51868 <-> 201.254.97.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:36:09.433576 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:10.425127 0.000106 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:10.425233 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:36:11.426793 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:12.427850 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:13.429417 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:14.431070 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:15.432634 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:16.434367 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:17.425645 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:18.427247 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:19.428038 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:20.430068 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:21.431008 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:22.432588 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:23.434351 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:24.425864 0.000000 udp 10.0.2.22 51868 -> 76.27.32.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:25.306407 0.000090 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:36:25.427072 0.142516 udp 10.0.2.22 51868 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:36:26.428157 0.069089 udp 10.0.2.22 51868 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:36:27.429864 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:28.431326 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:29.432828 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:30.433829 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:31.425311 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:32.427237 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:33.428514 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:34.430020 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:35.431019 4.997081 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:36.432386 0.000075 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:36.432461 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:36:37.434326 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:39.426864 0.154299 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:36:42.431270 0.035694 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:36:43.432964 0.000000 udp 10.0.2.22 51868 -> 190.74.93.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:44.434208 3.214967 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:36:45.425541 1.427408 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:36:48.429855 0.393634 udp 10.0.2.22 51868 <-> 61.223.208.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:36:49.431058 2.994412 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:50.432923 0.308119 udp 10.0.2.22 51868 <-> 180.146.156.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:36:51.434190 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:52.305676 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:36:53.426786 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:54.428259 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:55.430092 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:56.431576 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:57.432889 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:58.434168 0.000059 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:36:58.434227 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:36:59.425444 0.141953 udp 10.0.2.22 51868 <-> 71.15.226.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:00.427133 2.191716 udp 10.0.2.22 51868 <-> 190.49.238.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:01.428565 0.305601 udp 10.0.2.22 51868 <-> 180.146.156.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:02.429996 0.303347 udp 10.0.2.22 51868 <-> 58.9.41.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:03.431700 0.032305 udp 10.0.2.22 51868 <-> 31.17.92.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:04.432626 3.996146 udp 10.0.2.22 51868 -> 42.119.24.79 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:37:05.434719 0.068093 udp 10.0.2.22 51868 <-> 62.99.1.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:06.426202 0.290485 udp 10.0.2.22 51868 <-> 49.250.97.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:07.427136 0.107901 udp 10.0.2.22 51868 <-> 77.78.227.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:09.430085 0.231283 udp 10.0.2.22 51868 <-> 87.17.27.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:10.431238 0.312817 udp 10.0.2.22 51868 <-> 182.155.52.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:11.432764 0.302837 udp 10.0.2.22 51868 <-> 189.103.8.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:12.434536 0.362002 udp 10.0.2.22 51868 <-> 183.178.135.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:13.425730 0.356705 udp 10.0.2.22 51868 <-> 180.176.70.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:14.427198 0.000000 udp 10.0.2.22 51868 -> 67.163.75.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:37:15.429043 0.049848 udp 10.0.2.22 51868 <-> 37.8.220.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:16.430164 0.000000 udp 10.0.2.22 51868 -> 79.51.215.42 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:37:17.431980 0.041006 udp 10.0.2.22 51868 <-> 84.61.180.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:18.432964 2.165589 udp 10.0.2.22 51868 <-> 190.49.238.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:19.303949 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:37:19.434674 0.145210 udp 10.0.2.22 51868 <-> 69.127.160.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:20.425605 0.631875 udp 10.0.2.22 51868 <-> 68.7.171.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:21.427673 0.119624 udp 10.0.2.22 51868 <-> 24.102.154.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:22.428579 0.000000 udp 10.0.2.22 51868 -> 88.148.86.229 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:37:23.430477 0.184150 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:24.431372 0.143499 udp 10.0.2.22 51868 <-> 71.77.141.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:25.433228 0.136772 udp 10.0.2.22 51868 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:26.435155 2.433112 udp 10.0.2.22 51868 <-> 117.195.140.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:27.426383 0.000000 udp 10.0.2.22 51868 -> 82.227.89.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:37:28.427104 0.000000 udp 10.0.2.22 51868 -> 5.20.145.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:37:29.428955 0.594415 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:30.430265 0.000000 udp 10.0.2.22 51868 -> 130.204.143.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:37:31.431447 0.170407 udp 10.0.2.22 51868 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:32.433038 0.296565 udp 10.0.2.22 51868 <-> 201.214.63.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:32.822306 0.000000 udp 10.0.2.22 51868 <- 82.227.89.11 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:37:33.434397 0.000000 udp 10.0.2.22 51868 -> 111.246.35.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:37:34.426162 3.004504 udp 10.0.2.22 51868 -> 84.241.67.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:37:35.427800 0.298681 udp 10.0.2.22 51868 <-> 109.186.128.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:36.428678 0.191034 udp 10.0.2.22 51868 <-> 94.205.1.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:36.759818 0.011434 udp 10.0.2.22 60028 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 05:37:36.771516 0.000000 udp 10.0.2.22 60029 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:37:38.431869 0.666793 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:39.433182 0.000000 udp 10.0.2.22 51868 -> 117.195.10.243 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:37:40.434905 0.000000 udp 10.0.2.22 51868 -> 108.184.13.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:37:41.425825 0.000000 udp 10.0.2.22 51868 -> 201.68.33.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:37:42.427795 0.312083 udp 10.0.2.22 51868 <-> 81.226.243.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:43.428867 0.000000 udp 10.0.2.22 51868 -> 190.79.130.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:37:44.430263 0.026905 udp 10.0.2.22 51868 <-> 89.135.143.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:45.431854 0.000000 udp 10.0.2.22 51868 -> 175.111.126.182 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:37:46.303231 0.000141 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:37:46.433226 0.150957 udp 10.0.2.22 51868 <-> 124.123.242.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:46.706727 3.001168 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 05:37:47.434909 0.055356 udp 10.0.2.22 51868 <-> 46.249.179.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:48.426370 0.494948 udp 10.0.2.22 51868 <-> 68.7.171.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:49.427631 0.000000 udp 10.0.2.22 51868 -> 47.58.59.67 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:37:50.429556 0.151985 udp 10.0.2.22 51868 <-> 68.57.213.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:51.430218 0.083289 udp 10.0.2.22 51868 <-> 195.238.118.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:52.432331 0.057830 udp 10.0.2.22 51868 <-> 94.253.231.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:53.433412 0.097985 udp 10.0.2.22 51868 <-> 85.84.74.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:53.714095 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:37:54.424735 0.121537 udp 10.0.2.22 51868 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:55.426003 0.000000 udp 10.0.2.22 51868 -> 82.139.22.193 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:37:56.359936 0.000000 udp 10.0.2.22 51868 <- 190.79.130.76 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:37:56.428008 0.168787 udp 10.0.2.22 51868 <-> 24.144.18.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:57.429165 0.291972 udp 10.0.2.22 51868 <-> 119.24.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:58.430912 0.156801 udp 10.0.2.22 51868 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:37:59.432219 0.000000 udp 10.0.2.22 51868 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:38:00.433268 0.215753 udp 10.0.2.22 51868 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:01.424880 0.037324 udp 10.0.2.22 51868 <-> 188.127.27.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:01.715133 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:38:02.426171 0.052050 udp 10.0.2.22 51868 <-> 84.54.174.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:03.427862 0.141707 udp 10.0.2.22 51868 <-> 67.242.78.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:04.429374 0.031625 udp 10.0.2.22 51868 <-> 87.97.204.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:05.430965 0.362213 udp 10.0.2.22 51868 <-> 190.48.77.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:06.431790 0.000000 udp 10.0.2.22 51868 -> 84.194.58.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:38:07.433872 1.289256 udp 10.0.2.22 51868 <-> 27.6.163.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:08.424788 0.320268 udp 10.0.2.22 51868 <-> 64.233.158.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:09.426400 0.326302 udp 10.0.2.22 51868 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:10.428092 2.165838 udp 10.0.2.22 51868 <-> 123.201.207.144 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:11.429472 0.281718 udp 10.0.2.22 51868 <-> 190.247.242.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:13.302024 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:38:13.432488 0.273433 udp 10.0.2.22 51868 <-> 209.137.215.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:14.434074 0.044688 udp 10.0.2.22 51868 <-> 193.150.231.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:15.424865 0.174592 udp 10.0.2.22 51868 <-> 96.26.92.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:16.426444 0.151572 udp 10.0.2.22 51868 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:17.427801 3.004729 udp 10.0.2.22 51868 -> 71.80.71.242 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:38:17.718729 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:38:18.429521 0.116323 udp 10.0.2.22 51868 <-> 68.14.146.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:19.430944 4.860049 udp 10.0.2.22 51868 <-> 2.191.126.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:21.433737 0.159852 udp 10.0.2.22 51868 <-> 71.89.115.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:22.424906 0.175837 udp 10.0.2.22 51868 <-> 27.116.55.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:23.426669 0.032532 udp 10.0.2.22 51868 <-> 130.204.169.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:24.427798 0.229942 udp 10.0.2.22 51868 <-> 71.94.164.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:25.429163 0.374928 udp 10.0.2.22 51868 <-> 14.99.81.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:26.430780 0.156559 udp 10.0.2.22 51868 <-> 174.69.148.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:27.432609 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:38:28.433710 0.804327 udp 10.0.2.22 51868 <-> 70.180.79.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:29.425228 3.145719 udp 10.0.2.22 51868 <-> 68.83.113.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:30.426845 0.069036 udp 10.0.2.22 51868 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:31.428218 2.002458 udp 10.0.2.22 51868 -> 204.14.77.4 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:38:34.432166 0.000000 udp 10.0.2.22 51868 -> 114.36.70.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:38:35.433503 0.039629 udp 10.0.2.22 51868 <-> 95.89.124.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:36.424916 2.225591 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:37.426487 0.353142 udp 10.0.2.22 51868 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:39.429356 0.181073 udp 10.0.2.22 51868 <-> 173.216.251.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:40.300427 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:38:40.430926 0.670304 udp 10.0.2.22 51868 <-> 96.43.54.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:41.432074 0.152813 udp 10.0.2.22 51868 <-> 98.223.203.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:42.434087 0.270323 udp 10.0.2.22 51868 <-> 101.63.193.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:43.425527 0.359375 udp 10.0.2.22 51868 <-> 14.198.8.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:44.426642 0.000000 udp 10.0.2.22 51868 -> 24.233.63.115 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:38:45.428488 0.258779 udp 10.0.2.22 51868 <-> 190.36.188.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:46.429914 0.000000 udp 10.0.2.22 51868 -> 89.143.76.91 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:38:47.431517 0.000000 udp 10.0.2.22 51868 -> 78.138.179.153 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:38:48.432144 0.142044 udp 10.0.2.22 51868 <-> 24.177.233.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:49.434149 0.167745 udp 10.0.2.22 51868 <-> 66.131.189.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:49.724184 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:38:50.425005 0.174480 udp 10.0.2.22 51868 <-> 78.188.164.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:51.426985 0.179092 udp 10.0.2.22 51868 <-> 27.106.88.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:52.427895 0.060635 udp 10.0.2.22 51868 <-> 78.58.24.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:53.430094 0.000000 udp 10.0.2.22 51868 -> 83.50.141.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:38:54.431099 0.128609 udp 10.0.2.22 51868 <-> 37.45.40.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:55.432443 0.390419 udp 10.0.2.22 51868 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:56.434038 0.041943 udp 10.0.2.22 51868 <-> 95.180.52.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:57.425249 0.133495 udp 10.0.2.22 51868 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:58.426918 0.412726 udp 10.0.2.22 51868 <-> 210.203.193.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:38:59.428477 1.358334 udp 10.0.2.22 51868 <-> 178.25.74.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:00.429681 0.219388 udp 10.0.2.22 51868 <-> 50.38.15.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:01.431272 0.000000 udp 10.0.2.22 51868 -> 188.131.97.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:39:02.432791 0.167757 udp 10.0.2.22 51868 <-> 75.66.83.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:03.433727 0.176215 udp 10.0.2.22 51868 <-> 173.216.251.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:04.425223 0.730561 udp 10.0.2.22 51868 <-> 177.149.100.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:05.426919 0.000000 udp 10.0.2.22 51868 -> 103.17.131.129 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:39:06.428145 0.239693 udp 10.0.2.22 51868 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:07.299602 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:39:07.430169 0.051995 udp 10.0.2.22 51868 <-> 91.210.108.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:08.431122 0.051011 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:09.432745 0.198481 udp 10.0.2.22 51868 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:10.434492 0.000000 udp 10.0.2.22 51868 -> 79.182.127.226 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:39:11.425260 0.000000 udp 10.0.2.22 51868 -> 179.246.100.103 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:39:12.427143 0.000000 udp 10.0.2.22 51868 -> 151.246.94.103 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:39:13.428517 0.000000 udp 10.0.2.22 51868 -> 186.50.99.66 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:39:14.429859 2.034434 udp 10.0.2.22 51868 <-> 89.253.133.12 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:15.431004 0.000000 udp 10.0.2.22 51868 -> 2.176.167.136 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:39:17.434027 0.102675 udp 10.0.2.22 51868 <-> 79.182.127.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:18.425288 0.029080 udp 10.0.2.22 51868 <-> 80.98.172.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:19.426721 2.749601 udp 10.0.2.22 51868 <-> 31.63.154.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:20.428232 3.159776 udp 10.0.2.22 51868 <-> 71.59.124.237 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:21.429819 0.000000 udp 10.0.2.22 51868 -> 97.94.101.139 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:39:22.431242 0.153825 udp 10.0.2.22 51868 <-> 69.250.40.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:24.434290 0.164395 udp 10.0.2.22 51868 <-> 74.77.183.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:25.425667 0.049385 udp 10.0.2.22 51868 <-> 89.230.111.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:26.427176 0.000000 udp 10.0.2.22 51868 -> 103.6.187.74 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:39:27.428602 0.000000 udp 10.0.2.22 51868 -> 91.99.25.161 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:39:28.429657 0.296900 udp 10.0.2.22 51868 <-> 115.241.16.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:29.431423 0.209436 udp 10.0.2.22 51868 <-> 50.150.82.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:30.433270 0.147239 udp 10.0.2.22 51868 <-> 74.66.76.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:31.434574 0.146055 udp 10.0.2.22 51868 <-> 67.189.167.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:32.425438 0.000000 udp 10.0.2.22 51868 -> 74.244.8.240 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:39:33.427304 0.153620 udp 10.0.2.22 51868 <-> 2.180.63.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:34.308447 0.000082 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:39:34.428888 0.167324 udp 10.0.2.22 51868 <-> 98.223.203.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:35.430523 0.273907 udp 10.0.2.22 51868 <-> 190.194.109.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:36.431701 1.915468 udp 10.0.2.22 51868 <-> 58.152.190.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:37.433023 0.020261 udp 10.0.2.22 51868 <-> 213.47.69.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:38.434194 0.149939 udp 10.0.2.22 51868 <-> 24.146.231.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:39.425921 0.388557 udp 10.0.2.22 51868 <-> 64.148.59.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:40.427490 0.166498 udp 10.0.2.22 51868 <-> 75.67.90.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:41.429064 0.266988 udp 10.0.2.22 51868 <-> 113.193.160.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:42.429933 0.150339 udp 10.0.2.22 51868 <-> 174.97.209.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:43.431629 0.063252 udp 10.0.2.22 51868 <-> 89.216.39.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:44.432928 0.000000 udp 10.0.2.22 51868 -> 101.5.240.60 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:39:45.434093 0.103318 udp 10.0.2.22 51868 <-> 78.62.30.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:46.425700 0.000000 udp 10.0.2.22 51868 -> 173.218.218.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:39:47.427641 1.871965 arp 10.0.2.22 who 169.254.14.254 INT 3 126 flow=Background-ARP 1970/01/01 05:39:48.428833 0.000000 udp 10.0.2.22 51868 -> 176.237.169.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:39:49.430521 0.051701 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:50.431516 0.055160 udp 10.0.2.22 51868 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:51.432981 0.266054 udp 10.0.2.22 51868 <-> 179.209.89.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:52.434788 0.212930 udp 10.0.2.22 51868 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:53.425586 0.145207 udp 10.0.2.22 51868 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:54.427562 0.000000 udp 10.0.2.22 51868 -> 111.246.35.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:39:55.428633 0.074818 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:56.430072 0.000000 udp 10.0.2.22 51868 -> 5.190.241.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:39:57.432013 0.225857 udp 10.0.2.22 51868 <-> 2.179.147.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:58.433656 0.302321 udp 10.0.2.22 51868 <-> 175.111.126.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:39:59.434224 0.268050 udp 10.0.2.22 51868 <-> 181.166.240.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:40:00.426048 0.000000 udp 10.0.2.22 51868 -> 106.207.191.140 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:01.307033 0.000085 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:40:01.427786 0.402480 udp 10.0.2.22 51868 <-> 1.226.113.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:40:02.429506 0.042043 udp 10.0.2.22 51868 <-> 147.156.24.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:40:03.430516 0.000000 udp 10.0.2.22 51868 -> 212.92.246.78 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:04.431598 0.000000 udp 10.0.2.22 51868 -> 14.97.146.77 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:05.432860 0.058350 udp 10.0.2.22 51868 <-> 86.127.19.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:40:06.434422 0.144504 udp 10.0.2.22 51868 <-> 74.66.76.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:40:07.425727 0.000000 udp 10.0.2.22 51868 -> 70.70.164.40 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:08.427172 0.211577 udp 10.0.2.22 51868 <-> 67.169.170.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:40:09.428993 0.000000 udp 10.0.2.22 51868 -> 116.203.249.168 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:10.430028 0.140523 udp 10.0.2.22 51868 <-> 98.192.242.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:40:11.431949 0.422080 udp 10.0.2.22 51868 <-> 123.176.138.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:40:12.433581 0.217776 udp 10.0.2.22 51868 <-> 96.31.197.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:40:13.434925 0.000000 udp 10.0.2.22 51868 -> 66.171.49.168 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:14.014978 0.000000 udp 10.0.2.22 51868 <- 70.70.164.40 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:14.425934 0.056273 udp 10.0.2.22 51868 <-> 82.242.39.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:40:15.427851 0.000000 udp 10.0.2.22 51868 -> 187.37.207.195 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:16.428896 0.167760 udp 10.0.2.22 51868 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:40:17.430892 0.142100 udp 10.0.2.22 51868 <-> 162.17.224.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:40:18.431830 0.179971 udp 10.0.2.22 51868 <-> 76.30.230.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:40:19.433507 0.158135 udp 10.0.2.22 51868 <-> 75.67.171.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:40:20.434584 0.121165 udp 10.0.2.22 51868 <-> 86.57.157.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:40:21.426224 2.143925 udp 10.0.2.22 51868 <-> 68.192.3.101 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:40:22.427926 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:25.431617 0.000051 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:25.431668 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:40:26.433419 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:27.424864 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:28.305743 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:40:28.426493 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:29.427343 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:30.428864 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:31.430597 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:32.432135 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:33.433170 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:34.425040 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:35.426381 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:36.428233 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:37.429074 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:38.431054 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:39.432386 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:40.433488 0.000000 udp 10.0.2.22 51868 -> 95.81.103.113 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:41.425258 0.257869 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:40:42.426763 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:43.427764 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:44.429775 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:45.430529 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:46.432186 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:47.433349 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:48.425538 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:49.426431 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:51.429220 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:52.431046 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:53.432018 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:54.433746 0.000078 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:54.433824 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:40:55.425213 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:40:56.306154 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:40:56.426521 0.076873 udp 10.0.2.22 51868 <-> 95.192.79.196 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:40:58.429129 0.043395 udp 10.0.2.22 51868 <-> 90.228.224.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:40:59.431260 0.376396 udp 10.0.2.22 51868 <-> 222.166.20.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:00.432344 0.000000 udp 10.0.2.22 51868 -> 50.26.127.53 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:41:02.425117 0.000000 udp 10.0.2.22 51868 -> 95.81.103.113 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:41:03.426238 0.209126 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:04.428292 0.000000 udp 10.0.2.22 51868 -> 87.252.173.82 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:41:05.429661 0.324071 udp 10.0.2.22 51868 <-> 200.122.103.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:06.430617 0.282408 udp 10.0.2.22 51868 <-> 201.211.132.107 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:07.432606 0.136491 udp 10.0.2.22 51868 <-> 98.219.228.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:08.433470 0.056501 udp 10.0.2.22 51868 <-> 86.122.152.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:09.425142 1.277992 udp 10.0.2.22 51868 <-> 24.135.86.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:10.426344 0.418693 udp 10.0.2.22 51868 <-> 175.35.18.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:11.427734 1.221728 udp 10.0.2.22 51868 <-> 115.242.118.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:12.429335 0.283888 udp 10.0.2.22 51868 <-> 118.86.58.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:13.431148 0.178179 udp 10.0.2.22 51868 <-> 184.49.10.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:14.432182 0.000000 udp 10.0.2.22 51868 -> 177.106.142.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:41:15.433993 0.039824 udp 10.0.2.22 51868 <-> 84.197.172.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:16.425145 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:41:17.426857 0.056746 udp 10.0.2.22 51868 <-> 94.253.238.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:18.427981 0.049491 udp 10.0.2.22 51868 <-> 188.190.84.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:19.429660 1.067673 udp 10.0.2.22 51868 <-> 89.136.139.4 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:21.432659 0.321595 udp 10.0.2.22 51868 <-> 121.176.122.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:22.433760 0.133238 udp 10.0.2.22 51868 <-> 75.102.177.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:23.305143 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:41:23.425653 0.174691 udp 10.0.2.22 51868 <-> 103.1.101.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:24.427028 0.163663 udp 10.0.2.22 51868 <-> 50.88.67.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:25.428189 0.000000 udp 10.0.2.22 51868 -> 172.21.200.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:41:26.429485 0.051508 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:27.430974 0.000000 udp 10.0.2.22 51868 -> 184.170.169.50 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:41:28.432677 0.161529 udp 10.0.2.22 51868 <-> 108.176.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:29.433714 0.132058 udp 10.0.2.22 51868 <-> 24.89.198.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:30.425529 0.189293 udp 10.0.2.22 51868 <-> 79.12.187.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:31.427180 0.142136 udp 10.0.2.22 51868 <-> 71.15.226.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:32.428543 0.367157 udp 10.0.2.22 51868 <-> 220.137.90.105 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:33.429899 0.055107 udp 10.0.2.22 51868 <-> 109.104.184.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:34.431148 0.000000 udp 10.0.2.22 51868 -> 85.86.199.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:41:35.432389 1.060678 udp 10.0.2.22 51868 <-> 84.55.13.19 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:37.425199 0.275955 udp 10.0.2.22 51868 <-> 181.31.103.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:38.427197 0.142952 udp 10.0.2.22 51868 <-> 97.81.201.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:39.428257 0.281359 udp 10.0.2.22 51868 <-> 101.62.82.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:40.429890 0.168963 udp 10.0.2.22 51868 <-> 74.56.219.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:41.431623 4.996440 udp 10.0.2.22 51868 -> 217.174.48.38 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:41:42.432380 0.438976 udp 10.0.2.22 51868 <-> 190.176.231.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:43.434374 0.540098 udp 10.0.2.22 51868 <-> 201.208.23.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:44.425218 0.208924 udp 10.0.2.22 51868 <-> 76.115.145.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:45.427429 0.052573 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:47.429859 0.096044 udp 10.0.2.22 51868 <-> 217.114.188.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:48.430952 0.175291 udp 10.0.2.22 51868 <-> 74.56.219.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:49.432915 0.066923 udp 10.0.2.22 51868 <-> 92.224.88.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:50.303688 0.000039 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:41:50.434402 0.070893 udp 10.0.2.22 51868 <-> 87.121.154.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:51.425496 0.243760 udp 10.0.2.22 51868 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:52.427186 0.000000 udp 10.0.2.22 51868 -> 201.210.219.39 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:41:53.428390 1.389237 udp 10.0.2.22 51868 <-> 186.10.9.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:54.430253 0.000000 udp 10.0.2.22 51868 -> 67.251.124.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:41:55.431286 0.156311 udp 10.0.2.22 51868 <-> 68.59.56.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:56.432589 0.501823 udp 10.0.2.22 51868 <-> 118.168.121.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:57.434377 0.359044 udp 10.0.2.22 51868 <-> 190.178.187.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:58.425698 0.072096 udp 10.0.2.22 51868 <-> 178.79.11.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:41:59.426761 0.172552 udp 10.0.2.22 51868 <-> 66.169.204.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:00.428629 0.203867 udp 10.0.2.22 51868 <-> 24.7.146.40 16464 CON 0 0 2 668 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:01.430329 0.732112 udp 10.0.2.22 51868 <-> 190.74.80.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:01.996231 0.000000 udp 10.0.2.22 51868 <- 201.210.219.39 16464 RSP 0 0 1 750 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:42:02.431444 0.150861 udp 10.0.2.22 51868 <-> 66.130.116.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:03.432720 0.103254 udp 10.0.2.22 51868 <-> 2.195.10.19 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:04.434129 0.000000 udp 10.0.2.22 51868 -> 41.143.35.7 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:42:05.425750 0.044847 udp 10.0.2.22 51868 <-> 176.37.230.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:06.427242 0.169038 udp 10.0.2.22 51868 <-> 66.169.204.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:07.428649 0.084759 udp 10.0.2.22 51868 <-> 87.120.215.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:08.430047 0.000000 udp 10.0.2.22 51868 -> 14.97.20.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:42:09.431178 0.179742 udp 10.0.2.22 51868 <-> 74.62.164.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:10.433229 3.995545 udp 10.0.2.22 51868 <-> 96.20.172.61 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:11.434365 0.191543 udp 10.0.2.22 51868 <-> 190.218.84.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:12.426162 0.190874 udp 10.0.2.22 51868 <-> 190.219.0.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:13.426955 0.000000 udp 10.0.2.22 51868 -> 79.158.11.55 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:42:15.429771 0.226313 udp 10.0.2.22 51868 <-> 76.169.129.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:16.431197 0.080206 udp 10.0.2.22 51868 <-> 87.120.215.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:17.302675 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:42:17.432657 0.192825 udp 10.0.2.22 51868 <-> 50.26.30.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:18.434116 0.000000 udp 10.0.2.22 51868 -> 46.35.173.47 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:42:19.425566 0.871405 udp 10.0.2.22 51868 <-> 14.97.20.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:20.427154 0.141290 udp 10.0.2.22 51868 <-> 68.192.3.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:21.428589 0.162439 udp 10.0.2.22 51868 <-> 74.199.89.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:22.430528 0.139076 udp 10.0.2.22 51868 <-> 69.125.160.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:23.431769 0.158195 udp 10.0.2.22 51868 <-> 72.23.159.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:24.433386 0.334351 udp 10.0.2.22 51868 <-> 42.147.5.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:25.434643 0.000000 udp 10.0.2.22 51868 -> 116.193.141.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:42:26.425775 0.159994 udp 10.0.2.22 51868 <-> 89.250.204.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:27.427232 0.167989 udp 10.0.2.22 51868 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:28.428679 0.344183 udp 10.0.2.22 51868 <-> 190.178.251.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:29.430663 0.169706 udp 10.0.2.22 51868 <-> 66.227.200.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:30.431898 0.283411 udp 10.0.2.22 51868 <-> 115.253.72.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:31.432981 0.197330 udp 10.0.2.22 51868 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:32.434230 0.165653 udp 10.0.2.22 51868 <-> 76.106.222.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:33.426311 0.055147 udp 10.0.2.22 51868 <-> 95.158.97.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:34.427139 0.157122 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:35.429493 0.280603 udp 10.0.2.22 51868 <-> 126.36.45.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:36.431969 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:42:37.431714 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:42:38.433167 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:42:39.434545 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:42:40.426166 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:42:41.427331 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:42:42.429192 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:42:43.430443 0.371805 udp 10.0.2.22 51868 <-> 180.176.70.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:44.301679 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:42:44.432205 1.001171 udp 10.0.2.22 51868 <-> 89.143.76.91 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:46.434577 0.060332 udp 10.0.2.22 51868 <-> 5.12.105.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:47.426030 0.069750 udp 10.0.2.22 51868 <-> 83.213.201.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:48.427510 0.000000 udp 10.0.2.22 51868 -> 187.91.106.109 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:42:49.428916 0.178335 udp 10.0.2.22 51868 <-> 67.68.73.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:50.431022 0.412884 udp 10.0.2.22 51868 <-> 175.35.18.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:51.431863 0.242705 udp 10.0.2.22 51868 <-> 77.77.235.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:52.433234 0.163475 udp 10.0.2.22 51868 <-> 69.180.126.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:53.435161 0.119252 udp 10.0.2.22 51868 <-> 70.184.172.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:54.426652 1.016449 udp 10.0.2.22 51868 <-> 164.8.214.99 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:56.429004 0.142554 udp 10.0.2.22 51868 <-> 68.192.3.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:57.430244 0.086170 udp 10.0.2.22 51868 <-> 95.95.199.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:58.431599 0.032286 udp 10.0.2.22 51868 <-> 85.130.12.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:42:59.433049 0.158764 udp 10.0.2.22 51868 <-> 98.184.128.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:00.424972 0.000000 udp 10.0.2.22 51868 -> 164.8.214.99 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:43:01.425976 0.202731 udp 10.0.2.22 51868 <-> 184.49.10.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:02.427900 0.459404 udp 10.0.2.22 51868 <-> 117.222.42.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:03.428950 0.119778 udp 10.0.2.22 51868 <-> 216.164.210.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:04.430695 0.117812 udp 10.0.2.22 51868 <-> 88.236.237.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:05.431970 0.056011 udp 10.0.2.22 51868 <-> 5.12.93.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:06.433608 0.243249 udp 10.0.2.22 51868 <-> 190.75.86.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:07.424658 0.000000 udp 10.0.2.22 51868 -> 187.158.192.91 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:43:08.425966 0.180496 udp 10.0.2.22 51868 <-> 76.107.51.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:09.427826 0.265445 udp 10.0.2.22 51868 <-> 201.235.247.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:10.429493 0.173598 udp 10.0.2.22 51868 <-> 71.229.106.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:11.300501 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:43:11.430935 0.202684 udp 10.0.2.22 51868 <-> 190.36.72.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:12.431963 0.148462 udp 10.0.2.22 51868 <-> 71.75.119.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:13.433448 0.000000 udp 10.0.2.22 51868 -> 24.93.161.146 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:43:14.424855 0.073351 udp 10.0.2.22 51868 <-> 92.224.88.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:15.426745 0.161521 udp 10.0.2.22 51868 <-> 208.104.198.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:16.427565 0.340159 udp 10.0.2.22 51868 <-> 123.241.89.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:17.429554 1.952778 udp 10.0.2.22 51868 <-> 1.23.35.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:18.431061 0.048319 udp 10.0.2.22 51868 <-> 87.99.81.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:19.432076 0.029047 udp 10.0.2.22 51868 <-> 5.53.170.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:20.433251 0.373634 udp 10.0.2.22 51868 <-> 190.173.2.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:21.424831 0.127302 udp 10.0.2.22 51868 <-> 85.52.64.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:22.426757 0.000000 udp 10.0.2.22 51868 -> 189.13.77.103 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:43:23.427769 0.110015 udp 10.0.2.22 51868 <-> 141.161.10.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:24.429565 0.166979 udp 10.0.2.22 51868 <-> 183.83.228.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:25.430395 0.000000 udp 10.0.2.22 51868 -> 178.89.193.120 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:43:26.432180 1.139852 udp 10.0.2.22 51868 <-> 67.81.98.90 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:28.424916 0.158288 udp 10.0.2.22 51868 <-> 173.2.97.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:29.426758 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:43:30.427619 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:43:31.429085 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:43:32.431158 0.160881 udp 10.0.2.22 51868 <-> 174.64.185.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:33.432319 0.070516 udp 10.0.2.22 51868 <-> 85.87.142.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:34.433499 0.138379 udp 10.0.2.22 51868 <-> 70.60.118.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:35.424890 0.055914 udp 10.0.2.22 51868 <-> 86.122.97.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:36.426876 0.015783 udp 10.0.2.22 51868 <-> 213.47.69.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:37.427680 0.043653 udp 10.0.2.22 51868 <-> 81.232.31.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:38.309176 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:43:38.429570 0.378075 udp 10.0.2.22 51868 <-> 118.169.110.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:39.431064 0.062650 udp 10.0.2.22 51868 <-> 82.240.144.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:40.432533 0.056114 udp 10.0.2.22 51868 <-> 86.122.97.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:41.433526 0.137582 udp 10.0.2.22 51868 <-> 68.82.179.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:42.425020 0.476836 udp 10.0.2.22 51868 <-> 117.214.221.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:43.426744 0.000000 udp 10.0.2.22 51868 -> 5.146.89.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:43:44.427724 0.331439 udp 10.0.2.22 51868 <-> 190.78.25.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:45.429738 0.047550 udp 10.0.2.22 51868 <-> 92.109.240.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:46.431036 2.356890 udp 10.0.2.22 51868 <-> 75.244.136.250 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:47.432052 0.154691 udp 10.0.2.22 51868 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:49.425109 0.243176 udp 10.0.2.22 51868 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:50.426398 0.121115 udp 10.0.2.22 51868 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:51.428195 1.262823 udp 10.0.2.22 51868 <-> 219.162.195.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:52.429226 0.737295 udp 10.0.2.22 51868 <-> 186.91.102.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:53.431198 0.166704 udp 10.0.2.22 51868 <-> 76.180.2.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:54.432343 0.151538 udp 10.0.2.22 51868 <-> 98.25.25.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:55.433685 1.232142 udp 10.0.2.22 51868 <-> 89.245.86.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:56.425062 0.086445 udp 10.0.2.22 51868 <-> 85.87.36.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:57.426971 0.171797 udp 10.0.2.22 51868 <-> 23.25.165.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:58.428205 0.295457 udp 10.0.2.22 51868 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:43:59.430045 0.426986 udp 10.0.2.22 51868 <-> 121.165.225.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:00.431151 0.161012 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:01.432508 1.720454 udp 10.0.2.22 51868 <-> 190.204.12.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:02.433662 0.371015 udp 10.0.2.22 51868 <-> 187.69.166.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:03.425432 0.049294 udp 10.0.2.22 51868 <-> 89.229.150.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:04.427194 0.141394 udp 10.0.2.22 51868 <-> 68.82.170.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:05.307681 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:44:05.428383 0.432302 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:06.430087 0.212858 udp 10.0.2.22 51868 <-> 76.174.151.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:07.431320 0.000000 udp 10.0.2.22 51868 -> 218.214.51.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:44:08.432932 0.240509 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:09.434051 3.024305 udp 10.0.2.22 51868 <-> 109.193.41.242 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:10.425327 0.074612 udp 10.0.2.22 51868 <-> 85.84.74.10 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:11.426552 0.385341 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:13.429424 0.464007 udp 10.0.2.22 51868 <-> 190.78.25.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:14.431191 4.050152 udp 10.0.2.22 51868 <-> 62.113.14.245 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:15.432727 0.000000 udp 10.0.2.22 51868 -> 85.84.74.10 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:44:16.433938 0.160554 udp 10.0.2.22 51868 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:17.425471 0.000000 udp 10.0.2.22 51868 -> 218.214.51.253 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:44:19.428886 0.171625 udp 10.0.2.22 51868 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:20.430236 0.306106 udp 10.0.2.22 51868 <-> 117.221.0.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:21.431117 0.374414 udp 10.0.2.22 51868 <-> 58.64.63.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:22.433040 0.045967 udp 10.0.2.22 51868 <-> 89.46.84.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:23.434065 0.000000 udp 10.0.2.22 51868 -> 79.121.101.131 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:44:24.425512 0.230382 udp 10.0.2.22 51868 <-> 24.59.225.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:25.427140 0.000000 udp 10.0.2.22 51868 -> 186.19.203.238 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:44:26.428713 0.000000 udp 10.0.2.22 51868 -> 41.143.35.7 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:44:27.429576 1.219115 udp 10.0.2.22 51868 <-> 177.224.86.78 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:29.433126 0.000000 udp 10.0.2.22 51868 -> 24.147.226.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:44:30.433998 1.400401 udp 10.0.2.22 51868 <-> 90.23.92.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:31.425908 0.373523 udp 10.0.2.22 51868 <-> 180.176.70.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:32.306901 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:44:32.427331 0.303824 udp 10.0.2.22 51868 <-> 116.65.248.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:33.428499 0.136132 udp 10.0.2.22 51868 <-> 69.115.113.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:34.429941 0.000000 udp 10.0.2.22 51868 -> 67.65.166.105 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:44:35.431231 0.070277 udp 10.0.2.22 51868 <-> 85.86.71.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:36.432919 0.135470 udp 10.0.2.22 51868 <-> 142.105.11.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:37.434342 0.326208 udp 10.0.2.22 51868 <-> 14.96.139.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:38.425771 0.059841 udp 10.0.2.22 51868 <-> 81.234.200.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:39.427052 0.249017 udp 10.0.2.22 51868 <-> 202.142.86.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:40.428457 0.183045 udp 10.0.2.22 51868 <-> 97.66.100.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:41.429823 0.163293 udp 10.0.2.22 51868 <-> 50.73.12.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:42.431363 0.000084 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:44:42.431447 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:44:43.432892 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:44:44.434528 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:44:45.426162 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:44:46.426955 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:44:47.428810 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:44:48.429797 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:44:49.431379 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:44:50.433228 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:44:51.434351 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:44:52.426020 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:44:53.427547 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:44:53.729822 3.002205 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 05:44:54.429002 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:44:55.430383 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:44:56.431581 0.335443 udp 10.0.2.22 51868 <-> 111.252.46.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:44:57.432860 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:44:58.434452 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:44:59.305646 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:44:59.425716 0.000074 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:44:59.425790 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:45:00.427501 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:00.737942 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:45:01.428541 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:02.430319 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:03.431305 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:04.433550 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:05.434545 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:06.425801 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:07.427693 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:08.428911 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:08.739305 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:45:09.430438 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:10.431858 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:12.434488 0.165328 udp 10.0.2.22 51868 <-> 50.73.12.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:45:13.426099 0.000092 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:13.426191 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:45:14.427117 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:15.429175 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:16.430158 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:17.432181 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:18.432873 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:19.434877 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:20.425771 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:21.427274 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:22.429294 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:23.430578 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:24.431878 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:24.742029 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:45:25.433108 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:26.304382 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:45:26.434697 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:27.426020 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:28.427758 0.143524 udp 10.0.2.22 51868 <-> 69.115.88.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:45:29.428672 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:30.430685 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:31.431755 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:32.433409 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:33.425188 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:34.426274 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:35.427947 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:36.429292 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:37.430711 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:38.432313 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:39.433668 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:41.426682 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:42.447851 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:43.449418 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:44.450475 0.143617 udp 10.0.2.22 51868 <-> 66.26.224.223 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:45:45.451839 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:46.453375 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:47.444764 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:48.446187 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:49.448134 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:50.449060 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:51.450941 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:52.451831 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:53.323127 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:45:53.453841 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:55.446220 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:56.447916 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:56.768331 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:45:57.449153 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:58.450965 0.000111 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:45:58.451076 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:45:59.452550 1.992389 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:00.453314 0.190021 udp 10.0.2.22 51868 <-> 172.219.86.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:46:02.446495 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:03.447801 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:04.449307 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:05.450676 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:07.453404 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:08.445238 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:09.446420 0.000047 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:09.446467 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:46:10.448260 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:11.449801 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:12.451087 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:13.452242 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:14.453945 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:15.445086 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:16.446598 0.102742 udp 10.0.2.22 51868 <-> 87.224.241.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:46:17.447894 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:19.450723 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:20.322143 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:46:20.452571 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:21.454126 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:22.445556 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:23.446940 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:24.448057 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:25.449476 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:26.450658 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:27.452383 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:28.453875 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:29.445432 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:30.446574 0.000097 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:30.446671 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:46:31.448263 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:32.449593 0.191052 udp 10.0.2.22 51868 <-> 172.219.86.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:46:33.450855 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:34.452189 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:35.454390 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:36.445719 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:37.447083 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:39.449891 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:40.451234 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:41.452470 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:42.454279 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:43.445919 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:44.446720 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:45.448409 0.000049 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:45.448458 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:46:46.449448 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:47.321205 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:46:47.451061 0.143646 udp 10.0.2.22 51868 <-> 66.26.224.223 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:46:48.452419 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:49.454225 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:50.445293 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:51.446955 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:52.448438 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:53.449739 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:54.451490 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:55.452882 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:57.445551 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:58.447316 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:46:59.448841 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:00.450019 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:01.451109 0.000074 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:01.451183 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:47:02.453157 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:03.453951 0.166908 udp 10.0.2.22 51868 <-> 50.73.12.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:47:04.445487 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:05.447372 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:06.448773 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:08.451044 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:09.452747 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:10.454289 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:11.445787 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:12.447072 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:13.448972 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:14.319677 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:47:14.449690 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:15.451217 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:16.453105 0.000061 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:16.453166 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:47:17.454748 1.992604 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:18.445623 0.142949 udp 10.0.2.22 51868 <-> 69.115.88.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:47:20.448497 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:21.450212 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:22.451333 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:23.453097 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:24.454234 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:25.446013 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:26.447322 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:27.448706 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:28.450495 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:30.452702 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:31.454488 0.000077 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:31.454565 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:47:32.446115 2.002608 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:33.447323 0.172695 udp 10.0.2.22 51868 <-> 107.223.74.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:47:35.450484 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:36.451902 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:37.452962 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:38.454700 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:39.446313 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:40.447361 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:41.328331 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:47:41.448704 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:42.450389 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:43.451884 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:44.453169 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:45.454283 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:46.446215 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:47.447153 0.000065 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:47.447218 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:47:49.450455 0.139988 udp 10.0.2.22 51868 <-> 76.99.198.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:47:50.451570 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:51.452912 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:52.454669 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:53.446284 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:54.447662 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:55.449036 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:56.450516 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:57.451690 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:47:58.453095 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:00.446122 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:01.447688 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:02.448920 0.000055 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:02.448975 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:48:03.450428 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:04.451997 0.146068 udp 10.0.2.22 51868 <-> 76.99.198.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:48:05.453565 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:06.444837 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:07.446647 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:08.327270 0.000113 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:48:08.447311 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:09.449075 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:10.450488 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:11.452322 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:13.444844 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:14.446569 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:15.447508 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:16.449535 0.000039 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:16.449574 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:48:17.450834 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:18.452291 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:19.453175 0.334203 udp 10.0.2.22 51868 <-> 111.252.46.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:48:20.445126 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:21.446068 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:22.448126 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:23.449105 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:24.450498 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:25.451776 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:26.453844 0.000100 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:26.453944 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:48:27.444895 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:28.446729 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:29.448163 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:31.450910 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:32.452431 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:33.453394 0.105269 udp 10.0.2.22 51868 <-> 87.224.241.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:48:34.444870 0.000046 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:34.444916 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:48:35.446793 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:36.327952 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:48:36.447792 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:37.449189 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:38.450443 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:39.452637 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:40.454033 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:41.444808 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:42.446330 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:43.447784 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:44.449794 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:45.450632 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:46.452000 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:47.453987 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:48.445170 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:49.446430 0.174925 udp 10.0.2.22 51868 <-> 76.106.208.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:48:50.448110 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:51.449184 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:52.450825 0.000046 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:52.450871 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:48:53.452326 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:54.454225 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:55.445004 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:48:56.446374 0.053502 udp 10.0.2.22 51868 <-> 91.133.48.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:48:57.448142 0.234011 udp 10.0.2.22 51868 <-> 190.219.0.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:48:58.449428 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:49:00.452239 0.000000 udp 10.0.2.22 51868 -> 61.223.150.97 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:49:01.454087 0.053186 udp 10.0.2.22 51868 <-> 91.133.48.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:02.445103 0.055944 udp 10.0.2.22 51868 <-> 176.97.51.158 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:03.326686 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:49:03.446666 0.159261 udp 10.0.2.22 51868 <-> 76.119.161.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:04.448450 0.276832 udp 10.0.2.22 51868 <-> 190.151.62.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:05.449349 0.139903 udp 10.0.2.22 51868 <-> 24.177.86.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:06.451401 0.162314 udp 10.0.2.22 51868 <-> 68.54.122.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:07.452661 0.547444 udp 10.0.2.22 51868 <-> 203.123.217.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:08.454409 0.040336 udp 10.0.2.22 51868 <-> 77.20.104.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:09.445033 0.044122 udp 10.0.2.22 51868 <-> 88.216.52.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:10.447024 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:49:11.448464 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:49:12.449970 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:49:13.450787 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:49:14.452866 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:49:15.454218 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:49:16.445881 0.241402 udp 10.0.2.22 51868 <-> 161.200.214.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:17.447103 0.140149 udp 10.0.2.22 51868 <-> 24.144.240.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:18.448516 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:49:19.450061 0.000088 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:49:19.450149 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:49:20.450883 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:49:21.452477 0.763371 udp 10.0.2.22 51868 <-> 216.197.194.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:22.453795 0.068145 udp 10.0.2.22 51868 <-> 79.165.237.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:23.445398 0.222458 udp 10.0.2.22 51868 <-> 121.246.32.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:24.446589 0.208157 udp 10.0.2.22 51868 <-> 118.95.64.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:25.448795 0.062801 udp 10.0.2.22 51868 <-> 89.230.66.14 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:26.449532 0.197675 udp 10.0.2.22 51868 <-> 184.167.204.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:27.451479 0.000000 udp 10.0.2.22 51868 -> 188.29.65.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:49:28.452990 0.191147 udp 10.0.2.22 51868 <-> 68.108.98.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:29.454062 0.145133 udp 10.0.2.22 51868 <-> 75.185.241.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:30.325274 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:49:30.445202 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:49:31.447424 0.000045 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:49:31.447469 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:49:32.448792 0.303446 udp 10.0.2.22 51868 <-> 24.232.15.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:33.449946 0.444052 udp 10.0.2.22 51868 <-> 24.77.226.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:34.451419 0.239449 udp 10.0.2.22 51868 <-> 125.62.101.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:35.453054 0.212790 udp 10.0.2.22 51868 <-> 87.237.237.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:36.454109 0.000000 udp 10.0.2.22 51868 -> 187.68.16.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:49:37.445500 0.063455 udp 10.0.2.22 51868 <-> 62.43.7.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:38.447039 0.000000 udp 10.0.2.22 51868 -> 50.88.67.44 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:49:39.448416 0.339513 udp 10.0.2.22 51868 <-> 218.35.15.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:40.450123 0.145166 udp 10.0.2.22 51868 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:41.451253 0.166868 udp 10.0.2.22 51868 <-> 217.203.130.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:42.453018 0.144459 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:43.454076 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:49:44.445642 0.163091 udp 10.0.2.22 51868 <-> 66.72.190.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:46.448536 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:49:47.450179 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:49:48.451988 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:49:49.453090 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:49:50.093459 0.000000 udp 10.0.2.22 51868 <- 187.68.16.37 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:49:50.454696 0.000000 udp 10.0.2.22 51868 -> 5.13.113.229 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:49:51.445758 0.148584 udp 10.0.2.22 51868 <-> 74.69.234.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:52.447016 0.384937 udp 10.0.2.22 51868 <-> 14.98.182.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:53.448483 0.283673 udp 10.0.2.22 51868 <-> 187.111.230.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:54.450219 0.090789 udp 10.0.2.22 51868 <-> 85.84.74.10 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:55.451320 0.162865 udp 10.0.2.22 51868 <-> 95.49.62.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:56.453152 0.057413 udp 10.0.2.22 51868 <-> 85.224.101.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:57.323844 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:49:57.454637 0.197041 udp 10.0.2.22 51868 <-> 113.193.40.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:58.445685 0.374679 udp 10.0.2.22 51868 <-> 177.29.103.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:49:59.446959 0.199877 udp 10.0.2.22 51868 <-> 200.84.142.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:00.448917 0.000000 udp 10.0.2.22 51868 -> 111.249.127.164 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:50:01.450165 0.388720 udp 10.0.2.22 51868 <-> 118.232.181.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:02.451352 0.205300 udp 10.0.2.22 51868 <-> 24.19.205.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:03.453138 0.049420 udp 10.0.2.22 51868 <-> 89.235.244.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:04.454779 0.263023 udp 10.0.2.22 51868 <-> 190.195.122.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:05.446181 2.190615 udp 10.0.2.22 51868 <-> 117.238.202.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:06.447356 0.211270 udp 10.0.2.22 51868 <-> 117.216.180.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:07.448648 0.000000 udp 10.0.2.22 51868 -> 151.75.171.42 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:50:08.450073 0.163975 udp 10.0.2.22 51868 <-> 173.25.161.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:09.451576 1.001454 udp 10.0.2.22 51868 <-> 67.148.202.166 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:11.455054 0.135480 udp 10.0.2.22 51868 <-> 76.123.37.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:12.446286 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:50:13.447269 0.000073 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:50:13.447342 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:50:14.448611 0.161060 udp 10.0.2.22 51868 <-> 75.132.196.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:15.450593 0.186833 udp 10.0.2.22 51868 <-> 68.227.83.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:16.451385 0.066518 udp 10.0.2.22 51868 <-> 178.172.245.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:17.452940 0.154125 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:18.454842 0.530147 udp 10.0.2.22 51868 <-> 190.178.251.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:19.446319 2.146325 udp 10.0.2.22 51868 <-> 84.240.210.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:20.447196 1.049958 udp 10.0.2.22 51868 <-> 5.14.105.99 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:22.450136 0.145049 udp 10.0.2.22 51868 <-> 216.129.180.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:23.451602 0.119797 udp 10.0.2.22 51868 <-> 151.21.8.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:24.323089 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:50:24.453243 0.071197 udp 10.0.2.22 51868 <-> 178.158.102.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:25.454342 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:50:26.446083 0.223586 udp 10.0.2.22 51868 <-> 116.68.109.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:27.447322 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:50:28.449122 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:50:29.450062 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:50:30.451962 0.024711 udp 10.0.2.22 51868 <-> 109.193.41.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:31.453326 0.000000 udp 10.0.2.22 51868 -> 95.85.176.167 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:50:32.454655 0.071637 udp 10.0.2.22 51868 <-> 78.247.174.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:33.446188 0.361218 udp 10.0.2.22 51868 <-> 118.233.136.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:34.447272 0.937256 udp 10.0.2.22 51868 <-> 49.213.47.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:35.449078 0.233424 udp 10.0.2.22 51868 <-> 190.73.76.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:36.450781 0.000000 udp 10.0.2.22 51868 -> 207.42.135.185 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:50:37.451846 0.161366 udp 10.0.2.22 51868 <-> 108.183.69.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:38.453183 0.045639 udp 10.0.2.22 51868 <-> 212.182.29.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:39.444445 0.408938 udp 10.0.2.22 51868 <-> 27.3.138.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:40.446453 0.168675 udp 10.0.2.22 51868 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:41.447768 0.123401 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:42.448928 0.162124 udp 10.0.2.22 51868 <-> 71.72.193.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:43.450740 0.000000 udp 10.0.2.22 51868 -> 188.27.196.55 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:50:44.451635 0.152973 udp 10.0.2.22 51868 <-> 66.211.234.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:45.453065 0.145048 udp 10.0.2.22 51868 <-> 65.188.252.224 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:46.445001 0.812157 udp 10.0.2.22 51868 <-> 86.52.103.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:47.445920 2.172429 udp 10.0.2.22 51868 <-> 50.165.123.68 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:48.448106 0.000000 udp 10.0.2.22 51868 -> 190.73.76.190 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:50:50.450898 0.053044 udp 10.0.2.22 51868 <-> 188.27.211.102 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:51.321627 0.000119 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:50:51.451836 0.000000 udp 10.0.2.22 51868 -> 78.157.87.145 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:50:52.453395 0.089610 udp 10.0.2.22 51868 <-> 84.146.122.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:53.444956 0.303333 udp 10.0.2.22 51868 <-> 27.143.46.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:50:54.446763 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:50:55.448061 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:50:56.448936 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:50:57.450914 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:50:58.451810 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:50:59.453487 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:51:00.445114 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:51:01.446886 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:51:02.447568 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:51:03.449197 0.067679 udp 10.0.2.22 51868 <-> 128.71.112.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:04.450652 0.660694 udp 10.0.2.22 51868 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:05.452517 0.307352 udp 10.0.2.22 51868 <-> 186.94.84.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:06.453421 0.135940 udp 10.0.2.22 51868 <-> 75.118.87.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:07.445495 0.175647 udp 10.0.2.22 51868 <-> 69.243.233.159 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:08.446489 0.344291 udp 10.0.2.22 51868 <-> 187.69.166.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:09.447918 0.766368 udp 10.0.2.22 51868 <-> 99.196.156.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:10.449656 0.283891 udp 10.0.2.22 51868 <-> 1.186.112.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:11.450665 0.158851 udp 10.0.2.22 51868 <-> 75.86.159.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:12.452316 0.186593 udp 10.0.2.22 51868 <-> 183.83.152.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:13.453643 0.248523 udp 10.0.2.22 51868 <-> 70.234.170.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:14.445422 0.042399 udp 10.0.2.22 51868 <-> 5.20.145.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:15.446719 0.350979 udp 10.0.2.22 51868 <-> 200.85.88.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:16.448218 0.343729 udp 10.0.2.22 51868 <-> 14.98.182.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:17.449210 0.216332 udp 10.0.2.22 51868 <-> 190.254.197.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:18.320655 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:51:18.451188 0.000000 udp 10.0.2.22 51868 -> 108.132.224.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:51:19.452632 0.285323 udp 10.0.2.22 51868 <-> 187.107.55.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:20.453611 0.145141 udp 10.0.2.22 51868 <-> 24.154.53.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:21.445088 0.154852 udp 10.0.2.22 51868 <-> 75.109.202.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:22.446498 0.153707 udp 10.0.2.22 51868 <-> 216.81.125.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:23.448082 0.275467 udp 10.0.2.22 51868 <-> 186.136.213.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:24.449528 1.333850 udp 10.0.2.22 51868 <-> 186.11.25.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:25.450597 0.000000 udp 10.0.2.22 51868 -> 124.185.234.230 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:51:26.452519 0.264004 udp 10.0.2.22 51868 <-> 81.226.243.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:27.453681 0.198841 udp 10.0.2.22 51868 <-> 173.25.251.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:28.445224 0.672698 udp 10.0.2.22 51868 <-> 202.29.178.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:29.446605 0.188389 udp 10.0.2.22 51868 <-> 70.82.157.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:30.448245 4.996921 udp 10.0.2.22 51868 <-> 24.0.29.18 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:31.449196 0.407838 udp 10.0.2.22 51868 <-> 190.193.54.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:32.451222 1.141493 udp 10.0.2.22 51868 <-> 69.127.160.38 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:34.453532 0.207381 udp 10.0.2.22 51868 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:35.581506 0.000034 udp 10.0.2.22 51868 <- 24.0.29.18 16464 RSP 0 0 2 1780 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:51:36.447108 0.000000 udp 10.0.2.22 51868 -> 79.118.190.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:51:37.448568 0.408623 udp 10.0.2.22 51868 <-> 190.193.54.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:38.449257 0.047730 udp 10.0.2.22 51868 <-> 46.214.114.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:39.451279 0.378128 udp 10.0.2.22 51868 <-> 113.253.23.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:40.452669 0.344865 udp 10.0.2.22 51868 <-> 187.49.27.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:41.453743 0.000000 udp 10.0.2.22 51868 -> 93.184.90.203 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:51:42.445121 0.385380 udp 10.0.2.22 51868 <-> 111.249.249.198 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:43.446858 3.517391 udp 10.0.2.22 51868 <-> 89.110.247.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:44.447977 0.117650 udp 10.0.2.22 51868 <-> 68.230.129.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:45.319166 0.000115 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:51:45.450057 0.260554 udp 10.0.2.22 51868 <-> 115.241.238.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:46.450826 0.144427 udp 10.0.2.22 51868 <-> 70.83.135.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:47.452496 0.182059 udp 10.0.2.22 51868 <-> 49.205.21.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:48.454205 0.147019 udp 10.0.2.22 51868 <-> 68.192.112.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:49.445218 0.025879 udp 10.0.2.22 51868 <-> 85.130.45.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:50.446799 0.000000 udp 10.0.2.22 51868 -> 122.47.209.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:51:51.448599 4.005498 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:51:52.449613 0.065462 udp 10.0.2.22 51868 <-> 188.241.23.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:53.451591 0.308595 udp 10.0.2.22 51868 <-> 220.129.38.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:54.452387 0.025863 udp 10.0.2.22 51868 <-> 85.130.45.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:56.445659 0.425129 udp 10.0.2.22 51868 <-> 177.149.127.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:57.447046 1.178222 udp 10.0.2.22 51868 <-> 24.209.250.28 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:51:59.449724 3.164974 udp 10.0.2.22 51868 <-> 174.78.104.11 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:00.451172 0.000000 udp 10.0.2.22 51868 -> 122.47.209.21 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:52:00.774519 3.001369 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 05:52:01.453125 0.058320 udp 10.0.2.22 51868 <-> 31.44.194.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:03.445233 0.357478 udp 10.0.2.22 51868 <-> 219.78.101.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:04.446749 0.000000 udp 10.0.2.22 51868 -> 188.241.23.13 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:52:05.448821 0.317491 udp 10.0.2.22 51868 <-> 220.129.38.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:06.449846 0.360137 udp 10.0.2.22 51868 <-> 187.69.166.4 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:07.451671 2.002363 udp 10.0.2.22 51868 -> 31.63.155.175 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:52:07.781754 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:52:08.452410 0.209135 udp 10.0.2.22 51868 <-> 186.115.125.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:10.445714 0.000000 udp 10.0.2.22 51868 -> 173.199.217.72 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:52:11.447351 1.001087 udp 10.0.2.22 51868 <-> 5.14.47.167 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:12.327921 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:52:13.449828 0.044138 udp 10.0.2.22 51868 <-> 178.148.77.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:14.451066 0.201316 udp 10.0.2.22 51868 <-> 186.115.125.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:15.452970 0.398764 udp 10.0.2.22 51868 <-> 203.147.90.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:15.783168 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:52:16.453901 3.995765 udp 10.0.2.22 51868 -> 31.63.155.175 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:52:17.445417 0.374640 udp 10.0.2.22 51868 <-> 113.253.23.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:18.447418 0.164744 udp 10.0.2.22 51868 <-> 69.73.42.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:19.448955 0.236789 udp 10.0.2.22 51868 <-> 24.203.105.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:21.451269 0.000000 udp 10.0.2.22 51868 -> 173.199.217.72 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:52:22.452823 0.312432 udp 10.0.2.22 51868 <-> 117.221.2.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:23.454654 0.287904 udp 10.0.2.22 51868 <-> 75.25.21.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:24.445482 0.385523 udp 10.0.2.22 51868 <-> 36.231.100.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:25.447477 0.391039 udp 10.0.2.22 51868 <-> 114.27.114.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:26.448357 0.234871 udp 10.0.2.22 51868 <-> 27.106.77.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:27.450168 0.059510 udp 10.0.2.22 51868 <-> 82.211.182.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:28.451263 0.384799 udp 10.0.2.22 51868 <-> 101.111.191.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:29.453029 0.000000 udp 10.0.2.22 51868 -> 184.166.9.214 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:52:30.454090 0.086307 udp 10.0.2.22 51868 <-> 95.86.74.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:31.445968 0.378050 udp 10.0.2.22 51868 <-> 36.224.167.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:31.786693 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:52:32.447070 0.000000 udp 10.0.2.22 51868 -> 79.117.157.154 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:52:33.448530 0.160402 udp 10.0.2.22 51868 <-> 74.135.11.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:34.450091 0.131977 udp 10.0.2.22 51868 <-> 173.80.7.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:35.451636 0.260006 udp 10.0.2.22 51868 <-> 181.165.100.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:36.452677 0.142362 udp 10.0.2.22 51868 <-> 68.199.44.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:36.783240 0.010827 udp 10.0.2.22 60030 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 05:52:36.794427 0.000000 udp 10.0.2.22 60031 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:52:37.454116 0.048539 udp 10.0.2.22 51868 <-> 87.99.81.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:38.445540 0.286786 udp 10.0.2.22 51868 <-> 166.159.168.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:39.327104 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:52:39.447567 0.048468 udp 10.0.2.22 51868 <-> 147.163.93.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:40.449120 0.000000 udp 10.0.2.22 51868 -> 46.35.110.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:52:41.449835 0.000000 udp 10.0.2.22 51868 -> 80.39.25.228 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:52:42.451933 0.000000 udp 10.0.2.22 51868 -> 109.235.225.230 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:52:43.453066 0.072824 udp 10.0.2.22 51868 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:44.454782 1.055931 udp 10.0.2.22 51868 <-> 2.92.4.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:46.447120 0.044542 udp 10.0.2.22 51868 <-> 176.37.230.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:47.448987 0.041287 udp 10.0.2.22 51868 <-> 213.231.137.6 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:48.449915 0.379229 udp 10.0.2.22 51868 <-> 177.80.157.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:49.451417 0.151113 udp 10.0.2.22 51868 <-> 173.218.51.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:50.453662 0.288753 udp 10.0.2.22 51868 <-> 181.165.238.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:51.454921 0.215640 udp 10.0.2.22 51868 <-> 24.7.146.40 16464 CON 0 0 2 668 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:52.446233 0.113764 udp 10.0.2.22 51868 <-> 72.209.212.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:53.447234 0.163022 udp 10.0.2.22 51868 <-> 96.20.172.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:54.448917 0.035036 udp 10.0.2.22 51868 <-> 91.66.213.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:55.450338 0.146589 udp 10.0.2.22 51868 <-> 216.36.28.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:56.451738 0.135117 udp 10.0.2.22 51868 <-> 217.203.130.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:57.453032 0.023666 udp 10.0.2.22 51868 <-> 109.192.130.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:58.454704 0.033639 udp 10.0.2.22 51868 <-> 5.53.153.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:52:59.445723 0.265269 udp 10.0.2.22 51868 <-> 31.47.27.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:00.447562 0.303289 udp 10.0.2.22 51868 <-> 203.88.184.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:01.448835 0.315180 udp 10.0.2.22 51868 <-> 182.167.14.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:02.450074 0.139313 udp 10.0.2.22 51868 <-> 66.191.214.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:03.451740 0.060108 udp 10.0.2.22 51868 <-> 88.161.227.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:03.792356 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:53:04.453083 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:05.454990 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:06.326052 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:53:06.446029 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:07.447632 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:08.448698 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:09.450197 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:10.451540 0.670182 udp 10.0.2.22 51868 <-> 117.229.147.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:11.453136 0.000000 udp 10.0.2.22 51868 -> 200.161.127.47 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:12.444907 0.266840 udp 10.0.2.22 51868 <-> 187.101.38.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:13.445959 0.346168 udp 10.0.2.22 51868 <-> 181.226.152.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:14.447284 0.415300 udp 10.0.2.22 51868 <-> 70.234.170.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:15.448761 0.000000 udp 10.0.2.22 51868 -> 24.140.128.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:16.450692 0.026396 udp 10.0.2.22 51868 <-> 84.107.67.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:17.452107 0.303223 udp 10.0.2.22 51868 <-> 114.180.118.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:18.453085 0.422789 udp 10.0.2.22 51868 <-> 116.124.142.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:19.445069 0.000000 udp 10.0.2.22 51868 -> 180.215.176.192 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:20.446626 0.171940 udp 10.0.2.22 51868 <-> 103.249.235.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:21.447356 0.081941 udp 10.0.2.22 51868 <-> 94.153.59.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:22.449031 0.268528 udp 10.0.2.22 51868 <-> 179.210.57.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:23.450939 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:24.452253 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:25.453149 4.997460 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:26.445028 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:27.446381 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:28.447761 0.170758 udp 10.0.2.22 51868 <-> 24.113.18.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:29.449352 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:31.451745 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:32.454008 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:33.324858 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:53:33.445251 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:34.446363 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:35.447672 0.000000 udp 10.0.2.22 51868 -> 193.106.25.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:36.448908 0.037767 udp 10.0.2.22 51868 <-> 188.254.170.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:37.450619 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:38.452082 1.086179 udp 10.0.2.22 51868 <-> 91.116.202.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:40.444913 4.045564 udp 10.0.2.22 51868 <-> 79.113.239.177 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:41.446615 1.557436 udp 10.0.2.22 51868 <-> 46.100.248.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:42.448073 0.038002 udp 10.0.2.22 51868 <-> 78.128.44.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:43.449234 0.000000 udp 10.0.2.22 51868 -> 71.45.42.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:45.452117 0.367977 udp 10.0.2.22 51868 <-> 223.19.173.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:46.453312 0.000000 udp 10.0.2.22 51868 -> 111.251.136.159 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:47.444878 0.000000 udp 10.0.2.22 51868 -> 24.117.40.170 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:48.446174 0.047399 udp 10.0.2.22 51868 <-> 84.40.72.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:49.448226 0.171928 udp 10.0.2.22 51868 <-> 65.25.78.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:50.449089 0.048324 udp 10.0.2.22 51868 <-> 212.117.27.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:51.450734 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:52.452254 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:53.453592 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:54.445216 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:55.446680 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:53:56.448069 0.206936 udp 10.0.2.22 51868 <-> 124.125.249.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:57.449420 0.423109 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:58.451085 0.307294 udp 10.0.2.22 51868 <-> 124.109.194.224 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:53:59.452323 0.000000 udp 10.0.2.22 51868 -> 108.183.176.48 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:00.323813 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:54:00.453719 0.216970 udp 10.0.2.22 51868 <-> 79.13.238.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:01.445482 0.329771 udp 10.0.2.22 51868 <-> 171.96.66.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:02.446577 0.300765 udp 10.0.2.22 51868 <-> 171.96.99.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:03.448108 0.298091 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:04.449772 0.144933 udp 10.0.2.22 51868 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:05.450608 0.082640 udp 10.0.2.22 51868 <-> 5.53.153.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:06.452332 1.308952 udp 10.0.2.22 51868 <-> 115.132.136.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:07.454010 0.173611 udp 10.0.2.22 51868 <-> 87.11.6.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:08.445608 0.000000 udp 10.0.2.22 51868 -> 108.204.224.212 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:09.446421 0.000000 udp 10.0.2.22 51868 -> 78.247.174.177 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:10.447909 0.052278 udp 10.0.2.22 51868 <-> 46.9.150.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:11.449731 0.000000 udp 10.0.2.22 51868 -> 103.249.235.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:12.451102 0.308705 udp 10.0.2.22 51868 <-> 210.115.47.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:13.452718 0.218642 udp 10.0.2.22 51868 <-> 190.254.197.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:14.454385 0.284073 udp 10.0.2.22 51868 <-> 190.17.84.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:15.445093 0.143341 udp 10.0.2.22 51868 <-> 67.162.240.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:16.447186 0.000000 udp 10.0.2.22 51868 -> 188.54.113.145 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:17.448102 0.257371 udp 10.0.2.22 51868 <-> 98.155.248.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:18.449659 0.140638 udp 10.0.2.22 51868 <-> 97.81.78.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:19.451468 0.279196 udp 10.0.2.22 51868 <-> 177.143.165.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:20.452317 0.052792 udp 10.0.2.22 51868 <-> 89.2.226.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:21.454217 0.163899 udp 10.0.2.22 51868 <-> 120.138.105.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:22.445249 0.076206 udp 10.0.2.22 51868 <-> 46.185.23.34 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:23.446517 0.150014 udp 10.0.2.22 51868 <-> 68.192.3.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:24.448525 3.059599 udp 10.0.2.22 51868 <-> 79.113.147.215 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:25.449858 0.000000 udp 10.0.2.22 51868 -> 94.54.214.60 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:26.451197 0.071831 udp 10.0.2.22 51868 <-> 85.130.12.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:27.322018 0.000103 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:54:28.454132 0.067242 udp 10.0.2.22 51868 <-> 78.136.104.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:29.445184 0.000000 udp 10.0.2.22 51868 -> 223.133.79.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:30.447263 0.281331 udp 10.0.2.22 51868 <-> 187.66.244.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:31.448635 0.198041 udp 10.0.2.22 51868 <-> 98.127.16.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:32.449972 0.122407 udp 10.0.2.22 51868 <-> 109.52.232.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:33.451259 0.151312 udp 10.0.2.22 51868 <-> 98.235.73.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:34.452833 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:35.454426 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:36.445303 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:37.447085 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:38.448670 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:40.450958 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:41.453058 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:42.454032 0.206225 udp 10.0.2.22 51868 <-> 98.238.204.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:43.445715 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:44.446720 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:45.448599 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:46.450062 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:47.451357 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:48.452620 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:49.454549 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:50.445680 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:51.446761 0.000043 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:51.446804 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:54:52.448935 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:53.449813 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:54.320913 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:54:54.451230 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:55.453063 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:56.454654 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:57.445642 3.034324 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:54:58.447014 0.256203 udp 10.0.2.22 51868 <-> 173.174.12.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:54:59.478950 0.088241 udp 10.0.2.22 51868 <-> 82.225.28.105 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:01.481568 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:55:02.482609 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:55:03.484321 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:55:04.476130 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:55:05.477120 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:55:06.478931 0.172876 udp 10.0.2.22 51868 <-> 124.123.172.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:07.480051 0.068361 udp 10.0.2.22 51868 <-> 78.136.104.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:08.481537 0.058848 udp 10.0.2.22 51868 <-> 94.177.14.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:09.483385 0.064746 udp 10.0.2.22 51868 <-> 188.25.221.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:10.484173 0.281838 udp 10.0.2.22 51868 <-> 209.137.215.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:11.475969 0.057160 udp 10.0.2.22 51868 <-> 78.234.37.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:12.477137 0.116369 udp 10.0.2.22 51868 <-> 68.229.91.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:13.478628 0.043316 udp 10.0.2.22 51868 <-> 93.183.152.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:14.482115 0.299460 udp 10.0.2.22 51868 <-> 190.185.143.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:15.481573 0.019631 udp 10.0.2.22 51868 <-> 89.47.233.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:16.482930 0.359127 udp 10.0.2.22 51868 <-> 36.234.226.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:17.484505 0.073425 udp 10.0.2.22 51868 <-> 84.232.82.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:18.476074 0.242503 udp 10.0.2.22 51868 <-> 27.106.39.110 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:19.477096 0.046033 udp 10.0.2.22 51868 <-> 86.125.171.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:20.478626 0.165100 udp 10.0.2.22 51868 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:21.350241 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:55:21.479921 0.066024 udp 10.0.2.22 51868 <-> 88.186.212.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:22.481631 0.042000 udp 10.0.2.22 51868 <-> 147.156.24.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:23.482984 0.000000 udp 10.0.2.22 51868 -> 75.243.221.110 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:55:24.484782 0.000000 udp 10.0.2.22 51868 -> 91.15.138.45 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:55:25.475855 0.300450 udp 10.0.2.22 51868 <-> 117.207.56.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:26.477544 1.288108 udp 10.0.2.22 51868 <-> 71.102.80.27 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:28.480682 0.095750 udp 10.0.2.22 51868 <-> 88.161.227.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:29.481472 0.446672 udp 10.0.2.22 51868 <-> 203.171.229.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:30.482884 0.087697 udp 10.0.2.22 51868 <-> 151.70.20.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:31.484444 0.207913 udp 10.0.2.22 51868 <-> 67.185.146.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:32.475965 0.134860 udp 10.0.2.22 51868 <-> 176.56.67.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:33.477478 0.000000 udp 10.0.2.22 51868 -> 90.15.176.225 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:55:34.479217 0.048948 udp 10.0.2.22 51868 <-> 92.227.206.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:35.480512 2.310043 udp 10.0.2.22 51868 <-> 177.68.82.158 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:36.481487 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:55:38.484813 0.025100 udp 10.0.2.22 51868 <-> 109.193.41.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:39.476187 0.221736 udp 10.0.2.22 51868 <-> 177.224.86.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:40.477239 0.426070 udp 10.0.2.22 51868 <-> 82.50.47.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:41.479229 0.000000 udp 10.0.2.22 51868 -> 78.35.80.216 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:55:42.480287 0.911619 udp 10.0.2.22 51868 <-> 174.64.190.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:43.481586 0.446095 udp 10.0.2.22 51868 -> 99.48.192.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:55:43.927681 0.000000 icmp 99.48.192.246 0x0303 -> 10.0.2.22 0x5040 URP 192 1 70 flow=Background 1970/01/01 05:55:44.483636 0.068751 udp 10.0.2.22 51868 <-> 84.125.117.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:45.474778 0.102356 udp 10.0.2.22 51868 <-> 86.57.157.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:46.476611 0.158656 udp 10.0.2.22 51868 <-> 96.28.143.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:47.477513 0.123439 udp 10.0.2.22 51868 <-> 208.104.198.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:48.358978 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:55:48.478879 0.000000 udp 10.0.2.22 51868 -> 79.222.166.178 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:55:49.480652 0.000000 udp 10.0.2.22 51868 -> 61.223.95.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:55:50.482016 0.135881 udp 10.0.2.22 51868 <-> 213.231.17.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:51.483327 0.049667 udp 10.0.2.22 51868 <-> 92.227.206.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:52.474932 0.236990 udp 10.0.2.22 51868 <-> 186.92.62.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:53.476125 0.152666 udp 10.0.2.22 51868 <-> 71.226.145.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:54.477845 0.078130 udp 10.0.2.22 51868 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:55.479147 0.000000 udp 10.0.2.22 51868 -> 68.14.166.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:55:56.480505 0.404806 udp 10.0.2.22 51868 <-> 98.203.127.16 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:57.482234 0.644003 udp 10.0.2.22 51868 <-> 115.240.79.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:58.483457 0.388307 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:55:59.474719 0.235429 udp 10.0.2.22 51868 <-> 200.109.206.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:00.476439 0.427402 udp 10.0.2.22 51868 <-> 91.23.47.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:01.477751 1.485654 udp 10.0.2.22 51868 <-> 61.27.135.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:02.479127 0.099126 udp 10.0.2.22 51868 <-> 79.47.111.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:03.480357 0.329560 udp 10.0.2.22 51868 <-> 202.78.81.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:04.482331 0.414606 udp 10.0.2.22 51868 <-> 111.242.160.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:05.483917 0.105759 udp 10.0.2.22 51868 <-> 85.65.239.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:06.475176 0.034755 udp 10.0.2.22 51868 <-> 88.80.117.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:07.476526 0.054480 udp 10.0.2.22 51868 <-> 82.238.254.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:08.478392 0.205805 udp 10.0.2.22 51868 <-> 98.238.204.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:09.479094 0.128746 udp 10.0.2.22 51868 <-> 2.69.249.101 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:10.480952 0.135507 udp 10.0.2.22 51868 <-> 79.9.99.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:11.482475 0.055879 udp 10.0.2.22 51868 <-> 90.228.236.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:12.483941 1.992331 udp 10.0.2.22 51868 <-> 114.37.112.245 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:13.475335 4.071203 udp 10.0.2.22 51868 <-> 95.220.247.249 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:15.357711 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:56:15.477572 0.000000 udp 10.0.2.22 51868 -> 177.224.174.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:56:16.479585 0.193153 udp 10.0.2.22 51868 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:18.481932 0.081306 udp 10.0.2.22 51868 <-> 178.158.102.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:19.483507 0.160300 udp 10.0.2.22 51868 <-> 66.31.49.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:20.475124 0.138208 udp 10.0.2.22 51868 <-> 79.176.13.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:21.476654 0.190511 udp 10.0.2.22 51868 <-> 75.135.51.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:22.478046 0.158978 udp 10.0.2.22 51868 <-> 108.176.96.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:23.479327 0.000000 udp 10.0.2.22 51868 -> 181.50.137.114 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:56:24.480740 0.057020 udp 10.0.2.22 51868 <-> 93.78.70.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:25.482349 2.357005 udp 10.0.2.22 51868 <-> 46.196.126.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:26.484043 0.000000 udp 10.0.2.22 51868 -> 188.6.74.103 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:56:27.474955 0.380374 udp 10.0.2.22 51868 <-> 111.252.46.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:28.476430 0.172749 udp 10.0.2.22 51868 <-> 24.171.100.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:29.478538 0.146781 udp 10.0.2.22 51868 <-> 68.42.12.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:30.479354 0.374407 udp 10.0.2.22 51868 <-> 36.224.183.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:31.481252 0.000000 udp 10.0.2.22 51868 -> 187.11.102.35 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:56:32.482553 1.004031 udp 10.0.2.22 51868 <-> 173.230.174.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:33.483697 0.150193 udp 10.0.2.22 51868 <-> 98.235.61.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:34.475132 0.037227 udp 10.0.2.22 51868 <-> 88.129.222.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:35.476834 0.053584 udp 10.0.2.22 51868 <-> 85.14.74.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:36.477754 0.000000 udp 10.0.2.22 51868 -> 85.67.22.101 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:56:37.479555 0.119380 udp 10.0.2.22 51868 <-> 79.9.99.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:38.480713 0.058402 udp 10.0.2.22 51868 <-> 78.58.24.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:39.482287 0.339685 udp 10.0.2.22 51868 <-> 210.143.23.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:40.483785 0.058475 udp 10.0.2.22 51868 <-> 80.164.97.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:41.474966 0.048806 udp 10.0.2.22 51868 <-> 90.228.236.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:42.356397 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:56:42.476870 0.437107 udp 10.0.2.22 51868 <-> 117.203.81.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:43.478123 2.034471 udp 10.0.2.22 51868 <-> 77.70.120.2 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:44.479666 0.000000 udp 10.0.2.22 51868 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:56:46.482417 0.089335 udp 10.0.2.22 51868 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:47.483665 0.387684 udp 10.0.2.22 51868 <-> 36.232.204.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:48.475159 0.164783 udp 10.0.2.22 51868 <-> 24.60.218.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:49.476549 0.000000 udp 10.0.2.22 51868 -> 1.22.217.39 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:56:50.477997 0.144728 udp 10.0.2.22 51868 <-> 174.89.51.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:51.479511 0.163424 udp 10.0.2.22 51868 <-> 71.61.50.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:52.481182 0.168737 udp 10.0.2.22 51868 <-> 106.51.44.74 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:53.482423 0.000000 udp 10.0.2.22 51868 -> 115.124.46.92 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:56:54.484151 0.045595 udp 10.0.2.22 51868 <-> 88.216.10.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:55.475635 0.046757 udp 10.0.2.22 51868 <-> 78.239.42.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:56.477066 0.054813 udp 10.0.2.22 51868 <-> 77.85.204.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:57.478076 0.083987 udp 10.0.2.22 51868 <-> 92.149.43.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:58.479405 0.136700 udp 10.0.2.22 51868 <-> 68.82.179.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:56:59.481265 0.205522 udp 10.0.2.22 51868 <-> 190.141.88.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:00.482431 0.211485 udp 10.0.2.22 51868 <-> 184.69.38.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:01.483942 0.290710 udp 10.0.2.22 51868 <-> 181.31.103.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:02.475198 0.390587 udp 10.0.2.22 51868 <-> 114.44.86.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:03.477398 0.000000 udp 10.0.2.22 51868 -> 98.203.127.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:57:04.478357 0.265273 udp 10.0.2.22 51868 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:05.479972 0.157551 udp 10.0.2.22 51868 <-> 50.142.117.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:06.481059 0.150291 udp 10.0.2.22 51868 <-> 98.30.8.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:07.482878 0.000000 udp 10.0.2.22 51868 -> 175.35.18.93 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:57:08.483933 0.286444 udp 10.0.2.22 51868 <-> 179.98.253.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:09.355156 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:57:09.475862 0.135257 udp 10.0.2.22 51868 <-> 71.195.64.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:10.476856 0.049352 udp 10.0.2.22 51868 <-> 193.146.36.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:11.478787 0.166390 udp 10.0.2.22 51868 <-> 24.60.218.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:12.479763 2.345344 udp 10.0.2.22 51868 <-> 218.227.129.90 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:13.481560 0.020547 udp 10.0.2.22 51868 <-> 161.53.166.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:15.484618 0.182981 udp 10.0.2.22 51868 <-> 166.159.178.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:16.475441 0.349395 udp 10.0.2.22 51868 <-> 180.3.235.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:17.477252 0.330257 udp 10.0.2.22 51868 <-> 210.143.23.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:18.478437 1.438293 udp 10.0.2.22 51868 <-> 92.244.130.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:19.479926 0.073697 udp 10.0.2.22 51868 <-> 78.227.210.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:20.481711 0.355475 udp 10.0.2.22 51868 <-> 112.170.227.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:21.482683 0.350522 udp 10.0.2.22 51868 <-> 183.179.175.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:22.484011 0.897495 udp 10.0.2.22 51868 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:23.475555 0.138981 udp 10.0.2.22 51868 <-> 75.183.102.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:24.476986 0.047058 udp 10.0.2.22 51868 <-> 95.87.201.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:25.478439 0.396452 udp 10.0.2.22 51868 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:26.480369 0.263000 udp 10.0.2.22 51868 <-> 91.99.132.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:27.481115 0.412356 udp 10.0.2.22 51868 <-> 119.200.155.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:28.483154 0.163110 udp 10.0.2.22 51868 <-> 75.74.9.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:29.484233 0.183874 udp 10.0.2.22 51868 <-> 24.216.113.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:30.476126 0.170582 udp 10.0.2.22 51868 <-> 173.23.208.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:31.477358 0.000000 udp 10.0.2.22 51868 -> 24.63.83.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:57:32.478792 0.134333 udp 10.0.2.22 51868 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:33.480016 0.156217 udp 10.0.2.22 51868 <-> 96.59.111.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:34.481278 0.012975 udp 10.0.2.22 51868 <-> 152.66.219.240 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:35.483200 0.065435 udp 10.0.2.22 51868 <-> 82.130.171.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:36.354596 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:57:36.484634 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:57:37.475910 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:57:38.477464 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:57:39.478353 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:57:40.479765 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:57:41.481238 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:57:42.482678 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:57:43.484401 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:57:44.476002 0.000000 udp 10.0.2.22 51868 -> 68.98.226.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:57:45.477209 0.000000 udp 10.0.2.22 51868 -> 177.149.127.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:57:46.478411 1.156129 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:57:48.481316 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:57:49.482826 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:57:50.484314 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:57:51.475732 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:57:52.477016 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:57:53.479025 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:57:54.480496 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:57:55.481791 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:57:57.484707 0.000074 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:57:57.484781 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:57:58.476172 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:57:59.477675 1.313215 udp 10.0.2.22 51868 <-> 189.110.71.8 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:01.480704 0.212906 udp 10.0.2.22 51868 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:02.481524 0.208967 udp 10.0.2.22 51868 -> 2.184.60.150 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:58:02.690491 0.000000 icmp 2.184.60.150 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 05:58:03.352810 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:58:03.483276 0.060906 udp 10.0.2.22 51868 <-> 80.70.153.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:04.484832 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:58:05.475854 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:58:06.477572 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:58:07.478596 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:58:08.480345 0.147769 udp 10.0.2.22 51868 <-> 24.99.130.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:09.482081 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:58:10.483629 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:58:11.484895 0.330552 udp 10.0.2.22 51868 <-> 183.179.24.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:12.476123 0.150895 udp 10.0.2.22 51868 <-> 192.226.149.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:13.477598 0.284536 udp 10.0.2.22 51868 <-> 179.216.248.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:14.479353 0.000088 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:58:14.479441 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 05:58:16.481986 0.221812 udp 10.0.2.22 51868 <-> 71.199.58.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:17.483180 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:58:18.474793 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:58:20.477435 0.000000 udp 10.0.2.22 51868 -> 50.72.211.209 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:58:21.478841 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:58:22.480853 0.033771 udp 10.0.2.22 51868 <-> 82.192.233.62 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:23.481780 0.160416 udp 10.0.2.22 51868 <-> 50.88.67.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:24.483196 0.039954 udp 10.0.2.22 51868 <-> 95.90.35.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:25.474989 2.002851 udp 10.0.2.22 51868 <-> 94.190.190.26 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:26.476359 0.125300 udp 10.0.2.22 51868 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:28.479022 0.176772 udp 10.0.2.22 51868 <-> 97.79.248.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:29.480391 0.048269 udp 10.0.2.22 51868 <-> 213.65.135.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:30.352167 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:58:30.482113 0.025237 udp 10.0.2.22 51868 <-> 109.193.41.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:31.483406 0.000000 udp 10.0.2.22 51868 -> 175.215.114.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:58:32.475171 0.000000 udp 10.0.2.22 51868 -> 83.180.209.147 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:58:33.476031 0.055468 udp 10.0.2.22 51868 <-> 109.87.252.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:34.477771 1.905807 udp 10.0.2.22 51868 <-> 89.230.126.254 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:36.480680 0.484074 udp 10.0.2.22 51868 <-> 123.204.131.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:37.482065 0.063856 udp 10.0.2.22 51868 <-> 78.211.170.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:38.483634 0.190431 udp 10.0.2.22 51868 <-> 68.109.145.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:39.474933 0.243719 udp 10.0.2.22 51868 <-> 190.207.157.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:40.476507 0.048893 udp 10.0.2.22 51868 <-> 94.244.87.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:41.477549 1.043585 udp 10.0.2.22 51868 <-> 83.250.76.130 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:43.480880 0.060097 udp 10.0.2.22 51868 <-> 31.11.215.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:44.482033 0.166169 udp 10.0.2.22 51868 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:45.483519 0.088867 udp 10.0.2.22 51868 <-> 82.227.89.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:46.475156 0.036373 udp 10.0.2.22 51868 <-> 84.197.3.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:47.476826 0.000000 udp 10.0.2.22 51868 -> 79.7.112.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:58:48.478037 0.177569 udp 10.0.2.22 51868 <-> 176.237.169.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:49.479313 0.152152 udp 10.0.2.22 51868 <-> 173.28.68.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:50.480491 0.047383 udp 10.0.2.22 51868 <-> 5.14.105.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:51.482066 0.049147 udp 10.0.2.22 51868 <-> 94.244.87.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:52.483885 0.438594 udp 10.0.2.22 51868 <-> 86.38.55.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:53.474731 0.250327 udp 10.0.2.22 51868 <-> 77.201.19.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:54.476620 0.052237 udp 10.0.2.22 51868 <-> 82.160.201.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:55.477681 0.045000 udp 10.0.2.22 51868 <-> 176.37.230.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:56.479443 0.000000 udp 10.0.2.22 51868 -> 82.50.9.142 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:58:57.350406 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:58:57.481020 0.000000 udp 10.0.2.22 51868 -> 50.134.240.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:58:58.482028 0.155411 udp 10.0.2.22 51868 <-> 67.248.200.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:58:59.483431 0.069018 udp 10.0.2.22 51868 <-> 79.126.189.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:00.475364 0.154923 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:01.476908 0.147828 udp 10.0.2.22 51868 <-> 174.108.49.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:02.477955 0.154683 udp 10.0.2.22 51868 <-> 97.101.194.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:03.479724 0.044928 udp 10.0.2.22 51868 <-> 176.37.230.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:04.481256 0.000000 udp 10.0.2.22 51868 -> 68.185.124.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:59:05.482546 0.213078 udp 10.0.2.22 51868 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:06.483424 3.183395 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:07.474858 0.000000 udp 10.0.2.22 51868 -> 177.148.220.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:59:07.828835 3.001177 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 05:59:08.476366 0.023851 udp 10.0.2.22 51868 <-> 84.119.41.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:10.479192 0.173448 udp 10.0.2.22 51868 <-> 24.182.200.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:11.480883 0.118009 udp 10.0.2.22 51868 <-> 98.166.225.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:12.482226 0.055303 udp 10.0.2.22 51868 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:13.483669 0.314432 udp 10.0.2.22 51868 <-> 121.152.144.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:14.475275 0.000000 udp 10.0.2.22 51868 -> 190.0.110.184 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:59:14.836081 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:59:15.476870 0.436064 udp 10.0.2.22 51868 <-> 187.57.60.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:16.478334 0.000000 udp 10.0.2.22 51868 -> 5.109.135.133 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:59:17.479631 0.162112 udp 10.0.2.22 51868 <-> 67.253.46.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:18.480689 0.000000 udp 10.0.2.22 51868 -> 74.56.6.140 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:59:19.482687 0.138108 udp 10.0.2.22 51868 <-> 71.199.116.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:20.483896 0.000000 udp 10.0.2.22 51868 -> 117.206.165.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:59:21.475379 0.000000 udp 10.0.2.22 51868 -> 83.21.59.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:59:22.476916 0.561480 udp 10.0.2.22 51868 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:22.837416 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:59:23.478712 0.325156 udp 10.0.2.22 51868 <-> 200.146.193.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:24.349071 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:59:24.479612 0.737334 udp 10.0.2.22 51868 <-> 172.243.148.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:25.481063 0.153490 udp 10.0.2.22 51868 <-> 85.84.129.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:26.482264 0.436740 udp 10.0.2.22 51868 <-> 116.124.142.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:27.484214 0.045642 udp 10.0.2.22 51868 <-> 5.15.135.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:28.475599 0.151804 udp 10.0.2.22 51868 <-> 1.186.100.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:29.477060 0.086914 udp 10.0.2.22 51868 <-> 178.254.205.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:30.488384 0.030768 udp 10.0.2.22 51868 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:31.490015 0.374653 udp 10.0.2.22 51868 <-> 1.172.166.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:32.491400 0.088743 udp 10.0.2.22 51868 <-> 79.133.148.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:33.492283 0.332518 udp 10.0.2.22 51868 <-> 93.184.85.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:34.494210 0.288311 udp 10.0.2.22 51868 <-> 200.109.206.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:35.485217 0.070527 udp 10.0.2.22 51868 <-> 93.72.6.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:36.487075 0.239039 udp 10.0.2.22 51868 <-> 190.252.196.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:37.488325 0.601188 udp 10.0.2.22 51868 <-> 186.222.59.71 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:38.490140 0.000000 udp 10.0.2.22 51868 -> 68.46.230.219 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:59:38.853647 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 05:59:39.490898 0.249062 udp 10.0.2.22 51868 <-> 186.89.8.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:40.492658 0.117855 udp 10.0.2.22 51868 <-> 24.150.162.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:41.493801 0.000000 udp 10.0.2.22 51868 -> 86.176.77.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:59:42.485196 0.147863 udp 10.0.2.22 51868 <-> 24.228.169.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:43.486624 0.068877 udp 10.0.2.22 51868 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:44.488607 0.000000 udp 10.0.2.22 51868 -> 94.54.214.60 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:59:45.489592 0.000000 udp 10.0.2.22 51868 -> 98.67.186.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:59:46.491351 0.000000 udp 10.0.2.22 51868 -> 83.35.189.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:59:47.492679 4.176031 udp 10.0.2.22 51868 <-> 216.114.61.58 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:48.494268 0.207868 udp 10.0.2.22 51868 <-> 24.2.42.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:49.485555 0.000000 udp 10.0.2.22 51868 -> 186.11.25.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:59:50.487196 0.000000 udp 10.0.2.22 51868 -> 94.54.214.60 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:59:51.367984 0.000124 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 05:59:52.489909 0.000000 udp 10.0.2.22 51868 -> 83.35.189.41 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:59:53.491137 0.165942 udp 10.0.2.22 51868 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:54.492846 0.553365 udp 10.0.2.22 51868 <-> 86.38.55.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:55.494044 0.209839 udp 10.0.2.22 51868 <-> 76.95.164.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:56.485341 0.162822 udp 10.0.2.22 51868 <-> 176.201.229.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:57.487275 0.380061 udp 10.0.2.22 51868 <-> 118.160.187.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 05:59:58.488758 0.000000 udp 10.0.2.22 51868 -> 201.241.29.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 05:59:59.490078 0.393006 udp 10.0.2.22 51868 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:00.491856 1.001334 udp 10.0.2.22 51868 <-> 5.15.195.36 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:02.494511 0.395678 udp 10.0.2.22 51868 <-> 200.175.127.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:03.485726 0.201639 udp 10.0.2.22 51868 <-> 190.218.20.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:04.486890 0.155724 udp 10.0.2.22 51868 <-> 98.223.142.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:05.488836 0.000000 udp 10.0.2.22 51868 -> 184.19.9.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:00:06.490056 0.087739 udp 10.0.2.22 51868 <-> 79.133.148.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:07.491594 4.997370 udp 10.0.2.22 51868 -> 85.84.74.10 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:00:08.492592 0.144629 udp 10.0.2.22 51868 <-> 75.185.241.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:09.494576 0.102297 udp 10.0.2.22 51868 <-> 78.70.192.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:10.486136 0.000000 udp 10.0.2.22 51868 -> 76.5.130.48 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:00:10.856500 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:00:11.487612 0.000000 udp 10.0.2.22 51868 -> 61.4.170.48 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:00:12.698064 0.000000 udp 10.0.2.22 51868 <- 85.84.74.10 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:00:13.489774 0.157316 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:14.491621 0.000000 udp 10.0.2.22 51868 -> 115.250.76.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:00:15.492760 0.000000 udp 10.0.2.22 51868 -> 190.246.10.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:00:16.494609 0.176732 udp 10.0.2.22 51868 <-> 97.106.251.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:17.485661 2.003006 udp 10.0.2.22 51868 -> 95.85.134.40 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:00:18.367434 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:00:18.487024 0.328391 udp 10.0.2.22 51868 <-> 190.110.186.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:20.490641 1.000683 udp 10.0.2.22 51868 <-> 61.224.47.46 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:22.492978 0.220368 udp 10.0.2.22 51868 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:23.494901 0.000000 udp 10.0.2.22 51868 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:00:24.485695 0.301410 udp 10.0.2.22 51868 <-> 189.110.195.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:25.487764 0.142740 udp 10.0.2.22 51868 <-> 75.181.151.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:26.488740 0.000000 udp 10.0.2.22 51868 -> 74.8.233.44 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:00:27.490072 0.277209 udp 10.0.2.22 51868 <-> 14.97.220.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:28.491917 0.197158 udp 10.0.2.22 51868 <-> 69.76.153.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:29.493328 0.000000 udp 10.0.2.22 51868 -> 188.246.74.65 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:00:30.494819 0.000000 udp 10.0.2.22 51868 -> 207.195.76.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:00:31.485841 1.211198 udp 10.0.2.22 51868 <-> 50.134.240.23 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:33.489225 0.222072 udp 10.0.2.22 51868 <-> 177.224.86.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:34.489989 3.245882 udp 10.0.2.22 51868 <-> 24.95.94.145 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:35.491759 0.000000 udp 10.0.2.22 51868 -> 221.115.182.121 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:00:36.492832 0.000000 udp 10.0.2.22 51868 -> 2.192.127.185 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:00:38.486032 0.225134 udp 10.0.2.22 51868 <-> 94.205.1.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:39.487548 0.041152 udp 10.0.2.22 51868 <-> 84.61.180.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:40.489223 0.000000 udp 10.0.2.22 51868 -> 187.56.212.106 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:00:41.490263 0.312024 udp 10.0.2.22 51868 <-> 122.102.232.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:42.491812 0.175370 udp 10.0.2.22 51868 <-> 92.229.38.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:43.493579 0.199017 udp 10.0.2.22 51868 <-> 66.181.250.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:44.494914 0.157617 udp 10.0.2.22 51868 <-> 84.237.204.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:45.366189 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:00:45.486081 0.115033 udp 10.0.2.22 51868 <-> 86.52.103.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:46.487771 0.024389 udp 10.0.2.22 51868 <-> 89.212.235.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:47.488756 0.045143 udp 10.0.2.22 51868 <-> 176.37.230.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:48.490594 0.069551 udp 10.0.2.22 51868 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:49.492033 2.149852 udp 10.0.2.22 51868 <-> 173.29.162.121 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:50.493242 0.000000 udp 10.0.2.22 51868 -> 31.147.115.164 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:00:52.486223 0.000000 udp 10.0.2.22 51868 -> 61.223.95.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:00:53.488007 0.057790 udp 10.0.2.22 51868 <-> 94.78.185.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:54.489164 0.372607 udp 10.0.2.22 51868 <-> 14.97.164.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:55.490494 0.000000 udp 10.0.2.22 51868 -> 114.45.39.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:00:56.492130 0.113075 udp 10.0.2.22 51868 <-> 89.132.14.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:00:57.493105 0.000000 udp 10.0.2.22 51868 -> 95.75.166.48 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:00:58.485162 0.000000 udp 10.0.2.22 51868 -> 82.99.232.9 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:00:59.486342 0.170434 udp 10.0.2.22 51868 <-> 24.102.154.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:01:00.488030 0.306420 udp 10.0.2.22 51868 <-> 14.97.164.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:01:01.488990 0.051239 udp 10.0.2.22 51868 <-> 62.129.168.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:01:02.490815 0.947895 udp 10.0.2.22 51868 <-> 89.229.25.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:01:03.491831 0.236642 udp 10.0.2.22 51868 <-> 98.140.253.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:01:04.493633 2.312676 udp 10.0.2.22 51868 <-> 201.223.239.153 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:01:05.484555 0.063694 udp 10.0.2.22 51868 <-> 85.67.48.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:01:07.487436 0.148592 udp 10.0.2.22 51868 <-> 68.114.146.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:01:08.489126 0.170237 udp 10.0.2.22 51868 <-> 50.82.72.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:01:09.490754 0.000000 udp 10.0.2.22 51868 -> 117.222.36.68 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:01:10.492352 0.474321 udp 10.0.2.22 51868 <-> 203.210.58.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:01:11.493229 0.287565 udp 10.0.2.22 51868 <-> 118.176.12.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:01:12.364685 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:01:12.485079 0.142628 udp 10.0.2.22 51868 <-> 69.112.37.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:01:13.486488 2.002829 udp 10.0.2.22 51868 -> 151.52.90.249 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:01:14.488178 3.674394 udp 10.0.2.22 51868 <-> 223.188.162.248 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:01:18.493227 0.169398 udp 10.0.2.22 51868 <-> 76.109.136.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:01:19.485435 0.366630 udp 10.0.2.22 51868 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:01:20.486196 0.143827 udp 10.0.2.22 51868 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:01:21.488198 0.000000 udp 10.0.2.22 51868 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:01:22.489373 0.291170 udp 10.0.2.22 51868 <-> 189.110.195.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:01:23.491087 2.140523 udp 10.0.2.22 51868 <-> 84.1.20.244 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:01:25.493967 0.153927 udp 10.0.2.22 51868 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:01:26.485413 0.000000 udp 10.0.2.22 51868 -> 95.91.252.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:01:27.486382 0.000000 udp 10.0.2.22 51868 -> 151.52.90.249 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:01:28.487939 0.000000 udp 10.0.2.22 51868 -> 85.11.182.239 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:01:29.489864 0.000000 udp 10.0.2.22 51868 -> 84.1.20.244 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:01:30.490512 0.269236 udp 10.0.2.22 51868 <-> 223.188.162.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:01:31.492262 0.000000 udp 10.0.2.22 51868 -> 216.114.33.171 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:01:32.493968 3.056637 udp 10.0.2.22 51868 <-> 83.20.169.227 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:01:33.485531 0.045966 udp 10.0.2.22 51868 <-> 89.46.84.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:01:34.486405 0.162147 udp 10.0.2.22 51868 <-> 75.143.122.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:01:36.489119 0.292947 udp 10.0.2.22 51868 <-> 200.122.70.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:01:37.490699 0.115356 udp 10.0.2.22 51868 <-> 79.0.211.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:01:38.492350 3.995574 udp 10.0.2.22 51868 -> 85.11.182.239 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:01:39.363193 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:01:39.494062 4.146089 udp 10.0.2.22 51868 <-> 24.241.36.250 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:01:40.484852 0.000000 udp 10.0.2.22 51868 -> 95.91.252.249 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:01:41.486283 0.280423 udp 10.0.2.22 51868 <-> 223.188.162.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:01:45.492573 0.000057 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:01:45.492630 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:01:46.493668 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:01:47.485211 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:01:48.486930 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:01:49.487815 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:01:50.489961 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:01:51.491206 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:01:52.492752 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:01:53.493663 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:01:54.485148 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:01:55.486475 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:01:56.487845 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:01:57.489328 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:01:58.491069 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:01:59.492166 4.997654 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:00.494085 0.290216 udp 10.0.2.22 51868 <-> 190.188.100.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:02:01.485211 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:02.487226 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:03.488346 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:05.494291 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:06.362093 0.000119 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:02:06.492609 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:07.493980 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:08.485109 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:09.487039 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:10.487990 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:11.489940 0.000088 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:11.490028 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:02:12.491221 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:13.492727 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:14.494000 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:15.485610 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:16.486990 0.316426 udp 10.0.2.22 51868 <-> 14.97.92.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:02:17.488642 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:18.490169 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:19.491574 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:20.492421 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:21.494193 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:22.485905 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:23.487129 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:24.488384 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:25.489551 0.000092 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:25.489643 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:02:26.491317 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:27.492678 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:28.494188 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:29.485557 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:30.487362 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:31.488183 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:32.489826 0.254017 udp 10.0.2.22 51868 <-> 14.97.92.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:02:33.361601 0.000122 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:02:33.491203 0.000100 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:33.491303 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:02:34.493159 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:35.494175 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:36.485621 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:37.487301 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:38.488859 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:39.489902 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:40.491276 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:41.493180 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:42.494026 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:43.485798 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:44.486969 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:45.488412 4.006423 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:46.490080 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:47.491909 0.258650 udp 10.0.2.22 51868 <-> 14.97.92.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:02:48.493315 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:50.486253 0.000077 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:50.486330 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:02:51.487168 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:52.488671 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:53.490054 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:54.491429 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:55.492680 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:56.494281 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:57.486353 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:58.487003 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:02:59.488425 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:00.359803 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:03:00.489919 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:01.491679 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:02.493303 4.997259 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:03.494887 0.495234 udp 10.0.2.22 51868 <-> 14.97.92.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:03:04.485659 0.000078 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:04.485737 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:03:05.487248 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:06.489101 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:08.491471 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:09.493428 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:10.494732 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:11.485829 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:12.487458 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:13.489111 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:14.490077 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:15.491499 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:16.493457 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:17.495043 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:18.486158 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:19.487221 0.210767 udp 10.0.2.22 51868 <-> 14.97.92.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:03:20.488918 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:21.490229 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:22.491504 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:23.493597 0.000065 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:23.493662 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:03:24.484578 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:25.486400 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:26.487586 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:27.369106 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:03:27.488828 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:28.490520 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:29.491637 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:30.493394 4.997252 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:31.484622 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:32.486089 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:33.487997 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:34.489076 0.286556 udp 10.0.2.22 51868 <-> 14.97.92.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:03:36.492160 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:37.493486 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:38.485106 0.000058 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:38.485164 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:03:39.486667 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:40.487819 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:41.489043 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:42.490604 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:43.491749 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:44.493770 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:45.484956 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:46.486357 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:47.487566 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:48.489315 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:49.490702 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:50.492563 0.257205 udp 10.0.2.22 51868 <-> 14.97.92.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:03:51.493832 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:52.485073 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:53.486136 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:54.367850 0.000104 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:03:54.488310 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:55.489220 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:56.491185 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:57.492548 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:58.493702 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:03:59.484778 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:00.486692 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:01.487772 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:02.489232 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:03.490667 0.000096 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:03.490763 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:04:04.491923 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:05.493401 3.995812 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:06.485504 0.265126 udp 10.0.2.22 51868 <-> 14.97.92.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:04:07.486541 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:08.487933 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:10.491130 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:11.491973 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:12.493787 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:13.484899 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:14.486900 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:15.488157 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:16.489778 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:17.491234 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:18.492187 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:19.494127 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:20.485417 0.000112 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:20.485529 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:04:21.366492 0.000145 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:04:21.486782 4.005579 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:22.488222 0.301006 udp 10.0.2.22 51868 <-> 14.97.92.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:04:23.489481 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:24.490690 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:26.493934 0.000120 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:26.494054 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:04:27.485099 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:28.487013 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:29.487984 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:30.489381 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:31.491013 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:32.492308 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:33.493608 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:34.485480 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:35.486512 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:36.488638 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:37.489556 3.004662 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:38.490975 0.313013 udp 10.0.2.22 51868 <-> 14.97.92.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:04:39.492666 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:41.485731 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:42.486666 0.000117 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:42.486783 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:04:43.487982 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:44.490006 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:45.491201 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:46.492956 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:47.494116 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:48.365129 0.000116 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:04:48.485455 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:49.486775 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:50.488756 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:51.490214 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:52.491113 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:53.492503 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:54.494441 0.302755 udp 10.0.2.22 51868 <-> 14.97.92.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:04:55.485687 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:56.486846 0.000097 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:56.486943 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:04:57.488477 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:58.490156 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:04:59.491167 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:00.492423 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:01.494804 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:02.485384 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:03.486869 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:04.488786 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:05.489960 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:06.491041 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:07.493201 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:08.493950 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:09.485857 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:10.487174 0.340502 udp 10.0.2.22 51868 <-> 14.97.92.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:05:11.488681 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:12.490357 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:13.491424 0.000111 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:13.491535 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:05:14.493069 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:15.364321 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:05:15.494420 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:16.485463 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:17.486875 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:18.488680 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:19.490349 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:20.491562 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:21.493341 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:22.494679 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:23.485926 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:24.487194 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:25.488963 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:26.490162 0.506212 udp 10.0.2.22 51868 <-> 14.97.92.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:05:27.491238 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:28.492925 0.000116 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:28.493041 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:05:29.494437 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:30.485650 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:31.487661 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:32.488527 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:33.489866 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:34.491333 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:35.493121 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:36.494227 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:37.485723 0.003596 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:37.489319 0.000000 icmp 195.113.235.65 0x0003 -> 10.0.2.22 0x9efe URN 192 1 110 flow=Background 1970/01/01 06:05:38.487413 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:39.488796 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:40.490621 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:41.492000 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:42.362770 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:05:42.493463 0.234387 udp 10.0.2.22 51868 <-> 14.97.92.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:05:43.494636 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:44.485659 0.000124 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:44.485783 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:05:45.487236 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:46.489108 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:47.490168 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:48.491706 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:49.493100 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:50.494302 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:51.485981 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:52.487235 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:53.489240 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:54.490598 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:55.491897 3.995404 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:56.492960 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:57.484340 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:05:58.486456 0.316439 udp 10.0.2.22 51868 <-> 14.97.92.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:06:00.488837 0.177091 udp 10.0.2.22 51868 <-> 64.130.190.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:06:01.490137 0.166820 udp 10.0.2.22 51868 <-> 76.106.222.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:06:02.492368 0.149863 udp 10.0.2.22 51868 <-> 74.59.191.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:06:03.493517 0.323344 udp 10.0.2.22 51868 <-> 211.105.97.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:06:04.485158 0.175184 udp 10.0.2.22 51868 <-> 173.198.147.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:06:05.486635 0.139119 udp 10.0.2.22 51868 <-> 24.228.169.252 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:06:06.487403 0.000000 udp 10.0.2.22 51868 -> 95.220.247.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:07.489108 0.188377 udp 10.0.2.22 51868 <-> 68.149.112.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:06:08.490239 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:09.361946 0.000092 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:06:09.492009 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:10.493073 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:11.484857 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:12.486453 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:13.487784 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:14.863067 3.001115 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 06:06:15.490569 0.000000 udp 10.0.2.22 51868 -> 85.101.15.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:16.492332 0.063173 udp 10.0.2.22 51868 <-> 95.220.247.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:06:17.493551 1.105172 udp 10.0.2.22 51868 <-> 169.244.248.127 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:06:19.486587 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:20.487871 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:21.489272 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:21.870094 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:06:22.490397 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:23.492184 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:24.493265 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:26.486262 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:27.487654 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:28.489594 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:29.490521 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:29.871604 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:06:30.491869 0.000072 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:30.491941 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:06:31.493809 0.003455 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:31.497264 0.000000 icmp 195.113.235.65 0x0003 -> 10.0.2.22 0x9efe URN 192 1 110 flow=Background 1970/01/01 06:06:32.485035 0.113306 udp 10.0.2.22 51868 <-> 169.244.248.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:06:34.487920 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:35.489645 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:36.360983 0.000122 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:06:36.490870 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:37.491859 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:38.493342 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:39.484992 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:40.486687 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:41.488206 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:42.489463 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:43.490998 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:44.492484 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:45.493497 0.000095 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:45.493592 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:06:45.874442 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:06:46.485349 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:47.486598 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:48.488123 1.114418 udp 10.0.2.22 51868 <-> 169.244.248.127 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:06:50.491083 0.130917 udp 10.0.2.22 51868 <-> 24.193.20.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:06:51.492318 0.457935 udp 10.0.2.22 51868 <-> 2.180.96.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:06:52.494050 0.316462 udp 10.0.2.22 51868 <-> 200.158.248.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:06:53.485257 0.000000 udp 10.0.2.22 51868 -> 113.170.224.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:54.486902 0.000000 udp 10.0.2.22 51868 -> 62.221.143.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:55.488426 0.000000 udp 10.0.2.22 51868 -> 24.228.169.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:56.489702 0.000000 udp 10.0.2.22 51868 -> 78.169.227.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:06:57.490924 0.216078 udp 10.0.2.22 51868 <-> 81.226.243.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:06:58.492269 0.051464 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:06:59.494025 0.440855 udp 10.0.2.22 51868 <-> 116.124.142.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:00.485192 0.076228 udp 10.0.2.22 51868 <-> 85.152.248.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:01.486807 0.057422 udp 10.0.2.22 51868 <-> 78.234.37.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:02.487855 0.000000 udp 10.0.2.22 51868 -> 24.186.58.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:07:03.359192 0.000092 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:07:03.489303 0.261654 udp 10.0.2.22 51868 <-> 181.50.137.114 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:04.491087 2.012138 udp 10.0.2.22 51868 <-> 186.188.24.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:05.492501 2.472983 udp 10.0.2.22 51868 <-> 201.172.18.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:06.493924 0.418533 udp 10.0.2.22 51868 <-> 183.106.93.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:07.485190 2.155669 udp 10.0.2.22 51868 <-> 174.99.98.125 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:10.489333 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:07:11.490854 0.145973 udp 10.0.2.22 51868 <-> 24.186.58.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:12.492700 0.041508 udp 10.0.2.22 51868 <-> 217.211.167.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:13.494108 0.000000 udp 10.0.2.22 51868 -> 190.73.247.209 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:07:14.485340 0.000000 udp 10.0.2.22 51868 -> 85.67.48.154 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:07:15.487234 0.136501 udp 10.0.2.22 51868 <-> 76.123.37.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:16.488627 0.000000 udp 10.0.2.22 51868 -> 183.171.65.98 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:07:17.490160 3.174509 udp 10.0.2.22 51868 <-> 66.169.204.32 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:17.880247 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:07:18.491199 0.000000 udp 10.0.2.22 51868 -> 61.223.95.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:07:19.492459 0.150819 udp 10.0.2.22 51868 <-> 162.17.224.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:21.485122 0.181060 udp 10.0.2.22 51868 <-> 27.106.12.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:22.486764 1.719962 udp 10.0.2.22 51868 <-> 98.67.186.253 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:24.489785 0.269777 udp 10.0.2.22 51868 <-> 76.109.136.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:25.490989 0.345188 udp 10.0.2.22 51868 <-> 218.250.127.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:26.492623 0.160420 udp 10.0.2.22 51868 <-> 74.135.107.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:27.494206 0.821645 udp 10.0.2.22 51868 <-> 218.173.239.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:28.485520 0.157952 udp 10.0.2.22 51868 <-> 70.185.202.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:29.487157 0.047544 udp 10.0.2.22 51868 <-> 62.221.143.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:30.368148 0.000125 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:07:30.488758 0.117792 udp 10.0.2.22 51868 <-> 146.115.58.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:31.489725 0.147829 udp 10.0.2.22 51868 <-> 24.74.24.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:32.491974 0.152814 udp 10.0.2.22 51868 <-> 198.179.116.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:33.492977 0.156169 udp 10.0.2.22 51868 <-> 71.194.150.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:34.494428 0.041898 udp 10.0.2.22 51868 <-> 147.156.24.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:35.485265 0.171920 udp 10.0.2.22 51868 <-> 82.239.45.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:36.487134 0.066050 udp 10.0.2.22 51868 <-> 37.235.189.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:36.817284 0.014624 udp 10.0.2.22 60032 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 06:07:36.832168 0.000000 udp 10.0.2.22 60033 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:07:37.488550 0.000000 udp 10.0.2.22 51868 -> 58.114.92.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:07:38.490309 0.000000 udp 10.0.2.22 51868 -> 5.15.167.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:07:39.491216 0.171579 udp 10.0.2.22 51868 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:40.492821 0.430473 udp 10.0.2.22 51868 <-> 36.237.40.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:41.494468 0.115375 udp 10.0.2.22 51868 <-> 146.115.58.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:42.485704 0.174983 udp 10.0.2.22 51868 <-> 98.196.143.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:43.487295 0.414215 udp 10.0.2.22 51868 <-> 219.110.97.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:44.488771 2.002798 udp 10.0.2.22 51868 -> 173.206.5.26 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:07:45.490130 0.191306 udp 10.0.2.22 51868 <-> 68.109.145.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:47.492774 0.228675 udp 10.0.2.22 51868 <-> 190.206.205.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:48.494372 0.364450 udp 10.0.2.22 51868 <-> 186.111.9.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:49.485973 0.047915 udp 10.0.2.22 51868 <-> 81.232.31.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:50.487382 0.196690 udp 10.0.2.22 51868 <-> 76.94.114.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:51.488748 0.139135 udp 10.0.2.22 51868 <-> 69.123.89.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:52.489713 2.096361 udp 10.0.2.22 51868 <-> 213.37.230.218 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:53.491446 0.000000 udp 10.0.2.22 51868 -> 178.37.145.83 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:07:55.494686 0.198530 udp 10.0.2.22 51868 <-> 68.195.175.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:56.485651 0.374507 udp 10.0.2.22 51868 <-> 61.125.119.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:57.367349 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:07:57.487011 0.237424 udp 10.0.2.22 51868 <-> 2.180.77.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:07:58.488368 0.000000 udp 10.0.2.22 51868 -> 41.143.35.7 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:07:59.490602 0.142224 udp 10.0.2.22 51868 <-> 173.212.89.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:00.491389 0.137676 udp 10.0.2.22 51868 <-> 5.34.126.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:01.493467 0.157651 udp 10.0.2.22 51868 <-> 88.72.192.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:02.494304 0.353811 udp 10.0.2.22 51868 <-> 146.83.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:03.486331 0.252331 udp 10.0.2.22 51868 <-> 190.206.147.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:04.487537 0.188730 udp 10.0.2.22 51868 <-> 37.63.220.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:05.488467 1.421119 udp 10.0.2.22 51868 <-> 46.248.74.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:06.490395 0.158342 udp 10.0.2.22 51868 <-> 69.142.180.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:07.491599 1.093915 udp 10.0.2.22 51868 <-> 173.34.197.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:08.493065 0.024671 udp 10.0.2.22 51868 <-> 46.223.92.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:09.494627 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:08:10.485957 0.638092 udp 10.0.2.22 51868 <-> 60.228.64.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:11.487063 0.188389 udp 10.0.2.22 51868 <-> 49.205.135.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:12.488720 0.000000 udp 10.0.2.22 51868 -> 111.240.96.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:08:13.490598 0.150466 udp 10.0.2.22 51868 <-> 24.180.138.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:14.491370 0.000000 udp 10.0.2.22 51868 -> 88.242.161.82 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:08:15.493237 0.000000 udp 10.0.2.22 51868 -> 188.25.20.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:08:16.494549 0.060419 udp 10.0.2.22 51868 <-> 62.83.219.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:17.486377 0.213969 udp 10.0.2.22 51868 <-> 50.193.233.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:18.487864 0.074703 udp 10.0.2.22 51868 <-> 46.57.73.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:19.488792 0.000000 udp 10.0.2.22 51868 -> 71.7.230.73 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:08:20.490557 0.135654 udp 10.0.2.22 51868 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:21.491867 0.046886 udp 10.0.2.22 51868 <-> 46.237.92.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:22.493223 0.147099 udp 10.0.2.22 51868 <-> 71.89.34.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:23.494680 0.172252 udp 10.0.2.22 51868 <-> 23.25.165.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:24.366065 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:08:24.486097 0.051542 udp 10.0.2.22 51868 <-> 193.219.37.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:25.487353 0.213234 udp 10.0.2.22 51868 <-> 117.216.221.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:26.488607 0.121333 udp 10.0.2.22 51868 <-> 85.130.182.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:27.490408 0.153897 udp 10.0.2.22 51868 <-> 24.206.13.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:28.491598 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:08:29.493340 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:08:30.484389 0.000000 udp 10.0.2.22 51868 -> 69.24.115.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:08:31.486488 2.160011 udp 10.0.2.22 51868 <-> 75.143.148.107 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:32.487732 0.000000 udp 10.0.2.22 51868 -> 190.74.199.174 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:08:34.490087 0.164860 udp 10.0.2.22 51868 <-> 70.81.218.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:35.491568 0.144544 udp 10.0.2.22 51868 <-> 70.44.250.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:36.493015 0.720302 udp 10.0.2.22 51868 <-> 80.91.213.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:37.484961 0.137912 udp 10.0.2.22 51868 <-> 24.228.169.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:38.486204 0.000000 udp 10.0.2.22 51868 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:08:39.487565 0.000000 udp 10.0.2.22 51868 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:08:40.488896 0.294601 udp 10.0.2.22 51868 <-> 186.93.166.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:41.490430 0.207368 udp 10.0.2.22 51868 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:42.491607 0.000000 udp 10.0.2.22 51868 -> 111.253.69.87 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:08:43.493559 1.206344 udp 10.0.2.22 51868 <-> 50.193.233.87 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:45.486238 0.050739 udp 10.0.2.22 51868 <-> 46.102.30.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:46.487859 0.394796 udp 10.0.2.22 51868 <-> 111.249.249.198 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:47.488954 0.152851 udp 10.0.2.22 51868 <-> 69.47.169.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:48.380067 0.000000 udp 10.0.2.22 51868 <- 69.24.115.33 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:08:48.490786 0.163442 udp 10.0.2.22 51868 <-> 174.64.165.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:49.492000 0.059023 udp 10.0.2.22 51868 <-> 85.217.232.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:50.493150 0.000000 udp 10.0.2.22 51868 -> 24.0.29.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:08:51.364671 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:08:51.485506 0.068256 udp 10.0.2.22 51868 <-> 78.251.128.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:52.486301 0.210276 udp 10.0.2.22 51868 <-> 98.242.27.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:53.488059 0.228866 udp 10.0.2.22 51868 <-> 2.187.81.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:54.489130 0.000000 udp 10.0.2.22 51868 -> 172.162.51.44 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:08:55.490937 0.000000 udp 10.0.2.22 51868 -> 213.217.46.100 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:08:56.492125 0.142880 udp 10.0.2.22 51868 <-> 71.225.111.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:57.493366 0.163736 udp 10.0.2.22 51868 <-> 66.39.204.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:58.484899 0.120722 udp 10.0.2.22 51868 <-> 24.57.120.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:08:59.486088 0.000000 udp 10.0.2.22 51868 -> 181.118.98.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:09:00.487602 0.026463 udp 10.0.2.22 51868 <-> 85.130.45.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:01.489351 0.071613 udp 10.0.2.22 51868 <-> 90.229.251.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:02.490585 0.000000 udp 10.0.2.22 51868 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:09:03.491922 0.071882 udp 10.0.2.22 51868 <-> 85.86.73.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:04.493974 0.201397 udp 10.0.2.22 51868 <-> 189.192.237.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:05.484892 0.320264 udp 10.0.2.22 51868 <-> 181.226.152.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:06.486807 0.273392 udp 10.0.2.22 51868 <-> 68.96.178.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:07.488000 0.383453 udp 10.0.2.22 51868 <-> 118.169.110.59 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:08.489255 0.364595 udp 10.0.2.22 51868 <-> 61.64.24.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:09.490657 0.165413 udp 10.0.2.22 51868 <-> 68.102.125.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:10.492061 0.391800 udp 10.0.2.22 51868 <-> 111.249.249.198 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:11.493404 0.189655 udp 10.0.2.22 51868 <-> 71.92.82.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:12.485202 0.177222 udp 10.0.2.22 51868 <-> 68.4.25.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:13.486330 0.000000 udp 10.0.2.22 51868 -> 98.175.158.31 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:09:14.487632 0.000000 udp 10.0.2.22 51868 -> 14.97.0.85 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:09:15.489213 0.226740 udp 10.0.2.22 51868 <-> 190.207.61.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:16.490490 0.273156 udp 10.0.2.22 51868 <-> 75.213.227.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:17.492580 0.147096 udp 10.0.2.22 51868 <-> 68.197.223.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:18.363114 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:09:18.493630 0.154201 udp 10.0.2.22 51868 <-> 68.62.2.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:19.485048 0.204502 udp 10.0.2.22 51868 <-> 70.67.84.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:20.486942 0.381220 udp 10.0.2.22 51868 <-> 187.69.61.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:21.488201 1.396123 udp 10.0.2.22 51868 <-> 201.81.192.158 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:23.490759 0.787094 udp 10.0.2.22 51868 <-> 111.248.57.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:24.492552 0.156960 udp 10.0.2.22 51868 <-> 67.184.116.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:25.494031 0.148886 udp 10.0.2.22 51868 <-> 207.181.241.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:26.485584 0.266954 udp 10.0.2.22 51868 <-> 179.210.57.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:27.486638 0.142496 udp 10.0.2.22 51868 <-> 96.20.86.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:28.488269 0.060448 udp 10.0.2.22 51868 <-> 88.183.185.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:29.489625 0.031873 udp 10.0.2.22 51868 <-> 130.204.169.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:30.490810 0.391379 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:31.492530 2.105185 udp 10.0.2.22 51868 <-> 89.29.147.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:32.493987 0.384728 udp 10.0.2.22 51868 <-> 61.64.176.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:33.485659 0.000000 udp 10.0.2.22 51868 -> 139.228.161.48 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:09:34.486911 0.413824 udp 10.0.2.22 51868 <-> 59.85.236.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:35.488153 0.000000 udp 10.0.2.22 51868 -> 96.22.131.104 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:09:36.489547 0.000000 udp 10.0.2.22 51868 -> 81.179.50.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:09:37.490705 0.371920 udp 10.0.2.22 51868 <-> 183.178.231.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:38.492823 0.381863 udp 10.0.2.22 51868 <-> 61.231.220.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:39.493888 0.301815 udp 10.0.2.22 51868 <-> 186.91.202.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:40.485526 0.069199 udp 10.0.2.22 51868 <-> 46.37.71.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:41.486946 1.446113 udp 10.0.2.22 51868 <-> 14.97.57.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:42.487959 1.747797 udp 10.0.2.22 51868 <-> 201.235.95.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:43.489365 0.142239 udp 10.0.2.22 51868 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:44.491249 0.138539 udp 10.0.2.22 51868 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:45.362519 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:09:45.492847 0.274679 udp 10.0.2.22 51868 <-> 190.204.134.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:46.494136 0.000000 udp 10.0.2.22 51868 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:09:47.485746 0.156890 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:48.487234 0.152213 udp 10.0.2.22 51868 <-> 98.25.25.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:49.488255 0.000000 udp 10.0.2.22 51868 -> 181.192.6.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:09:50.490011 0.426474 udp 10.0.2.22 51868 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:51.491205 0.174885 udp 10.0.2.22 51868 <-> 173.16.136.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:52.492772 0.030317 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:53.494242 0.000000 udp 10.0.2.22 51868 -> 5.13.132.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:09:54.485614 0.586787 udp 10.0.2.22 51868 <-> 188.167.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:55.486680 0.182425 udp 10.0.2.22 51868 <-> 89.237.61.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:56.488620 0.396387 udp 10.0.2.22 51868 <-> 118.237.15.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:57.489813 0.058599 udp 10.0.2.22 51868 <-> 31.44.194.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:58.491220 1.876015 udp 10.0.2.22 51868 <-> 139.0.190.28 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:09:59.492750 0.284852 udp 10.0.2.22 51868 <-> 180.182.174.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:00.494428 0.031984 udp 10.0.2.22 51868 <-> 89.215.228.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:01.485778 0.000000 udp 10.0.2.22 51868 -> 173.199.217.72 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:10:02.486961 0.440688 udp 10.0.2.22 51868 <-> 121.124.80.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:03.488764 0.157488 udp 10.0.2.22 51868 <-> 50.158.209.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:04.490267 0.072481 udp 10.0.2.22 51868 <-> 93.176.212.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:05.491256 0.286970 udp 10.0.2.22 51868 <-> 190.202.252.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:06.492808 0.154140 udp 10.0.2.22 51868 <-> 24.158.210.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:07.494477 0.053002 udp 10.0.2.22 51868 <-> 94.21.135.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:08.485688 0.142046 udp 10.0.2.22 51868 <-> 78.134.0.39 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:09.487341 0.409522 udp 10.0.2.22 51868 <-> 222.232.76.152 16464 CON 0 0 2 388 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:10.488525 0.422351 udp 10.0.2.22 51868 <-> 69.180.10.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:11.489862 0.371097 udp 10.0.2.22 51868 <-> 61.207.180.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:12.361427 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:10:12.491072 0.345029 udp 10.0.2.22 51868 <-> 125.142.179.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:13.492922 0.362971 udp 10.0.2.22 51868 <-> 1.163.90.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:14.494199 0.141965 udp 10.0.2.22 51868 <-> 184.57.25.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:15.485560 0.294152 udp 10.0.2.22 51868 <-> 210.1.187.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:16.487161 0.124002 udp 10.0.2.22 51868 <-> 94.70.24.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:17.488952 0.601611 udp 10.0.2.22 51868 <-> 201.95.31.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:18.490322 0.134220 udp 10.0.2.22 51868 <-> 68.42.12.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:19.491191 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:10:20.493017 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:10:21.494214 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:10:22.485793 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:10:23.486816 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:10:24.488357 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:10:25.489713 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:10:26.491533 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:10:27.492761 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:10:28.494297 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:10:29.485871 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:10:30.487133 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:10:31.488632 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:10:32.490252 0.387127 udp 10.0.2.22 51868 <-> 223.133.79.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:33.491744 0.175522 udp 10.0.2.22 51868 <-> 49.205.21.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:34.492858 0.378630 udp 10.0.2.22 51868 <-> 115.242.137.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:35.494442 0.054784 udp 10.0.2.22 51868 <-> 109.104.184.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:36.486056 2.497633 udp 10.0.2.22 51868 <-> 50.27.216.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:37.487657 0.050370 udp 10.0.2.22 51868 <-> 92.109.240.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:38.488750 0.058246 udp 10.0.2.22 51868 <-> 78.235.244.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:39.359995 0.000110 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:10:39.490028 0.301376 udp 10.0.2.22 51868 <-> 27.140.82.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:40.491253 0.236681 udp 10.0.2.22 51868 <-> 186.90.110.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:41.493247 2.746270 udp 10.0.2.22 51868 <-> 50.27.216.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:42.494749 0.000000 udp 10.0.2.22 51868 -> 87.17.138.103 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:10:43.485935 0.300964 udp 10.0.2.22 51868 <-> 46.225.85.105 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:44.487221 0.305807 udp 10.0.2.22 51868 <-> 180.199.67.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:45.488543 0.117744 udp 10.0.2.22 51868 <-> 178.127.106.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:46.490606 0.000143 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:10:46.490749 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:10:47.491370 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:10:48.492766 1.050289 udp 10.0.2.22 51868 <-> 147.163.93.48 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:50.486351 0.272465 udp 10.0.2.22 51868 <-> 189.54.34.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:10:51.487440 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:10:52.488687 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:10:53.490495 0.000051 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:10:53.490546 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:10:54.491402 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:10:55.493184 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:10:56.494444 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:10:57.486551 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:10:58.487257 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:10:59.488670 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:00.490178 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:01.491634 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:02.493284 0.280962 udp 10.0.2.22 51868 <-> 189.54.34.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:11:03.484703 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:04.485939 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:05.487302 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:06.368731 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:11:06.489338 0.000000 udp 10.0.2.22 51868 -> 71.236.119.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:07.490509 0.086009 udp 10.0.2.22 51868 <-> 78.15.186.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:11:08.492266 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:09.492970 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:10.484577 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:11.486349 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:12.487621 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:13.489038 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:14.490791 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:15.491678 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:16.493186 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:17.484478 0.000132 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:17.484610 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:11:18.486309 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:19.487702 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:20.489151 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:21.490894 0.295959 udp 10.0.2.22 51868 <-> 189.54.34.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:11:22.491906 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:23.493103 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:24.485153 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:25.486310 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:26.488139 0.000050 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:26.488189 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:11:27.489581 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:28.490466 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:29.492019 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:30.493204 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:31.485133 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:32.486740 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:33.367712 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:11:33.487650 4.997343 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:34.488916 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:35.490417 0.210690 udp 10.0.2.22 51868 <-> 50.131.239.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:11:36.492399 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:37.494100 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:39.486641 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:40.488027 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:41.488943 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:42.490482 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:43.492071 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:44.493728 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:45.484706 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:46.486813 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:47.487918 0.000159 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:47.488077 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:11:48.489065 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:49.490486 0.300211 udp 10.0.2.22 51868 <-> 189.54.34.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:11:50.492217 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:51.493945 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:52.485182 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:53.486762 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:54.488209 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:55.489162 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:56.491299 0.000088 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:56.491387 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:11:57.492374 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:58.494108 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:11:59.485244 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:00.366768 0.000134 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:12:00.486689 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:01.488117 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:02.489688 0.142875 udp 10.0.2.22 51868 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:12:03.490580 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:04.492030 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:05.494150 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:06.485209 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:07.486646 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:08.488211 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:09.489854 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:10.490952 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:11.492189 0.000126 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:11.492315 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:12:12.493961 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:13.485254 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:14.486719 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:15.487857 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:16.489994 0.559381 udp 10.0.2.22 51868 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:12:17.490918 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:18.492505 0.169244 udp 10.0.2.22 51868 <-> 75.66.83.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:12:19.494230 0.144870 udp 10.0.2.22 51868 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:12:20.485162 0.164757 udp 10.0.2.22 51868 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:12:21.486616 0.000000 udp 10.0.2.22 51868 -> 195.230.5.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:22.488346 0.386235 udp 10.0.2.22 51868 <-> 88.236.237.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:12:23.489922 2.222441 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:12:24.491066 0.060590 udp 10.0.2.22 51868 <-> 86.124.151.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:12:26.493828 0.171923 udp 10.0.2.22 51868 <-> 70.112.106.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:12:27.365519 0.000120 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:12:27.485217 0.102625 udp 10.0.2.22 51868 <-> 78.15.186.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:12:28.486681 0.169806 udp 10.0.2.22 51868 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:12:29.488094 0.155340 udp 10.0.2.22 51868 <-> 50.88.67.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:12:30.490062 0.145115 udp 10.0.2.22 51868 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:12:31.491170 0.270940 udp 10.0.2.22 51868 <-> 223.188.162.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:12:32.492986 0.036730 udp 10.0.2.22 51868 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:12:33.494115 0.000000 udp 10.0.2.22 51868 -> 82.245.78.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:34.485409 0.000000 udp 10.0.2.22 51868 -> 165.155.202.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:35.486971 3.004331 udp 10.0.2.22 51868 -> 85.11.182.239 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:36.488606 0.038368 udp 10.0.2.22 51868 <-> 91.65.0.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:12:37.489779 0.138794 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:12:39.492547 0.133685 udp 10.0.2.22 51868 <-> 82.225.246.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:12:40.494658 0.000000 udp 10.0.2.22 51868 -> 174.59.159.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:41.485250 0.274278 udp 10.0.2.22 51868 <-> 223.188.162.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:12:42.487050 0.000000 udp 10.0.2.22 51868 -> 75.109.202.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:43.488411 0.000000 udp 10.0.2.22 51868 -> 46.35.110.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:44.489914 0.138949 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:12:45.491090 0.000000 udp 10.0.2.22 51868 -> 82.124.53.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:46.492617 4.997377 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:12:47.494335 0.000000 udp 10.0.2.22 51868 -> 190.75.86.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:48.485526 0.000000 udp 10.0.2.22 51868 -> 75.109.202.251 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:49.487356 0.000000 udp 10.0.2.22 51868 -> 85.11.182.239 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:50.488847 0.148234 udp 10.0.2.22 51868 <-> 98.229.185.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:12:51.871069 0.000000 udp 10.0.2.22 51868 <- 118.236.118.248 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:52.491294 2.237289 udp 10.0.2.22 51868 <-> 179.216.83.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:12:53.493196 0.048292 udp 10.0.2.22 51868 <-> 95.158.97.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:12:54.363888 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:12:54.494640 0.132705 udp 10.0.2.22 51868 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:12:55.485545 0.059516 udp 10.0.2.22 51868 <-> 79.126.189.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:12:56.487030 0.000000 udp 10.0.2.22 51868 -> 187.26.145.227 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:57.488332 0.000000 udp 10.0.2.22 51868 -> 115.241.10.218 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:58.490363 0.000000 udp 10.0.2.22 51868 -> 122.20.103.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:12:59.491498 0.000000 udp 10.0.2.22 51868 -> 99.47.232.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:13:00.492945 0.210501 udp 10.0.2.22 51868 <-> 76.170.240.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:01.494344 0.429410 udp 10.0.2.22 51868 <-> 114.26.249.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:02.486026 0.095721 udp 10.0.2.22 51868 <-> 83.230.170.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:03.487375 2.060823 udp 10.0.2.22 51868 <-> 188.2.216.49 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:04.488779 0.024503 udp 10.0.2.22 51868 <-> 188.167.119.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:06.491644 0.136738 udp 10.0.2.22 51868 <-> 24.193.20.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:07.492849 0.576290 udp 10.0.2.22 51868 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:08.494473 0.122017 udp 10.0.2.22 51868 <-> 199.192.212.170 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:09.486160 0.043780 udp 10.0.2.22 51868 <-> 62.20.193.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:10.487311 0.709533 udp 10.0.2.22 51868 <-> 218.226.32.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:11.489079 4.282043 udp 10.0.2.22 51868 <-> 187.1.104.125 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:12.490472 0.129375 udp 10.0.2.22 51868 <-> 80.183.102.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:13.491655 0.000000 udp 10.0.2.22 51868 -> 124.121.94.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:13:14.493230 0.000000 udp 10.0.2.22 51868 -> 178.48.110.137 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:13:16.486187 0.618744 udp 10.0.2.22 51868 <-> 218.226.32.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:17.487293 0.554227 udp 10.0.2.22 51868 <-> 124.197.200.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:18.488906 0.000000 udp 10.0.2.22 51868 -> 24.147.226.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:13:19.490369 0.145972 udp 10.0.2.22 51868 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:20.491652 0.098434 udp 10.0.2.22 51868 -> 83.37.135.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:13:20.590086 0.000000 icmp 83.37.135.13 0x0303 -> 10.0.2.22 0x5040 URP 192 1 70 flow=Background 1970/01/01 06:13:21.362553 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:13:21.493118 0.322385 udp 10.0.2.22 51868 <-> 125.4.221.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:21.886185 3.002080 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 06:13:22.494752 0.159074 udp 10.0.2.22 51868 <-> 173.29.162.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:23.486301 0.270012 udp 10.0.2.22 51868 <-> 177.100.111.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:24.487216 0.220638 udp 10.0.2.22 51868 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:25.488768 0.432209 udp 10.0.2.22 51868 <-> 117.222.36.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:26.490585 0.174576 udp 10.0.2.22 51868 <-> 31.70.5.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:27.491358 0.200854 udp 10.0.2.22 51868 <-> 95.58.150.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:28.493254 0.000000 udp 10.0.2.22 51868 -> 190.174.22.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:13:28.893662 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:13:29.494538 0.176653 udp 10.0.2.22 51868 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:30.486173 0.232045 udp 10.0.2.22 51868 <-> 189.197.149.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:31.487158 0.000000 udp 10.0.2.22 51868 -> 190.60.53.110 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:13:32.488878 0.087136 udp 10.0.2.22 51868 <-> 94.153.61.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:33.490495 0.155438 udp 10.0.2.22 51868 <-> 146.163.172.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:34.491971 0.000000 udp 10.0.2.22 51868 -> 199.192.212.170 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:13:35.493351 0.141327 udp 10.0.2.22 51868 <-> 24.57.120.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:36.484310 0.307426 udp 10.0.2.22 51868 <-> 116.70.168.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:36.895450 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:13:37.485810 4.088001 udp 10.0.2.22 51868 <-> 46.175.229.8 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:38.487293 0.358748 udp 10.0.2.22 51868 <-> 113.254.247.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:39.488667 0.367050 udp 10.0.2.22 51868 <-> 14.199.234.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:40.490549 0.176667 udp 10.0.2.22 51868 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:42.493678 0.161708 udp 10.0.2.22 51868 <-> 65.35.3.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:43.484648 0.400046 udp 10.0.2.22 51868 <-> 114.44.143.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:44.485868 0.264793 udp 10.0.2.22 51868 <-> 186.147.157.218 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:45.488016 0.499005 udp 10.0.2.22 51868 <-> 219.109.128.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:46.488831 0.833174 udp 10.0.2.22 51868 <-> 105.143.92.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:47.490890 0.150326 udp 10.0.2.22 51868 <-> 24.209.250.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:48.362050 0.000125 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:13:48.492135 0.054625 udp 10.0.2.22 51868 <-> 94.72.125.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:49.493616 0.072673 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:50.484431 0.160669 udp 10.0.2.22 51868 <-> 49.207.73.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:51.486703 0.038976 udp 10.0.2.22 51868 <-> 94.21.54.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:52.487328 0.083439 udp 10.0.2.22 51868 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:52.898101 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:13:53.489239 4.068885 udp 10.0.2.22 51868 <-> 84.1.20.244 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:54.490517 0.000000 udp 10.0.2.22 51868 -> 98.193.134.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:13:55.491660 0.211636 udp 10.0.2.22 51868 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:57.485058 1.224490 udp 10.0.2.22 51868 <-> 88.169.29.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:58.486019 0.146095 udp 10.0.2.22 51868 <-> 108.202.146.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:13:59.487592 0.000000 udp 10.0.2.22 51868 -> 110.44.66.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:14:00.489273 0.054285 udp 10.0.2.22 51868 <-> 89.190.113.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:01.490743 0.242010 udp 10.0.2.22 51868 <-> 190.26.100.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:02.492394 0.152017 udp 10.0.2.22 51868 <-> 71.88.178.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:03.493147 0.319655 udp 10.0.2.22 51868 <-> 180.19.158.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:04.485102 2.498964 udp 10.0.2.22 51868 <-> 189.28.214.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:05.486651 0.183910 udp 10.0.2.22 51868 <-> 76.217.58.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:06.487501 0.091564 udp 10.0.2.22 51868 <-> 85.155.41.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:07.489079 0.354667 udp 10.0.2.22 51868 <-> 190.203.195.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:08.491029 0.041901 udp 10.0.2.22 51868 <-> 147.156.82.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:09.492000 0.158066 udp 10.0.2.22 51868 <-> 24.231.189.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:10.493714 0.206675 udp 10.0.2.22 51868 <-> 71.95.246.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:11.485167 0.258079 udp 10.0.2.22 51868 <-> 201.17.76.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:12.486487 0.179050 udp 10.0.2.22 51868 <-> 106.51.199.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:13.487918 0.152722 udp 10.0.2.22 51868 <-> 71.205.185.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:14.489457 0.055312 udp 10.0.2.22 51868 <-> 79.118.0.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:15.360630 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:14:15.490620 0.000000 udp 10.0.2.22 51868 -> 49.248.244.115 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:14:16.492108 0.000000 udp 10.0.2.22 51868 -> 84.229.204.125 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:14:17.493992 0.255411 udp 10.0.2.22 51868 <-> 186.95.110.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:18.485063 0.031617 udp 10.0.2.22 51868 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:19.486500 0.000000 udp 10.0.2.22 51868 -> 212.98.191.56 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:14:20.488058 0.243784 udp 10.0.2.22 51868 <-> 209.236.94.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:21.489201 0.146217 udp 10.0.2.22 51868 <-> 71.197.28.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:22.490604 0.145345 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:23.492372 0.000000 udp 10.0.2.22 51868 -> 24.193.202.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:14:24.494032 0.036309 udp 10.0.2.22 51868 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:24.904139 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:14:25.485407 1.834927 udp 10.0.2.22 51868 <-> 24.232.19.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:26.486562 0.207531 udp 10.0.2.22 51868 <-> 190.141.220.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:27.487950 0.167751 udp 10.0.2.22 51868 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:28.489513 0.192989 udp 10.0.2.22 51868 <-> 50.26.30.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:29.490845 0.000000 udp 10.0.2.22 51868 -> 179.211.229.38 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:14:30.491939 1.228345 udp 10.0.2.22 51868 <-> 24.232.19.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:31.494165 0.206300 udp 10.0.2.22 51868 <-> 67.187.191.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:32.485293 0.000079 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:14:32.485372 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:14:33.486800 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:14:34.487814 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:14:35.489837 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:14:36.490792 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:14:37.492045 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:14:39.485293 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:14:40.486384 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:14:41.487756 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:14:42.359574 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:14:42.489203 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:14:43.491191 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:14:44.492487 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:14:45.493704 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:14:46.485059 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:14:47.486802 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:14:48.487927 0.000000 udp 10.0.2.22 51868 -> 49.49.85.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:14:49.489257 0.000000 udp 10.0.2.22 51868 -> 118.168.126.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:14:50.490995 0.015218 udp 10.0.2.22 51868 <-> 161.53.118.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:51.492379 0.023391 udp 10.0.2.22 51868 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:52.494027 0.000000 udp 10.0.2.22 51868 -> 186.5.25.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:14:53.485000 0.000000 udp 10.0.2.22 51868 -> 114.40.25.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:14:54.486781 0.040070 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:55.488322 0.000000 udp 10.0.2.22 51868 -> 79.47.153.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:14:56.489613 0.027774 udp 10.0.2.22 51868 <-> 84.118.201.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:57.491071 0.029123 udp 10.0.2.22 51868 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:14:58.492654 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:14:59.494264 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:15:00.485666 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:15:01.486522 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:15:02.488200 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:15:03.489559 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:15:04.490836 0.041579 udp 10.0.2.22 51868 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:05.492655 0.397076 udp 10.0.2.22 51868 <-> 114.40.25.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:06.493863 0.000000 udp 10.0.2.22 51868 -> 186.5.25.18 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:15:07.485207 0.022829 udp 10.0.2.22 51868 <-> 130.83.54.17 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:08.486967 0.393154 udp 10.0.2.22 51868 <-> 118.168.126.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:09.367993 0.000134 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:15:09.488523 0.000000 udp 10.0.2.22 51868 -> 178.89.193.120 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:15:10.489924 0.168814 udp 10.0.2.22 51868 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:11.491116 0.133235 udp 10.0.2.22 51868 <-> 5.34.126.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:12.492551 0.158574 udp 10.0.2.22 51868 <-> 76.188.30.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:13.494159 2.022418 udp 10.0.2.22 51868 <-> 89.176.72.172 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:14.485609 0.044962 udp 10.0.2.22 51868 <-> 109.199.236.29 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:16.488398 4.997355 udp 10.0.2.22 51868 <-> 186.115.125.165 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:17.490252 0.000000 udp 10.0.2.22 51868 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:15:18.491260 0.162748 udp 10.0.2.22 51868 <-> 76.188.30.171 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:19.492667 0.078558 udp 10.0.2.22 51868 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:20.494405 0.000000 udp 10.0.2.22 51868 -> 2.134.181.100 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:15:22.486788 0.260694 udp 10.0.2.22 51868 <-> 181.167.41.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:23.488242 0.042299 udp 10.0.2.22 51868 <-> 147.156.153.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:24.489593 0.144919 udp 10.0.2.22 51868 <-> 71.77.141.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:25.491339 0.000000 udp 10.0.2.22 51868 -> 189.54.34.75 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:15:26.492851 0.114141 udp 10.0.2.22 51868 <-> 169.244.248.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:27.494294 0.469249 udp 10.0.2.22 51868 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:28.486052 0.046990 udp 10.0.2.22 51868 <-> 84.40.72.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:29.487367 0.000000 udp 10.0.2.22 51868 -> 5.13.132.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:15:30.488471 0.000000 udp 10.0.2.22 51868 -> 139.0.190.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:15:31.490142 0.154784 udp 10.0.2.22 51868 <-> 76.188.30.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:32.491834 0.000000 udp 10.0.2.22 51868 -> 190.79.130.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:15:33.492553 0.000000 udp 10.0.2.22 51868 -> 115.241.203.92 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:15:34.494047 0.271942 udp 10.0.2.22 51868 <-> 189.54.34.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:35.485454 0.046873 udp 10.0.2.22 51868 <-> 84.40.72.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:36.367410 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:15:36.487178 0.233670 udp 10.0.2.22 51868 <-> 161.200.214.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:37.488426 0.000000 udp 10.0.2.22 51868 -> 80.22.39.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:15:38.490056 0.149460 udp 10.0.2.22 51868 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:39.491867 0.000000 udp 10.0.2.22 51868 -> 188.2.254.25 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:15:40.492725 0.000000 udp 10.0.2.22 51868 -> 109.199.236.29 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:15:41.494592 0.301383 udp 10.0.2.22 51868 <-> 186.11.15.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:42.485969 0.394858 udp 10.0.2.22 51868 <-> 98.203.127.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:43.487055 0.071043 udp 10.0.2.22 51868 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:44.488351 0.362771 udp 10.0.2.22 51868 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:45.490331 0.283245 udp 10.0.2.22 51868 <-> 177.100.111.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:46.491731 0.000000 udp 10.0.2.22 51868 -> 182.155.14.77 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:15:47.492859 0.000000 udp 10.0.2.22 51868 -> 89.229.25.83 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:15:48.494649 0.000000 udp 10.0.2.22 51868 -> 95.75.23.84 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:15:49.486148 0.392326 udp 10.0.2.22 51868 <-> 200.104.248.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:50.487088 0.000000 udp 10.0.2.22 51868 -> 10.49.197.63 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:15:51.488841 0.061105 udp 10.0.2.22 51868 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:52.490369 0.000000 udp 10.0.2.22 51868 -> 69.176.180.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:15:53.492026 0.202163 udp 10.0.2.22 51868 <-> 83.213.14.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:54.493103 0.444852 udp 10.0.2.22 51868 <-> 181.226.152.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:55.494946 0.147028 udp 10.0.2.22 51868 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:56.485614 0.055480 udp 10.0.2.22 51868 <-> 188.2.254.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:57.487474 0.000000 udp 10.0.2.22 51868 -> 179.119.9.169 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:15:58.488749 0.372569 udp 10.0.2.22 51868 <-> 113.252.190.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:15:59.490559 0.243552 udp 10.0.2.22 51868 <-> 89.229.25.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:00.491770 0.000000 udp 10.0.2.22 51868 -> 95.75.23.84 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:16:01.493542 1.273157 udp 10.0.2.22 51868 <-> 186.136.104.15 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:02.484215 0.165745 udp 10.0.2.22 51868 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:03.366338 0.000136 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:16:03.486371 0.310817 udp 10.0.2.22 51868 <-> 150.162.192.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:04.487666 2.048972 udp 10.0.2.22 51868 <-> 188.231.220.99 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:05.488557 0.058904 udp 10.0.2.22 51868 <-> 85.67.22.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:07.491782 0.046279 udp 10.0.2.22 51868 <-> 89.46.84.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:08.493346 0.294130 udp 10.0.2.22 51868 <-> 190.193.56.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:09.484838 0.000000 udp 10.0.2.22 51868 -> 111.250.115.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:16:10.486075 0.347823 udp 10.0.2.22 51868 <-> 86.58.36.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:11.487363 0.208933 udp 10.0.2.22 51868 <-> 109.99.196.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:12.488701 0.318931 udp 10.0.2.22 51868 <-> 119.24.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:13.490264 0.175640 udp 10.0.2.22 51868 <-> 24.233.63.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:14.492031 0.064762 udp 10.0.2.22 51868 <-> 94.47.235.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:15.493026 0.224091 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:16.484716 0.000000 udp 10.0.2.22 51868 -> 199.188.251.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:16:17.486208 0.000000 udp 10.0.2.22 51868 -> 42.117.128.72 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:16:18.487271 0.000000 udp 10.0.2.22 51868 -> 37.215.244.65 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:16:19.489424 0.037983 udp 10.0.2.22 51868 <-> 87.97.246.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:20.490435 1.170383 udp 10.0.2.22 51868 <-> 50.140.159.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:22.493106 0.204397 udp 10.0.2.22 51868 <-> 89.246.6.64 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:23.484865 0.000000 udp 10.0.2.22 51868 -> 80.180.82.40 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:16:24.486280 0.064752 udp 10.0.2.22 51868 <-> 24.132.151.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:25.487799 0.094413 udp 10.0.2.22 51868 <-> 88.57.184.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:26.488725 0.788937 udp 10.0.2.22 51868 <-> 190.124.133.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:27.490850 0.000000 udp 10.0.2.22 51868 -> 208.101.81.78 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:16:28.492194 0.295527 udp 10.0.2.22 51868 <-> 118.86.75.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:29.493075 0.857217 udp 10.0.2.22 51868 <-> 186.57.44.4 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:30.364569 0.000085 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:16:30.485183 4.176541 udp 10.0.2.22 51868 <-> 71.199.218.37 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:31.486452 0.199250 udp 10.0.2.22 51868 <-> 50.26.30.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:32.487677 0.000000 udp 10.0.2.22 51868 -> 119.154.152.50 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:16:33.489023 1.592238 udp 10.0.2.22 51868 <-> 186.36.70.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:35.492211 0.389524 udp 10.0.2.22 51868 <-> 2.185.38.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:36.493390 0.000000 udp 10.0.2.22 51868 -> 173.210.217.104 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:16:37.484683 0.204677 udp 10.0.2.22 51868 <-> 50.170.179.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:38.486029 0.172492 udp 10.0.2.22 51868 <-> 69.244.18.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:39.488019 0.000000 udp 10.0.2.22 51868 -> 89.142.152.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:16:40.489411 0.325079 udp 10.0.2.22 51868 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:41.490621 0.000000 udp 10.0.2.22 51868 -> 178.254.205.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:16:42.491737 3.234448 udp 10.0.2.22 51868 <-> 177.54.140.9 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:43.493272 0.000000 udp 10.0.2.22 51868 -> 217.197.185.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:16:44.484778 0.000000 udp 10.0.2.22 51868 -> 72.47.76.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:16:46.487886 0.064672 udp 10.0.2.22 51868 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:47.489180 0.153666 udp 10.0.2.22 51868 <-> 103.6.187.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:48.490964 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:16:49.492117 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:16:50.493657 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:16:51.484669 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:16:52.486100 0.230509 udp 10.0.2.22 51868 <-> 117.200.122.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:53.487587 0.000000 udp 10.0.2.22 51868 -> 114.26.249.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:16:54.489467 0.040763 udp 10.0.2.22 51868 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:55.490632 0.000000 udp 10.0.2.22 51868 -> 82.47.30.31 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:16:56.492075 0.076239 udp 10.0.2.22 51868 <-> 134.249.0.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:57.363550 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:16:57.493740 2.138986 udp 10.0.2.22 51868 <-> 24.95.94.145 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:16:58.485008 0.000000 udp 10.0.2.22 51868 -> 216.118.134.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:17:00.488051 0.000000 udp 10.0.2.22 51868 -> 113.21.75.42 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:17:01.489232 0.041406 udp 10.0.2.22 51868 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:02.491174 0.133489 udp 10.0.2.22 51868 <-> 24.147.226.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:03.492326 0.024456 udp 10.0.2.22 51868 <-> 84.118.201.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:04.493989 1.941146 udp 10.0.2.22 51868 <-> 75.197.131.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:05.485241 0.000000 udp 10.0.2.22 51868 -> 67.191.122.185 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:17:06.486545 0.210746 udp 10.0.2.22 51868 <-> 98.238.155.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:07.487843 0.627205 udp 10.0.2.22 51868 <-> 186.88.174.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:08.489669 0.036291 udp 10.0.2.22 51868 <-> 147.143.243.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:09.491096 0.338847 udp 10.0.2.22 51868 <-> 182.165.97.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:10.492308 0.000000 udp 10.0.2.22 51868 -> 180.215.52.152 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:17:11.494075 0.000000 udp 10.0.2.22 51868 -> 41.218.105.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:17:12.485193 0.109575 udp 10.0.2.22 51868 <-> 208.88.5.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:13.486501 0.308307 udp 10.0.2.22 51868 <-> 123.225.58.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:14.488005 0.344153 udp 10.0.2.22 51868 <-> 218.173.112.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:15.489429 0.204545 udp 10.0.2.22 51868 <-> 70.67.84.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:16.491146 0.385743 udp 10.0.2.22 51868 <-> 14.54.173.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:17.492680 0.031484 udp 10.0.2.22 51868 <-> 212.37.176.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:18.493929 0.320112 udp 10.0.2.22 51868 <-> 219.70.207.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:19.485685 0.170969 udp 10.0.2.22 51868 <-> 189.218.89.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:20.487015 0.085454 udp 10.0.2.22 51868 <-> 78.62.30.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:21.488224 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:17:22.489914 0.146325 udp 10.0.2.22 51868 <-> 67.248.85.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:23.491231 0.000000 udp 10.0.2.22 51868 -> 1.34.204.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:17:24.312832 0.000000 udp 10.0.2.22 51868 <- 67.191.122.185 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:17:24.362676 0.000149 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:17:24.492619 0.151888 udp 10.0.2.22 51868 <-> 67.202.186.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:25.493889 0.346115 udp 10.0.2.22 51868 <-> 201.210.95.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:26.485545 0.039251 udp 10.0.2.22 51868 <-> 213.231.136.212 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:27.486629 0.163935 udp 10.0.2.22 51868 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:28.488200 0.147110 udp 10.0.2.22 51868 <-> 107.15.91.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:29.489675 0.061592 udp 10.0.2.22 51868 <-> 86.124.151.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:30.490763 0.186929 udp 10.0.2.22 51868 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:31.492419 0.375411 udp 10.0.2.22 51868 <-> 14.54.173.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:32.494218 0.305310 udp 10.0.2.22 51868 <-> 180.146.156.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:33.485616 0.163430 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:34.487103 0.038736 udp 10.0.2.22 51868 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:35.488159 0.043338 udp 10.0.2.22 51868 <-> 147.156.106.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:36.489687 0.000000 udp 10.0.2.22 51868 -> 220.129.38.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:17:37.491017 0.308945 udp 10.0.2.22 51868 <-> 110.134.178.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:38.492834 0.166146 udp 10.0.2.22 51868 <-> 76.106.222.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:39.494043 0.039986 udp 10.0.2.22 51868 <-> 91.66.213.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:40.485225 0.131869 udp 10.0.2.22 51868 <-> 188.2.254.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:41.486776 0.273639 udp 10.0.2.22 51868 <-> 201.235.247.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:42.488083 0.174405 udp 10.0.2.22 51868 <-> 207.32.49.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:43.489588 0.000000 udp 10.0.2.22 51868 -> 118.170.205.172 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:17:44.491365 0.157169 udp 10.0.2.22 51868 <-> 24.13.129.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:45.492843 0.000000 udp 10.0.2.22 51868 -> 24.76.4.73 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:17:46.494197 0.000000 udp 10.0.2.22 51868 -> 117.194.11.84 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:17:47.485660 0.169571 udp 10.0.2.22 51868 <-> 207.134.187.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:48.486982 0.516322 udp 10.0.2.22 51868 <-> 124.171.169.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:49.488373 0.052880 udp 10.0.2.22 51868 <-> 188.25.221.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:50.490344 0.165621 udp 10.0.2.22 51868 <-> 68.84.24.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:51.361151 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:17:51.491253 0.000000 udp 10.0.2.22 51868 -> 24.76.4.73 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:17:52.492691 0.299728 udp 10.0.2.22 51868 <-> 110.169.234.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:53.494039 0.083609 udp 10.0.2.22 51868 <-> 95.51.31.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:54.485520 0.000000 udp 10.0.2.22 51868 -> 2.177.249.115 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:17:55.486850 0.384624 udp 10.0.2.22 51868 <-> 61.224.47.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:56.488763 0.156447 udp 10.0.2.22 51868 <-> 173.217.236.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:57.490150 0.200254 udp 10.0.2.22 51868 <-> 64.207.73.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:58.491621 0.109077 udp 10.0.2.22 51868 <-> 93.116.24.165 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:17:59.492560 0.038652 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:00.493965 0.159606 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:01.485875 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:18:02.487221 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:18:03.488929 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:18:04.490101 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:18:05.491756 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:18:06.493220 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:18:07.494150 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:18:08.485442 1.081470 udp 10.0.2.22 51868 <-> 85.84.74.10 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:10.488558 0.000000 udp 10.0.2.22 51868 -> 60.244.41.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:18:11.490061 0.682280 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:12.491767 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:18:13.492808 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:18:14.494198 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:18:15.485967 1.001165 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:17.488957 4.005129 udp 10.0.2.22 51868 -> 60.244.41.12 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:18:18.360108 0.000097 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:18:18.489947 0.139224 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:19.491849 0.163521 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:20.492805 0.000000 udp 10.0.2.22 51868 -> 115.253.108.156 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:18:22.486226 4.042048 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:23.486951 0.000000 udp 10.0.2.22 51868 -> 85.84.74.10 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:18:24.488837 0.000000 udp 10.0.2.22 51868 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:18:25.489913 0.159189 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:27.492856 0.043251 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:28.494428 0.000000 udp 10.0.2.22 51868 -> 95.223.45.5 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:18:29.485653 2.003062 udp 10.0.2.22 51868 -> 118.166.176.189 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:18:30.487211 0.144696 udp 10.0.2.22 51868 <-> 97.69.173.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:32.490716 0.109306 udp 10.0.2.22 51868 <-> 87.14.65.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:33.491911 0.154362 udp 10.0.2.22 51868 <-> 75.109.202.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:34.493656 0.134906 udp 10.0.2.22 51868 <-> 50.166.157.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:35.484271 0.027756 udp 10.0.2.22 51868 <-> 131.114.50.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:36.485923 0.151984 udp 10.0.2.22 51868 <-> 27.106.96.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:37.487657 0.382942 udp 10.0.2.22 51868 <-> 126.60.25.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:38.489024 0.035524 udp 10.0.2.22 51868 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:39.490372 0.235589 udp 10.0.2.22 51868 <-> 117.201.210.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:40.491391 0.169729 udp 10.0.2.22 51868 <-> 74.140.150.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:41.493477 0.362897 udp 10.0.2.22 51868 <-> 112.118.56.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:42.484310 0.288202 udp 10.0.2.22 51868 <-> 190.151.62.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:43.486203 0.000000 udp 10.0.2.22 51868 -> 111.253.69.87 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:18:44.487718 0.423975 udp 10.0.2.22 51868 <-> 119.200.155.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:45.368483 0.000107 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:18:45.489023 0.308721 udp 10.0.2.22 51868 <-> 119.171.47.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:46.490651 0.000000 udp 10.0.2.22 51868 -> 197.7.93.178 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:18:47.491922 0.405854 udp 10.0.2.22 51868 <-> 211.109.216.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:48.492960 0.181815 udp 10.0.2.22 51868 <-> 72.197.28.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:49.484802 0.056477 udp 10.0.2.22 51868 <-> 84.56.163.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:50.486308 0.363777 udp 10.0.2.22 51868 <-> 153.147.123.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:51.488018 0.342335 udp 10.0.2.22 51868 <-> 201.81.54.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:52.488997 0.289965 udp 10.0.2.22 51868 <-> 115.241.222.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:53.490590 0.474932 udp 10.0.2.22 51868 <-> 114.51.181.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:54.491573 0.403620 udp 10.0.2.22 51868 <-> 126.60.193.185 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:55.493177 0.049809 udp 10.0.2.22 51868 <-> 82.137.58.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:56.484769 0.297702 udp 10.0.2.22 51868 <-> 95.90.35.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:57.486625 0.486952 udp 10.0.2.22 51868 <-> 112.158.196.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:58.487316 0.072923 udp 10.0.2.22 51868 <-> 93.176.193.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:18:59.488918 0.367375 udp 10.0.2.22 51868 <-> 113.252.52.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:00.490623 0.286432 udp 10.0.2.22 51868 <-> 171.96.9.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:01.491561 0.229352 udp 10.0.2.22 51868 <-> 148.204.134.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:02.493164 0.000000 udp 10.0.2.22 51868 -> 46.214.114.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:19:03.484865 0.254025 udp 10.0.2.22 51868 <-> 177.227.173.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:04.486083 0.000000 udp 10.0.2.22 51868 -> 213.88.98.35 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:19:05.487923 0.056102 udp 10.0.2.22 51868 <-> 62.83.219.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:06.489158 0.082718 udp 10.0.2.22 51868 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:07.490546 0.203619 udp 10.0.2.22 51868 <-> 148.204.134.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:08.491964 0.000000 udp 10.0.2.22 51868 -> 157.14.178.157 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:19:09.493890 0.222117 udp 10.0.2.22 51868 <-> 186.112.163.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:10.485145 0.000000 udp 10.0.2.22 51868 -> 36.225.131.48 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:19:11.486511 0.283473 udp 10.0.2.22 51868 <-> 190.193.86.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:12.367460 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:19:12.487581 0.333197 udp 10.0.2.22 51868 <-> 186.92.209.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:13.489161 0.073325 udp 10.0.2.22 51868 <-> 217.197.185.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:14.490827 0.369404 udp 10.0.2.22 51868 <-> 223.16.38.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:15.491856 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:19:16.493613 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:19:17.484938 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:19:18.486310 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:19:19.487725 0.445078 udp 10.0.2.22 51868 <-> 190.206.235.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:20.489118 0.050566 udp 10.0.2.22 51868 <-> 178.7.212.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:21.490820 0.901720 udp 10.0.2.22 51868 <-> 49.147.25.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:22.492074 0.141513 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:23.493775 0.000000 udp 10.0.2.22 51868 -> 122.100.81.50 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:19:24.485111 0.302701 udp 10.0.2.22 51868 <-> 180.147.116.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:25.486249 0.030627 udp 10.0.2.22 51868 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:26.488294 0.141709 udp 10.0.2.22 51868 <-> 24.228.169.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:27.489700 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:19:29.492195 0.000081 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:19:29.492276 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:19:30.493377 0.000000 udp 10.0.2.22 51868 -> 67.166.246.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:19:31.485178 0.189691 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:32.486915 2.052477 udp 10.0.2.22 51868 <-> 31.11.113.191 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:33.488325 0.000000 udp 10.0.2.22 51868 -> 198.251.45.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:19:35.490822 0.153229 udp 10.0.2.22 51868 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:36.492486 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:19:37.493915 0.000000 udp 10.0.2.22 51868 -> 67.166.246.234 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:19:38.485490 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:19:39.366132 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:19:39.486768 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:19:40.487963 1.065365 udp 10.0.2.22 51868 <-> 151.64.32.115 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:42.490869 0.000000 udp 10.0.2.22 51868 -> 178.26.123.117 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:19:43.492092 1.428547 udp 10.0.2.22 51868 <-> 31.147.129.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:44.493477 0.153809 udp 10.0.2.22 51868 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:45.484867 0.065599 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:46.486857 0.000000 udp 10.0.2.22 51868 -> 111.246.35.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:19:47.487929 0.402362 udp 10.0.2.22 51868 <-> 111.254.125.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:48.489343 0.029295 udp 10.0.2.22 51868 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:49.491084 0.141092 udp 10.0.2.22 51868 <-> 65.189.203.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:50.492386 0.150515 udp 10.0.2.22 51868 <-> 67.248.209.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:19:51.494096 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:19:53.486539 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:19:54.488529 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:19:55.489218 0.000129 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:19:55.489347 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:19:56.491355 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:19:57.492109 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:19:58.493885 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:19:59.485078 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:00.486802 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:01.487922 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:02.490043 0.042837 udp 10.0.2.22 51868 <-> 86.125.61.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:20:03.491155 0.000069 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:03.491224 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:20:04.492178 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:05.493838 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:06.365145 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:20:06.485520 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:07.486617 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:08.488192 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:09.489479 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:10.491284 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:11.492826 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:12.493993 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:13.485227 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:14.486742 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:15.488143 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:16.489881 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:17.491082 2.046571 udp 10.0.2.22 51868 <-> 86.125.61.76 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:20:18.492817 0.200285 udp 10.0.2.22 51868 <-> 50.150.82.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:20:20.485171 0.000000 udp 10.0.2.22 51868 -> 176.237.169.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:21.487251 0.000000 udp 10.0.2.22 51868 -> 86.127.153.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:22.488371 0.049299 udp 10.0.2.22 51868 <-> 5.20.145.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:20:23.490270 0.176433 udp 10.0.2.22 51868 <-> 49.205.229.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:20:24.491256 0.290075 udp 10.0.2.22 51868 <-> 201.231.44.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:20:25.492546 2.822772 udp 10.0.2.22 51868 <-> 108.178.146.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:20:26.493906 0.132047 udp 10.0.2.22 51868 <-> 76.106.23.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:20:27.485537 0.395922 udp 10.0.2.22 51868 <-> 211.109.254.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:20:28.486777 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:28.910683 3.000912 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 06:20:30.489590 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:31.491336 0.152291 udp 10.0.2.22 51868 <-> 24.61.172.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:20:32.492785 0.155618 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:20:33.363691 0.000115 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:20:33.493909 0.038639 udp 10.0.2.22 51868 <-> 81.201.145.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:20:34.485324 1.183898 udp 10.0.2.22 51868 <-> 174.101.11.34 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:20:35.917870 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:20:36.488535 0.301932 udp 10.0.2.22 51868 <-> 121.86.73.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:20:37.490030 0.024802 udp 10.0.2.22 51868 <-> 84.107.143.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:20:38.491102 0.151064 udp 10.0.2.22 51868 <-> 24.31.217.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:20:39.493162 0.000000 udp 10.0.2.22 51868 -> 116.202.159.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:40.494511 0.113621 udp 10.0.2.22 51868 <-> 92.40.109.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:20:41.486080 0.337954 udp 10.0.2.22 51868 <-> 187.56.212.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:20:42.486903 0.264324 udp 10.0.2.22 51868 <-> 117.216.6.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:20:43.488662 0.052786 udp 10.0.2.22 51868 <-> 46.55.137.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:20:43.919251 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:20:44.490108 0.000000 udp 10.0.2.22 51868 -> 31.176.239.138 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:45.491808 0.000000 udp 10.0.2.22 51868 -> 68.195.175.119 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:46.493425 0.176828 udp 10.0.2.22 51868 <-> 72.9.77.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:20:47.494073 0.000000 udp 10.0.2.22 51868 -> 75.152.30.72 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:48.486229 0.071863 udp 10.0.2.22 51868 <-> 37.72.21.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:20:49.487032 0.208971 udp 10.0.2.22 51868 <-> 71.196.186.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:20:50.488941 0.062565 udp 10.0.2.22 51868 <-> 82.229.19.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:20:51.490346 0.000096 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:51.490442 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:20:52.491225 2.994877 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:53.492631 0.214870 udp 10.0.2.22 51868 <-> 142.129.132.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:20:54.494776 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:56.486973 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:57.488485 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:58.490324 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:59.491471 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:20:59.922047 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:21:00.362626 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:21:00.493420 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:21:01.494480 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:21:02.486242 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:21:02.891705 0.000000 udp 10.0.2.22 51868 <- 75.152.30.72 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:21:03.487273 0.224260 udp 10.0.2.22 51868 <-> 14.97.203.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:04.488789 0.000000 udp 10.0.2.22 51868 -> 58.9.222.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:21:05.490530 0.176480 udp 10.0.2.22 51868 <-> 49.204.100.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:06.491726 0.048166 udp 10.0.2.22 51868 <-> 77.77.29.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:07.493539 0.727140 udp 10.0.2.22 51868 <-> 89.143.116.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:08.484966 0.000000 udp 10.0.2.22 51868 -> 98.247.242.179 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:21:09.485796 0.146181 udp 10.0.2.22 51868 <-> 89.250.204.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:10.487270 0.135569 udp 10.0.2.22 51868 <-> 24.47.139.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:11.488728 0.156463 udp 10.0.2.22 51868 <-> 184.160.61.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:12.490086 0.157187 udp 10.0.2.22 51868 <-> 24.13.129.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:13.492028 0.345149 udp 10.0.2.22 51868 <-> 186.191.29.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:14.493139 0.000000 udp 10.0.2.22 51868 -> 123.201.237.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:21:15.484264 0.000000 udp 10.0.2.22 51868 -> 85.101.106.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:21:16.486017 1.038411 udp 10.0.2.22 51868 <-> 91.240.43.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:17.487809 0.147024 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:18.488990 0.000000 udp 10.0.2.22 51868 -> 119.241.9.117 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:21:19.490749 0.000000 udp 10.0.2.22 51868 -> 94.170.39.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:21:20.491773 0.000000 udp 10.0.2.22 51868 -> 83.49.171.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:21:21.493146 0.353803 udp 10.0.2.22 51868 <-> 180.215.207.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:22.484541 0.296997 udp 10.0.2.22 51868 <-> 180.199.144.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:23.486122 0.044063 udp 10.0.2.22 51868 <-> 82.19.125.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:24.487750 0.604480 udp 10.0.2.22 51868 <-> 202.29.179.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:25.489382 0.145774 udp 10.0.2.22 51868 <-> 69.124.203.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:26.490194 0.000000 udp 10.0.2.22 51868 -> 68.48.58.156 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:21:27.361324 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:21:27.492036 0.132475 udp 10.0.2.22 51868 <-> 173.81.217.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:28.493497 0.000000 udp 10.0.2.22 51868 -> 31.59.37.139 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:21:29.484515 0.038662 udp 10.0.2.22 51868 <-> 84.197.172.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:30.486434 0.120785 udp 10.0.2.22 51868 <-> 207.237.112.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:31.487714 0.232588 udp 10.0.2.22 51868 <-> 190.198.177.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:31.928700 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:21:32.488714 0.275953 udp 10.0.2.22 51868 <-> 201.81.202.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:33.490694 0.525607 udp 10.0.2.22 51868 <-> 117.216.6.78 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:34.492303 0.306164 udp 10.0.2.22 51868 <-> 58.68.94.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:35.493416 0.000000 udp 10.0.2.22 51868 -> 92.3.107.244 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:21:36.484719 0.000000 udp 10.0.2.22 51868 -> 115.241.150.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:21:37.486345 0.000000 udp 10.0.2.22 51868 -> 84.40.72.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:21:38.488002 0.061214 udp 10.0.2.22 51868 <-> 46.42.233.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:39.489299 0.048129 udp 10.0.2.22 51868 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:40.490747 0.000000 udp 10.0.2.22 51868 -> 200.106.101.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:21:41.492072 0.000000 udp 10.0.2.22 51868 -> 88.2.207.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:21:42.493430 0.000000 udp 10.0.2.22 51868 -> 130.83.54.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:21:43.485176 0.000000 udp 10.0.2.22 51868 -> 92.3.107.244 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:21:44.486590 0.107891 udp 10.0.2.22 51868 <-> 46.42.233.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:45.487591 4.285839 udp 10.0.2.22 51868 <-> 115.241.150.251 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:46.489071 0.571731 udp 10.0.2.22 51868 <-> 201.231.197.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:47.490742 0.055917 udp 10.0.2.22 51868 <-> 86.124.222.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:48.492332 0.023091 udp 10.0.2.22 51868 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:50.485076 0.193396 udp 10.0.2.22 51868 <-> 184.78.5.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:51.486484 0.999751 udp 10.0.2.22 51868 <-> 50.80.122.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:52.487940 0.144022 udp 10.0.2.22 51868 <-> 67.86.61.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:53.489522 0.000000 udp 10.0.2.22 51868 -> 50.26.127.53 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:21:54.360637 0.000111 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:21:54.490666 0.049731 udp 10.0.2.22 51868 <-> 24.132.151.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:55.492407 0.138697 udp 10.0.2.22 51868 <-> 24.184.114.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:56.493481 0.171175 udp 10.0.2.22 51868 <-> 24.37.209.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:21:57.485259 0.000000 udp 10.0.2.22 51868 -> 111.254.48.188 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:21:58.486514 0.000000 udp 10.0.2.22 51868 -> 180.215.92.106 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:21:59.487959 0.133246 udp 10.0.2.22 51868 <-> 24.224.154.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:00.489074 0.460305 udp 10.0.2.22 51868 <-> 182.155.14.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:01.491109 0.000000 udp 10.0.2.22 51868 -> 118.169.130.176 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:22:02.492048 0.056500 udp 10.0.2.22 51868 <-> 94.231.172.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:03.493301 0.323373 udp 10.0.2.22 51868 <-> 110.0.90.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:04.485068 0.198174 udp 10.0.2.22 51868 <-> 94.70.24.122 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:05.486121 0.362713 udp 10.0.2.22 51868 <-> 186.191.29.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:05.869106 0.000028 udp 10.0.2.22 51868 <- 180.215.92.106 16464 RSP 0 0 2 1780 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:22:06.487955 0.000000 udp 10.0.2.22 51868 -> 59.92.32.129 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:22:07.489015 0.000000 udp 10.0.2.22 51868 -> 50.72.184.244 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:22:08.491156 0.139015 udp 10.0.2.22 51868 <-> 69.115.88.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:09.492194 0.158598 udp 10.0.2.22 51868 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:10.493653 0.250760 udp 10.0.2.22 51868 <-> 190.37.93.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:11.485128 0.157513 udp 10.0.2.22 51868 <-> 68.46.230.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:12.486650 0.027631 udp 10.0.2.22 51868 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:13.487709 0.171553 udp 10.0.2.22 51868 <-> 97.106.251.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:14.489676 0.000000 udp 10.0.2.22 51868 -> 24.156.199.153 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:22:15.491062 0.198059 udp 10.0.2.22 51868 <-> 49.205.136.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:16.492263 0.000000 udp 10.0.2.22 51868 -> 66.31.49.90 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:22:17.493545 0.069074 udp 10.0.2.22 51868 -> 92.87.69.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:22:17.562619 0.000000 icmp 93.114.141.249 0x000b -> 10.0.2.22 0x0000 TXD 192 1 70 flow=Background 1970/01/01 06:22:18.484938 0.000000 udp 10.0.2.22 51868 -> 88.74.114.148 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:22:19.486834 0.322623 udp 10.0.2.22 51868 <-> 124.102.89.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:20.487841 0.028170 udp 10.0.2.22 51868 <-> 85.130.81.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:21.359150 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:22:21.489674 0.184239 udp 10.0.2.22 51868 <-> 87.17.138.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:22.490606 0.147452 udp 10.0.2.22 51868 <-> 68.192.112.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:23.492291 0.000000 udp 10.0.2.22 51868 -> 86.122.145.73 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:22:24.493897 0.389265 udp 10.0.2.22 51868 <-> 118.237.85.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:25.485342 0.167977 udp 10.0.2.22 51868 <-> 72.51.46.90 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:26.486980 0.043223 udp 10.0.2.22 51868 <-> 188.254.153.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:27.488471 0.191023 udp 10.0.2.22 51868 <-> 50.66.54.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:28.489203 0.147408 udp 10.0.2.22 51868 <-> 149.140.171.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:29.491390 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:22:30.492189 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:22:31.494304 3.995191 udp 10.0.2.22 51868 -> 111.240.40.248 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:22:32.485266 0.168881 udp 10.0.2.22 51868 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:33.486594 0.034442 udp 10.0.2.22 51868 <-> 81.173.184.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:34.487831 0.000000 udp 10.0.2.22 51868 -> 24.107.104.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:22:36.490978 1.842603 udp 10.0.2.22 51868 <-> 139.0.190.28 16464 CON 0 0 3 438 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:36.822092 0.015580 udp 10.0.2.22 60034 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 06:22:36.837991 0.000000 udp 10.0.2.22 60035 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:22:37.492139 0.036815 udp 10.0.2.22 51868 <-> 91.65.0.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:38.493644 0.035480 udp 10.0.2.22 51868 <-> 81.173.184.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:39.485664 0.282435 udp 10.0.2.22 51868 <-> 68.16.236.90 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:40.486493 0.137137 udp 10.0.2.22 51868 <-> 69.115.88.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:41.488134 2.305013 udp 10.0.2.22 51868 <-> 118.157.11.218 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:42.489737 0.566699 udp 10.0.2.22 51868 <-> 115.242.130.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:44.492700 0.257303 udp 10.0.2.22 51868 <-> 201.80.212.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:45.494000 0.206360 udp 10.0.2.22 51868 <-> 24.247.36.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:46.485231 0.029263 udp 10.0.2.22 51868 <-> 77.23.138.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:47.486741 0.092201 udp 10.0.2.22 51868 <-> 37.213.183.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:48.367729 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:22:48.488346 0.166669 udp 10.0.2.22 51868 <-> 24.171.57.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:49.489876 0.666142 udp 10.0.2.22 51868 <-> 37.215.216.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:50.491154 0.141417 udp 10.0.2.22 51868 <-> 68.189.177.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:51.492838 0.028699 udp 10.0.2.22 51868 <-> 85.130.74.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:52.493756 0.000000 udp 10.0.2.22 51868 -> 108.230.246.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:22:53.485890 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:22:54.486998 0.043385 udp 10.0.2.22 51868 <-> 62.20.193.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:55.488365 1.306550 udp 10.0.2.22 51868 <-> 126.15.243.254 16464 CON 0 0 7 4566 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:57.491099 0.130993 udp 10.0.2.22 51868 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:58.492828 0.235767 udp 10.0.2.22 51868 <-> 78.42.45.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:22:59.493832 0.029999 udp 10.0.2.22 51868 <-> 95.111.72.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:00.485942 0.212145 udp 10.0.2.22 51868 <-> 71.95.246.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:01.487236 0.157213 udp 10.0.2.22 51868 <-> 97.106.144.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:02.488286 1.141559 udp 10.0.2.22 51868 <-> 68.83.113.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:04.490968 0.274584 udp 10.0.2.22 51868 <-> 181.31.92.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:05.492919 0.096079 udp 10.0.2.22 51868 <-> 188.6.227.241 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:06.494222 0.131905 udp 10.0.2.22 51868 <-> 98.124.111.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:07.485407 3.004806 udp 10.0.2.22 51868 <-> 95.85.182.9 16464 CON 0 0 5 1954 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:08.486905 0.033696 udp 10.0.2.22 51868 <-> 62.221.143.16 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:11.491202 0.384237 udp 10.0.2.22 51868 <-> 117.203.72.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:12.493027 0.000000 udp 10.0.2.22 51868 -> 190.11.99.31 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:23:13.494597 0.406921 udp 10.0.2.22 51868 <-> 175.198.68.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:14.485644 0.153833 udp 10.0.2.22 51868 <-> 71.88.178.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:15.367214 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:23:15.486800 0.198350 udp 10.0.2.22 51868 <-> 98.127.16.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:16.488771 0.167039 udp 10.0.2.22 51868 <-> 173.17.64.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:17.490270 0.181575 udp 10.0.2.22 51868 <-> 50.4.187.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:18.491759 0.165698 udp 10.0.2.22 51868 <-> 68.59.245.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:19.493072 0.178808 udp 10.0.2.22 51868 <-> 68.4.25.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:20.494173 0.146917 udp 10.0.2.22 51868 <-> 71.75.221.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:21.485777 0.038173 udp 10.0.2.22 51868 <-> 78.128.44.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:22.486991 0.380929 udp 10.0.2.22 51868 <-> 201.17.131.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:23.488819 0.167690 udp 10.0.2.22 51868 <-> 24.113.162.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:24.490092 4.997026 udp 10.0.2.22 51868 <-> 68.226.220.74 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:25.491719 4.172521 udp 10.0.2.22 51868 <-> 186.19.173.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:26.492737 0.000000 udp 10.0.2.22 51868 -> 197.200.160.40 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:23:27.494325 0.054598 udp 10.0.2.22 51868 <-> 109.60.31.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:28.485661 0.000000 udp 10.0.2.22 51868 -> 209.140.74.106 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:23:29.649300 0.000000 udp 10.0.2.22 51868 <- 68.226.220.74 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:23:30.488710 0.000000 udp 10.0.2.22 51868 -> 182.23.220.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:23:31.490149 0.262301 udp 10.0.2.22 51868 <-> 181.165.62.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:32.491386 0.374175 udp 10.0.2.22 51868 <-> 219.103.176.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:33.493382 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:23:34.494400 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:23:35.485977 0.048364 udp 10.0.2.22 51868 <-> 5.13.132.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:36.487478 0.328201 udp 10.0.2.22 51868 <-> 115.23.72.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:37.488682 2.002950 udp 10.0.2.22 51868 <-> 89.25.112.106 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:38.490573 0.146290 udp 10.0.2.22 51868 <-> 178.72.107.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:40.493079 0.000000 udp 10.0.2.22 51868 -> 84.2.223.97 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:23:41.484887 0.165484 udp 10.0.2.22 51868 <-> 67.11.181.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:42.365624 0.000104 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:23:42.486401 0.077799 udp 10.0.2.22 51868 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:43.487390 0.049511 udp 10.0.2.22 51868 <-> 80.80.41.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:44.488501 0.112447 udp 10.0.2.22 51868 <-> 85.182.110.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:45.489985 0.167641 udp 10.0.2.22 51868 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:46.491939 0.187906 udp 10.0.2.22 51868 <-> 190.218.165.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:47.492938 0.000000 udp 10.0.2.22 51868 -> 209.197.63.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:23:48.484888 0.365405 udp 10.0.2.22 51868 <-> 221.151.31.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:49.486229 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:23:50.487110 0.000000 udp 10.0.2.22 51868 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:23:52.490359 0.340419 udp 10.0.2.22 51868 <-> 85.179.124.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:53.491863 0.143269 udp 10.0.2.22 51868 <-> 97.81.201.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:54.493204 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:23:55.484490 0.046788 udp 10.0.2.22 51868 <-> 212.67.155.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:56.485730 1.203795 udp 10.0.2.22 51868 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:57.487667 0.178466 udp 10.0.2.22 51868 <-> 183.83.168.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:23:58.488930 0.000000 udp 10.0.2.22 51868 -> 24.154.191.75 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:23:59.490327 0.109158 udp 10.0.2.22 51868 <-> 90.84.84.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:00.492078 0.547970 udp 10.0.2.22 51868 <-> 75.224.32.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:01.492981 0.521526 udp 10.0.2.22 51868 <-> 14.98.181.98 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:02.484978 0.173984 udp 10.0.2.22 51868 <-> 83.213.14.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:03.486176 0.143686 udp 10.0.2.22 51868 <-> 70.26.75.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:04.487294 0.147298 udp 10.0.2.22 51868 <-> 97.81.201.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:05.488934 0.141624 udp 10.0.2.22 51868 <-> 68.49.199.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:06.490588 0.154152 udp 10.0.2.22 51868 <-> 98.235.13.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:07.492256 0.000080 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:24:07.492336 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:24:08.493101 1.206848 udp 10.0.2.22 51868 <-> 96.40.110.226 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:09.364752 0.000100 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:24:10.486133 0.085845 udp 10.0.2.22 51868 <-> 84.125.197.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:11.487977 0.170933 udp 10.0.2.22 51868 <-> 65.25.78.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:12.489263 1.398949 udp 10.0.2.22 51868 <-> 24.244.173.37 16464 CON 0 0 5 3618 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:13.490889 0.398936 udp 10.0.2.22 51868 <-> 118.232.181.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:14.491723 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:24:15.493581 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:24:16.484996 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:24:17.486254 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:24:18.487405 0.244092 udp 10.0.2.22 51868 <-> 190.201.175.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:19.488992 0.213761 udp 10.0.2.22 51868 <-> 76.115.145.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:20.490568 0.000000 udp 10.0.2.22 51868 -> 49.205.62.126 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:24:21.491697 0.140224 udp 10.0.2.22 51868 <-> 93.102.3.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:22.493616 0.000000 udp 10.0.2.22 51868 -> 76.72.128.89 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:24:23.485122 0.086183 udp 10.0.2.22 51868 <-> 94.153.59.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:24.486225 0.476179 udp 10.0.2.22 51868 <-> 210.119.21.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:25.487589 0.166226 udp 10.0.2.22 51868 <-> 62.83.219.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:26.489020 0.252617 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:27.490656 0.156908 udp 10.0.2.22 51868 <-> 76.188.30.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:28.492315 0.157763 udp 10.0.2.22 51868 <-> 24.144.87.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:29.493334 0.301263 udp 10.0.2.22 51868 <-> 27.141.208.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:30.485475 4.047256 udp 10.0.2.22 51868 <-> 87.252.173.82 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:31.486075 0.065415 udp 10.0.2.22 51868 -> 2.112.203.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:24:31.551490 0.000000 icmp 2.112.203.18 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 06:24:32.487628 0.162603 udp 10.0.2.22 51868 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:33.489104 0.297713 udp 10.0.2.22 51868 <-> 27.140.82.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:35.492167 0.000000 udp 10.0.2.22 51868 -> 69.151.57.84 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:24:36.363007 0.000116 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:24:36.493776 0.170161 udp 10.0.2.22 51868 <-> 68.84.24.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:37.485241 0.153899 udp 10.0.2.22 51868 <-> 67.61.177.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:38.486157 0.000000 udp 10.0.2.22 51868 -> 187.66.55.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:24:39.487902 0.402152 udp 10.0.2.22 51868 <-> 77.52.82.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:40.489329 0.000000 udp 10.0.2.22 51868 -> 187.109.249.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:24:41.490767 0.319418 udp 10.0.2.22 51868 <-> 153.165.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:42.492410 2.279284 udp 10.0.2.22 51868 <-> 14.97.164.32 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:43.493499 0.124584 udp 10.0.2.22 51868 <-> 178.79.11.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:45.486599 0.760074 udp 10.0.2.22 51868 <-> 213.166.215.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:46.488070 0.000000 udp 10.0.2.22 51868 -> 46.10.153.78 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:24:47.529693 0.164527 udp 10.0.2.22 51868 <-> 70.83.217.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:48.531089 4.922667 udp 10.0.2.22 51868 <-> 101.63.194.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:49.532590 0.000000 udp 10.0.2.22 51868 -> 117.254.30.149 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:24:50.533438 0.130054 udp 10.0.2.22 51868 <-> 216.145.87.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:51.525155 0.047657 udp 10.0.2.22 51868 <-> 178.250.32.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:52.526538 0.102227 udp 10.0.2.22 51868 <-> 46.118.179.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:53.528006 0.000000 udp 10.0.2.22 51868 -> 68.109.145.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:24:54.529679 0.238322 udp 10.0.2.22 51868 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:55.531235 0.211519 udp 10.0.2.22 51868 <-> 69.247.73.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:56.532647 0.160234 udp 10.0.2.22 51868 <-> 174.64.165.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:57.534268 1.129957 udp 10.0.2.22 51868 <-> 24.190.212.213 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:24:59.527053 0.045118 udp 10.0.2.22 51868 <-> 83.251.35.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:00.527860 0.209646 udp 10.0.2.22 51868 <-> 190.79.214.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:01.530000 0.336089 udp 10.0.2.22 51868 <-> 97.102.73.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:02.531197 1.245214 udp 10.0.2.22 51868 <-> 177.227.173.10 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:03.402406 0.000104 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:25:04.533994 0.000000 udp 10.0.2.22 51868 -> 71.77.141.55 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:25:05.525623 0.139784 udp 10.0.2.22 51868 <-> 24.190.212.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:06.527067 0.047403 udp 10.0.2.22 51868 <-> 83.251.35.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:07.528012 0.000000 udp 10.0.2.22 51868 -> 84.225.93.99 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:25:08.529391 0.359842 udp 10.0.2.22 51868 <-> 220.129.2.53 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:09.530939 0.000000 udp 10.0.2.22 51868 -> 46.25.70.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:25:10.532414 0.000000 udp 10.0.2.22 51868 -> 89.142.152.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:25:11.533635 0.000000 udp 10.0.2.22 51868 -> 152.66.219.240 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:25:12.525380 0.225330 udp 10.0.2.22 51868 <-> 46.225.41.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:13.526576 0.134246 udp 10.0.2.22 51868 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:14.528095 0.217105 udp 10.0.2.22 51868 <-> 204.195.53.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:15.529982 0.000000 udp 10.0.2.22 51868 -> 190.172.83.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:25:16.531210 0.000000 udp 10.0.2.22 51868 -> 123.193.222.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:25:17.532523 0.015636 udp 10.0.2.22 51868 <-> 5.146.59.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:18.534194 0.161045 udp 10.0.2.22 51868 <-> 65.35.3.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:19.525561 0.153983 udp 10.0.2.22 51868 <-> 66.168.217.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:20.526881 0.000000 udp 10.0.2.22 51868 -> 99.242.107.127 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:25:21.528188 0.141773 udp 10.0.2.22 51868 <-> 111.91.102.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:22.529628 1.343822 udp 10.0.2.22 51868 <-> 46.100.248.195 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:23.531150 0.300858 udp 10.0.2.22 51868 <-> 200.158.248.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:24.532929 0.139903 udp 10.0.2.22 51868 <-> 24.188.50.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:25.534354 0.357774 udp 10.0.2.22 51868 <-> 200.146.193.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:26.525641 0.052784 udp 10.0.2.22 51868 <-> 78.225.90.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:27.526775 0.157985 udp 10.0.2.22 51868 <-> 174.100.202.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:28.528674 0.043223 udp 10.0.2.22 51868 <-> 80.200.192.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:29.529524 0.225032 udp 10.0.2.22 51868 <-> 186.92.164.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:30.400871 0.000039 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:25:30.531586 0.057453 udp 10.0.2.22 51868 <-> 89.230.111.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:31.532808 0.042669 udp 10.0.2.22 51868 <-> 130.204.169.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:32.534151 0.125004 udp 10.0.2.22 51868 <-> 95.133.193.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:33.525531 2.257599 udp 10.0.2.22 51868 <-> 190.0.101.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:34.527037 0.000000 udp 10.0.2.22 51868 -> 95.57.165.122 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:25:35.528808 2.374403 udp 10.0.2.22 51868 <-> 31.185.126.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:36.529623 0.101518 udp 10.0.2.22 51868 <-> 188.30.144.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:37.531633 3.158227 udp 10.0.2.22 51868 <-> 78.23.122.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:38.532675 0.000000 udp 10.0.2.22 51868 -> 188.26.30.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:25:39.534621 0.000000 udp 10.0.2.22 51868 -> 86.100.215.192 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:25:40.525523 0.297281 udp 10.0.2.22 51868 <-> 59.91.88.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:41.527257 0.426056 udp 10.0.2.22 51868 <-> 88.236.237.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:42.528538 0.000000 udp 10.0.2.22 51868 -> 77.40.71.68 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:25:43.529994 0.387074 udp 10.0.2.22 51868 <-> 14.97.88.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:44.531125 0.124538 udp 10.0.2.22 51868 <-> 85.130.182.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:45.532500 0.050658 udp 10.0.2.22 51868 <-> 46.102.30.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:46.534489 0.441865 udp 10.0.2.22 51868 <-> 190.160.244.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:47.525529 0.189643 udp 10.0.2.22 51868 <-> 106.51.33.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:48.527048 0.041091 udp 10.0.2.22 51868 <-> 46.237.64.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:49.528659 0.771334 udp 10.0.2.22 51868 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:50.529759 0.581504 udp 10.0.2.22 51868 <-> 117.227.105.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:51.531291 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:25:52.533337 0.000058 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:25:52.533395 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:25:53.534340 1.138754 udp 10.0.2.22 51868 <-> 192.226.164.89 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:55.527250 0.206612 udp 10.0.2.22 51868 <-> 173.26.91.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:56.528721 0.302774 udp 10.0.2.22 51868 <-> 190.191.235.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:57.530314 0.164637 udp 10.0.2.22 51868 <-> 106.51.44.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:25:58.401006 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:25:58.531745 0.000000 udp 10.0.2.22 51868 -> 50.72.184.244 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:25:59.533154 0.169959 udp 10.0.2.22 51868 <-> 75.133.153.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:00.534244 1.008408 udp 10.0.2.22 51868 <-> 195.174.108.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:01.525920 0.182495 udp 10.0.2.22 51868 <-> 72.199.206.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:02.527331 2.182830 udp 10.0.2.22 51868 <-> 173.174.12.168 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:03.528804 0.347889 udp 10.0.2.22 51868 <-> 114.26.79.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:05.531559 0.152360 udp 10.0.2.22 51868 <-> 96.23.154.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:06.533201 0.119590 udp 10.0.2.22 51868 <-> 178.207.211.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:07.534368 0.169580 udp 10.0.2.22 51868 <-> 173.174.12.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:08.525878 0.379461 udp 10.0.2.22 51868 <-> 177.42.27.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:09.527297 0.154395 udp 10.0.2.22 51868 <-> 70.80.21.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:10.528926 0.000000 udp 10.0.2.22 51868 -> 78.157.87.145 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:26:11.530409 0.164940 udp 10.0.2.22 51868 <-> 98.253.7.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:12.531878 0.152549 udp 10.0.2.22 51868 <-> 31.185.114.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:13.533023 0.179703 udp 10.0.2.22 51868 <-> 76.107.51.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:14.524870 0.419535 udp 10.0.2.22 51868 <-> 118.171.240.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:15.525938 0.081189 udp 10.0.2.22 51868 <-> 2.94.11.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:16.527771 0.155749 udp 10.0.2.22 51868 <-> 98.226.172.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:17.528725 0.453046 udp 10.0.2.22 51868 <-> 65.15.129.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:18.530449 0.000000 udp 10.0.2.22 51868 -> 190.218.165.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:26:19.532147 0.264609 udp 10.0.2.22 51868 <-> 69.208.5.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:20.532819 0.153917 udp 10.0.2.22 51868 <-> 79.12.187.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:21.524559 0.336315 udp 10.0.2.22 51868 <-> 117.214.128.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:22.525887 0.402924 udp 10.0.2.22 51868 <-> 126.123.91.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:23.527525 0.416633 udp 10.0.2.22 51868 <-> 175.35.18.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:24.529089 0.293521 udp 10.0.2.22 51868 <-> 124.39.69.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:25.400259 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:26:25.530366 0.061468 udp 10.0.2.22 51868 <-> 77.244.39.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:26.531624 0.233166 udp 10.0.2.22 51868 <-> 184.167.226.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:27.533125 0.326719 udp 10.0.2.22 51868 <-> 114.31.219.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:28.524360 0.140491 udp 10.0.2.22 51868 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:29.525961 0.387569 udp 10.0.2.22 51868 <-> 177.42.27.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:30.527829 0.282458 udp 10.0.2.22 51868 <-> 180.215.93.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:31.529092 0.053192 udp 10.0.2.22 51868 <-> 46.109.126.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:32.530258 0.182700 udp 10.0.2.22 51868 <-> 64.179.179.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:33.531583 0.000000 udp 10.0.2.22 51868 -> 84.55.13.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:26:34.533061 0.376740 udp 10.0.2.22 51868 <-> 123.0.101.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:35.524382 0.042510 udp 10.0.2.22 51868 <-> 147.156.170.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:36.526529 0.000000 udp 10.0.2.22 51868 -> 190.204.196.50 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:26:37.527656 0.170076 udp 10.0.2.22 51868 <-> 183.87.251.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:38.529299 0.391469 udp 10.0.2.22 51868 <-> 58.3.144.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:39.530494 0.299621 udp 10.0.2.22 51868 <-> 188.119.78.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:40.531641 0.000000 udp 10.0.2.22 51868 -> 188.27.89.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:26:41.533507 0.744999 udp 10.0.2.22 51868 <-> 111.246.35.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:42.524540 0.000000 udp 10.0.2.22 51868 -> 67.189.32.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:26:43.525894 0.266745 udp 10.0.2.22 51868 <-> 70.132.115.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:44.527659 0.000000 udp 10.0.2.22 51868 -> 219.91.168.169 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:26:45.528840 0.314111 udp 10.0.2.22 51868 <-> 186.94.84.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:46.530971 0.143026 udp 10.0.2.22 51868 <-> 98.121.91.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:47.532090 0.367883 udp 10.0.2.22 51868 <-> 187.104.168.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:48.533857 0.060389 udp 10.0.2.22 51868 <-> 77.96.67.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:49.524785 0.293457 udp 10.0.2.22 51868 <-> 58.85.103.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:50.526779 0.272614 udp 10.0.2.22 51868 <-> 201.82.38.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:51.527678 0.176001 udp 10.0.2.22 51868 <-> 72.178.159.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:52.408884 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:26:52.529439 0.233258 udp 10.0.2.22 51868 <-> 161.200.26.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:53.530883 0.199390 udp 10.0.2.22 51868 <-> 79.0.16.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:54.532050 1.058341 udp 10.0.2.22 51868 <-> 31.185.116.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:55.533918 0.319728 udp 10.0.2.22 51868 <-> 182.155.52.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:56.524884 0.045851 udp 10.0.2.22 51868 <-> 78.60.103.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:57.526741 0.382353 udp 10.0.2.22 51868 <-> 36.224.167.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:58.527452 0.157736 udp 10.0.2.22 51868 <-> 223.239.200.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:26:59.529077 0.284555 udp 10.0.2.22 51868 <-> 115.240.63.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:00.530700 0.473400 udp 10.0.2.22 51868 <-> 85.136.45.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:01.532299 0.000000 udp 10.0.2.22 51868 -> 109.2.250.226 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:27:02.533397 0.000000 udp 10.0.2.22 51868 -> 79.116.163.188 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:27:03.525140 0.162713 udp 10.0.2.22 51868 <-> 69.180.126.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:04.526395 0.272500 udp 10.0.2.22 51868 <-> 189.54.34.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:05.528034 0.000000 udp 10.0.2.22 51868 -> 178.125.70.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:27:06.529150 0.209351 udp 10.0.2.22 51868 <-> 190.156.182.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:07.531240 0.291374 udp 10.0.2.22 51868 <-> 179.219.214.223 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:08.532070 0.184870 udp 10.0.2.22 51868 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:09.533618 0.310760 udp 10.0.2.22 51868 <-> 150.162.192.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:10.525053 0.224028 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:11.526913 0.000000 udp 10.0.2.22 51868 -> 77.81.10.31 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:27:12.527585 0.154605 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:13.529235 0.208823 udp 10.0.2.22 51868 <-> 67.160.130.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:14.530746 3.995699 udp 10.0.2.22 51868 -> 95.238.36.69 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:27:15.532484 1.054640 udp 10.0.2.22 51868 <-> 213.214.69.42 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:17.525650 0.000000 udp 10.0.2.22 51868 -> 211.206.235.210 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:27:19.407985 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:27:19.527845 0.316764 udp 10.0.2.22 51868 <-> 58.140.164.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:20.529552 0.438825 udp 10.0.2.22 51868 <-> 190.247.155.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:21.531248 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:27:22.532072 0.000085 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:27:22.532157 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:27:23.533941 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:27:24.525528 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:27:25.526490 0.200572 udp 10.0.2.22 51868 <-> 190.203.171.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:26.528211 0.166992 udp 10.0.2.22 51868 <-> 75.149.216.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:27.529615 0.000000 udp 10.0.2.22 51868 -> 70.94.206.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:27:28.531387 0.027721 udp 10.0.2.22 51868 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:29.532584 0.051446 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:30.534148 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:27:31.524948 0.000000 udp 10.0.2.22 51868 -> 142.136.206.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:27:32.526503 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:27:33.527905 0.285219 udp 10.0.2.22 51868 <-> 60.56.88.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:34.530028 0.052097 udp 10.0.2.22 51868 <-> 89.34.96.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:35.530684 0.045440 udp 10.0.2.22 51868 <-> 79.118.96.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:35.973813 3.002040 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 06:27:36.532471 0.000000 udp 10.0.2.22 51868 -> 75.244.136.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:27:37.533987 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:27:38.525077 0.062765 udp 10.0.2.22 51868 <-> 178.158.102.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:39.527108 0.000000 udp 10.0.2.22 51868 -> 188.158.228.113 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:27:40.528186 0.345070 udp 10.0.2.22 51868 <-> 179.223.86.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:41.529607 0.196355 udp 10.0.2.22 51868 <-> 98.127.16.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:42.531123 0.032323 udp 10.0.2.22 51868 <-> 151.100.96.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:42.981843 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:27:43.532610 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:27:44.533753 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:27:45.525200 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:27:46.406980 0.000176 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:27:46.526559 2.805903 udp 10.0.2.22 51868 <-> 201.221.100.105 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:47.528319 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:27:48.530065 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:27:49.531413 0.798063 udp 10.0.2.22 51868 <-> 92.78.34.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:50.532226 0.253476 udp 10.0.2.22 51868 <-> 212.251.106.187 16464 CON 0 0 2 668 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:50.983031 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:27:51.534189 0.000000 udp 10.0.2.22 51868 -> 36.230.40.35 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:27:52.525647 0.056846 udp 10.0.2.22 51868 <-> 217.209.140.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:53.526761 0.533821 udp 10.0.2.22 51868 <-> 96.49.44.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:54.528632 0.152605 udp 10.0.2.22 51868 <-> 24.114.217.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:55.529670 0.164177 udp 10.0.2.22 51868 <-> 68.206.170.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:56.530911 0.097492 udp 10.0.2.22 51868 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:57.532542 0.151942 udp 10.0.2.22 51868 <-> 97.95.93.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:58.533738 0.217296 udp 10.0.2.22 51868 <-> 71.197.74.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:27:59.525710 0.137133 udp 10.0.2.22 51868 <-> 208.53.245.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:28:00.526802 0.000000 udp 10.0.2.22 51868 -> 88.22.75.185 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:01.528745 0.139833 udp 10.0.2.22 51868 <-> 68.197.121.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:28:03.531292 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:04.532483 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:05.534211 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:06.525298 3.004757 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:06.525407 3.004648 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 2 172 flow=Background 1970/01/01 06:28:06.986117 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:28:07.526728 4.006146 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:08.528643 0.421176 udp 10.0.2.22 51868 <-> 117.215.1.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:28:10.531718 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:12.534705 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:13.405300 0.000126 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:28:14.527287 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:15.528676 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:16.529878 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:17.531102 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:18.532882 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:19.534431 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:20.525555 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:21.527302 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:22.528754 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:23.530036 4.997291 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:24.531227 0.531878 udp 10.0.2.22 51868 <-> 117.215.1.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:28:25.532827 0.000099 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:25.532926 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:28:26.534425 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:27.526040 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:29.528628 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:30.530079 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:31.531733 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:32.533282 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:33.534908 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:34.525860 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:35.527486 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:36.528979 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:37.530387 3.995779 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:38.531749 3.995267 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:38.992487 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:28:40.404351 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:28:40.534174 0.351337 udp 10.0.2.22 51868 <-> 117.215.1.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:28:43.528781 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:44.530463 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:45.531302 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:46.533088 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:47.524573 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:48.526119 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:49.527278 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:50.529177 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:51.529941 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:52.532064 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:53.532800 0.825740 udp 10.0.2.22 51868 <-> 117.215.1.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:28:54.524556 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:55.526117 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:56.527353 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:57.528763 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:58.530337 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:28:59.531495 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:00.533598 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:01.524731 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:03.527581 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:04.528717 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:05.530081 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:06.531747 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:07.533263 0.000050 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:07.533313 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:29:08.404133 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:29:08.524642 3.004190 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:09.526385 0.727974 udp 10.0.2.22 51868 <-> 117.215.1.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:29:10.527239 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:12.530502 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:13.531748 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:14.533355 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:15.525083 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:16.526243 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:17.527758 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:18.528746 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:19.530567 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:20.531914 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:21.533447 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:22.525075 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:23.526072 0.000055 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:23.526127 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:29:25.529141 0.451469 udp 10.0.2.22 51868 <-> 117.215.1.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:29:26.530873 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:27.532253 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:28.533452 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:29.525146 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:30.526346 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:31.527660 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:32.528903 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:33.530927 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:34.532002 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:35.403165 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:29:35.533748 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:37.526466 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:38.527949 0.000053 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:38.528002 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:29:39.529372 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:40.530532 0.562548 udp 10.0.2.22 51868 <-> 117.215.1.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:29:41.532119 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:42.533985 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:43.525392 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:44.526789 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:45.527731 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:46.529220 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:47.530997 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:48.532285 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:49.533600 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:50.525223 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:51.526431 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:52.527636 0.000044 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:52.527680 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:29:54.530895 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:55.532553 0.462939 udp 10.0.2.22 51868 <-> 117.215.1.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:29:56.533622 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:57.525462 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:58.526362 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:29:59.528319 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:00.529178 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:01.530890 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:02.402021 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:30:02.532576 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:03.533918 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:04.525061 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:05.526458 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:07.529931 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:08.530903 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:09.532747 0.000054 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:09.532801 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:30:10.533920 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:11.525643 0.455322 udp 10.0.2.22 51868 <-> 117.215.1.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:30:12.526890 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:13.528031 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:14.529965 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:15.530969 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:16.532420 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:17.533594 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:18.525036 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:19.526619 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:20.528423 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:21.529375 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:22.530892 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:23.532666 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:24.534267 0.000128 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:24.534395 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:30:26.527087 0.385513 udp 10.0.2.22 51868 <-> 117.215.1.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:30:27.528315 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:28.530265 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:29.531073 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:30.532274 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:31.403803 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:30:31.534329 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:32.525515 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:33.526751 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:34.528012 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:35.529465 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:36.531151 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:37.532438 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:38.533753 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:40.527308 0.000062 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:40.527370 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:30:41.528851 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:42.530153 0.631538 udp 10.0.2.22 51868 <-> 117.215.1.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:30:43.531647 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:44.533221 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:45.534558 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:46.525832 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:47.526904 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:48.528663 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:49.529726 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:50.531285 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:51.533036 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:52.534252 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:53.525751 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:54.526825 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:55.528854 0.000042 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:55.528896 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:30:57.531597 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:30:58.402624 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:30:58.533052 0.413732 udp 10.0.2.22 51868 <-> 117.215.1.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:30:59.534379 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:00.525731 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:01.526845 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:03.529978 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:04.531631 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:05.532615 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:06.534765 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:07.525903 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:08.527473 0.000039 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:08.527512 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:31:09.528917 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:10.530322 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:11.531593 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:12.532883 3.995699 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:13.534099 0.376255 udp 10.0.2.22 51868 <-> 117.215.1.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:31:14.526041 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:15.527179 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:18.531570 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:19.532749 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:20.524340 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:21.526080 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:22.527780 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:23.528700 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:24.530212 0.000063 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:24.530275 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:31:25.401284 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:31:25.532013 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:26.533217 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:27.524224 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:28.526362 4.005654 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:29.527189 0.719696 udp 10.0.2.22 51868 <-> 117.215.1.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:31:30.528985 0.000082 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:30.529067 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:31:31.530835 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:33.532914 3.996524 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:34.524602 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:35.526115 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:36.527146 0.145723 udp 10.0.2.22 51868 <-> 74.57.193.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:31:38.530043 0.000050 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:38.530093 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:31:39.531567 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:40.533235 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:41.524863 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:42.526366 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:43.527946 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:44.528672 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:45.530096 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:46.532045 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:47.533162 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:48.525052 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:49.526253 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:50.528098 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:51.529306 4.997510 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:52.400126 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:31:52.530869 0.077656 udp 10.0.2.22 51868 <-> 84.232.82.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:31:53.532050 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:54.533077 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:55.525195 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:57.527952 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:58.529544 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:31:59.540474 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:00.541928 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:01.543440 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:02.534946 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:03.536647 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:04.537917 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:06.540443 0.000049 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:06.540492 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:32:07.542101 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:08.543894 0.885869 udp 10.0.2.22 51868 <-> 2.185.124.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:32:09.534976 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:10.536667 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:11.538324 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:12.539605 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:13.540387 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:14.542267 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:15.543602 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:16.535226 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:18.537955 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:19.409441 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:32:19.538999 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:20.540672 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:21.542228 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:22.543984 0.000060 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:22.544044 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:32:23.535210 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:24.536401 4.397552 udp 10.0.2.22 51868 <-> 181.164.188.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:32:25.538298 0.319935 udp 10.0.2.22 51868 <-> 223.218.71.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:32:26.539362 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:27.540990 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:29.543387 0.000000 udp 10.0.2.22 51868 -> 81.37.252.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:30.535322 0.145732 udp 10.0.2.22 51868 <-> 24.180.138.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:32:31.536533 0.198538 udp 10.0.2.22 51868 <-> 184.167.204.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:32:32.538351 0.049810 udp 10.0.2.22 51868 <-> 95.76.49.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:32:33.539601 0.343311 udp 10.0.2.22 51868 <-> 218.173.112.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:32:34.540709 0.283706 udp 10.0.2.22 51868 <-> 92.238.10.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:32:35.542224 0.000047 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:35.542271 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:32:36.543887 0.159812 udp 10.0.2.22 51868 <-> 98.253.7.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:32:37.535361 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:38.536852 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:39.538465 0.153246 udp 10.0.2.22 51868 <-> 71.205.185.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:32:40.539311 0.194435 udp 10.0.2.22 51868 <-> 72.175.79.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:32:41.540752 0.330458 udp 10.0.2.22 51868 <-> 121.147.28.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:32:42.542346 2.128577 udp 10.0.2.22 51868 <-> 162.17.224.73 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:32:43.543982 0.000000 udp 10.0.2.22 51868 -> 123.201.154.154 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:45.536394 0.063854 udp 10.0.2.22 51868 <-> 188.26.30.37 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:32:46.417784 0.000037 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:32:46.538383 0.140794 udp 10.0.2.22 51868 <-> 23.28.74.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:32:47.539353 0.283826 udp 10.0.2.22 51868 <-> 177.100.237.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:32:48.540847 0.221008 udp 10.0.2.22 51868 <-> 37.254.82.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:32:49.542853 0.294618 udp 10.0.2.22 51868 <-> 58.9.41.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:32:50.543811 0.155441 udp 10.0.2.22 51868 <-> 75.115.30.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:32:51.535426 0.115897 udp 10.0.2.22 51868 <-> 70.160.231.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:32:52.536844 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:53.538292 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:55.540956 0.000045 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:55.541001 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:32:56.542835 0.140734 udp 10.0.2.22 51868 <-> 74.203.121.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:32:57.543847 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:58.535679 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:32:59.536933 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:00.538661 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:01.539384 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:02.541102 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:03.542425 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:04.544026 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:05.535187 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:06.536624 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:07.538435 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:08.540140 0.344572 udp 10.0.2.22 51868 <-> 200.232.201.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:33:09.541043 0.000000 udp 10.0.2.22 51868 -> 5.15.167.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:10.543051 0.076504 udp 10.0.2.22 51868 <-> 82.130.134.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:33:11.544454 0.161270 udp 10.0.2.22 51868 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:33:12.535356 0.000000 udp 10.0.2.22 51868 -> 36.232.204.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:13.416429 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:33:13.536902 0.051285 udp 10.0.2.22 51868 <-> 46.253.3.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:33:14.538332 0.000000 udp 10.0.2.22 51868 -> 116.202.157.144 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:15.539872 1.167837 udp 10.0.2.22 51868 <-> 186.176.98.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:33:16.541096 0.000000 udp 10.0.2.22 51868 -> 97.106.251.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:17.542855 3.995280 udp 10.0.2.22 51868 -> 95.141.107.118 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:18.544481 0.140722 udp 10.0.2.22 51868 <-> 85.84.74.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:33:19.535308 0.051486 udp 10.0.2.22 51868 <-> 5.15.167.2 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:33:20.537106 0.926129 udp 10.0.2.22 51868 <-> 190.97.47.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:33:22.539593 0.371534 udp 10.0.2.22 51868 <-> 116.202.157.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:33:23.541344 0.147016 udp 10.0.2.22 51868 <-> 130.115.84.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:33:24.542563 0.000000 udp 10.0.2.22 51868 -> 188.6.74.103 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:25.543914 0.294816 udp 10.0.2.22 51868 <-> 186.137.222.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:33:26.535589 0.033220 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:33:27.536929 0.000000 udp 10.0.2.22 51868 -> 31.11.182.135 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:28.538301 0.336695 udp 10.0.2.22 51868 <-> 186.52.103.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:33:29.540012 0.324598 udp 10.0.2.22 51868 <-> 200.232.201.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:33:30.541313 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:31.543144 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:32.543984 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:33.535970 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:34.537123 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:35.538803 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:36.540184 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:37.541663 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:38.542780 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:40.415298 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:33:40.535630 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:41.536927 0.329434 udp 10.0.2.22 51868 <-> 200.232.201.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:33:42.538613 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:43.539980 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:44.541836 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:45.542806 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:46.544597 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:47.536268 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:48.537042 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:49.538423 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:50.539965 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:51.541592 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:52.543450 4.996930 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:53.534792 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:54.536158 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:56.538979 0.348060 udp 10.0.2.22 51868 <-> 41.138.191.108 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:33:58.541604 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:33:59.542770 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:34:00.534462 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:34:01.536000 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:34:02.537469 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:34:03.539159 0.000042 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:34:03.539201 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:34:04.540204 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:34:05.541834 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:34:06.542844 0.087165 udp 10.0.2.22 51868 <-> 94.41.113.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:07.414290 0.000145 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:34:07.534802 0.114095 udp 10.0.2.22 51868 <-> 24.253.132.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:08.536165 0.153785 udp 10.0.2.22 51868 <-> 156.26.82.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:09.537161 0.253157 udp 10.0.2.22 51868 <-> 50.113.56.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:10.539149 0.146358 udp 10.0.2.22 51868 <-> 71.75.119.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:11.540111 3.996204 udp 10.0.2.22 51868 -> 180.146.156.252 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:34:12.541925 0.163889 udp 10.0.2.22 51868 <-> 71.45.41.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:13.543668 0.178377 udp 10.0.2.22 51868 <-> 123.201.36.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:14.534851 0.320117 udp 10.0.2.22 51868 <-> 88.72.192.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:16.537230 0.172008 udp 10.0.2.22 51868 <-> 183.82.95.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:17.539270 0.000000 udp 10.0.2.22 51868 -> 95.74.254.149 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:34:18.540227 0.045770 udp 10.0.2.22 51868 <-> 213.65.135.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:19.541940 0.329728 udp 10.0.2.22 51868 <-> 121.147.28.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:20.543157 0.427386 udp 10.0.2.22 51868 <-> 179.98.253.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:21.535161 0.024193 udp 10.0.2.22 51868 <-> 84.26.131.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:22.535877 0.033135 udp 10.0.2.22 51868 <-> 80.99.247.22 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:23.537570 0.050993 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:24.538987 0.000000 udp 10.0.2.22 51868 -> 89.73.207.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:34:25.540885 0.000000 udp 10.0.2.22 51868 -> 114.37.15.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:34:26.542020 0.000000 udp 10.0.2.22 51868 -> 75.109.202.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:34:27.543048 0.051164 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:28.534721 0.260552 udp 10.0.2.22 51868 <-> 72.130.237.152 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:29.536166 0.210239 udp 10.0.2.22 51868 <-> 50.150.82.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:30.537965 4.322304 udp 10.0.2.22 51868 <-> 220.129.65.77 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:31.539339 0.237950 udp 10.0.2.22 51868 <-> 31.47.27.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:32.540375 0.236732 udp 10.0.2.22 51868 <-> 189.194.113.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:33.541857 0.000000 udp 10.0.2.22 51868 -> 78.70.192.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:34:34.412975 0.000108 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:34:35.535050 0.198520 udp 10.0.2.22 51868 <-> 67.185.164.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:36.536111 0.073748 udp 10.0.2.22 51868 <-> 85.84.89.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:37.537672 0.373724 udp 10.0.2.22 51868 <-> 190.193.56.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:38.539360 0.196356 udp 10.0.2.22 51868 <-> 97.106.251.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:39.540939 0.185469 udp 10.0.2.22 51868 <-> 174.3.76.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:40.541870 0.164210 udp 10.0.2.22 51868 <-> 173.174.185.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:41.543675 0.000000 udp 10.0.2.22 51868 -> 79.183.172.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:34:42.535175 0.000000 udp 10.0.2.22 51868 -> 174.59.159.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:34:43.008451 3.001397 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 06:34:43.536408 0.000000 udp 10.0.2.22 51868 -> 88.165.92.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:34:44.537744 1.250597 udp 10.0.2.22 51868 <-> 97.106.251.17 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:46.540343 0.000000 udp 10.0.2.22 51868 -> 88.232.103.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:34:47.541808 0.555758 udp 10.0.2.22 51868 <-> 190.78.25.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:48.543296 0.403391 udp 10.0.2.22 51868 <-> 177.83.18.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:49.535111 0.162343 udp 10.0.2.22 51868 <-> 65.35.3.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:50.015802 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:34:50.536765 0.000000 udp 10.0.2.22 51868 -> 75.206.30.160 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:34:51.537701 0.366269 udp 10.0.2.22 51868 <-> 151.74.151.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:52.539129 0.000000 udp 10.0.2.22 51868 -> 2.185.124.124 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:34:53.540830 0.000000 udp 10.0.2.22 51868 -> 115.242.229.208 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:34:54.542131 0.118424 udp 10.0.2.22 51868 <-> 98.166.225.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:55.543401 0.306919 udp 10.0.2.22 51868 <-> 119.240.45.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:56.535150 0.069349 udp 10.0.2.22 51868 <-> 86.123.120.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:57.536802 0.014635 udp 10.0.2.22 51868 <-> 95.222.234.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:58.017372 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:34:58.538210 3.095682 udp 10.0.2.22 51868 <-> 189.28.214.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:34:59.539272 0.136367 udp 10.0.2.22 51868 <-> 67.82.210.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:00.541073 0.151714 udp 10.0.2.22 51868 <-> 76.11.73.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:01.412266 0.000037 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:35:01.542220 0.052757 udp 10.0.2.22 51868 <-> 178.254.244.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:02.543499 0.204103 udp 10.0.2.22 51868 <-> 24.19.85.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:03.535427 0.000000 udp 10.0.2.22 51868 -> 207.224.186.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:35:04.536807 0.148450 udp 10.0.2.22 51868 <-> 174.109.218.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:05.538417 0.000000 udp 10.0.2.22 51868 -> 176.52.77.39 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:35:06.539185 0.036598 udp 10.0.2.22 51868 <-> 85.130.12.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:07.541423 0.000000 udp 10.0.2.22 51868 -> 85.86.199.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:35:08.542692 0.000000 udp 10.0.2.22 51868 -> 110.169.204.45 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:35:09.543609 0.048235 udp 10.0.2.22 51868 <-> 89.190.113.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:10.535057 0.164034 udp 10.0.2.22 51868 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:11.536743 0.160065 udp 10.0.2.22 51868 <-> 24.63.83.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:12.538355 0.052133 udp 10.0.2.22 51868 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:13.539537 0.035993 udp 10.0.2.22 51868 <-> 85.130.12.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:14.019888 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:35:14.540897 0.000000 udp 10.0.2.22 51868 -> 181.192.6.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:35:15.542732 2.994146 udp 10.0.2.22 51868 -> 98.67.186.253 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:35:16.543621 0.316708 udp 10.0.2.22 51868 <-> 110.169.204.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:17.535303 0.044407 udp 10.0.2.22 51868 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:19.538391 0.000000 udp 10.0.2.22 51868 -> 86.31.142.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:35:20.539406 0.000000 udp 10.0.2.22 51868 -> 194.242.159.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:35:21.540689 0.000000 udp 10.0.2.22 51868 -> 82.245.78.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:35:22.542449 0.050912 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:23.543797 1.992910 udp 10.0.2.22 51868 -> 114.26.249.21 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:35:24.535383 0.243731 udp 10.0.2.22 51868 <-> 187.247.181.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:26.538683 0.107973 udp 10.0.2.22 51868 <-> 178.127.106.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:27.539682 2.055582 udp 10.0.2.22 51868 <-> 188.27.96.153 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:28.411194 0.000082 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:35:28.540737 0.000000 udp 10.0.2.22 51868 -> 24.140.128.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:35:30.544197 0.857013 udp 10.0.2.22 51868 <-> 89.228.227.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:31.535637 2.031024 udp 10.0.2.22 51868 <-> 134.3.82.19 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:32.536737 0.000000 udp 10.0.2.22 51868 -> 84.118.201.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:35:34.539734 0.170116 udp 10.0.2.22 51868 <-> 174.57.198.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:35.541191 0.000000 udp 10.0.2.22 51868 -> 201.1.80.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:35:36.542618 0.233146 udp 10.0.2.22 51868 <-> 161.200.26.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:37.544273 0.316489 udp 10.0.2.22 51868 <-> 114.174.40.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:38.535222 0.290867 udp 10.0.2.22 51868 <-> 177.139.72.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:39.536980 0.224225 udp 10.0.2.22 51868 <-> 71.9.136.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:40.538687 0.161744 udp 10.0.2.22 51868 <-> 49.204.144.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:41.540057 1.516786 udp 10.0.2.22 51868 <-> 186.9.10.101 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:43.543100 0.024216 udp 10.0.2.22 51868 <-> 89.212.235.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:44.544246 0.152924 udp 10.0.2.22 51868 <-> 111.119.245.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:45.535414 0.169319 udp 10.0.2.22 51868 <-> 68.51.132.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:46.026401 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:35:46.536951 0.324668 udp 10.0.2.22 51868 <-> 201.95.31.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:47.538180 0.044215 udp 10.0.2.22 51868 <-> 81.232.30.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:48.539846 0.000000 udp 10.0.2.22 51868 -> 88.246.186.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:35:49.540931 0.169195 udp 10.0.2.22 51868 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:50.542660 0.040761 udp 10.0.2.22 51868 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:35:51.544384 0.000000 udp 10.0.2.22 51868 -> 108.82.125.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:35:53.537200 0.000250 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:35:53.537450 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:35:54.538695 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:35:55.409493 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:35:55.540192 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:35:56.541303 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:35:57.542809 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:35:58.544147 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:35:59.535297 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:00.537089 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:01.538420 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:02.540309 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:03.541747 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:04.543156 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:05.544474 3.995462 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:06.535597 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:07.537407 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:08.538958 0.459856 udp 10.0.2.22 51868 <-> 27.106.35.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:36:10.581439 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:11.582792 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:12.584406 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:13.575480 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:14.576961 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:16.580580 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:17.581601 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:18.582832 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:19.584279 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:20.576196 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:21.577751 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:22.458495 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:36:22.579004 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:23.580046 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:24.581967 0.052940 udp 10.0.2.22 51868 <-> 178.148.77.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:36:25.582780 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:26.574469 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:27.575951 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:28.577250 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:29.578886 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:30.579944 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:31.582026 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:32.583033 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:33.574617 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:34.575906 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:35.577336 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:37.580664 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:38.583679 0.000065 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:38.583744 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:36:39.583161 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:40.574808 0.060491 udp 10.0.2.22 51868 <-> 178.148.77.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:36:41.576404 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:42.577211 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:43.579452 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:44.580300 0.000060 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:44.580360 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:36:45.582056 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:46.583108 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:47.575165 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:48.575858 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:49.577708 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:50.458523 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:36:50.579207 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:51.580354 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:52.582286 3.995387 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:53.583608 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:55.575910 0.159001 udp 10.0.2.22 51868 <-> 64.83.204.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:36:57.578740 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:36:58.580922 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:00.583115 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:01.574740 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:02.576140 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:03.577832 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:04.579045 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:05.580974 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:06.582409 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:07.583162 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:08.574772 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:09.576543 0.000049 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:09.576592 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:37:10.577534 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:11.579412 0.162222 udp 10.0.2.22 51868 <-> 64.83.204.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:37:12.580843 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:13.582136 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:14.583370 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:16.576372 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:17.457724 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:37:17.577508 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:18.579328 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:19.580976 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:20.582235 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:21.583385 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:22.575279 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:23.576310 0.000090 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:23.576400 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:37:24.577767 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:25.579474 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:26.580606 0.000000 udp 10.0.2.22 51868 -> 91.144.119.203 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:27.582406 0.049397 udp 10.0.2.22 51868 <-> 178.148.77.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:37:28.583742 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:29.575245 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:30.576642 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:31.577892 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:32.579212 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:33.580808 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:34.582180 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:35.583578 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:36.575139 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:36.905673 0.012810 udp 10.0.2.22 60036 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 06:37:36.918789 0.000000 udp 10.0.2.22 60037 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:37.576718 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:39.579652 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:40.581186 0.000078 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:40.581264 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:37:41.582666 3.995795 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:42.583679 0.039242 udp 10.0.2.22 51868 <-> 95.90.117.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:37:43.575038 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:44.456822 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:37:44.576613 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:46.579364 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:47.581165 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:48.582345 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:49.584088 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:50.575039 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:51.577071 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:52.578549 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:53.579309 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:55.582133 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:56.583600 0.000085 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:56.583685 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:37:57.575302 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:37:58.577168 1.021474 udp 10.0.2.22 51868 <-> 91.144.119.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:37:59.578453 0.043028 udp 10.0.2.22 51868 <-> 95.90.117.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:00.579344 0.060630 udp 10.0.2.22 51868 <-> 95.169.211.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:01.581302 0.163880 udp 10.0.2.22 51868 <-> 76.123.228.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:02.582389 0.151410 udp 10.0.2.22 51868 <-> 173.2.97.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:03.584004 0.131685 udp 10.0.2.22 51868 <-> 107.3.86.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:04.575206 0.055633 udp 10.0.2.22 51868 <-> 88.156.89.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:05.576737 0.000000 udp 10.0.2.22 51868 -> 5.237.137.51 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:38:06.578237 0.040047 udp 10.0.2.22 51868 <-> 79.113.175.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:07.580104 0.139424 udp 10.0.2.22 51868 <-> 76.114.222.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:08.580883 0.000000 udp 10.0.2.22 51868 -> 219.114.23.77 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:38:09.582683 0.178560 udp 10.0.2.22 51868 <-> 70.173.33.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:10.584157 0.143004 udp 10.0.2.22 51868 <-> 24.182.94.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:11.455321 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:38:11.575803 0.151681 udp 10.0.2.22 51868 <-> 108.183.176.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:12.577062 0.690005 udp 10.0.2.22 51868 <-> 116.202.7.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:13.578639 0.028927 udp 10.0.2.22 51868 <-> 95.111.109.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:14.579488 0.181836 udp 10.0.2.22 51868 <-> 68.6.65.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:15.581613 0.464665 udp 10.0.2.22 51868 <-> 2.185.247.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:16.582665 0.142223 udp 10.0.2.22 51868 <-> 69.121.34.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:17.584045 4.996938 udp 10.0.2.22 51868 <-> 98.219.228.242 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:18.575274 0.152697 udp 10.0.2.22 51868 <-> 66.190.218.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:19.577555 0.000000 udp 10.0.2.22 51868 -> 49.107.6.226 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:38:20.578522 0.146158 udp 10.0.2.22 51868 <-> 24.138.62.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:21.579524 0.000000 udp 10.0.2.22 51868 -> 75.186.45.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:38:22.721445 0.000000 udp 10.0.2.22 51868 <- 98.219.228.242 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:38:23.582882 0.137762 udp 10.0.2.22 51868 <-> 98.231.152.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:24.584578 0.000000 udp 10.0.2.22 51868 -> 213.190.57.82 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:38:25.575868 1.378109 udp 10.0.2.22 51868 <-> 118.86.72.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:26.577258 0.121392 udp 10.0.2.22 51868 <-> 178.26.137.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:27.578686 4.005635 udp 10.0.2.22 51868 -> 188.29.89.112 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:38:28.580093 1.139158 udp 10.0.2.22 51868 <-> 24.147.226.5 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:30.582578 1.759866 udp 10.0.2.22 51868 <-> 2.184.46.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:32.576026 0.000000 udp 10.0.2.22 51868 -> 62.10.128.52 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:38:33.576809 0.365703 udp 10.0.2.22 51868 <-> 1.173.2.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:34.578720 0.162424 udp 10.0.2.22 51868 <-> 68.46.230.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:35.580217 0.000000 udp 10.0.2.22 51868 -> 210.170.30.83 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:38:36.581115 0.000000 udp 10.0.2.22 51868 -> 24.232.151.99 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:38:37.582821 0.037070 udp 10.0.2.22 51868 <-> 213.112.230.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:38.454149 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:38:38.584697 0.213761 udp 10.0.2.22 51868 <-> 108.210.184.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:39.576074 0.063367 udp 10.0.2.22 51868 <-> 90.229.251.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:40.577502 0.000000 udp 10.0.2.22 51868 -> 89.155.192.120 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:38:41.578452 0.028555 udp 10.0.2.22 51868 <-> 85.121.1.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:42.580265 0.000000 udp 10.0.2.22 51868 -> 79.176.13.149 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:38:43.581769 0.170721 udp 10.0.2.22 51868 <-> 183.82.201.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:44.582899 0.326120 udp 10.0.2.22 51868 <-> 175.204.146.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:45.584577 0.163447 udp 10.0.2.22 51868 <-> 76.107.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:46.576188 0.122599 udp 10.0.2.22 51868 <-> 92.62.67.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:47.577152 0.271224 udp 10.0.2.22 51868 <-> 177.80.157.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:48.578563 0.054343 udp 10.0.2.22 51868 <-> 86.121.142.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:49.580372 0.142284 udp 10.0.2.22 51868 <-> 69.84.79.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:50.581248 0.000000 udp 10.0.2.22 51868 -> 111.242.5.146 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:38:51.583276 0.412258 udp 10.0.2.22 51868 <-> 186.94.66.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:52.584267 0.307262 udp 10.0.2.22 51868 <-> 182.164.51.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:53.575687 0.000000 udp 10.0.2.22 51868 -> 24.239.62.85 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:38:54.577139 2.002710 udp 10.0.2.22 51868 -> 46.238.15.152 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:38:55.578663 0.040023 udp 10.0.2.22 51868 <-> 188.254.253.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:57.581512 0.306706 udp 10.0.2.22 51868 <-> 189.197.37.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:58.583255 0.155262 udp 10.0.2.22 51868 <-> 71.197.28.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:38:59.574706 0.000000 udp 10.0.2.22 51868 -> 93.135.132.136 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:39:00.576247 0.063020 udp 10.0.2.22 51868 <-> 195.3.228.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:01.577161 0.411663 udp 10.0.2.22 51868 <-> 186.94.66.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:02.579137 0.298619 udp 10.0.2.22 51868 <-> 189.110.169.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:03.579934 0.143251 udp 10.0.2.22 51868 <-> 69.121.211.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:04.581373 0.000000 udp 10.0.2.22 51868 -> 95.220.247.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:39:05.453201 0.000234 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:39:05.582811 0.000000 udp 10.0.2.22 51868 -> 115.241.150.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:39:06.574228 1.246015 udp 10.0.2.22 51868 <-> 88.169.29.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:07.575919 0.193807 udp 10.0.2.22 51868 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:08.577498 0.211312 udp 10.0.2.22 51868 <-> 117.212.94.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:09.578536 0.168476 udp 10.0.2.22 51868 <-> 68.206.10.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:10.580221 0.000000 udp 10.0.2.22 51868 -> 95.113.51.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:39:11.581538 0.172350 udp 10.0.2.22 51868 <-> 2.180.43.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:12.583093 0.166121 udp 10.0.2.22 51868 <-> 173.17.64.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:13.574311 0.140423 udp 10.0.2.22 51868 <-> 75.138.193.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:14.576018 0.157158 udp 10.0.2.22 51868 <-> 208.53.224.4 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:15.577596 0.396468 udp 10.0.2.22 51868 <-> 200.93.68.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:16.579275 1.819666 udp 10.0.2.22 51868 <-> 60.246.152.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:17.580499 0.157013 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:18.581777 0.578416 udp 10.0.2.22 51868 <-> 98.67.186.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:19.583185 0.056502 udp 10.0.2.22 51868 <-> 217.197.248.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:20.574577 0.035380 udp 10.0.2.22 51868 <-> 89.73.207.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:21.576143 0.173321 udp 10.0.2.22 51868 <-> 24.182.200.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:22.577743 0.075970 udp 10.0.2.22 51868 <-> 85.152.240.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:23.579051 0.000000 udp 10.0.2.22 51868 -> 71.170.7.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:39:24.580369 0.174162 udp 10.0.2.22 51868 <-> 66.68.188.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:25.581863 0.116966 udp 10.0.2.22 51868 <-> 79.52.41.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:26.583325 0.069163 udp 10.0.2.22 51868 <-> 87.53.130.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:27.574429 2.309863 udp 10.0.2.22 51868 <-> 121.152.144.82 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:28.576271 0.000000 udp 10.0.2.22 51868 -> 76.30.230.168 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:39:30.579165 0.048584 udp 10.0.2.22 51868 <-> 62.107.91.210 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:31.580780 2.278437 udp 10.0.2.22 51868 <-> 76.109.136.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:32.451858 0.034124 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:39:32.582006 0.900026 udp 10.0.2.22 51868 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:34.575075 0.262591 udp 10.0.2.22 51868 <-> 190.16.249.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:35.576123 0.118295 udp 10.0.2.22 51868 <-> 98.166.217.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:36.577622 0.241594 udp 10.0.2.22 51868 <-> 117.201.210.177 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:37.578914 0.477722 udp 10.0.2.22 51868 <-> 186.18.249.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:38.580453 0.045495 udp 10.0.2.22 51868 <-> 188.124.95.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:39.582357 0.000000 udp 10.0.2.22 51868 -> 112.140.70.122 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:39:40.583788 0.161736 udp 10.0.2.22 51868 <-> 68.52.86.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:41.575134 0.000000 udp 10.0.2.22 51868 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:39:42.576472 0.000000 udp 10.0.2.22 51868 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:39:43.577959 0.502092 udp 10.0.2.22 51868 <-> 92.78.34.11 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:44.578938 0.000000 udp 10.0.2.22 51868 -> 31.140.117.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:39:45.580778 0.369520 udp 10.0.2.22 51868 <-> 221.151.31.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:46.581755 0.060103 udp 10.0.2.22 51868 <-> 188.214.34.53 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:47.583515 0.467334 udp 10.0.2.22 51868 <-> 179.57.31.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:48.575092 0.119555 udp 10.0.2.22 51868 <-> 84.228.222.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:49.576636 0.000000 udp 10.0.2.22 51868 -> 173.18.114.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:39:50.578089 0.206493 udp 10.0.2.22 51868 <-> 66.237.94.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:51.578942 0.178677 udp 10.0.2.22 51868 <-> 24.154.191.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:52.580924 0.000000 udp 10.0.2.22 51868 -> 201.93.194.74 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:39:53.581808 0.211240 udp 10.0.2.22 51868 <-> 95.57.52.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:54.583752 1.992488 udp 10.0.2.22 51868 -> 122.121.109.191 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:39:55.575213 0.056943 udp 10.0.2.22 51868 <-> 86.127.163.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:57.577879 0.182178 udp 10.0.2.22 51868 <-> 115.117.75.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:58.579569 0.024036 udp 10.0.2.22 51868 <-> 83.83.126.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:39:59.450884 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:39:59.580874 0.119131 udp 10.0.2.22 51868 <-> 68.9.106.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:40:00.582253 0.233089 udp 10.0.2.22 51868 <-> 71.93.103.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:40:01.583856 0.062885 udp 10.0.2.22 51868 <-> 109.197.98.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:40:02.575197 0.172668 udp 10.0.2.22 51868 <-> 96.32.168.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:40:03.576241 0.364050 udp 10.0.2.22 51868 <-> 183.178.135.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:40:04.578079 0.155854 udp 10.0.2.22 51868 <-> 50.88.67.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:40:05.579279 0.000000 udp 10.0.2.22 51868 -> 97.76.164.126 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:06.581230 0.000000 udp 10.0.2.22 51868 -> 116.202.26.163 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:07.582317 0.000000 udp 10.0.2.22 51868 -> 5.53.197.157 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:08.583818 0.035543 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:40:09.575153 0.000000 udp 10.0.2.22 51868 -> 118.160.130.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:10.576855 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:11.577970 0.149949 udp 10.0.2.22 51868 <-> 173.23.113.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:40:12.579564 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:13.611324 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:14.612768 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:15.614064 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:16.605127 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:17.606534 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:18.608045 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:19.609224 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:20.611096 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:21.612114 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:22.614165 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:23.605165 1.001681 udp 10.0.2.22 51868 <-> 118.160.130.247 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:40:25.608306 0.153700 udp 10.0.2.22 51868 <-> 173.23.113.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:40:26.479240 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:40:26.609703 0.045414 udp 10.0.2.22 51868 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:40:27.611296 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:28.612933 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:29.614025 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:30.605539 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:32.608481 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:33.609944 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:34.610807 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:35.612849 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:36.613960 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:37.605423 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:38.606699 0.000075 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:38.606774 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:40:39.608151 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:40.609609 0.000000 udp 10.0.2.22 51868 -> 118.160.130.247 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:41.611179 0.000000 udp 10.0.2.22 51868 -> 85.105.47.94 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:42.612493 0.039076 udp 10.0.2.22 51868 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:40:43.613909 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:44.605446 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:45.606907 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:46.608049 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:47.610311 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:48.611628 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:49.612691 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:50.614503 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:51.605794 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:52.607215 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:53.487911 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:40:53.608343 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:54.610321 0.000050 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:54.610371 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:40:55.611247 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:56.613004 0.000000 udp 10.0.2.22 51868 -> 85.105.47.94 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:57.613861 0.037968 udp 10.0.2.22 51868 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:40:58.605660 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:40:59.606895 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:00.608515 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:01.609944 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:02.611635 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:03.612786 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:04.614420 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:05.605424 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:06.607211 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:07.608423 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:08.609831 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:09.611226 3.995756 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:10.612830 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:11.614552 0.000091 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:11.614643 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:41:12.605657 0.037474 udp 10.0.2.22 51868 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:41:14.608861 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:15.610152 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:16.611646 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:17.612807 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:19.606013 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:20.486727 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:41:20.607164 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:21.608518 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:22.610353 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:23.611840 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:24.613248 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:25.614416 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:26.606077 0.000071 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:26.606148 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:41:27.607054 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:28.619160 3.004142 udp 10.0.2.22 51868 -> 85.105.47.94 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:29.620421 1.000909 udp 10.0.2.22 51868 <-> 118.160.130.247 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:41:32.614780 0.040050 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:41:33.615983 0.000000 udp 10.0.2.22 51868 -> 79.117.216.81 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:34.617560 0.127706 udp 10.0.2.22 51868 <-> 98.124.111.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:41:35.619171 1.055560 udp 10.0.2.22 51868 <-> 46.253.3.40 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:41:37.621452 2.994379 udp 10.0.2.22 51868 <-> 179.216.83.37 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:41:38.623455 0.228618 udp 10.0.2.22 51868 <-> 189.197.164.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:41:39.614534 0.289160 udp 10.0.2.22 51868 <-> 78.251.143.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:41:41.617758 0.466780 udp 10.0.2.22 51868 <-> 200.84.252.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:41:42.618843 0.095856 udp 10.0.2.22 51868 <-> 31.16.142.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:41:42.906259 0.000000 udp 10.0.2.22 51868 <- 179.216.83.37 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:43.620309 4.078095 udp 10.0.2.22 51868 <-> 87.120.215.67 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:41:44.622125 0.040401 udp 10.0.2.22 51868 <-> 195.178.240.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:41:45.623006 1.714594 udp 10.0.2.22 51868 <-> 188.153.244.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:41:46.615144 0.038923 udp 10.0.2.22 51868 <-> 5.15.14.14 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:41:47.496213 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:41:48.617484 0.446993 udp 10.0.2.22 51868 <-> 186.56.160.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:41:49.618799 4.997580 udp 10.0.2.22 51868 -> 67.78.29.162 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:50.111956 3.001819 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 06:41:50.620090 0.056436 udp 10.0.2.22 51868 <-> 77.78.246.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:41:51.621865 0.136741 udp 10.0.2.22 51868 <-> 67.86.105.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:41:52.623174 0.426707 udp 10.0.2.22 51868 <-> 27.105.0.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:41:53.614711 0.145373 udp 10.0.2.22 51868 <-> 67.86.90.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:41:55.617814 0.431506 udp 10.0.2.22 51868 <-> 84.38.87.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:41:56.618971 0.000000 udp 10.0.2.22 51868 -> 67.78.29.162 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:41:57.119770 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:41:57.620657 0.066910 udp 10.0.2.22 51868 <-> 188.27.96.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:41:58.622291 0.350410 udp 10.0.2.22 51868 <-> 117.197.202.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:41:59.623339 0.029108 udp 10.0.2.22 51868 <-> 87.97.204.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:00.614845 0.000000 udp 10.0.2.22 51868 -> 201.139.202.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:42:01.616456 0.159394 udp 10.0.2.22 51868 <-> 213.60.41.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:02.617362 0.046516 udp 10.0.2.22 51868 <-> 178.254.244.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:03.619522 4.996551 udp 10.0.2.22 51868 <-> 5.12.105.68 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:04.620215 0.168878 udp 10.0.2.22 51868 <-> 174.64.165.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:05.120999 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:42:05.622503 0.449268 udp 10.0.2.22 51868 <-> 166.159.168.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:06.623184 0.015300 udp 10.0.2.22 51868 <-> 164.8.108.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:07.614977 0.348669 udp 10.0.2.22 51868 <-> 220.129.65.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:09.617571 0.143193 udp 10.0.2.22 51868 <-> 24.186.58.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:10.618838 0.000000 udp 10.0.2.22 51868 -> 78.52.190.227 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:42:11.620504 0.272220 udp 10.0.2.22 51868 <-> 190.75.83.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:12.622263 0.000000 udp 10.0.2.22 51868 -> 2.191.126.229 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:42:13.623733 0.136534 udp 10.0.2.22 51868 <-> 98.204.178.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:14.494488 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:42:14.615073 0.295614 udp 10.0.2.22 51868 <-> 190.112.74.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:15.616854 0.399931 udp 10.0.2.22 51868 <-> 2.185.247.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:16.618351 0.491591 udp 10.0.2.22 51868 <-> 119.2.122.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:17.619105 0.174058 udp 10.0.2.22 51868 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:18.620786 0.138995 udp 10.0.2.22 51868 <-> 24.228.169.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:19.622588 2.720278 udp 10.0.2.22 51868 <-> 177.83.18.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:20.623555 0.048404 udp 10.0.2.22 51868 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:21.124189 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:42:22.616328 1.175241 udp 10.0.2.22 51868 <-> 173.174.0.5 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:24.619434 0.177164 udp 10.0.2.22 51868 <-> 75.65.7.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:25.620554 0.377413 udp 10.0.2.22 51868 <-> 180.176.70.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:26.622430 0.000000 udp 10.0.2.22 51868 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:42:27.623662 0.000000 udp 10.0.2.22 51868 -> 70.30.90.88 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:42:28.615187 0.000000 udp 10.0.2.22 51868 -> 128.177.76.205 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:42:29.616149 0.181289 udp 10.0.2.22 51868 <-> 184.49.10.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:30.618230 0.164693 udp 10.0.2.22 51868 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:31.619052 0.138637 udp 10.0.2.22 51868 <-> 24.147.226.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:32.620820 0.169940 udp 10.0.2.22 51868 <-> 24.182.200.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:33.622067 0.227295 udp 10.0.2.22 51868 <-> 200.93.52.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:34.623386 0.000000 udp 10.0.2.22 51868 -> 95.91.251.224 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:42:35.615019 0.040592 udp 10.0.2.22 51868 <-> 78.90.253.110 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:36.616602 0.000000 udp 10.0.2.22 51868 -> 218.35.15.88 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:42:37.617992 0.411070 udp 10.0.2.22 51868 <-> 1.168.39.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:38.619198 0.204784 udp 10.0.2.22 51868 <-> 31.47.27.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:39.621047 0.314915 udp 10.0.2.22 51868 <-> 190.193.86.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:40.622350 0.160007 udp 10.0.2.22 51868 <-> 65.35.3.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:41.493347 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:42:41.624188 0.179083 udp 10.0.2.22 51868 <-> 71.192.132.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:42.615020 0.037737 udp 10.0.2.22 51868 <-> 78.128.125.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:43.616911 0.356328 udp 10.0.2.22 51868 <-> 190.182.128.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:44.618418 2.414391 udp 10.0.2.22 51868 <-> 1.168.39.155 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:45.619326 0.297554 udp 10.0.2.22 51868 <-> 180.199.214.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:47.622612 0.328072 udp 10.0.2.22 51868 <-> 31.47.27.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:48.623898 1.553340 udp 10.0.2.22 51868 <-> 177.80.15.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:49.615176 0.443661 udp 10.0.2.22 51868 <-> 190.160.244.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:50.616702 3.070520 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:51.618122 0.139850 udp 10.0.2.22 51868 <-> 24.228.169.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:52.619330 2.355582 udp 10.0.2.22 51868 <-> 84.110.120.250 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:53.130147 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:42:55.623646 0.134466 udp 10.0.2.22 51868 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:42:56.614985 0.000000 udp 10.0.2.22 51868 -> 89.152.192.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:42:57.617120 0.000000 udp 10.0.2.22 51868 -> 114.37.112.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:42:58.618490 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:42:59.619557 0.155059 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:00.621011 0.049595 udp 10.0.2.22 51868 <-> 94.52.120.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:01.622635 0.134602 udp 10.0.2.22 51868 <-> 151.74.245.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:02.623846 4.808274 udp 10.0.2.22 51868 <-> 176.219.30.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:03.615165 0.397833 udp 10.0.2.22 51868 <-> 27.105.0.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:04.616923 0.168155 udp 10.0.2.22 51868 <-> 49.205.220.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:05.618318 0.250823 udp 10.0.2.22 51868 <-> 14.97.171.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:06.619746 0.129424 udp 10.0.2.22 51868 <-> 173.81.25.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:07.620876 0.157153 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:08.492699 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:43:08.622616 0.308529 udp 10.0.2.22 51868 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:09.624340 0.000000 udp 10.0.2.22 51868 -> 186.22.32.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:43:10.615176 0.013013 udp 10.0.2.22 51868 <-> 131.246.84.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:11.616711 0.820386 udp 10.0.2.22 51868 <-> 14.97.171.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:12.744157 0.255272 udp 10.0.2.22 51868 <-> 77.184.157.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:13.669716 0.015540 udp 10.0.2.22 51868 <-> 164.8.204.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:14.671494 1.534796 udp 10.0.2.22 51868 <-> 178.25.74.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:15.672723 0.303730 udp 10.0.2.22 51868 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:16.674486 0.153828 udp 10.0.2.22 51868 <-> 98.25.25.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:17.665531 0.032313 udp 10.0.2.22 51868 <-> 31.220.225.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:18.666763 0.180186 udp 10.0.2.22 51868 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:19.668126 0.040635 udp 10.0.2.22 51868 <-> 83.253.100.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:20.670202 0.217357 udp 10.0.2.22 51868 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:21.671151 0.155405 udp 10.0.2.22 51868 <-> 69.204.114.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:22.672688 0.000000 udp 10.0.2.22 51868 -> 173.206.5.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:43:23.674481 0.000000 udp 10.0.2.22 51868 -> 62.221.143.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:43:24.665599 1.169583 udp 10.0.2.22 51868 <-> 71.199.218.37 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:26.668783 0.000000 udp 10.0.2.22 51868 -> 118.141.242.65 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:43:27.670107 0.234036 udp 10.0.2.22 51868 <-> 76.237.0.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:28.671176 0.046699 udp 10.0.2.22 51868 <-> 46.214.114.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:29.672855 0.054589 udp 10.0.2.22 51868 <-> 79.113.147.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:30.674052 3.056706 udp 10.0.2.22 51868 <-> 188.24.154.55 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:31.665771 0.000000 udp 10.0.2.22 51868 -> 117.203.231.66 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:43:32.666804 0.405044 udp 10.0.2.22 51868 <-> 111.242.29.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:34.669887 0.170049 udp 10.0.2.22 51868 <-> 189.218.89.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:35.541522 0.000039 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:43:35.671544 0.310813 udp 10.0.2.22 51868 <-> 175.210.163.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:36.673164 0.155012 udp 10.0.2.22 51868 <-> 97.102.123.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:37.674592 0.000000 udp 10.0.2.22 51868 -> 123.205.142.67 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:43:38.665782 0.149477 udp 10.0.2.22 51868 <-> 203.194.104.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:39.666996 0.026949 udp 10.0.2.22 51868 <-> 82.212.11.234 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:40.668745 0.165076 udp 10.0.2.22 51868 <-> 174.57.198.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:41.670349 2.209561 udp 10.0.2.22 51868 <-> 67.189.32.245 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:42.671190 0.061348 udp 10.0.2.22 51868 <-> 86.124.151.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:44.674761 0.316944 udp 10.0.2.22 51868 <-> 190.160.37.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:45.666263 0.160177 udp 10.0.2.22 51868 <-> 98.212.118.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:46.666987 0.167077 udp 10.0.2.22 51868 <-> 174.57.198.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:47.668962 0.139018 udp 10.0.2.22 51868 <-> 24.228.169.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:48.670108 0.203125 udp 10.0.2.22 51868 <-> 200.84.172.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:49.671362 0.066405 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:50.672845 0.141660 udp 10.0.2.22 51868 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:51.674660 0.632212 udp 10.0.2.22 51868 <-> 173.214.226.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:52.666038 0.015552 udp 10.0.2.22 51868 <-> 164.8.204.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:53.667024 0.000000 udp 10.0.2.22 51868 -> 122.215.8.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:43:54.669016 0.000000 udp 10.0.2.22 51868 -> 94.205.1.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:43:55.670336 0.014435 udp 10.0.2.22 51868 <-> 89.177.210.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:56.671385 0.000000 udp 10.0.2.22 51868 -> 77.88.129.82 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:43:57.672853 0.058875 udp 10.0.2.22 51868 <-> 188.173.128.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:58.674827 0.314302 udp 10.0.2.22 51868 <-> 122.215.8.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:43:59.665801 0.403705 udp 10.0.2.22 51868 <-> 118.171.193.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:44:00.667408 0.060326 udp 10.0.2.22 51868 <-> 78.97.35.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:44:01.668655 0.060293 udp 10.0.2.22 51868 <-> 82.79.212.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:44:02.540204 0.000306 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:44:02.670835 0.081182 udp 10.0.2.22 51868 <-> 89.205.104.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:44:03.671458 0.155952 udp 10.0.2.22 51868 <-> 24.15.40.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:44:04.673617 0.039032 udp 10.0.2.22 51868 <-> 81.226.88.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:44:05.664253 0.219969 udp 10.0.2.22 51868 <-> 190.26.100.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:44:06.665958 0.166018 udp 10.0.2.22 51868 <-> 66.68.188.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:44:07.667134 0.403821 udp 10.0.2.22 51868 <-> 119.24.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:44:08.668742 0.157902 udp 10.0.2.22 51868 <-> 75.149.216.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:44:09.670619 0.418256 udp 10.0.2.22 51868 <-> 179.57.31.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:44:10.671730 0.000000 udp 10.0.2.22 51868 -> 87.188.164.136 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:11.673022 1.995428 udp 10.0.2.22 51868 <-> 109.239.76.74 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:44:12.664594 0.365974 udp 10.0.2.22 51868 <-> 200.146.193.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:44:14.667918 0.158841 udp 10.0.2.22 51868 <-> 68.54.122.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:44:15.669076 0.046651 udp 10.0.2.22 51868 <-> 46.237.92.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:44:16.670614 0.063993 udp 10.0.2.22 51868 <-> 109.104.184.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:44:17.671567 0.353744 udp 10.0.2.22 51868 <-> 146.83.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:44:18.673309 0.179273 udp 10.0.2.22 51868 <-> 75.65.20.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:44:19.664927 0.396941 udp 10.0.2.22 51868 <-> 111.242.10.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:44:20.666386 0.000000 udp 10.0.2.22 51868 -> 79.116.107.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:21.667683 1.428252 udp 10.0.2.22 51868 <-> 190.218.165.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:44:22.669258 1.194656 udp 10.0.2.22 51868 <-> 98.165.26.52 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:44:25.673516 0.000061 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:25.673577 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:44:26.664532 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:27.666284 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:28.667541 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:29.709176 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:30.710663 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:31.582024 0.000113 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:44:31.711950 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:32.713283 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:33.704910 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:34.706213 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:35.707999 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:36.709048 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:37.710330 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:38.712001 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:39.713237 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:40.705149 0.000000 udp 10.0.2.22 51868 -> 77.7.133.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:41.706959 0.212162 udp 10.0.2.22 51868 <-> 50.26.127.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:44:42.707751 0.000042 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:42.707793 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:44:43.709705 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:44.710858 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:45.712207 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:46.713337 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:47.705099 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:48.707077 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:49.707835 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:50.709059 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:51.710921 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:52.712552 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:53.713373 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:54.705140 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:56.707788 0.071623 udp 10.0.2.22 51868 <-> 77.7.133.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:44:57.709067 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:58.580726 0.000112 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:44:58.711228 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:44:59.711948 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:00.713781 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:01.705356 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:02.706424 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:03.708351 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:04.710036 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:05.711173 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:06.712618 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:07.713626 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:08.705474 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:09.706454 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:10.708488 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:11.709239 0.000053 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:11.709292 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:45:12.711064 1.063421 udp 10.0.2.22 51868 <-> 202.147.219.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:45:13.712695 0.053175 udp 10.0.2.22 51868 <-> 91.67.136.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:45:14.713844 0.138380 udp 10.0.2.22 51868 <-> 207.180.74.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:45:15.705350 0.053505 udp 10.0.2.22 51868 <-> 92.237.138.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:45:16.706872 0.000000 udp 10.0.2.22 51868 -> 79.69.238.48 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:17.708472 0.377346 udp 10.0.2.22 51868 <-> 113.254.24.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:45:18.709376 0.099240 udp 10.0.2.22 51868 <-> 137.99.97.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:45:19.711195 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:20.712369 0.000040 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:20.712409 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:45:21.713960 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:22.705151 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:23.707154 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:24.708004 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:25.709692 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:26.581017 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:45:26.710789 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:27.712765 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:28.714117 0.314409 udp 10.0.2.22 51868 <-> 71.102.80.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:45:29.705151 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:30.706734 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:31.708512 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:32.709945 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:33.711368 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:34.712918 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:35.714091 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:36.705215 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:37.706822 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:38.708543 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:40.711430 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:41.712992 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:42.714265 0.000040 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:42.714305 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:45:43.705224 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:44.706752 0.136650 udp 10.0.2.22 51868 <-> 98.204.178.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:45:45.708509 0.061809 udp 10.0.2.22 51868 <-> 178.168.46.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:45:46.709738 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:47.711361 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:48.712907 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:49.714065 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:50.705636 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:51.706869 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:52.708675 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:53.579945 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:45:54.711236 0.000079 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:54.711315 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:45:55.712905 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:56.714605 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:57.705993 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:58.707293 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:45:59.708896 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:00.710096 0.061875 udp 10.0.2.22 51868 <-> 178.168.46.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:46:01.711784 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:02.713125 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:03.714772 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:04.705604 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:05.706977 0.000045 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:05.707022 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:46:06.708666 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:07.709983 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:08.711160 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:09.712605 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:10.714629 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:11.706029 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:12.706915 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:13.708395 4.997131 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:14.710247 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:16.712910 0.099413 udp 10.0.2.22 51868 <-> 137.99.97.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:46:17.714468 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:19.706989 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:20.708883 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:21.580203 0.000108 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:46:22.711492 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:23.712988 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:24.714775 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:25.706319 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:26.707238 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:27.709170 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:28.710233 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:29.712003 0.000045 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:29.712048 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:46:30.713177 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:31.714543 0.337795 udp 10.0.2.22 51868 <-> 189.37.0.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:46:32.706304 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:33.707559 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:34.708987 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:35.710229 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:36.711697 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:37.713194 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:38.704549 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:39.705922 0.000064 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:39.705986 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:46:40.707629 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:41.709067 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:42.710051 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:43.712218 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:44.713467 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:46.706152 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:47.707271 0.156726 udp 10.0.2.22 51868 <-> 98.204.178.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:46:48.588906 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:46:48.709369 0.062031 udp 10.0.2.22 51868 <-> 178.168.46.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:46:49.710808 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:50.712056 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:51.713541 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:52.704463 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:53.706761 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:54.707396 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:55.708943 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:56.710348 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:57.712275 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:58.713079 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:46:59.705069 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:01.708046 0.000061 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:01.708107 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:47:02.709317 3.003799 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:03.710346 0.406184 udp 10.0.2.22 51868 <-> 189.37.0.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:47:04.712045 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:06.705080 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:07.706154 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:08.707634 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:09.709282 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:10.710609 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:11.712035 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:13.705045 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:14.706597 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:15.587953 0.000099 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:47:15.707673 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:16.708975 0.000080 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:16.709055 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:47:17.710762 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:18.712501 2.993893 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:19.713955 0.299278 udp 10.0.2.22 51868 <-> 71.102.80.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:47:20.705152 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:22.707885 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:23.709161 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:24.711122 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:25.711948 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:27.705186 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:28.706753 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:29.707938 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:30.709390 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:31.711338 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:32.711960 0.000059 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:32.712019 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:47:33.713674 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:34.705219 0.140321 udp 10.0.2.22 51868 <-> 37.238.234.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:47:35.706375 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:36.707690 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:38.710630 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:39.712725 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:40.714142 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:41.705169 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:42.706541 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:43.587896 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:47:43.707902 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:44.709716 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:45.710624 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:46.712853 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:47.713589 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:48.705352 0.000082 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:48.705434 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:47:49.707055 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:50.708521 0.061552 udp 10.0.2.22 51868 <-> 178.168.46.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:47:51.709717 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:52.710948 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:53.712136 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:54.714096 0.000095 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:54.714191 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:47:55.705240 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:56.706566 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:57.708230 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:58.709939 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:47:59.710756 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:00.712591 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:01.713670 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:02.705829 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:03.706894 4.005898 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:04.708708 4.005006 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:06.711311 0.100373 udp 10.0.2.22 51868 <-> 137.99.97.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:48:09.705407 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:11.588348 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:48:11.708764 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:12.709610 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:13.711109 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:14.712422 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:15.714021 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:16.705202 0.000055 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:16.705257 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:48:17.707172 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:18.708272 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:19.710125 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:20.851209 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:21.852694 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:22.854642 0.000000 udp 10.0.2.22 51868 -> 37.238.234.172 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:23.846151 0.257512 udp 10.0.2.22 51868 <-> 71.102.80.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:48:24.847369 0.000075 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:24.847444 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:48:25.848497 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:26.850211 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:27.851274 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:28.853322 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:29.854178 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:30.846148 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:31.847639 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:32.848787 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:34.851775 4.996724 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:35.853122 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:36.854455 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:37.846052 0.000000 udp 10.0.2.22 51868 -> 211.8.39.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:38.847343 0.159703 udp 10.0.2.22 51868 <-> 68.62.2.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:48:39.728919 0.001105 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:48:41.851356 0.145373 udp 10.0.2.22 51868 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:48:42.852791 0.000076 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:42.852867 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:48:43.854471 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:44.845950 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:45.867532 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:46.869083 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:47.870154 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:48.871547 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:49.872886 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:50.874938 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:51.866247 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:52.871838 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:53.868738 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:54.870218 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:55.871520 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:56.872938 0.352459 udp 10.0.2.22 51868 <-> 58.177.49.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:48:57.386608 3.001579 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 06:48:57.874594 0.585317 udp 10.0.2.22 51868 <-> 201.243.173.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:48:58.866112 0.000000 udp 10.0.2.22 51868 -> 81.37.252.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:48:59.867303 0.390295 udp 10.0.2.22 51868 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:49:00.869088 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:01.870863 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:02.871607 0.000067 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:02.871674 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:49:03.873134 2.994506 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:04.393858 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:49:04.874744 0.161036 udp 10.0.2.22 51868 <-> 68.62.2.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:49:05.865893 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:06.747099 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:49:07.869125 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:08.870544 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:09.872249 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:10.873652 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:11.864799 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:12.395706 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:49:12.866084 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:13.867933 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:14.869339 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:15.870652 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:16.872102 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:17.873818 0.000043 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:17.873861 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:49:19.866799 0.158812 udp 10.0.2.22 51868 <-> 68.62.2.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:49:20.867622 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:21.869042 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:23.871757 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:24.873759 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:25.865081 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:26.866715 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:27.867719 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:28.398634 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:49:28.869280 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:29.870600 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:30.872161 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:31.874020 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:32.865159 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:33.746496 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:49:33.866864 0.000038 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:33.866902 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:49:34.867946 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:35.869382 0.000000 udp 10.0.2.22 51868 -> 81.37.252.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:36.870592 0.343632 udp 10.0.2.22 51868 <-> 201.243.173.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:49:37.871895 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:38.873630 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:39.865124 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:40.866859 0.000065 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:40.866924 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:49:42.869181 4.147157 udp 10.0.2.22 51868 <-> 50.167.134.18 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:49:43.871030 0.352486 udp 10.0.2.22 51868 <-> 58.177.49.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:49:44.871961 0.173544 udp 10.0.2.22 51868 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:49:45.874036 0.000000 udp 10.0.2.22 51868 -> 174.59.159.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:47.866268 0.158103 udp 10.0.2.22 51868 <-> 68.62.2.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:49:48.868410 0.000000 udp 10.0.2.22 51868 -> 212.75.2.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:49:49.869702 3.342824 udp 10.0.2.22 51868 <-> 67.166.246.234 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:49:50.871026 0.173700 udp 10.0.2.22 51868 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:49:51.872148 0.174866 udp 10.0.2.22 51868 <-> 98.215.30.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:49:53.865270 0.142923 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:49:54.867010 0.428126 udp 10.0.2.22 51868 <-> 175.35.18.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:49:55.867901 0.166936 udp 10.0.2.22 51868 <-> 24.113.18.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:49:56.869216 0.167997 udp 10.0.2.22 51868 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:49:57.871523 2.065257 udp 10.0.2.22 51868 <-> 84.55.13.19 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:49:58.872574 0.294937 udp 10.0.2.22 51868 <-> 105.229.138.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:00.404337 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:50:00.745071 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:50:00.865337 0.000000 udp 10.0.2.22 51868 -> 111.253.57.243 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:50:01.866773 0.065372 udp 10.0.2.22 51868 <-> 188.241.23.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:02.868311 0.155280 udp 10.0.2.22 51868 <-> 71.80.71.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:03.870110 0.192527 udp 10.0.2.22 51868 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:04.870795 0.068666 udp 10.0.2.22 51868 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:05.872617 0.140234 udp 10.0.2.22 51868 <-> 111.91.35.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:06.874114 0.000000 udp 10.0.2.22 51868 -> 178.77.18.206 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:50:07.865539 0.315153 udp 10.0.2.22 51868 <-> 122.215.8.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:08.866567 0.193559 udp 10.0.2.22 51868 <-> 2.187.196.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:09.867971 3.082027 udp 10.0.2.22 51868 <-> 176.8.141.175 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:10.869633 0.141389 udp 10.0.2.22 51868 <-> 72.231.172.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:11.870968 0.087351 udp 10.0.2.22 51868 <-> 78.8.74.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:13.873641 0.042959 udp 10.0.2.22 51868 <-> 95.77.141.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:14.865327 0.408313 udp 10.0.2.22 51868 <-> 186.191.21.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:15.866679 0.000000 udp 10.0.2.22 51868 -> 199.188.251.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:50:16.868476 0.000000 udp 10.0.2.22 51868 -> 76.206.16.81 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:50:17.870078 0.000000 udp 10.0.2.22 51868 -> 76.203.208.68 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:50:18.871305 0.000000 udp 10.0.2.22 51868 -> 114.36.70.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:50:19.872423 0.040837 udp 10.0.2.22 51868 <-> 188.127.27.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:20.874311 0.178105 udp 10.0.2.22 51868 <-> 199.188.251.64 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:21.865265 0.000000 udp 10.0.2.22 51868 -> 5.15.167.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:50:22.867349 2.055023 udp 10.0.2.22 51868 <-> 79.133.238.86 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:23.868035 0.000000 udp 10.0.2.22 51868 -> 68.55.125.87 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:50:25.871329 0.351541 udp 10.0.2.22 51868 <-> 115.165.236.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:26.872505 0.041774 udp 10.0.2.22 51868 <-> 188.246.77.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:27.744155 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:50:27.874038 0.148876 udp 10.0.2.22 51868 <-> 74.195.167.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:28.865562 0.365899 udp 10.0.2.22 51868 <-> 58.177.49.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:29.866877 0.000000 udp 10.0.2.22 51868 -> 14.97.213.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:50:30.868537 0.174109 udp 10.0.2.22 51868 <-> 173.174.185.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:31.870044 0.000000 udp 10.0.2.22 51868 -> 58.11.136.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:50:32.871564 0.052779 udp 10.0.2.22 51868 <-> 5.61.147.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:33.872746 0.444759 udp 10.0.2.22 51868 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:34.874480 0.000000 udp 10.0.2.22 51868 -> 192.168.1.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:50:35.865286 0.044538 udp 10.0.2.22 51868 <-> 91.187.95.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:36.867265 0.119806 udp 10.0.2.22 51868 <-> 79.183.172.249 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:37.868843 1.105300 udp 10.0.2.22 51868 <-> 186.18.249.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:38.870050 0.158498 udp 10.0.2.22 51868 <-> 70.92.245.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:39.871586 2.058742 udp 10.0.2.22 51868 <-> 94.155.181.5 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:40.872943 0.068514 udp 10.0.2.22 51868 <-> 188.27.89.242 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:42.865939 0.000000 udp 10.0.2.22 51868 -> 187.35.21.244 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:50:43.866992 0.163862 udp 10.0.2.22 51868 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:44.868747 0.067329 udp 10.0.2.22 51868 <-> 84.126.6.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:45.870426 0.000000 udp 10.0.2.22 51868 -> 24.191.109.156 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:50:46.871222 0.344454 udp 10.0.2.22 51868 <-> 218.35.15.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:47.872641 0.000000 udp 10.0.2.22 51868 -> 180.147.116.143 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:50:48.874223 1.044251 udp 10.0.2.22 51868 <-> 117.204.148.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:49.865563 0.034662 udp 10.0.2.22 51868 <-> 77.23.138.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:50.867177 0.057552 udp 10.0.2.22 51868 <-> 95.77.141.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:51.868281 3.144831 udp 10.0.2.22 51868 <-> 24.191.109.156 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:52.869899 1.872676 arp 10.0.2.22 who 169.254.237.134 INT 3 126 flow=Background-ARP 1970/01/01 06:50:53.871170 0.366415 udp 10.0.2.22 51868 <-> 189.111.225.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:54.742490 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:50:55.874651 0.037710 udp 10.0.2.22 51868 <-> 78.128.125.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:56.866052 0.031478 udp 10.0.2.22 51868 <-> 87.97.242.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:57.867251 0.054696 udp 10.0.2.22 51868 <-> 78.88.193.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:58.868636 0.348353 udp 10.0.2.22 51868 <-> 218.35.15.88 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:50:59.870157 0.146112 udp 10.0.2.22 51868 <-> 79.55.5.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:00.871506 0.193191 udp 10.0.2.22 51868 <-> 37.150.249.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:01.873064 0.153914 udp 10.0.2.22 51868 <-> 76.16.28.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:02.874251 0.009554 udp 10.0.2.22 51868 <-> 94.74.245.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:03.865938 0.228825 udp 10.0.2.22 51868 <-> 190.75.86.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:04.867797 0.498730 udp 10.0.2.22 51868 <-> 190.155.71.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:05.868994 0.458190 udp 10.0.2.22 51868 <-> 179.216.9.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:06.870336 0.066360 udp 10.0.2.22 51868 <-> 93.186.103.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:07.871432 0.142879 udp 10.0.2.22 51868 <-> 24.75.169.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:08.873615 0.048581 udp 10.0.2.22 51868 <-> 188.246.77.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:09.874205 0.196292 udp 10.0.2.22 51868 <-> 50.26.30.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:10.866373 0.056904 udp 10.0.2.22 51868 <-> 37.77.155.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:11.867281 0.000000 udp 10.0.2.22 51868 -> 78.0.29.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:51:12.868925 0.338638 udp 10.0.2.22 51868 <-> 115.241.150.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:13.870158 0.989804 udp 10.0.2.22 51868 <-> 79.11.198.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:14.871330 0.153196 udp 10.0.2.22 51868 <-> 24.89.222.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:15.873112 0.000000 udp 10.0.2.22 51868 -> 79.29.180.175 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:51:16.874935 0.000000 udp 10.0.2.22 51868 -> 212.166.241.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:51:17.866117 0.293635 udp 10.0.2.22 51868 <-> 81.172.41.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:18.867671 0.090081 udp 10.0.2.22 51868 <-> 94.41.113.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:19.868736 0.941475 udp 10.0.2.22 51868 <-> 79.11.198.65 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:20.870143 0.417469 udp 10.0.2.22 51868 <-> 190.206.235.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:21.741274 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:51:21.872132 1.379676 udp 10.0.2.22 51868 <-> 89.228.227.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:22.872879 0.000000 udp 10.0.2.22 51868 -> 94.139.18.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:51:23.874979 0.135463 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:24.865766 0.163059 udp 10.0.2.22 51868 <-> 76.107.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:25.867620 0.000000 udp 10.0.2.22 51868 -> 67.105.75.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:51:26.869195 0.000000 udp 10.0.2.22 51868 -> 77.38.98.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:51:27.870923 3.995665 udp 10.0.2.22 51868 -> 90.152.4.244 16464 INT 0 3 174 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:51:28.872119 4.213235 udp 10.0.2.22 51868 <-> 67.189.32.245 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:30.874394 0.629260 udp 10.0.2.22 51868 <-> 173.214.226.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:33.868668 0.000000 udp 10.0.2.22 51868 -> 90.152.4.244 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:51:34.870708 0.229022 udp 10.0.2.22 51868 <-> 67.189.32.245 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:35.871918 0.000000 udp 10.0.2.22 51868 -> 114.37.112.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:51:36.872983 0.104715 udp 10.0.2.22 51868 <-> 79.126.190.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:37.874645 0.000000 udp 10.0.2.22 51868 -> 116.73.64.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:51:38.866026 0.000000 udp 10.0.2.22 51868 -> 178.23.213.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:51:39.867292 0.526144 udp 10.0.2.22 51868 <-> 173.214.226.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:40.869198 0.164514 udp 10.0.2.22 51868 <-> 66.68.188.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:41.870361 0.134516 udp 10.0.2.22 51868 <-> 162.17.224.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:42.872316 0.000000 udp 10.0.2.22 51868 -> 199.193.171.160 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:51:43.873402 0.084569 udp 10.0.2.22 51868 <-> 176.215.215.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:44.864494 0.144457 udp 10.0.2.22 51868 <-> 184.57.62.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:45.866597 0.009594 udp 10.0.2.22 51868 <-> 94.74.245.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:46.867750 0.159911 udp 10.0.2.22 51868 <-> 24.140.133.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:47.868982 3.996241 udp 10.0.2.22 51868 -> 98.112.212.46 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:51:48.740547 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:51:48.870869 0.061877 udp 10.0.2.22 51868 <-> 81.61.202.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:49.871690 0.065855 udp 10.0.2.22 51868 <-> 188.241.23.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:50.873891 3.119360 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:52.866803 0.038162 udp 10.0.2.22 51868 <-> 176.12.49.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:54.869071 0.058445 udp 10.0.2.22 51868 <-> 81.61.202.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:55.870489 0.417388 udp 10.0.2.22 51868 <-> 110.134.178.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:56.872241 1.133223 udp 10.0.2.22 51868 <-> 68.169.187.238 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:58.864822 0.154584 udp 10.0.2.22 51868 <-> 97.101.194.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:51:59.866530 0.065657 udp 10.0.2.22 51868 <-> 188.241.23.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:00.868091 0.177601 udp 10.0.2.22 51868 <-> 68.3.157.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:01.868940 0.000000 udp 10.0.2.22 51868 -> 79.118.4.204 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:52:02.870932 0.163035 udp 10.0.2.22 51868 <-> 50.143.57.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:03.872461 0.717592 udp 10.0.2.22 51868 <-> 88.207.58.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:04.873250 2.236672 udp 10.0.2.22 51868 <-> 78.251.143.19 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:05.865136 2.347780 udp 10.0.2.22 51868 <-> 58.177.49.26 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:08.868987 0.062675 udp 10.0.2.22 51868 <-> 46.35.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:09.870996 1.197872 udp 10.0.2.22 51868 <-> 186.136.104.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:10.872443 0.607207 udp 10.0.2.22 51868 <-> 88.207.58.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:11.873911 0.081697 udp 10.0.2.22 51868 <-> 89.132.42.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:12.864925 0.239051 udp 10.0.2.22 51868 <-> 74.135.11.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:13.866772 0.000000 udp 10.0.2.22 51868 -> 69.123.197.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:52:14.868203 0.043168 udp 10.0.2.22 51868 <-> 213.231.137.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:15.749226 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:52:15.869556 0.123056 udp 10.0.2.22 51868 <-> 24.204.248.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:16.870775 4.997489 udp 10.0.2.22 51868 -> 78.8.65.60 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:52:17.872639 0.000000 udp 10.0.2.22 51868 -> 151.239.60.139 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:52:18.874090 0.134510 udp 10.0.2.22 51868 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:19.865057 0.000000 udp 10.0.2.22 51868 -> 178.167.99.54 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:52:20.866814 0.000000 udp 10.0.2.22 51868 -> 151.62.65.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:52:21.915423 0.000036 udp 10.0.2.22 51868 <- 78.8.65.60 16464 RSP 0 0 2 1780 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:52:22.869172 0.119103 udp 10.0.2.22 51868 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:23.870701 0.000000 udp 10.0.2.22 51868 -> 123.24.142.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:52:24.872371 0.047705 udp 10.0.2.22 51868 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:25.873826 0.000000 udp 10.0.2.22 51868 -> 2.68.0.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:52:26.864991 0.000000 udp 10.0.2.22 51868 -> 161.200.173.68 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:52:27.866848 0.041175 udp 10.0.2.22 51868 <-> 188.127.27.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:28.868347 0.000000 udp 10.0.2.22 51868 -> 82.130.171.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:52:29.869781 0.064252 udp 10.0.2.22 51868 <-> 86.122.233.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:30.871202 0.160921 udp 10.0.2.22 51868 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:31.872243 0.033842 udp 10.0.2.22 51868 <-> 87.97.246.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:32.874171 0.000000 udp 10.0.2.22 51868 -> 115.241.149.83 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:52:33.865679 1.414648 udp 10.0.2.22 51868 <-> 97.107.107.80 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:35.868347 0.030983 udp 10.0.2.22 51868 <-> 89.64.246.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:36.869612 0.146514 udp 10.0.2.22 51868 <-> 75.99.213.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:37.200127 0.012132 udp 10.0.2.22 60038 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 06:52:37.212555 0.000000 udp 10.0.2.22 60039 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:52:37.871062 0.369229 udp 10.0.2.22 51868 <-> 199.117.183.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:38.872138 0.000000 udp 10.0.2.22 51868 -> 14.198.30.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:52:39.873898 3.995658 udp 10.0.2.22 51868 -> 190.246.109.252 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:52:40.865647 0.052349 udp 10.0.2.22 51868 <-> 94.21.66.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:41.867007 0.055690 udp 10.0.2.22 51868 <-> 95.104.47.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:42.748186 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:52:42.867875 3.004611 udp 10.0.2.22 51868 -> 201.68.33.246 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:52:44.871120 0.219309 udp 10.0.2.22 51868 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:44.959077 0.000000 udp 10.0.2.22 51868 <- 190.246.109.252 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:52:46.873648 0.329679 udp 10.0.2.22 51868 <-> 153.161.235.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:47.865116 2.354725 udp 10.0.2.22 51868 <-> 14.198.30.245 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:48.866996 0.054603 udp 10.0.2.22 51868 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:50.869679 3.807455 udp 10.0.2.22 51868 <-> 89.230.126.254 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:51.871225 1.201596 udp 10.0.2.22 51868 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:52.872563 0.057351 udp 10.0.2.22 51868 <-> 79.118.213.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:54.865631 0.061376 udp 10.0.2.22 51868 <-> 86.124.151.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:55.867002 0.047961 udp 10.0.2.22 51868 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:56.868618 0.000000 udp 10.0.2.22 51868 -> 117.195.13.109 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:52:57.870028 0.113679 udp 10.0.2.22 51868 <-> 69.77.158.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:58.871445 0.052880 udp 10.0.2.22 51868 <-> 84.232.228.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:52:59.872625 0.128075 udp 10.0.2.22 51868 <-> 66.103.51.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:53:00.874115 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:01.865888 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:02.866826 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:03.868501 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:04.869514 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:05.871026 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:06.872670 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:07.874583 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:08.865479 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:09.747116 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:53:09.867398 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:10.868743 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:11.869687 3.004349 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:12.871790 0.225326 udp 10.0.2.22 51868 <-> 31.47.2.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:53:13.872662 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:15.865519 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:16.866998 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:17.868856 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:18.870093 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:19.871706 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:20.872602 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:21.874568 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:22.865524 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:23.866961 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:24.868466 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:26.871691 0.000060 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:26.871751 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:53:27.873176 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:28.874589 0.053455 udp 10.0.2.22 51868 <-> 84.232.228.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:53:29.865743 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:30.866881 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:31.868739 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:32.869789 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:33.871232 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:34.872727 0.000061 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:34.872788 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:53:35.874799 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:36.745634 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:53:36.866160 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:37.867300 0.136692 udp 10.0.2.22 51868 <-> 66.103.51.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:53:38.868721 1.538592 udp 10.0.2.22 51868 <-> 177.80.15.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:53:39.870553 0.300149 udp 10.0.2.22 51868 <-> 200.153.210.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:53:40.871274 1.380049 udp 10.0.2.22 51868 <-> 190.218.165.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:53:41.872984 1.062037 udp 10.0.2.22 51868 <-> 95.42.253.18 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:53:43.865873 0.359675 udp 10.0.2.22 51868 <-> 79.9.246.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:53:44.867302 0.770044 udp 10.0.2.22 51868 <-> 92.78.34.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:53:45.869091 0.000000 udp 10.0.2.22 51868 -> 178.166.124.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:46.869932 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:47.871956 0.158693 udp 10.0.2.22 51868 <-> 209.182.117.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:53:48.873220 3.046279 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:53:49.874814 0.000000 udp 10.0.2.22 51868 -> 61.223.95.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:50.865838 0.050429 udp 10.0.2.22 51868 <-> 94.52.120.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:53:52.868720 0.000000 udp 10.0.2.22 51868 -> 178.166.124.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:53.870820 0.047162 udp 10.0.2.22 51868 <-> 5.13.132.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:53:54.872200 0.021516 udp 10.0.2.22 51868 <-> 82.212.11.234 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:53:55.873113 0.000000 udp 10.0.2.22 51868 -> 85.152.244.7 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:56.874744 0.154922 udp 10.0.2.22 51868 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:53:57.866249 0.000000 udp 10.0.2.22 51868 -> 181.43.34.113 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:53:58.867199 0.285080 udp 10.0.2.22 51868 <-> 201.214.63.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:53:59.869114 0.156699 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:00.870259 0.193097 udp 10.0.2.22 51868 <-> 88.66.100.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:01.871485 0.025104 udp 10.0.2.22 51868 <-> 82.212.11.234 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:02.873118 0.409128 udp 10.0.2.22 51868 <-> 126.60.193.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:03.744741 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:54:03.875111 0.374484 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:04.866556 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:54:05.867237 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:54:06.869216 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:54:07.870497 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:54:08.871948 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:54:09.873072 0.701207 udp 10.0.2.22 51868 <-> 177.83.18.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:10.875048 0.000000 udp 10.0.2.22 51868 -> 14.194.60.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:54:11.866186 0.069044 udp 10.0.2.22 51868 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:12.867993 0.000000 udp 10.0.2.22 51868 -> 114.24.166.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:54:13.869137 0.353869 udp 10.0.2.22 51868 <-> 1.165.71.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:14.870719 0.262578 udp 10.0.2.22 51868 <-> 177.224.86.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:15.871872 0.587818 udp 10.0.2.22 51868 <-> 218.103.165.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:16.873559 0.054216 udp 10.0.2.22 51868 <-> 89.2.226.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:17.865122 0.395234 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:18.866456 0.142218 udp 10.0.2.22 51868 <-> 76.116.162.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:19.867520 0.798888 udp 10.0.2.22 51868 <-> 223.188.124.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:20.869203 1.144378 udp 10.0.2.22 51868 <-> 68.83.113.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:22.871689 4.997478 udp 10.0.2.22 51868 -> 210.215.155.15 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:54:23.873674 0.000000 udp 10.0.2.22 51868 -> 59.184.31.55 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:54:24.864969 0.000000 udp 10.0.2.22 51868 -> 95.168.74.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:54:25.866108 0.690146 udp 10.0.2.22 51868 <-> 187.105.33.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:26.868001 0.044586 udp 10.0.2.22 51868 <-> 91.187.95.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:28.870435 0.055384 udp 10.0.2.22 51868 <-> 5.15.14.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:29.872106 1.041063 udp 10.0.2.22 51868 <-> 92.238.10.5 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:30.743042 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:54:31.865086 0.519821 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:32.866665 0.242430 udp 10.0.2.22 51868 <-> 172.191.244.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:33.867811 0.177353 udp 10.0.2.22 51868 <-> 174.126.212.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:34.869047 0.164127 udp 10.0.2.22 51868 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:35.870948 0.078903 udp 10.0.2.22 51868 <-> 109.87.240.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:36.872501 0.000000 udp 10.0.2.22 51868 -> 79.126.173.237 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:54:37.873610 0.040214 udp 10.0.2.22 51868 <-> 46.237.64.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:38.865130 0.358727 udp 10.0.2.22 51868 <-> 111.246.102.129 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:39.866698 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:54:40.867737 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:54:41.869052 0.000062 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:54:41.869114 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:54:42.871101 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:54:43.872553 3.260947 udp 10.0.2.22 51868 <-> 24.9.113.237 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:45.864966 0.062448 udp 10.0.2.22 51868 <-> 86.124.151.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:47.868072 0.000000 udp 10.0.2.22 51868 -> 70.63.186.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:54:48.869742 0.088412 udp 10.0.2.22 51868 <-> 93.81.199.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:49.870987 0.049372 udp 10.0.2.22 51868 <-> 91.65.0.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:50.872601 0.172110 udp 10.0.2.22 51868 <-> 24.201.226.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:51.873575 0.419738 udp 10.0.2.22 51868 <-> 118.160.130.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:52.865155 0.000000 udp 10.0.2.22 51868 -> 174.44.41.133 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:54:53.866408 0.376282 udp 10.0.2.22 51868 <-> 117.206.82.226 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:54.867984 1.496145 udp 10.0.2.22 51868 <-> 31.185.116.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:55.869216 0.000000 udp 10.0.2.22 51868 -> 200.153.210.87 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:54:56.870801 0.044125 udp 10.0.2.22 51868 <-> 93.183.166.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:57.741773 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:54:57.872623 0.129420 udp 10.0.2.22 51868 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:58.873880 0.160928 udp 10.0.2.22 51868 <-> 24.202.60.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:54:59.865375 0.020811 udp 10.0.2.22 51868 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:00.866976 0.088421 udp 10.0.2.22 51868 <-> 93.81.199.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:01.868151 0.000000 udp 10.0.2.22 51868 -> 46.175.229.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:55:02.869220 3.004516 udp 10.0.2.22 51868 -> 190.31.123.13 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:55:03.871153 0.000000 udp 10.0.2.22 51868 -> 181.166.200.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:55:04.872057 4.156606 udp 10.0.2.22 51868 <-> 65.30.26.10 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:06.865284 0.000000 udp 10.0.2.22 51868 -> 24.102.154.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:55:07.866786 0.410212 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:09.869611 0.113427 udp 10.0.2.22 51868 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:10.870677 0.020399 udp 10.0.2.22 51868 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:11.872299 0.000000 udp 10.0.2.22 51868 -> 190.31.123.13 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:55:12.873950 0.203561 udp 10.0.2.22 51868 <-> 24.102.154.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:13.865511 0.000000 udp 10.0.2.22 51868 -> 79.50.17.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:55:14.867096 0.000000 udp 10.0.2.22 51868 -> 81.190.155.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:55:15.868226 0.000000 udp 10.0.2.22 51868 -> 213.254.100.90 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:55:16.869511 0.000000 udp 10.0.2.22 51868 -> 41.238.21.86 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:55:17.871236 0.082928 udp 10.0.2.22 51868 <-> 217.201.186.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:18.872705 0.174469 udp 10.0.2.22 51868 <-> 74.199.89.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:19.874267 0.000000 udp 10.0.2.22 51868 -> 79.50.17.58 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:55:20.865373 0.425670 udp 10.0.2.22 51868 <-> 118.179.243.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:21.866817 0.000000 udp 10.0.2.22 51868 -> 79.183.172.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:55:22.868468 0.140032 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:23.869384 1.076352 udp 10.0.2.22 51868 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:24.740965 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:55:24.871476 0.000000 udp 10.0.2.22 51868 -> 74.199.89.82 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:55:25.872729 0.046601 udp 10.0.2.22 51868 <-> 212.67.155.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:26.874368 0.370543 udp 10.0.2.22 51868 <-> 2.185.126.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:27.865260 0.068383 udp 10.0.2.22 51868 <-> 89.100.113.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:28.867027 0.000000 udp 10.0.2.22 51868 -> 24.178.45.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:55:29.868422 0.000000 udp 10.0.2.22 51868 -> 176.200.183.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:55:30.869567 0.387805 udp 10.0.2.22 51868 <-> 114.47.133.111 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:31.871054 0.207848 udp 10.0.2.22 51868 <-> 24.2.42.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:32.872985 1.066618 udp 10.0.2.22 51868 <-> 87.121.154.87 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:34.865202 0.135696 udp 10.0.2.22 51868 <-> 69.125.238.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:35.866812 0.413365 udp 10.0.2.22 51868 <-> 61.24.23.220 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:36.868670 0.442025 udp 10.0.2.22 51868 <-> 177.218.176.85 16464 CON 0 0 3 438 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:37.869712 0.045997 udp 10.0.2.22 51868 <-> 83.250.76.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:38.871145 0.238206 udp 10.0.2.22 51868 <-> 117.204.244.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:39.872423 0.042164 udp 10.0.2.22 51868 <-> 178.254.205.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:40.874432 0.000000 udp 10.0.2.22 51868 -> 5.20.145.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:55:41.865319 0.117914 udp 10.0.2.22 51868 <-> 178.202.155.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:42.866679 0.071406 udp 10.0.2.22 51868 <-> 151.33.234.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:43.868611 0.037060 udp 10.0.2.22 51868 <-> 188.127.27.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:44.869548 2.331966 udp 10.0.2.22 51868 <-> 190.203.195.86 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:45.871302 0.000000 udp 10.0.2.22 51868 -> 27.105.0.105 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:55:47.874062 0.104754 udp 10.0.2.22 51868 <-> 77.40.71.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:48.865637 0.153072 udp 10.0.2.22 51868 <-> 24.89.222.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:49.867412 0.346495 udp 10.0.2.22 51868 <-> 200.175.212.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:50.868636 0.148972 udp 10.0.2.22 51868 <-> 217.201.186.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:51.511638 0.000000 udp 10.0.2.22 51868 <- 176.200.183.21 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:55:51.739883 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:55:51.869736 0.415549 udp 10.0.2.22 51868 <-> 221.80.185.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:52.871605 0.163190 udp 10.0.2.22 51868 <-> 24.113.18.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:53.872489 0.169438 udp 10.0.2.22 51868 <-> 24.203.105.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:54.874512 0.275097 udp 10.0.2.22 51868 <-> 201.82.240.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:55.865535 0.203680 udp 10.0.2.22 51868 <-> 184.167.204.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:56.866831 0.056891 udp 10.0.2.22 51868 <-> 79.119.95.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:57.868698 0.365680 udp 10.0.2.22 51868 <-> 153.147.123.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:58.870400 0.318853 udp 10.0.2.22 51868 <-> 203.202.216.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:55:59.871546 0.148619 udp 10.0.2.22 51868 <-> 72.226.92.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:00.872948 1.120444 udp 10.0.2.22 51868 <-> 24.232.19.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:01.873991 0.289837 udp 10.0.2.22 51868 <-> 107.223.54.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:02.865454 0.000000 udp 10.0.2.22 51868 -> 78.78.34.67 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:56:03.866864 0.000000 udp 10.0.2.22 51868 -> 71.80.71.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:56:04.410335 3.002232 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 06:56:04.868895 3.042312 udp 10.0.2.22 51868 <-> 212.117.57.241 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:05.870325 0.059011 udp 10.0.2.22 51868 <-> 31.44.194.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:06.871362 0.040270 udp 10.0.2.22 51868 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:08.874256 1.041432 udp 10.0.2.22 51868 <-> 94.52.120.253 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:10.867282 0.046689 udp 10.0.2.22 51868 <-> 5.13.132.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:11.418207 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:56:11.868889 0.044715 udp 10.0.2.22 51868 <-> 85.130.65.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:12.870604 0.056035 udp 10.0.2.22 51868 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:13.871301 1.001868 udp 10.0.2.22 51868 <-> 85.230.174.252 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:15.884518 0.168947 udp 10.0.2.22 51868 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:16.875570 0.000000 udp 10.0.2.22 51868 -> 5.66.55.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:56:17.877031 0.451324 udp 10.0.2.22 51868 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:18.758595 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:56:18.879004 0.639099 udp 10.0.2.22 51868 <-> 177.83.18.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:19.429927 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:56:19.880210 0.174142 udp 10.0.2.22 51868 <-> 62.221.103.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:20.881642 0.000000 udp 10.0.2.22 51868 -> 84.54.171.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:56:21.883448 0.358240 udp 10.0.2.22 51868 <-> 88.207.58.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:22.884360 0.150504 udp 10.0.2.22 51868 <-> 95.133.193.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:23.875754 0.033272 udp 10.0.2.22 51868 <-> 85.186.104.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:24.877088 0.039739 udp 10.0.2.22 51868 <-> 89.47.233.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:25.878921 0.172264 udp 10.0.2.22 51868 <-> 72.178.202.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:26.880365 0.000000 udp 10.0.2.22 51868 -> 85.224.201.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:56:27.881920 0.141732 udp 10.0.2.22 51868 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:28.883185 0.437511 udp 10.0.2.22 51868 <-> 175.35.18.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:29.884574 0.083217 udp 10.0.2.22 51868 <-> 78.136.104.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:30.876165 0.140487 udp 10.0.2.22 51868 <-> 182.48.204.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:31.877526 3.651016 udp 10.0.2.22 51868 <-> 115.244.229.18 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:32.879034 0.159167 udp 10.0.2.22 51868 <-> 174.110.129.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:33.880247 0.197355 udp 10.0.2.22 51868 <-> 113.21.73.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:34.882023 0.166978 udp 10.0.2.22 51868 <-> 24.214.174.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:35.432274 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:56:35.528799 0.000000 udp 10.0.2.22 51868 -> 121.124.80.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:56:35.528887 0.000000 udp 10.0.2.22 51868 -> 84.236.106.206 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:56:35.528975 0.000000 udp 10.0.2.22 51868 -> 69.244.114.103 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:56:35.529071 0.000000 udp 10.0.2.22 51868 -> 66.130.63.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:56:35.529166 0.000000 udp 10.0.2.22 51868 -> 117.231.158.47 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:56:35.529262 0.000000 udp 10.0.2.22 51868 -> 24.140.176.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:56:35.529356 3.347980 udp 10.0.2.22 51868 -> 79.27.166.246 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:56:35.529462 0.000000 udp 10.0.2.22 51868 -> 86.124.208.218 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:56:35.529558 0.000000 udp 10.0.2.22 51868 -> 147.156.153.105 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:56:35.529654 0.000000 udp 10.0.2.22 51868 -> 50.70.157.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:56:35.529748 0.000000 udp 10.0.2.22 51868 -> 69.180.10.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:56:35.529849 0.000000 udp 10.0.2.22 51868 -> 74.90.138.42 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:56:35.529949 0.000000 udp 10.0.2.22 51868 -> 70.115.72.200 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:56:35.530043 0.000000 udp 10.0.2.22 51868 -> 69.14.223.38 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:56:35.530144 0.000000 udp 10.0.2.22 51868 -> 89.228.227.244 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:56:35.530240 0.000000 udp 10.0.2.22 51868 -> 188.167.110.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:56:35.882912 0.055429 udp 10.0.2.22 51868 <-> 93.105.99.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:36.884670 0.263627 udp 10.0.2.22 51868 <-> 114.109.34.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:37.875754 0.316854 udp 10.0.2.22 51868 <-> 96.2.150.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:39.879305 0.157696 udp 10.0.2.22 51868 <-> 180.151.157.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:40.880190 0.824100 udp 10.0.2.22 51868 <-> 184.63.220.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:41.882260 0.000000 udp 10.0.2.22 51868 -> 114.45.22.188 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:56:42.883320 0.000000 udp 10.0.2.22 51868 -> 82.242.245.147 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:56:43.884405 0.154258 udp 10.0.2.22 51868 <-> 67.149.214.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:44.876240 0.000000 udp 10.0.2.22 51868 -> 123.110.35.164 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:56:45.757167 0.000132 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:56:45.877631 0.122899 udp 10.0.2.22 51868 <-> 95.133.193.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:46.879006 0.177259 udp 10.0.2.22 51868 <-> 75.65.7.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:47.880729 0.392506 udp 10.0.2.22 51868 <-> 184.59.170.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:48.882342 0.157155 udp 10.0.2.22 51868 <-> 69.63.231.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:49.883642 0.216791 udp 10.0.2.22 51868 <-> 190.75.56.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:50.874778 0.243056 udp 10.0.2.22 51868 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:51.876324 0.040347 udp 10.0.2.22 51868 <-> 89.47.243.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:52.878119 0.282587 udp 10.0.2.22 51868 <-> 106.198.209.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:53.878941 0.345472 udp 10.0.2.22 51868 <-> 190.72.112.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:54.880663 1.369167 udp 10.0.2.22 51868 <-> 49.144.9.236 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:56.883837 0.000000 udp 10.0.2.22 51868 -> 61.227.46.61 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:56:57.874908 0.057248 udp 10.0.2.22 51868 <-> 79.118.213.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:58.876430 0.033617 udp 10.0.2.22 51868 <-> 130.204.77.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:56:59.877645 0.159274 udp 10.0.2.22 51868 <-> 24.140.133.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:00.879203 0.329220 udp 10.0.2.22 51868 <-> 79.133.238.86 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:01.880620 0.344471 udp 10.0.2.22 51868 <-> 177.68.82.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:02.882247 0.000000 udp 10.0.2.22 51868 -> 115.242.235.111 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:57:03.883926 0.164543 udp 10.0.2.22 51868 <-> 65.27.180.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:04.874985 0.317872 udp 10.0.2.22 51868 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:05.876331 0.194080 udp 10.0.2.22 51868 <-> 76.174.151.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:06.877614 2.159222 udp 10.0.2.22 51868 <-> 97.101.194.12 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:07.438623 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 06:57:07.879168 0.045087 udp 10.0.2.22 51868 <-> 212.3.13.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:09.882094 0.000000 udp 10.0.2.22 51868 -> 108.230.246.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:57:10.883656 0.136015 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:11.875185 0.199398 udp 10.0.2.22 51868 <-> 107.213.251.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:12.755861 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:57:12.876253 0.000000 udp 10.0.2.22 51868 -> 151.26.162.97 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:57:13.878214 0.000000 udp 10.0.2.22 51868 -> 192.81.53.96 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:57:14.879170 0.129510 udp 10.0.2.22 51868 <-> 178.122.189.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:15.880584 0.137353 udp 10.0.2.22 51868 <-> 216.106.231.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:16.881860 0.121116 udp 10.0.2.22 51868 <-> 72.38.7.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:17.883609 0.288591 udp 10.0.2.22 51868 <-> 220.102.212.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:18.875127 0.008542 udp 10.0.2.22 51868 <-> 82.209.26.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:19.876414 0.042307 udp 10.0.2.22 51868 <-> 89.215.64.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:20.878273 0.000000 udp 10.0.2.22 51868 -> 114.182.221.131 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:57:21.879038 0.157350 udp 10.0.2.22 51868 <-> 50.148.31.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:22.880971 0.055407 udp 10.0.2.22 51868 <-> 178.174.226.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:23.882293 0.359752 udp 10.0.2.22 51868 <-> 115.165.236.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:24.883377 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:57:25.875285 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:57:26.876821 3.003982 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:57:27.877878 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:57:28.879729 0.054670 udp 10.0.2.22 51868 <-> 89.190.126.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:30.882489 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:57:31.884062 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:57:32.875309 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:57:33.876978 0.328108 udp 10.0.2.22 51868 <-> 70.82.157.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:34.878239 0.122544 udp 10.0.2.22 51868 <-> 24.122.115.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:35.879224 0.155898 udp 10.0.2.22 51868 <-> 50.155.109.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:36.880600 0.000000 udp 10.0.2.22 51868 -> 151.227.134.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:57:37.882376 0.000000 udp 10.0.2.22 51868 -> 97.101.194.12 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:57:38.884054 0.427706 udp 10.0.2.22 51868 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:39.754902 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:57:39.875079 1.027174 udp 10.0.2.22 51868 <-> 83.83.126.95 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:41.878219 0.329234 udp 10.0.2.22 51868 <-> 125.192.40.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:42.879925 0.026812 udp 10.0.2.22 51868 <-> 91.144.68.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:43.880666 0.019676 udp 10.0.2.22 51868 <-> 178.200.244.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:45.883814 0.000000 udp 10.0.2.22 51868 -> 65.189.49.154 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:57:46.874988 0.381465 udp 10.0.2.22 51868 <-> 115.241.218.90 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:47.876571 0.044024 udp 10.0.2.22 51868 <-> 178.118.247.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:48.878455 0.135102 udp 10.0.2.22 51868 <-> 68.84.110.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:49.879460 0.071906 udp 10.0.2.22 51868 <-> 109.107.103.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:50.880752 0.314004 udp 10.0.2.22 51868 <-> 118.108.87.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:51.882267 2.044699 udp 10.0.2.22 51868 <-> 84.54.171.18 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:52.884259 0.207588 udp 10.0.2.22 51868 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:54.877128 0.210436 udp 10.0.2.22 51868 <-> 75.142.198.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:55.878462 0.070578 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:57:56.879553 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:57:57.881572 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:57:58.882262 0.000045 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:57:58.882307 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:57:59.884386 0.000000 udp 10.0.2.22 51868 -> 78.73.215.44 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:58:00.875346 2.140237 udp 10.0.2.22 51868 <-> 178.79.11.31 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:01.877119 0.353567 udp 10.0.2.22 51868 -> 183.87.65.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:58:02.230686 0.000000 icmp 120.138.99.214 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 06:58:03.879917 0.042190 udp 10.0.2.22 51868 <-> 213.231.137.6 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:04.881341 0.203504 udp 10.0.2.22 51868 <-> 88.66.100.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:05.882317 0.162268 udp 10.0.2.22 51868 <-> 173.28.51.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:06.753805 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:58:06.884431 0.280474 udp 10.0.2.22 51868 <-> 14.96.113.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:07.875310 0.000000 udp 10.0.2.22 51868 -> 2.187.178.229 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:58:08.877026 0.000000 udp 10.0.2.22 51868 -> 79.45.66.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:58:09.878208 0.735676 udp 10.0.2.22 51868 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:10.879767 0.000000 udp 10.0.2.22 51868 -> 79.117.106.187 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:58:11.881275 0.168184 udp 10.0.2.22 51868 <-> 173.28.51.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:12.882699 0.101236 udp 10.0.2.22 51868 <-> 217.217.202.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:13.883808 0.046492 udp 10.0.2.22 51868 <-> 78.56.205.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:14.878201 0.162323 udp 10.0.2.22 51868 <-> 98.235.43.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:15.877088 0.095089 udp 10.0.2.22 51868 <-> 84.122.212.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:16.878607 0.000000 udp 10.0.2.22 51868 -> 2.180.104.163 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:58:17.880229 0.000000 udp 10.0.2.22 51868 -> 98.67.186.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:58:18.881665 3.995509 udp 10.0.2.22 51868 <-> 201.231.197.241 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:19.882725 0.120678 udp 10.0.2.22 51868 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:20.884221 0.000000 udp 10.0.2.22 51868 -> 186.19.203.238 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:58:21.875819 0.046424 udp 10.0.2.22 51868 <-> 178.254.205.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:23.878244 0.000000 udp 10.0.2.22 51868 -> 97.101.194.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:58:24.880281 1.864017 udp 10.0.2.22 51868 <-> 41.143.35.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:25.884214 0.162090 udp 10.0.2.22 51868 <-> 76.107.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:26.882878 0.137607 udp 10.0.2.22 51868 <-> 24.165.184.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:27.884182 0.000000 udp 10.0.2.22 51868 -> 5.250.84.182 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:58:28.966038 0.161975 udp 10.0.2.22 51868 <-> 67.249.17.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:29.967202 0.290914 udp 10.0.2.22 51868 <-> 189.61.185.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:30.969057 0.153551 udp 10.0.2.22 51868 <-> 216.81.125.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:31.970265 0.291762 udp 10.0.2.22 51868 <-> 2.195.203.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:32.971380 0.184877 udp 10.0.2.22 51868 <-> 106.51.203.220 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:33.842864 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:58:33.973258 0.062745 udp 10.0.2.22 51868 <-> 93.105.99.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:34.974562 0.627782 udp 10.0.2.22 51868 <-> 183.73.113.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:35.966224 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:58:36.967070 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:58:37.969025 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:58:38.970377 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:58:39.971589 0.137347 udp 10.0.2.22 51868 <-> 24.228.86.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:40.972830 0.363851 udp 10.0.2.22 51868 <-> 27.53.227.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:41.974340 0.161910 udp 10.0.2.22 51868 <-> 67.249.17.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:42.966428 0.471948 udp 10.0.2.22 51868 <-> 89.231.196.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:43.967093 0.136736 udp 10.0.2.22 51868 <-> 50.169.208.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:44.968582 0.152694 udp 10.0.2.22 51868 <-> 71.88.178.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:45.969954 0.157523 udp 10.0.2.22 51868 <-> 67.202.186.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:46.971768 0.000000 udp 10.0.2.22 51868 -> 190.172.227.229 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:58:47.973280 3.599547 udp 10.0.2.22 51868 <-> 94.54.227.68 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:48.974430 0.444859 udp 10.0.2.22 51868 <-> 183.73.113.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:49.966368 0.025589 udp 10.0.2.22 51868 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:50.967177 0.121486 udp 10.0.2.22 51868 <-> 178.120.41.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:51.969180 0.000000 udp 10.0.2.22 51868 -> 50.81.76.87 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:58:52.970468 4.180366 udp 10.0.2.22 51868 <-> 46.196.151.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:53.971894 0.020509 udp 10.0.2.22 51868 <-> 178.201.67.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:54.973144 0.039042 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:55.974824 0.000000 udp 10.0.2.22 51868 -> 84.232.15.190 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:58:56.966269 0.056627 udp 10.0.2.22 51868 <-> 37.77.155.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:57.967362 0.109282 udp 10.0.2.22 51868 <-> 37.212.96.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:58:58.969003 0.000000 udp 10.0.2.22 51868 -> 116.202.192.162 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:58:59.970438 0.313561 udp 10.0.2.22 51868 <-> 183.83.176.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:00.841292 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:59:00.972011 0.000000 udp 10.0.2.22 51868 -> 216.110.251.115 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:59:01.973590 0.267012 udp 10.0.2.22 51868 <-> 115.253.125.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:02.974984 0.279964 udp 10.0.2.22 51868 <-> 90.129.90.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:03.966133 0.051555 udp 10.0.2.22 51868 <-> 213.64.220.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:04.967736 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:59:05.968856 0.000000 udp 10.0.2.22 51868 -> 178.149.164.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:59:06.970569 0.606498 udp 10.0.2.22 51868 <-> 202.29.178.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:07.971841 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:59:08.973627 0.328059 udp 10.0.2.22 51868 <-> 218.35.15.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:09.974654 0.141832 udp 10.0.2.22 51868 <-> 24.186.3.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:10.966150 0.000000 udp 10.0.2.22 51868 -> 187.105.33.197 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:59:11.967313 0.139424 udp 10.0.2.22 51868 <-> 174.106.129.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:12.968787 0.161416 udp 10.0.2.22 51868 <-> 70.80.51.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:13.970411 0.067505 udp 10.0.2.22 51868 <-> 176.96.230.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:14.972359 0.377129 udp 10.0.2.22 51868 <-> 201.95.31.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:15.973635 0.414034 udp 10.0.2.22 51868 <-> 177.44.3.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:16.975007 0.149867 udp 10.0.2.22 51868 <-> 74.128.155.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:17.965979 0.000000 udp 10.0.2.22 51868 -> 84.140.194.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:59:18.967783 0.073528 udp 10.0.2.22 51868 <-> 83.195.175.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:19.968851 0.000000 udp 10.0.2.22 51868 -> 71.45.42.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:59:20.970527 0.000000 udp 10.0.2.22 51868 -> 201.1.80.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:59:21.971722 0.164960 udp 10.0.2.22 51868 <-> 174.108.49.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:22.973449 0.117912 udp 10.0.2.22 51868 <-> 68.107.150.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:23.965061 0.177495 udp 10.0.2.22 51868 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:24.966768 0.000000 udp 10.0.2.22 51868 -> 201.26.213.123 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:59:25.968038 0.000000 udp 10.0.2.22 51868 -> 212.98.178.157 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:59:26.969002 0.265341 udp 10.0.2.22 51868 <-> 105.229.138.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:27.840612 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:59:27.970328 0.137154 udp 10.0.2.22 51868 <-> 98.219.228.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:28.972312 0.139836 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:29.973203 0.047643 udp 10.0.2.22 51868 <-> 78.23.151.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:30.965198 0.061816 udp 10.0.2.22 51868 <-> 86.124.151.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:31.966111 3.004816 udp 10.0.2.22 51868 -> 190.11.15.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:59:32.967811 0.000000 udp 10.0.2.22 51868 -> 41.143.35.7 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:59:33.968967 0.302770 udp 10.0.2.22 51868 <-> 89.247.175.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:35.972141 0.185290 udp 10.0.2.22 51868 <-> 203.129.196.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:36.973909 0.188944 udp 10.0.2.22 51868 <-> 68.185.149.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:37.965130 0.054530 udp 10.0.2.22 51868 <-> 86.124.222.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:38.966709 0.098329 udp 10.0.2.22 51868 <-> 77.20.104.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:39.968087 0.000000 udp 10.0.2.22 51868 -> 201.55.162.142 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:59:40.969312 0.145924 udp 10.0.2.22 51868 <-> 174.103.104.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:41.971023 0.218245 udp 10.0.2.22 51868 <-> 199.117.183.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:42.971908 3.137299 udp 10.0.2.22 51868 <-> 72.231.172.149 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:43.974033 0.000000 udp 10.0.2.22 51868 -> 46.249.179.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:59:44.964770 0.246812 udp 10.0.2.22 51868 <-> 128.171.120.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:46.967639 3.343242 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:47.969463 0.065704 udp 10.0.2.22 51868 <-> 62.113.14.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:48.971171 4.996971 udp 10.0.2.22 51868 -> 190.129.109.21 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:59:50.974053 0.756816 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:51.965203 0.000000 udp 10.0.2.22 51868 -> 85.86.199.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:59:52.966310 0.048583 udp 10.0.2.22 51868 <-> 78.96.30.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:54.300343 0.000000 udp 10.0.2.22 51868 <- 190.129.109.21 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 06:59:54.849040 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 06:59:54.969645 0.165790 udp 10.0.2.22 51868 <-> 173.188.107.246 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:55.970571 0.770993 udp 10.0.2.22 51868 <-> 93.105.253.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:56.972040 0.042022 udp 10.0.2.22 51868 <-> 147.156.24.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:57.973665 0.057742 udp 10.0.2.22 51868 <-> 92.32.25.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:58.965226 0.084259 udp 10.0.2.22 51868 <-> 95.67.190.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 06:59:59.966715 0.049253 udp 10.0.2.22 51868 <-> 80.56.160.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:00.968127 0.162416 udp 10.0.2.22 51868 <-> 68.63.70.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:01.969878 0.000000 udp 10.0.2.22 51868 -> 180.215.0.185 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:00:02.971147 0.272501 udp 10.0.2.22 51868 <-> 174.103.104.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:03.972486 0.058839 udp 10.0.2.22 51868 <-> 31.44.194.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:04.973799 0.040183 udp 10.0.2.22 51868 <-> 176.12.49.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:05.965090 0.000000 udp 10.0.2.22 51868 -> 46.2.229.62 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:00:06.966786 0.146411 udp 10.0.2.22 51868 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:07.968070 0.751014 udp 10.0.2.22 51868 <-> 24.135.219.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:08.969623 0.000000 udp 10.0.2.22 51868 -> 86.82.126.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:00:09.971319 0.000000 udp 10.0.2.22 51868 -> 114.37.112.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:00:10.972410 0.055861 udp 10.0.2.22 51868 <-> 195.238.118.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:11.973927 0.040727 udp 10.0.2.22 51868 <-> 176.12.49.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:12.965121 0.887446 udp 10.0.2.22 51868 <-> 179.57.31.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:14.227016 0.059351 udp 10.0.2.22 51868 <-> 31.44.194.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:15.228290 0.000000 udp 10.0.2.22 51868 -> 46.2.229.62 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:00:16.229821 0.144873 udp 10.0.2.22 51868 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:17.231626 0.056273 udp 10.0.2.22 51868 <-> 195.238.118.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:18.233055 4.035539 udp 10.0.2.22 51868 <-> 176.12.49.53 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:19.234478 0.000000 udp 10.0.2.22 51868 -> 86.82.126.34 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:00:20.226003 4.005787 udp 10.0.2.22 51868 -> 89.142.152.236 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:00:21.227060 0.000000 udp 10.0.2.22 51868 -> 114.37.112.245 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:00:22.108109 0.000129 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:00:23.230526 0.000000 udp 10.0.2.22 51868 -> 46.2.229.62 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:00:25.233123 0.166516 udp 10.0.2.22 51868 <-> 123.201.36.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:26.234825 0.000000 udp 10.0.2.22 51868 -> 179.57.31.53 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:00:27.225554 0.000000 udp 10.0.2.22 51868 -> 91.15.138.45 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:00:28.227247 0.000000 udp 10.0.2.22 51868 -> 86.108.66.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:00:29.228440 0.000000 udp 10.0.2.22 51868 -> 24.135.219.59 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:00:30.230058 4.997062 udp 10.0.2.22 51868 <-> 108.176.154.248 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:31.231446 0.056931 udp 10.0.2.22 51868 <-> 195.238.118.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:32.233330 0.000000 udp 10.0.2.22 51868 -> 91.15.138.45 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:00:33.234615 0.040190 udp 10.0.2.22 51868 <-> 176.12.49.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:34.226153 0.000000 udp 10.0.2.22 51868 -> 46.2.229.62 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:00:35.400399 0.000000 udp 10.0.2.22 51868 <- 108.176.154.248 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:00:36.228592 0.294289 udp 10.0.2.22 51868 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:37.230532 0.093150 udp 10.0.2.22 51868 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:38.231569 0.000000 udp 10.0.2.22 51868 -> 24.36.117.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:00:39.233206 0.115796 udp 10.0.2.22 51868 <-> 79.126.189.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:40.234425 0.168461 udp 10.0.2.22 51868 <-> 72.190.7.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:41.226429 0.416107 udp 10.0.2.22 51868 <-> 119.230.147.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:42.227087 0.000000 udp 10.0.2.22 51868 -> 181.192.6.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:00:43.229043 0.271993 udp 10.0.2.22 51868 <-> 186.92.177.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:44.229985 0.000000 udp 10.0.2.22 51868 -> 1.170.150.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:00:45.231872 0.054310 udp 10.0.2.22 51868 <-> 188.2.254.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:46.233299 0.000000 udp 10.0.2.22 51868 -> 177.149.127.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:00:47.234727 0.195603 udp 10.0.2.22 51868 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:48.225901 0.045907 udp 10.0.2.22 51868 <-> 86.125.174.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:49.106917 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:00:49.227351 0.145417 udp 10.0.2.22 51868 <-> 70.44.250.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:50.228972 0.066224 udp 10.0.2.22 51868 <-> 78.206.76.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:51.230040 0.411147 udp 10.0.2.22 51868 <-> 59.2.41.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:52.231501 0.308361 udp 10.0.2.22 51868 <-> 218.151.13.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:53.233164 0.164018 udp 10.0.2.22 51868 <-> 24.243.8.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:54.235096 0.139288 udp 10.0.2.22 51868 <-> 76.106.112.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:55.226440 0.161100 udp 10.0.2.22 51868 <-> 74.79.65.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:56.227645 0.000000 udp 10.0.2.22 51868 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:00:57.228895 0.139290 udp 10.0.2.22 51868 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:58.230567 3.273324 udp 10.0.2.22 51868 <-> 24.244.127.249 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:00:59.231966 0.164961 udp 10.0.2.22 51868 <-> 24.129.11.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:01:00.233470 3.995962 udp 10.0.2.22 51868 -> 174.91.183.245 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:02.226412 0.180686 udp 10.0.2.22 51868 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:01:03.227788 0.130544 udp 10.0.2.22 51868 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:01:05.230835 0.000000 udp 10.0.2.22 51868 -> 114.37.15.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:06.231605 4.997492 udp 10.0.2.22 51868 <-> 201.68.33.246 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:01:07.233053 0.054203 udp 10.0.2.22 51868 <-> 5.61.147.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:01:08.234650 0.040281 udp 10.0.2.22 51868 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:01:09.225917 1.063559 udp 10.0.2.22 51868 <-> 94.253.231.246 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:01:11.567321 0.000000 udp 10.0.2.22 51868 <- 201.68.33.246 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:12.230914 2.209722 udp 10.0.2.22 51868 <-> 24.48.118.17 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:01:13.232122 0.371600 udp 10.0.2.22 51868 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:01:15.234968 0.049673 udp 10.0.2.22 51868 <-> 5.61.147.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:01:16.106373 0.000099 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:01:16.225983 0.000000 udp 10.0.2.22 51868 -> 95.75.174.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:17.227722 0.166639 udp 10.0.2.22 51868 <-> 174.57.198.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:01:18.229376 0.000000 udp 10.0.2.22 51868 -> 212.75.2.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:19.231067 0.163515 udp 10.0.2.22 51868 <-> 76.107.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:01:20.232108 2.003116 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:21.233778 0.177705 udp 10.0.2.22 51868 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:01:23.226671 0.066966 udp 10.0.2.22 51868 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:01:24.227767 0.151432 udp 10.0.2.22 51868 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:01:25.229140 0.392092 udp 10.0.2.22 51868 <-> 114.47.209.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:01:26.230613 0.020906 udp 10.0.2.22 51868 <-> 161.53.166.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:01:27.232030 0.345546 udp 10.0.2.22 51868 <-> 115.240.68.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:01:28.233397 0.000000 udp 10.0.2.22 51868 -> 212.166.241.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:29.234687 0.563218 udp 10.0.2.22 51868 <-> 79.45.66.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:01:30.226347 0.887352 udp 10.0.2.22 51868 <-> 190.74.80.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:01:31.228055 0.000000 udp 10.0.2.22 51868 -> 190.79.130.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:32.229668 0.315723 udp 10.0.2.22 51868 <-> 220.129.65.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:01:33.230765 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:34.232370 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:35.233750 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:36.235161 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:36.333177 0.000000 udp 10.0.2.22 51868 <- 190.79.130.76 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:37.226157 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:38.227800 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:39.229173 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:40.230933 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:41.232228 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:42.233664 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:43.104712 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:01:43.235083 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:44.226436 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:45.228220 0.044454 udp 10.0.2.22 51868 <-> 91.187.95.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:01:46.229274 0.055097 udp 10.0.2.22 51868 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:01:47.231005 0.152991 udp 10.0.2.22 51868 <-> 98.25.25.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:01:48.231972 1.317626 udp 10.0.2.22 51868 <-> 220.129.65.77 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:01:50.235349 0.090277 udp 10.0.2.22 51868 <-> 176.52.77.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:01:51.226307 0.160129 udp 10.0.2.22 51868 <-> 74.193.135.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:01:52.227968 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:54.231175 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:55.232637 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:56.233837 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:57.225098 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:58.227006 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:59.288147 0.000046 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:01:59.288193 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:02:00.289767 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:02:01.291124 0.077159 udp 10.0.2.22 51868 <-> 176.52.77.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:02.292714 0.315907 udp 10.0.2.22 51868 <-> 220.129.65.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:03.294332 0.065650 udp 10.0.2.22 51868 <-> 93.186.103.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:04.285176 1.262061 udp 10.0.2.22 51868 <-> 24.232.19.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:05.287062 0.055129 udp 10.0.2.22 51868 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:06.287946 0.000000 udp 10.0.2.22 51868 -> 24.102.154.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:02:07.289737 0.061494 udp 10.0.2.22 51868 <-> 86.124.151.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:08.290958 0.000000 udp 10.0.2.22 51868 -> 80.226.24.9 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:02:09.292395 0.000000 udp 10.0.2.22 51868 -> 176.52.77.39 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:02:10.163545 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:02:10.294159 0.000000 udp 10.0.2.22 51868 -> 95.59.21.62 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:02:11.285281 0.066186 udp 10.0.2.22 51868 <-> 93.186.103.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:12.287062 0.158308 udp 10.0.2.22 51868 <-> 108.183.176.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:13.288692 0.351663 udp 10.0.2.22 51868 <-> 122.121.38.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:14.290082 0.000000 udp 10.0.2.22 51868 -> 2.180.96.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:02:15.291016 0.064563 udp 10.0.2.22 51868 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:16.292897 0.044199 udp 10.0.2.22 51868 <-> 91.187.95.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:17.294239 0.055295 udp 10.0.2.22 51868 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:18.285927 0.162890 udp 10.0.2.22 51868 <-> 74.193.135.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:19.286958 0.058870 udp 10.0.2.22 51868 <-> 31.44.194.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:20.288344 0.116539 udp 10.0.2.22 51868 <-> 24.102.154.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:21.289972 0.000000 udp 10.0.2.22 51868 -> 190.160.37.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:02:22.291161 0.225357 udp 10.0.2.22 51868 <-> 181.53.197.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:23.292496 0.171984 udp 10.0.2.22 51868 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:24.294646 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:02:25.286007 0.000000 udp 10.0.2.22 51868 -> 50.82.243.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:02:26.287495 1.180392 udp 10.0.2.22 51868 <-> 162.192.38.21 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:28.290147 0.000000 udp 10.0.2.22 51868 -> 130.83.54.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:02:29.291112 0.161545 udp 10.0.2.22 51868 <-> 68.107.150.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:30.292779 0.237738 udp 10.0.2.22 51868 <-> 97.106.251.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:31.294294 0.148959 udp 10.0.2.22 51868 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:32.285875 1.358774 udp 10.0.2.22 51868 <-> 186.93.166.249 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:34.288539 0.119063 udp 10.0.2.22 51868 <-> 78.228.60.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:35.290114 0.350742 udp 10.0.2.22 51868 <-> 1.172.59.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:36.291070 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:02:37.162599 0.000119 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:02:37.292882 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:02:38.294079 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:02:39.285437 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:02:40.287117 0.302696 udp 10.0.2.22 51868 <-> 211.51.37.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:41.288409 0.297424 udp 10.0.2.22 51868 <-> 203.202.216.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:42.290248 0.065564 udp 10.0.2.22 51868 <-> 188.241.23.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:43.291308 0.095289 udp 10.0.2.22 51868 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:44.292609 0.357056 udp 10.0.2.22 51868 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:45.294351 0.000000 udp 10.0.2.22 51868 -> 86.124.151.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:02:46.285510 0.171350 udp 10.0.2.22 51868 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:47.287170 0.163839 udp 10.0.2.22 51868 <-> 24.182.200.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:48.289070 1.290452 udp 10.0.2.22 51868 <-> 190.39.82.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:49.290614 0.047858 udp 10.0.2.22 51868 <-> 5.14.226.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:50.291855 0.025293 udp 10.0.2.22 51868 <-> 83.83.126.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:51.292979 0.060064 udp 10.0.2.22 51868 <-> 89.230.111.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:52.294081 0.126995 udp 10.0.2.22 51868 <-> 72.241.66.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:53.286178 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:02:54.287199 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:02:55.288764 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:02:56.290453 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:02:57.292046 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:02:58.293137 1.015268 udp 10.0.2.22 51868 <-> 181.16.7.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:02:59.294613 0.140130 udp 10.0.2.22 51868 <-> 24.188.50.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:00.286057 0.000000 udp 10.0.2.22 51868 -> 186.191.21.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:03:01.287526 0.000000 udp 10.0.2.22 51868 -> 60.246.187.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:03:02.288697 0.381038 udp 10.0.2.22 51868 <-> 49.144.9.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:03.289963 0.100448 udp 10.0.2.22 51868 <-> 81.201.145.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:04.161300 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:03:04.291856 4.306616 udp 10.0.2.22 51868 <-> 150.162.192.27 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:05.292977 0.221347 udp 10.0.2.22 51868 <-> 174.108.102.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:07.285666 0.300207 udp 10.0.2.22 51868 <-> 126.36.45.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:09.288706 0.000000 udp 10.0.2.22 51868 -> 189.25.78.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:03:10.290174 0.162137 udp 10.0.2.22 51868 <-> 76.107.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:11.291995 0.107060 udp 10.0.2.22 51868 <-> 46.118.179.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:11.854850 3.002028 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 07:03:12.293512 0.047439 udp 10.0.2.22 51868 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:13.294341 0.209284 udp 10.0.2.22 51868 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:14.285871 0.418510 udp 10.0.2.22 51868 <-> 123.24.179.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:15.287595 0.164914 udp 10.0.2.22 51868 <-> 69.124.91.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:16.289476 0.152243 udp 10.0.2.22 51868 <-> 71.77.141.55 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:17.290486 0.321232 udp 10.0.2.22 51868 <-> 122.132.76.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:18.291775 0.355498 udp 10.0.2.22 51868 <-> 218.226.32.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:18.862721 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:03:19.293280 0.126642 udp 10.0.2.22 51868 <-> 173.81.172.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:20.295034 0.000000 udp 10.0.2.22 51868 -> 222.166.20.155 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:03:21.286069 0.160799 udp 10.0.2.22 51868 <-> 69.249.214.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:22.287670 0.136857 udp 10.0.2.22 51868 <-> 24.222.149.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:23.289206 0.291551 udp 10.0.2.22 51868 <-> 61.1.224.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:24.290547 0.000000 udp 10.0.2.22 51868 -> 74.34.93.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:03:25.292150 0.097757 udp 10.0.2.22 51868 <-> 134.249.0.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:26.293643 0.158475 udp 10.0.2.22 51868 <-> 81.191.116.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:26.864368 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:03:27.295020 0.048028 udp 10.0.2.22 51868 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:28.286277 0.000000 udp 10.0.2.22 51868 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:03:29.287304 0.284511 udp 10.0.2.22 51868 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:30.288899 0.000000 udp 10.0.2.22 51868 -> 58.108.171.233 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:03:31.160108 0.000090 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:03:31.290574 0.000000 udp 10.0.2.22 51868 -> 91.116.202.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:03:32.291861 0.061571 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:33.293646 0.000000 udp 10.0.2.22 51868 -> 128.177.76.205 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:03:34.295126 4.067411 udp 10.0.2.22 51868 <-> 134.249.0.46 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:35.286637 1.373988 udp 10.0.2.22 51868 <-> 1.168.250.38 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:37.289205 2.172803 udp 10.0.2.22 51868 <-> 24.129.11.244 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:40.293157 0.830986 udp 10.0.2.22 51868 <-> 206.188.109.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:41.294703 0.345910 udp 10.0.2.22 51868 <-> 218.227.129.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:42.286259 0.000000 udp 10.0.2.22 51868 -> 222.166.20.155 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:03:42.866809 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:03:43.287736 0.163865 udp 10.0.2.22 51868 <-> 50.83.121.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:44.288855 0.000000 udp 10.0.2.22 51868 -> 108.230.246.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:03:45.290940 0.000000 udp 10.0.2.22 51868 -> 58.108.171.233 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:03:46.292132 0.000000 udp 10.0.2.22 51868 -> 85.152.239.233 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:03:47.293261 0.309086 udp 10.0.2.22 51868 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:48.295446 3.083996 udp 10.0.2.22 51868 <-> 128.177.76.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:49.286447 0.072043 udp 10.0.2.22 51868 <-> 134.249.0.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:50.287697 0.169173 udp 10.0.2.22 51868 <-> 24.129.11.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:51.289288 0.242451 udp 10.0.2.22 51868 <-> 189.197.54.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:52.290883 3.509456 udp 10.0.2.22 51868 <-> 108.230.246.250 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:53.291803 0.000000 udp 10.0.2.22 51868 -> 91.116.202.247 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:03:54.293604 0.048260 udp 10.0.2.22 51868 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:56.286340 0.000000 udp 10.0.2.22 51868 -> 128.177.76.205 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:03:57.288028 0.072125 udp 10.0.2.22 51868 <-> 134.249.0.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:58.168820 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:03:58.289222 0.291730 udp 10.0.2.22 51868 <-> 61.1.224.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:03:59.290760 0.280988 udp 10.0.2.22 51868 <-> 189.197.54.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:00.292075 0.000000 udp 10.0.2.22 51868 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:04:01.293609 1.076073 udp 10.0.2.22 51868 <-> 85.152.244.7 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:03.286294 0.000000 udp 10.0.2.22 51868 -> 46.73.205.253 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:04:04.288335 0.000000 udp 10.0.2.22 51868 -> 190.120.66.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:04:05.289413 0.000000 udp 10.0.2.22 51868 -> 128.177.76.205 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:04:06.291074 0.504741 udp 10.0.2.22 51868 <-> 189.197.54.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:07.292333 0.139350 udp 10.0.2.22 51868 <-> 69.124.91.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:08.293550 0.364187 udp 10.0.2.22 51868 <-> 186.191.29.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:09.295169 0.087122 udp 10.0.2.22 51868 <-> 77.78.239.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:10.286768 0.370631 udp 10.0.2.22 51868 <-> 186.191.22.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:11.287862 1.858604 udp 10.0.2.22 51868 <-> 190.189.201.39 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:13.290672 2.414218 udp 10.0.2.22 51868 <-> 62.68.106.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:14.292382 0.154231 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:14.873518 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:04:15.293680 0.343524 udp 10.0.2.22 51868 <-> 190.206.89.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:16.295050 0.164102 udp 10.0.2.22 51868 <-> 98.240.160.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:17.286926 0.025874 udp 10.0.2.22 51868 <-> 62.113.14.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:18.287840 0.000000 udp 10.0.2.22 51868 -> 101.63.156.74 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:04:19.289555 0.400649 udp 10.0.2.22 51868 <-> 114.46.103.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:20.290631 0.000000 udp 10.0.2.22 51868 -> 84.221.67.93 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:04:21.292390 0.160478 udp 10.0.2.22 51868 <-> 70.185.202.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:22.293783 0.153341 udp 10.0.2.22 51868 <-> 71.43.117.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:23.295588 0.044314 udp 10.0.2.22 51868 <-> 109.251.72.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:24.286468 0.054318 udp 10.0.2.22 51868 <-> 93.118.202.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:25.167771 0.000121 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:04:25.288364 0.000000 udp 10.0.2.22 51868 -> 173.218.218.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:04:26.289470 0.368579 udp 10.0.2.22 51868 <-> 219.36.148.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:27.291052 0.222482 udp 10.0.2.22 51868 <-> 71.84.132.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:28.292291 0.158650 udp 10.0.2.22 51868 <-> 74.65.173.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:29.293546 0.050908 udp 10.0.2.22 51868 <-> 77.249.34.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:30.285081 0.000000 udp 10.0.2.22 51868 -> 61.223.95.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:04:31.287021 0.142821 udp 10.0.2.22 51868 <-> 69.63.231.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:32.288257 2.002621 udp 10.0.2.22 51868 -> 85.11.182.239 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:04:33.289567 3.311691 udp 10.0.2.22 51868 <-> 201.214.63.238 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:35.292689 0.000000 udp 10.0.2.22 51868 -> 24.241.36.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:04:37.285568 0.142760 udp 10.0.2.22 51868 <-> 69.63.231.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:38.287154 0.217694 udp 10.0.2.22 51868 <-> 50.170.179.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:39.288267 0.000000 udp 10.0.2.22 51868 -> 79.116.107.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:04:40.289609 0.000000 udp 10.0.2.22 51868 -> 176.219.30.105 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:04:41.290898 0.883225 udp 10.0.2.22 51868 <-> 201.19.246.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:42.292237 0.147812 udp 10.0.2.22 51868 <-> 98.229.185.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:43.293811 0.000000 udp 10.0.2.22 51868 -> 85.178.70.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:04:44.285576 0.158150 udp 10.0.2.22 51868 <-> 50.172.254.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:45.287073 0.000000 udp 10.0.2.22 51868 -> 84.236.70.25 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:04:46.288431 0.000000 udp 10.0.2.22 51868 -> 189.55.190.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:04:47.290021 0.048182 udp 10.0.2.22 51868 <-> 85.232.150.7 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:48.291088 0.150890 udp 10.0.2.22 51868 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:49.292342 0.156878 udp 10.0.2.22 51868 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:50.294398 0.156669 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:51.285181 0.000000 udp 10.0.2.22 51868 -> 24.178.45.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:04:52.167029 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:04:52.286697 1.162671 udp 10.0.2.22 51868 <-> 50.167.134.18 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:54.290207 0.205479 udp 10.0.2.22 51868 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:55.291150 3.346980 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:56.292997 0.639897 udp 10.0.2.22 51868 <-> 186.93.166.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:04:57.294389 0.000000 udp 10.0.2.22 51868 -> 80.99.71.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:04:59.287381 0.042533 udp 10.0.2.22 51868 <-> 79.118.190.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:00.288545 0.025396 udp 10.0.2.22 51868 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:01.290079 0.169386 udp 10.0.2.22 51868 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:02.291592 0.046320 udp 10.0.2.22 51868 <-> 89.136.139.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:03.292966 0.322285 udp 10.0.2.22 51868 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:04.294171 0.000000 udp 10.0.2.22 51868 -> 69.127.65.244 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:05:05.285903 0.000000 udp 10.0.2.22 51868 -> 77.162.143.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:05:06.287433 0.023764 udp 10.0.2.22 51868 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:07.288544 0.285117 udp 10.0.2.22 51868 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:08.289803 0.322269 udp 10.0.2.22 51868 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:09.291267 1.115402 udp 10.0.2.22 51868 <-> 94.253.231.246 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:11.294197 0.000000 udp 10.0.2.22 51868 -> 75.17.90.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:05:12.285388 0.404507 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:13.287224 0.712097 udp 10.0.2.22 51868 <-> 186.93.166.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:14.288598 0.000000 udp 10.0.2.22 51868 -> 79.118.190.28 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:05:15.289867 0.760700 udp 10.0.2.22 51868 <-> 201.231.197.241 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:16.291396 0.159252 udp 10.0.2.22 51868 <-> 75.149.216.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:17.292582 0.195525 udp 10.0.2.22 51868 <-> 71.92.82.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:18.294750 0.581737 udp 10.0.2.22 51868 <-> 181.118.86.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:19.165469 0.000099 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:05:19.286129 0.000000 udp 10.0.2.22 51868 -> 177.134.229.149 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:05:20.287284 0.000000 udp 10.0.2.22 51868 -> 5.103.62.70 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:05:21.288430 0.093076 udp 10.0.2.22 51868 <-> 88.57.184.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:22.290092 0.000000 udp 10.0.2.22 51868 -> 178.125.70.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:05:23.291215 0.291527 udp 10.0.2.22 51868 <-> 200.122.70.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:24.293090 0.000000 udp 10.0.2.22 51868 -> 69.133.195.86 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:05:25.294754 0.048320 udp 10.0.2.22 51868 <-> 89.46.84.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:26.285998 0.145437 udp 10.0.2.22 51868 <-> 108.183.176.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:27.287328 4.005931 udp 10.0.2.22 51868 -> 173.210.217.104 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:05:28.288696 0.088046 udp 10.0.2.22 51868 <-> 88.57.184.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:29.290384 0.056921 udp 10.0.2.22 51868 <-> 86.122.97.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:30.291971 0.228001 udp 10.0.2.22 51868 <-> 190.36.123.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:32.294337 0.146077 udp 10.0.2.22 51868 <-> 108.183.176.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:33.285730 0.377149 udp 10.0.2.22 51868 <-> 200.122.70.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:34.287000 4.029156 udp 10.0.2.22 51868 <-> 178.48.110.137 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:35.289041 0.000000 udp 10.0.2.22 51868 -> 173.210.217.104 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:05:36.290152 0.203801 udp 10.0.2.22 51868 <-> 189.192.237.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:37.291852 0.000000 udp 10.0.2.22 51868 -> 177.134.229.149 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:05:39.294209 4.051794 udp 10.0.2.22 51868 <-> 86.122.97.43 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:40.286194 0.000000 udp 10.0.2.22 51868 -> 200.122.70.103 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:05:41.287292 0.000000 udp 10.0.2.22 51868 -> 66.171.49.168 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:05:42.289061 0.000000 udp 10.0.2.22 51868 -> 173.210.217.104 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:05:44.292036 0.229798 udp 10.0.2.22 51868 <-> 201.248.21.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:45.293200 0.284127 udp 10.0.2.22 51868 <-> 81.226.243.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:05:46.164697 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:05:46.294444 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:05:47.285895 0.000072 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:05:47.285967 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:05:48.287143 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:05:49.289160 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:05:50.290417 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:05:51.291445 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:05:52.293151 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:05:53.294767 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:05:54.285926 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:05:55.287340 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:05:56.288647 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:05:57.290639 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:05:58.291724 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:05:59.293368 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:00.295091 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:01.286346 0.000000 udp 10.0.2.22 51868 -> 181.208.87.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:02.287486 1.318060 udp 10.0.2.22 51868 <-> 218.152.217.44 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:06:04.290810 0.086232 udp 10.0.2.22 51868 <-> 176.215.215.44 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:06:05.292213 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:06.293454 0.000053 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:06.293507 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:06:07.294914 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:09.287745 0.000000 udp 10.0.2.22 51868 -> 199.242.105.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:10.289025 0.000000 udp 10.0.2.22 51868 -> 181.208.87.16 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:11.290220 1.317357 udp 10.0.2.22 51868 <-> 218.152.217.44 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:06:13.293338 0.031410 udp 10.0.2.22 51868 <-> 158.58.245.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:06:14.164604 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:06:14.294922 0.000000 udp 10.0.2.22 51868 -> 81.226.243.247 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:15.286429 0.070274 udp 10.0.2.22 51868 <-> 78.251.143.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:06:16.287375 0.138029 udp 10.0.2.22 51868 <-> 98.219.228.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:06:17.288943 1.414235 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:06:19.291867 0.410519 udp 10.0.2.22 51868 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:06:20.293598 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:21.295201 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:22.286401 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:23.287712 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:25.290526 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:26.291880 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:27.293211 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:28.294635 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:29.286479 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:30.287520 0.000066 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:30.287586 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:06:31.289590 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:32.290922 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:33.292067 0.064523 udp 10.0.2.22 51868 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:06:35.294889 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:36.286394 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:37.287634 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:38.289724 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:39.480860 0.000126 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:39.480986 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:06:40.482666 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:41.353624 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:06:41.484089 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:42.485194 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:43.476904 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:44.478456 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:45.479630 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:46.480836 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:47.482790 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:48.484240 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:49.485140 0.000000 udp 10.0.2.22 51868 -> 2.92.4.6 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:50.476865 0.000000 udp 10.0.2.22 51868 -> 68.14.166.5 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:51.478061 0.235038 udp 10.0.2.22 51868 <-> 161.200.173.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:06:52.479969 0.562762 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:06:53.481546 0.256169 udp 10.0.2.22 51868 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:06:54.482548 0.164545 udp 10.0.2.22 51868 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:06:55.484054 0.054045 udp 10.0.2.22 51868 <-> 46.214.189.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:06:56.485253 0.227578 udp 10.0.2.22 51868 <-> 70.132.115.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:06:57.477171 0.000000 udp 10.0.2.22 51868 -> 186.191.21.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:58.478049 0.000000 udp 10.0.2.22 51868 -> 75.230.214.99 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:06:59.479852 0.286197 udp 10.0.2.22 51868 <-> 24.89.222.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:00.481410 0.000000 udp 10.0.2.22 51868 -> 98.67.228.85 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:07:01.482488 0.132950 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:02.484208 0.125587 udp 10.0.2.22 51868 <-> 79.51.215.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:03.475428 0.150296 udp 10.0.2.22 51868 <-> 67.251.77.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:04.476964 0.365218 udp 10.0.2.22 51868 <-> 190.203.171.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:05.478498 1.051669 udp 10.0.2.22 51868 <-> 188.25.44.75 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:07.481649 0.495912 udp 10.0.2.22 51868 <-> 177.106.37.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:08.352202 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:07:08.482893 3.033541 udp 10.0.2.22 51868 <-> 89.215.95.140 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:09.483863 0.095279 udp 10.0.2.22 51868 <-> 109.182.129.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:10.475337 0.000000 udp 10.0.2.22 51868 -> 180.235.46.66 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:07:12.478389 0.366498 udp 10.0.2.22 51868 <-> 186.49.79.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:13.480314 0.354646 udp 10.0.2.22 51868 <-> 115.165.236.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:14.481100 0.082632 udp 10.0.2.22 51868 <-> 78.73.215.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:15.482516 1.054404 udp 10.0.2.22 51868 <-> 46.214.189.242 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:17.476033 0.000000 udp 10.0.2.22 51868 -> 113.254.247.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:07:18.477443 0.000000 udp 10.0.2.22 51868 -> 77.179.1.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:07:19.478520 0.620885 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:20.480338 0.154705 udp 10.0.2.22 51868 <-> 76.16.28.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:21.481587 0.039258 udp 10.0.2.22 51868 <-> 89.215.95.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:22.482953 0.000000 udp 10.0.2.22 51868 -> 186.49.79.150 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:07:23.484306 0.151099 udp 10.0.2.22 51868 <-> 109.182.129.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:24.475722 0.000000 udp 10.0.2.22 51868 -> 101.63.213.148 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:07:25.477116 0.048808 udp 10.0.2.22 51868 <-> 78.73.215.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:26.478811 0.000000 udp 10.0.2.22 51868 -> 77.38.98.5 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:07:27.480176 0.141567 udp 10.0.2.22 51868 <-> 24.102.154.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:28.481586 0.052729 udp 10.0.2.22 51868 <-> 78.61.121.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:29.482642 0.687561 udp 10.0.2.22 51868 <-> 181.29.6.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:30.484674 0.039900 udp 10.0.2.22 51868 <-> 178.150.156.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:31.475947 0.797714 udp 10.0.2.22 51868 <-> 186.89.148.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:32.477204 0.000000 udp 10.0.2.22 51868 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:07:33.478415 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:07:34.480219 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:07:35.351330 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:07:35.481931 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:07:36.483195 0.468532 udp 10.0.2.22 51868 <-> 1.172.59.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:37.484263 0.375837 udp 10.0.2.22 51868 <-> 190.105.68.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:37.815252 0.011376 udp 10.0.2.22 60040 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 07:07:37.826931 0.000000 udp 10.0.2.22 60041 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:07:38.476095 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:07:39.477101 0.000046 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:07:39.477147 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:07:40.478941 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:07:41.480114 0.000000 udp 10.0.2.22 51868 -> 1.168.250.38 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:07:42.481636 0.000000 udp 10.0.2.22 51868 -> 98.80.235.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:07:43.483412 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:07:44.484380 0.029182 udp 10.0.2.22 51868 <-> 46.5.250.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:45.475673 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:07:46.477706 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:07:47.478705 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:07:48.480651 0.000000 udp 10.0.2.22 51868 -> 178.167.99.54 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:07:49.481741 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:07:50.483114 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:07:51.484259 0.029015 udp 10.0.2.22 51868 <-> 46.5.250.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:52.476396 0.152184 udp 10.0.2.22 51868 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:53.477116 0.000000 udp 10.0.2.22 51868 -> 69.248.152.15 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:07:54.478826 0.000000 udp 10.0.2.22 51868 -> 72.172.193.78 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:07:55.480459 4.102619 udp 10.0.2.22 51868 <-> 92.87.69.43 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:56.481442 0.000000 udp 10.0.2.22 51868 -> 98.80.235.18 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:07:57.483304 4.996891 udp 10.0.2.22 51868 <-> 5.14.158.62 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:07:58.484739 0.147685 udp 10.0.2.22 51868 <-> 66.56.26.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:00.477210 0.066762 udp 10.0.2.22 51868 <-> 178.167.99.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:01.479048 0.000000 udp 10.0.2.22 51868 -> 1.168.250.38 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:08:02.350302 0.000039 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:08:02.531152 3.005441 udp 10.0.2.22 51868 <-> 5.14.158.62 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:03.482132 0.092042 udp 10.0.2.22 51868 <-> 92.87.69.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:04.483383 0.000000 udp 10.0.2.22 51868 -> 80.99.71.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:08:06.476235 0.196773 udp 10.0.2.22 51868 <-> 72.172.193.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:07.477828 0.000000 udp 10.0.2.22 51868 -> 98.80.235.18 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:08:08.479180 0.017956 udp 10.0.2.22 51868 <-> 5.146.89.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:09.480368 0.162399 udp 10.0.2.22 51868 <-> 49.204.144.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:10.481759 0.000000 udp 10.0.2.22 51868 -> 69.248.152.15 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:08:11.483410 0.000000 udp 10.0.2.22 51868 -> 79.115.67.73 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:08:12.484818 0.026761 udp 10.0.2.22 51868 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:13.476293 0.145821 udp 10.0.2.22 51868 <-> 66.56.26.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:14.477548 0.015334 udp 10.0.2.22 51868 <-> 84.118.6.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:15.478827 0.000000 udp 10.0.2.22 51868 -> 90.244.199.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:08:16.480357 0.000000 udp 10.0.2.22 51868 -> 69.47.17.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:08:17.482285 1.787698 udp 10.0.2.22 51868 <-> 186.22.10.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:18.483133 0.044806 udp 10.0.2.22 51868 <-> 77.21.132.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:19.485234 0.091830 udp 10.0.2.22 51868 <-> 212.225.185.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:20.475936 0.369762 udp 10.0.2.22 51868 <-> 124.12.33.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:21.477418 0.032479 udp 10.0.2.22 51868 <-> 89.215.228.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:22.479239 0.000000 udp 10.0.2.22 51868 -> 94.197.234.60 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:08:23.480541 0.000000 udp 10.0.2.22 51868 -> 190.182.128.103 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:08:24.482185 0.047070 udp 10.0.2.22 51868 <-> 77.89.104.107 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:25.483283 0.316514 udp 10.0.2.22 51868 <-> 80.171.186.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:26.485135 1.492134 udp 10.0.2.22 51868 <-> 31.11.182.135 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:28.477619 0.095883 udp 10.0.2.22 51868 <-> 93.116.203.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:29.358898 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:08:29.479289 0.066606 udp 10.0.2.22 51868 <-> 89.136.104.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:30.481041 0.000000 udp 10.0.2.22 51868 -> 79.117.19.121 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:08:31.482365 0.245640 udp 10.0.2.22 51868 <-> 78.70.192.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:32.483918 0.073416 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:33.484872 0.047308 udp 10.0.2.22 51868 <-> 86.125.61.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:34.476090 2.317375 udp 10.0.2.22 51868 <-> 60.62.93.24 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:35.477812 0.378085 udp 10.0.2.22 51868 <-> 180.176.70.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:37.480847 0.165720 udp 10.0.2.22 51868 <-> 75.132.170.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:38.482041 0.039259 udp 10.0.2.22 51868 <-> 212.117.58.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:39.483709 3.995606 udp 10.0.2.22 51868 <-> 88.37.113.50 16464 CON 0 0 5 1954 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:41.476786 0.223607 udp 10.0.2.22 51868 <-> 190.141.220.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:42.477801 0.000000 udp 10.0.2.22 51868 -> 89.214.224.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:08:44.480963 0.037603 udp 10.0.2.22 51868 <-> 212.117.58.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:45.482281 0.000000 udp 10.0.2.22 51868 -> 201.19.246.78 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:08:46.483556 0.444407 udp 10.0.2.22 51868 <-> 67.185.146.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:47.595227 0.151104 udp 10.0.2.22 51868 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:48.586933 0.254582 udp 10.0.2.22 51868 <-> 72.178.202.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:49.588556 0.038846 udp 10.0.2.22 51868 <-> 89.215.95.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:50.589686 0.037107 udp 10.0.2.22 51868 <-> 88.129.222.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:51.590751 0.049096 udp 10.0.2.22 51868 <-> 88.222.156.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:52.592141 0.064028 udp 10.0.2.22 51868 <-> 95.42.254.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:53.593597 0.000000 udp 10.0.2.22 51868 -> 83.251.242.139 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:08:54.595251 0.367063 udp 10.0.2.22 51868 <-> 49.159.227.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:55.586476 0.136994 udp 10.0.2.22 51868 <-> 173.220.69.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:56.467792 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:08:56.588437 0.000000 udp 10.0.2.22 51868 -> 201.219.190.39 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:08:57.589445 0.359752 udp 10.0.2.22 51868 <-> 122.100.106.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:58.591004 0.072117 udp 10.0.2.22 51868 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:08:59.592408 0.136054 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:00.593804 0.061563 udp 10.0.2.22 51868 <-> 79.115.67.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:01.595240 0.296258 udp 10.0.2.22 51868 <-> 181.53.224.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:02.586581 0.160702 udp 10.0.2.22 51868 <-> 88.166.83.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:03.588615 0.037229 udp 10.0.2.22 51868 <-> 89.77.207.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:04.589921 0.705753 udp 10.0.2.22 51868 <-> 24.49.211.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:05.590917 4.154982 udp 10.0.2.22 51868 <-> 76.188.30.171 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:06.592254 0.000000 udp 10.0.2.22 51868 -> 79.115.67.73 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:09:07.594448 0.121298 udp 10.0.2.22 51868 <-> 173.238.180.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:08.595118 4.997210 udp 10.0.2.22 51868 <-> 88.166.83.195 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:10.588606 2.049288 udp 10.0.2.22 51868 <-> 188.254.149.146 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:11.589976 0.290364 udp 10.0.2.22 51868 <-> 110.134.250.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:13.660593 0.000000 udp 10.0.2.22 51868 <- 88.166.83.195 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:09:14.594089 0.235247 udp 10.0.2.22 51868 <-> 190.207.251.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:15.595780 0.000000 udp 10.0.2.22 51868 -> 114.26.249.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:09:16.587194 0.142598 udp 10.0.2.22 51868 <-> 67.86.105.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:17.588330 0.064627 udp 10.0.2.22 51868 <-> 78.228.60.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:18.589511 4.272348 udp 10.0.2.22 51868 <-> 109.122.73.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:19.591655 0.117537 udp 10.0.2.22 51868 <-> 217.201.83.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:20.592620 0.178547 udp 10.0.2.22 51868 <-> 69.59.85.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:21.593959 0.160716 udp 10.0.2.22 51868 <-> 71.235.63.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:22.595371 0.219035 udp 10.0.2.22 51868 <-> 190.80.114.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:23.467317 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:09:23.587092 0.737165 udp 10.0.2.22 51868 <-> 86.58.36.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:24.588523 0.491953 udp 10.0.2.22 51868 <-> 14.194.52.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:25.589699 0.270948 udp 10.0.2.22 51868 <-> 189.120.4.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:26.591246 0.169457 udp 10.0.2.22 51868 <-> 108.167.33.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:27.592656 0.324209 udp 10.0.2.22 51868 <-> 190.178.251.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:28.594046 0.061889 udp 10.0.2.22 51868 <-> 86.121.142.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:29.586205 0.181244 udp 10.0.2.22 51868 <-> 49.205.17.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:30.586865 0.180645 udp 10.0.2.22 51868 <-> 49.206.41.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:31.588195 0.130833 udp 10.0.2.22 51868 <-> 195.70.108.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:32.590357 0.000000 udp 10.0.2.22 51868 -> 145.236.23.151 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:09:33.591188 0.172739 udp 10.0.2.22 51868 <-> 74.58.214.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:34.592692 2.294003 udp 10.0.2.22 51868 <-> 200.126.193.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:35.594474 0.311976 udp 10.0.2.22 51868 <-> 190.204.22.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:36.585514 0.000000 udp 10.0.2.22 51868 -> 186.14.134.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:09:37.586828 0.000000 udp 10.0.2.22 51868 -> 212.166.241.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:09:38.588397 0.074598 udp 10.0.2.22 51868 <-> 85.84.94.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:39.589722 0.041405 udp 10.0.2.22 51868 <-> 62.117.22.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:40.591541 0.151503 udp 10.0.2.22 51868 <-> 115.117.114.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:41.593211 0.000000 udp 10.0.2.22 51868 -> 178.172.245.47 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:09:42.594497 0.016976 udp 10.0.2.22 51868 <-> 178.202.81.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:43.585649 4.220296 udp 10.0.2.22 51868 <-> 201.242.77.232 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:44.587657 0.267043 udp 10.0.2.22 51868 <-> 81.226.243.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:45.588712 0.101997 udp 10.0.2.22 51868 <-> 94.155.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:46.590458 0.120273 udp 10.0.2.22 51868 <-> 88.247.23.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:48.592908 0.223464 udp 10.0.2.22 51868 <-> 76.87.27.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:49.594151 0.143149 udp 10.0.2.22 51868 <-> 24.184.114.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:50.465998 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:09:50.585732 0.000000 udp 10.0.2.22 51868 -> 201.210.219.39 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:09:51.587038 0.297334 udp 10.0.2.22 51868 <-> 203.202.216.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:52.588466 0.239480 udp 10.0.2.22 51868 <-> 201.243.172.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:53.590512 0.055873 udp 10.0.2.22 51868 <-> 89.136.73.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:54.591922 0.000000 udp 10.0.2.22 51868 -> 208.53.224.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:09:55.593356 0.154641 udp 10.0.2.22 51868 <-> 68.194.27.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:56.594143 0.041187 udp 10.0.2.22 51868 <-> 212.233.239.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:57.585998 4.724882 udp 10.0.2.22 51868 <-> 115.242.82.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:09:58.587353 0.000000 udp 10.0.2.22 51868 -> 207.210.56.47 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:09:59.589093 0.233069 udp 10.0.2.22 51868 <-> 128.171.120.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:00.590335 0.152961 udp 10.0.2.22 51868 <-> 24.154.191.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:01.591920 0.142119 udp 10.0.2.22 51868 <-> 108.183.176.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:02.592886 0.070088 udp 10.0.2.22 51868 <-> 84.126.103.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:03.595037 0.000071 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:10:03.595108 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:10:04.586133 0.086945 udp 10.0.2.22 51868 <-> 94.155.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:05.587932 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:10:06.589050 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:10:07.590259 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:10:08.591780 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:10:09.592905 0.415072 udp 10.0.2.22 51868 <-> 61.223.95.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:10.594663 0.437144 udp 10.0.2.22 51868 <-> 186.36.70.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:11.585930 0.048569 udp 10.0.2.22 51868 <-> 79.118.137.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:12.587186 0.000000 udp 10.0.2.22 51868 -> 178.26.123.117 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:10:13.589461 0.343242 udp 10.0.2.22 51868 <-> 184.10.180.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:14.590308 0.000000 udp 10.0.2.22 51868 -> 74.56.6.140 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:10:15.592167 0.178746 udp 10.0.2.22 51868 <-> 68.117.185.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:16.593032 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:10:17.464619 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:10:17.594329 0.149469 udp 10.0.2.22 51868 <-> 71.75.119.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:18.585828 0.137211 udp 10.0.2.22 51868 <-> 68.199.44.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:19.179365 3.002140 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 07:10:19.587218 0.338337 udp 10.0.2.22 51868 <-> 218.35.15.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:20.588815 0.428410 udp 10.0.2.22 51868 <-> 189.29.250.103 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:21.590314 0.179338 udp 10.0.2.22 51868 <-> 68.117.185.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:22.592259 0.000000 udp 10.0.2.22 51868 -> 192.168.1.106 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:10:23.593595 0.000000 udp 10.0.2.22 51868 -> 189.221.218.157 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:10:24.594714 0.012903 udp 10.0.2.22 51868 <-> 131.246.84.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:25.586374 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:10:26.186930 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:10:26.587474 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:10:27.588785 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:10:28.590265 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:10:29.592237 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:10:30.593592 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:10:31.594653 0.000062 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:10:31.594715 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:10:32.586384 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:10:33.587556 4.333982 udp 10.0.2.22 51868 <-> 189.29.250.103 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:34.188804 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:10:34.588766 0.000000 udp 10.0.2.22 51868 -> 74.56.6.140 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:10:35.590259 3.004669 udp 10.0.2.22 51868 <-> 68.117.185.142 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:36.592290 4.143763 udp 10.0.2.22 51868 <-> 50.158.209.132 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:39.586181 0.718928 udp 10.0.2.22 51868 <-> 190.206.235.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:41.588947 0.145061 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:42.590665 0.000000 udp 10.0.2.22 51868 -> 118.168.126.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:10:43.592005 1.295853 udp 10.0.2.22 51868 <-> 71.80.71.242 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:44.462930 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:10:44.593334 0.025116 udp 10.0.2.22 51868 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:45.595138 0.763220 udp 10.0.2.22 51868 <-> 83.55.151.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:46.586571 2.273017 udp 10.0.2.22 51868 <-> 177.227.173.10 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:47.587460 0.052546 udp 10.0.2.22 51868 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:49.590431 0.000000 udp 10.0.2.22 51868 -> 87.111.41.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:10:50.191360 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:10:50.592333 0.060067 udp 10.0.2.22 51868 <-> 188.2.216.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:51.593827 0.206541 udp 10.0.2.22 51868 <-> 67.183.71.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:52.594703 0.078053 udp 10.0.2.22 51868 <-> 188.252.201.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:53.586711 0.000000 udp 10.0.2.22 51868 -> 147.32.83.216 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:10:54.588228 0.073725 udp 10.0.2.22 51868 <-> 82.239.45.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:10:55.589660 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:10:56.591018 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:10:57.592200 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:10:58.593831 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:10:59.594894 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:11:00.586861 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:11:01.588333 0.038988 udp 10.0.2.22 51868 <-> 85.231.33.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:02.589216 0.147956 udp 10.0.2.22 51868 <-> 71.80.67.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:03.591141 0.436529 udp 10.0.2.22 51868 <-> 177.149.127.27 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:04.592236 0.136789 udp 10.0.2.22 51868 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:05.593654 2.304745 udp 10.0.2.22 51868 <-> 98.164.115.241 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:06.594886 1.268837 udp 10.0.2.22 51868 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:08.588228 0.000000 udp 10.0.2.22 51868 -> 24.47.109.126 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:11:09.589437 0.563973 udp 10.0.2.22 51868 <-> 117.200.137.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:10.590826 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:11:11.462249 0.000098 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:11:11.592642 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:11:12.593955 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:11:13.594904 0.349598 udp 10.0.2.22 51868 <-> 183.178.231.188 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:14.586686 0.063471 udp 10.0.2.22 51868 <-> 94.190.190.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:15.588347 0.167507 udp 10.0.2.22 51868 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:16.589181 0.173569 udp 10.0.2.22 51868 <-> 66.69.28.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:17.591138 0.045122 udp 10.0.2.22 51868 <-> 178.150.200.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:18.592274 0.124574 udp 10.0.2.22 51868 <-> 24.36.13.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:19.593772 0.343485 udp 10.0.2.22 51868 <-> 187.24.139.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:21.586965 0.050429 udp 10.0.2.22 51868 <-> 79.114.8.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:22.197650 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:11:22.587996 1.363998 udp 10.0.2.22 51868 <-> 216.236.162.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:23.589630 0.065601 udp 10.0.2.22 51868 <-> 84.120.113.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:24.590730 0.305705 udp 10.0.2.22 51868 <-> 61.3.178.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:25.592681 0.059844 udp 10.0.2.22 51868 <-> 89.40.50.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:26.593823 0.275331 udp 10.0.2.22 51868 <-> 177.182.119.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:27.595308 0.153667 udp 10.0.2.22 51868 <-> 92.225.190.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:28.586395 0.168481 udp 10.0.2.22 51868 <-> 98.194.123.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:29.588311 0.000000 udp 10.0.2.22 51868 -> 141.136.14.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:11:30.589819 0.368137 udp 10.0.2.22 51868 <-> 124.12.36.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:31.590871 1.072297 udp 10.0.2.22 51868 <-> 89.132.42.150 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:33.594382 0.138900 udp 10.0.2.22 51868 <-> 24.0.79.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:34.595386 0.333715 udp 10.0.2.22 51868 <-> 58.115.17.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:35.587119 0.070544 udp 10.0.2.22 51868 <-> 212.225.185.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:36.588482 0.428805 udp 10.0.2.22 51868 <-> 219.90.102.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:37.590160 0.047688 udp 10.0.2.22 51868 <-> 78.88.33.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:38.460919 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:11:38.591079 0.422234 udp 10.0.2.22 51868 <-> 46.143.208.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:39.592385 4.997340 udp 10.0.2.22 51868 -> 67.81.98.90 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:11:40.594386 0.164380 udp 10.0.2.22 51868 <-> 173.23.110.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:41.595256 0.000000 udp 10.0.2.22 51868 -> 66.62.91.60 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:11:42.586596 0.000000 udp 10.0.2.22 51868 -> 68.54.38.108 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:11:43.587992 0.000000 udp 10.0.2.22 51868 -> 77.184.157.125 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:11:44.725931 0.000000 udp 10.0.2.22 51868 <- 67.81.98.90 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:11:45.591534 0.201966 udp 10.0.2.22 51868 <-> 190.218.84.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:46.592462 0.171250 udp 10.0.2.22 51868 <-> 173.23.110.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:47.594084 0.322070 udp 10.0.2.22 51868 <-> 211.219.172.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:48.595806 0.177941 udp 10.0.2.22 51868 <-> 75.66.196.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:49.587021 0.171897 udp 10.0.2.22 51868 <-> 106.51.203.220 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:50.588371 0.182458 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:51.590065 0.043015 udp 10.0.2.22 51868 <-> 87.188.164.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:52.591634 0.936437 udp 10.0.2.22 51868 <-> 117.198.214.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:53.592516 0.210124 udp 10.0.2.22 51868 <-> 190.39.171.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:54.594340 0.052056 udp 10.0.2.22 51868 <-> 178.210.193.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:55.595503 0.429327 udp 10.0.2.22 51868 <-> 201.74.108.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:56.586961 0.138288 udp 10.0.2.22 51868 <-> 66.171.56.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:57.588643 0.149411 udp 10.0.2.22 51868 <-> 72.231.172.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:58.589994 0.153122 udp 10.0.2.22 51868 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:11:59.591243 0.141313 udp 10.0.2.22 51868 <-> 82.242.39.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:00.593092 0.162529 udp 10.0.2.22 51868 <-> 70.80.21.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:01.594063 0.180935 udp 10.0.2.22 51868 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:02.585500 2.460960 udp 10.0.2.22 51868 <-> 116.203.111.196 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:03.587183 0.344929 udp 10.0.2.22 51868 <-> 213.233.181.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:05.469924 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:12:05.589882 0.159581 udp 10.0.2.22 51868 <-> 71.56.93.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:06.591591 0.040439 udp 10.0.2.22 51868 <-> 46.237.64.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:07.592905 0.992339 udp 10.0.2.22 51868 <-> 216.45.40.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:08.594192 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:12:09.585393 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:12:10.587375 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:12:11.588327 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:12:12.589704 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:12:13.591732 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:12:14.592805 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:12:15.594739 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:12:16.585783 0.125740 udp 10.0.2.22 51868 <-> 81.61.64.72 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:17.587354 0.354648 udp 10.0.2.22 51868 <-> 190.51.66.112 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:18.588614 3.004521 udp 10.0.2.22 51868 -> 111.246.35.241 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:12:19.590284 4.061316 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:20.591761 0.139638 udp 10.0.2.22 51868 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:22.594759 0.035920 udp 10.0.2.22 51868 <-> 62.221.143.16 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:24.586959 1.174362 udp 10.0.2.22 51868 <-> 24.232.19.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:25.589061 0.000000 udp 10.0.2.22 51868 -> 121.246.32.226 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:12:26.590421 0.075492 udp 10.0.2.22 51868 <-> 79.165.97.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:27.591726 0.000000 udp 10.0.2.22 51868 -> 182.72.46.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:12:28.592765 3.036729 udp 10.0.2.22 51868 <-> 195.70.108.58 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:29.594135 0.000000 udp 10.0.2.22 51868 -> 118.169.110.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:12:30.585615 0.052018 udp 10.0.2.22 51868 <-> 79.113.174.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:32.469006 0.000101 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:12:32.588916 0.000000 udp 10.0.2.22 51868 -> 93.74.103.177 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:12:33.590040 1.041093 udp 10.0.2.22 51868 <-> 190.124.133.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:34.591938 0.152658 udp 10.0.2.22 51868 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:35.593010 0.167783 udp 10.0.2.22 51868 <-> 76.107.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:36.594808 0.000000 udp 10.0.2.22 51868 -> 24.114.244.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:12:37.585689 0.146695 udp 10.0.2.22 51868 <-> 65.27.168.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:38.587110 0.197092 udp 10.0.2.22 51868 <-> 190.141.176.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:39.588980 0.038964 udp 10.0.2.22 51868 <-> 91.67.136.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:40.590284 0.161428 udp 10.0.2.22 51868 <-> 67.242.133.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:41.591435 0.077234 udp 10.0.2.22 51868 <-> 134.249.0.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:42.593095 0.000000 udp 10.0.2.22 51868 -> 5.13.234.175 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:12:43.594244 0.198699 udp 10.0.2.22 51868 <-> 213.60.101.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:44.585935 0.000000 udp 10.0.2.22 51868 -> 72.231.199.170 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:12:45.587109 0.417239 udp 10.0.2.22 51868 <-> 180.40.200.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:46.588846 0.208746 udp 10.0.2.22 51868 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:47.590068 0.076667 udp 10.0.2.22 51868 <-> 134.249.0.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:48.591470 0.000000 udp 10.0.2.22 51868 -> 65.74.25.137 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:12:49.593142 0.000000 udp 10.0.2.22 51868 -> 82.72.169.40 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:12:50.594574 0.044230 udp 10.0.2.22 51868 <-> 88.216.52.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:51.586116 0.056351 udp 10.0.2.22 51868 <-> 217.197.248.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:52.587401 0.228139 udp 10.0.2.22 51868 <-> 82.244.99.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:53.588768 0.275926 udp 10.0.2.22 51868 <-> 187.37.104.223 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:54.590455 0.076711 udp 10.0.2.22 51868 <-> 134.249.0.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:55.592295 0.107263 udp 10.0.2.22 51868 <-> 5.13.234.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:56.593120 0.000000 udp 10.0.2.22 51868 -> 95.57.165.122 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:12:57.594727 0.192070 udp 10.0.2.22 51868 <-> 213.60.101.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:58.586485 0.223709 udp 10.0.2.22 51868 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:12:59.467027 0.000033 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:12:59.587595 0.000000 udp 10.0.2.22 51868 -> 78.73.215.44 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:13:00.588717 0.423340 udp 10.0.2.22 51868 <-> 180.40.200.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:01.590746 0.000000 udp 10.0.2.22 51868 -> 116.193.141.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:13:02.591853 0.332033 udp 10.0.2.22 51868 <-> 65.74.25.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:03.593266 0.162065 udp 10.0.2.22 51868 <-> 74.194.166.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:04.594976 0.000000 udp 10.0.2.22 51868 -> 190.78.25.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:13:05.585874 0.310337 udp 10.0.2.22 51868 <-> 124.102.89.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:06.587896 0.000000 udp 10.0.2.22 51868 -> 86.125.184.50 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:13:07.589051 0.083132 udp 10.0.2.22 51868 <-> 62.220.208.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:08.590915 0.152818 udp 10.0.2.22 51868 <-> 74.216.190.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:09.592297 0.000000 udp 10.0.2.22 51868 -> 98.89.104.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:13:10.593371 0.180997 udp 10.0.2.22 51868 <-> 178.202.155.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:11.594907 0.030057 udp 10.0.2.22 51868 <-> 5.53.200.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:12.585991 0.073186 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:13.588066 0.213282 udp 10.0.2.22 51868 <-> 67.168.219.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:14.589316 0.049829 udp 10.0.2.22 51868 <-> 109.86.167.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:15.590494 0.028978 udp 10.0.2.22 51868 <-> 46.5.250.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:16.386507 0.000000 udp 10.0.2.22 51868 <- 98.89.104.36 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:13:16.591846 0.062343 udp 10.0.2.22 51868 <-> 151.28.10.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:17.593732 0.425560 udp 10.0.2.22 51868 <-> 181.177.210.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:18.595031 0.053383 udp 10.0.2.22 51868 <-> 81.57.148.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:19.586029 0.000000 udp 10.0.2.22 51868 -> 78.52.9.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:13:20.587555 0.000000 udp 10.0.2.22 51868 -> 94.253.231.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:13:21.589268 0.052468 udp 10.0.2.22 51868 <-> 46.214.189.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:22.590771 0.351128 udp 10.0.2.22 51868 <-> 223.17.105.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:23.591773 0.000000 udp 10.0.2.22 51868 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:13:24.593663 1.605458 udp 10.0.2.22 51868 <-> 78.52.9.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:25.595016 0.302070 udp 10.0.2.22 51868 <-> 211.33.152.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:26.466017 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:13:26.586706 0.171483 udp 10.0.2.22 51868 <-> 72.252.170.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:27.587502 0.052056 udp 10.0.2.22 51868 <-> 46.214.189.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:28.588939 0.054350 udp 10.0.2.22 51868 <-> 213.193.25.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:29.590462 0.161943 udp 10.0.2.22 51868 <-> 75.86.159.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:30.592005 0.147300 udp 10.0.2.22 51868 <-> 24.138.62.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:31.593921 0.154296 udp 10.0.2.22 51868 <-> 66.31.49.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:32.594739 0.182458 udp 10.0.2.22 51868 <-> 183.83.32.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:33.586353 0.156143 udp 10.0.2.22 51868 <-> 199.116.197.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:34.588279 0.241793 udp 10.0.2.22 51868 <-> 187.1.104.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:35.589162 0.000000 udp 10.0.2.22 51868 -> 24.197.154.79 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:13:36.591148 0.587413 udp 10.0.2.22 51868 <-> 200.84.252.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:37.592154 0.530368 udp 10.0.2.22 51868 <-> 218.37.235.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:38.593848 2.072490 udp 10.0.2.22 51868 <-> 151.33.234.50 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:39.595529 0.353128 udp 10.0.2.22 51868 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:41.587988 0.000000 udp 10.0.2.22 51868 -> 109.53.32.184 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:13:42.589578 0.136650 udp 10.0.2.22 51868 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:43.590814 0.082013 udp 10.0.2.22 51868 <-> 94.253.254.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:44.592186 0.050996 udp 10.0.2.22 51868 <-> 188.230.39.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:45.594276 0.142353 udp 10.0.2.22 51868 <-> 1.186.124.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:46.595274 0.300515 udp 10.0.2.22 51868 <-> 189.47.42.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:47.586880 0.054788 udp 10.0.2.22 51868 <-> 89.165.189.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:48.587960 0.683109 udp 10.0.2.22 51868 <-> 177.44.3.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:49.589663 0.036625 udp 10.0.2.22 51868 <-> 77.242.145.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:50.590815 0.360484 udp 10.0.2.22 51868 <-> 1.173.9.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:51.592375 0.044926 udp 10.0.2.22 51868 -> 78.60.63.169 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:13:51.637301 0.000000 icmp 78.60.63.169 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 07:13:52.593696 0.373960 udp 10.0.2.22 51868 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:53.465262 0.000241 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:13:53.595064 0.424280 udp 10.0.2.22 51868 <-> 118.179.243.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:54.586583 0.000000 udp 10.0.2.22 51868 -> 85.86.199.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:13:55.588166 1.391013 udp 10.0.2.22 51868 <-> 78.52.9.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:56.589233 0.154706 udp 10.0.2.22 51868 <-> 69.14.223.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:57.590926 3.178355 udp 10.0.2.22 51868 <-> 71.86.94.143 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:58.592672 0.389101 udp 10.0.2.22 51868 <-> 97.102.73.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:13:59.593590 0.040222 udp 10.0.2.22 51868 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:14:01.586437 0.079054 udp 10.0.2.22 51868 <-> 87.110.25.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:14:02.588363 0.069069 udp 10.0.2.22 51868 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:14:03.589275 0.000000 udp 10.0.2.22 51868 -> 2.27.92.124 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:04.591251 0.116385 udp 10.0.2.22 51868 <-> 65.182.49.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:14:05.592873 0.170729 udp 10.0.2.22 51868 <-> 24.203.105.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:14:06.593675 1.293737 udp 10.0.2.22 51868 <-> 126.123.91.123 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:14:08.587313 0.192737 udp 10.0.2.22 51868 <-> 72.199.208.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:14:09.588465 0.272437 udp 10.0.2.22 51868 <-> 189.54.34.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:14:10.589833 0.379568 udp 10.0.2.22 51868 <-> 221.127.32.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:14:11.591254 0.076940 udp 10.0.2.22 51868 <-> 134.249.0.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:14:12.592630 0.100944 udp 10.0.2.22 51868 <-> 46.5.227.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:14:13.593878 0.166762 udp 10.0.2.22 51868 <-> 74.142.115.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:14:14.595225 0.260784 udp 10.0.2.22 51868 <-> 223.188.124.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:14:15.586639 0.294018 udp 10.0.2.22 51868 <-> 58.11.209.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:14:16.588544 2.209578 udp 10.0.2.22 51868 <-> 67.164.82.43 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:14:17.590075 0.032075 udp 10.0.2.22 51868 <-> 130.204.169.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:14:19.592791 0.000092 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:19.592883 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:14:20.463949 0.000105 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:14:20.593725 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:21.595566 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:22.587280 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:23.588865 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:24.589670 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:25.591591 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:26.592745 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:27.594141 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:28.595234 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:29.587077 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:30.588358 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:31.590185 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:32.591285 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:33.592608 0.036471 udp 10.0.2.22 51868 <-> 130.204.169.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:14:34.594162 0.000000 udp 10.0.2.22 51868 -> 85.159.94.154 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:35.585678 0.266993 udp 10.0.2.22 51868 <-> 190.103.144.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:14:36.587091 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:37.588249 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:38.589947 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:40.592507 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:41.594292 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:42.585909 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:43.586861 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:44.589085 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:45.590058 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:46.591274 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:47.462824 0.000090 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:14:47.593064 0.000071 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:47.593135 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:14:48.594775 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:49.585971 0.211438 udp 10.0.2.22 51868 <-> 67.164.82.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:14:50.587234 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:51.588959 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:52.590260 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:53.591636 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:54.592725 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:55.594527 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:56.585679 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:57.586992 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:58.588881 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:14:59.589797 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:01.593104 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:02.594276 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:03.585577 0.000122 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:03.585699 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:15:04.587622 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:05.588785 0.215454 udp 10.0.2.22 51868 <-> 67.164.82.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:15:06.590027 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:07.591915 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:08.593361 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:09.594865 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:10.585914 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:11.587265 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:12.588482 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:13.590418 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:14.461109 0.000117 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:15:15.593618 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:16.594227 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:17.586187 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:18.587721 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:19.588614 0.000095 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:19.588709 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:15:20.590129 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:21.591444 0.220439 udp 10.0.2.22 51868 <-> 75.0.32.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:15:22.593204 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:23.595021 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:24.587089 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:25.587154 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:26.588609 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:27.590158 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:28.591785 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:29.593257 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:30.595042 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:31.586377 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:32.587975 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:33.589367 0.000121 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:33.589488 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:15:34.590785 4.996869 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:35.591560 2.994945 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:37.594874 0.036252 udp 10.0.2.22 51868 <-> 130.204.169.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:15:40.589563 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:41.590447 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:42.461746 0.000099 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:15:42.592293 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:43.593241 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:44.594993 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:45.586665 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:46.587417 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:47.589157 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:48.590731 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:49.591746 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:50.593392 2.994502 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:50.593434 2.994460 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 2 172 flow=Background 1970/01/01 07:15:51.595177 0.180581 udp 10.0.2.22 51868 <-> 72.239.246.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:15:52.586565 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:54.589176 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:55.591009 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:56.592019 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:57.594080 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:58.594600 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:15:59.586181 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:00.587635 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:01.589694 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:02.591121 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:03.592236 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:04.593304 3.995982 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:05.595134 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:06.586456 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:07.587993 0.174424 udp 10.0.2.22 51868 <-> 72.239.246.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:16:09.460476 0.000035 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:16:09.590457 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:10.592555 0.000041 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:10.592596 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:16:11.593402 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:12.595096 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:13.586826 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:15.589580 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:16.591219 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:17.592137 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:18.593630 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:19.595207 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:20.586545 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:21.587987 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:22.590036 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:23.590990 0.363114 udp 10.0.2.22 51868 <-> 72.239.246.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:16:24.592003 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:25.594180 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:26.595083 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:27.586525 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:28.588394 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:29.589526 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:30.591034 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:31.592669 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:32.594166 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:34.586572 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:35.587852 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:36.469684 0.000119 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:16:36.589484 4.997791 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:37.590870 0.000158 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:37.591028 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:16:38.592119 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:39.594160 0.000000 udp 10.0.2.22 51868 -> 85.159.94.154 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:40.595284 0.268234 udp 10.0.2.22 51868 <-> 75.0.32.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:16:42.588437 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:43.589958 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:44.591432 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:45.592334 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:46.593641 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:47.595291 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:48.586565 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:49.588159 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:50.589400 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:51.591186 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:52.592665 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:53.594305 0.000117 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:53.594422 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:16:55.586611 0.207504 udp 10.0.2.22 51868 <-> 190.198.209.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:16:56.588156 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:57.589422 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:58.591199 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:16:59.592349 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:00.594583 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:01.595824 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:02.587353 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:03.468430 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:17:03.588253 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:04.589748 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:06.593074 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:07.593903 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:08.585654 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:09.587276 0.000137 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:09.587413 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:17:10.588140 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:11.589674 2.041564 udp 10.0.2.22 51868 <-> 130.204.169.49 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:17:12.591656 0.000000 udp 10.0.2.22 51868 -> 85.159.94.154 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:14.594140 0.162563 udp 10.0.2.22 51868 <-> 72.239.246.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:17:15.585967 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:16.586940 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:17.588677 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:18.589973 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:19.591596 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:21.594238 0.000075 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:21.594313 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:17:22.585765 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:23.587425 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:24.588787 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:25.590386 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:26.203122 3.001922 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 07:17:26.591554 0.205288 udp 10.0.2.22 51868 <-> 75.0.32.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:17:27.592998 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:28.594175 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:29.586122 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:30.467287 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:17:30.587243 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:31.589004 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:32.590275 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:33.211027 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:17:33.591369 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:34.593358 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:35.594552 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:36.585911 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:37.587522 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:39.590458 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:40.591544 0.000096 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:40.591640 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:17:41.212692 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:17:41.592704 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:42.594331 0.160110 udp 10.0.2.22 51868 <-> 72.239.246.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:17:43.586270 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:44.587219 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:45.588546 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:46.590420 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:47.591752 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:48.592955 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:49.594248 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:50.586307 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:51.587370 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:52.590780 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:53.590598 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:54.591397 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:56.594906 0.000110 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:56.595016 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:17:57.215739 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:17:57.465653 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:17:57.585924 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:58.587154 0.000000 udp 10.0.2.22 51868 -> 85.159.94.154 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:17:59.588854 0.157097 udp 10.0.2.22 51868 <-> 72.239.246.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:18:00.590028 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:01.592159 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:02.593658 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:03.594832 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:04.585808 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:05.588141 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:07.590519 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:08.591839 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:09.593614 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:10.594956 0.000154 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:10.595110 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:18:11.586425 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:12.587335 2.040395 udp 10.0.2.22 51868 <-> 130.204.169.49 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:18:13.589325 0.000000 udp 10.0.2.22 51868 -> 85.159.94.154 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:15.591647 0.203863 udp 10.0.2.22 51868 <-> 75.0.32.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:18:16.593131 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:17.595019 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:18.586664 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:19.587325 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:20.588825 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:21.590546 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:22.592146 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:23.593228 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:24.464958 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:18:24.594780 4.997448 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:25.586464 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:26.587506 0.000102 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:26.587608 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:18:27.589272 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:28.590911 0.217584 udp 10.0.2.22 51868 <-> 75.0.32.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:18:29.221761 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:18:30.593580 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:31.594943 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:32.586752 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:33.588019 0.145357 udp 10.0.2.22 51868 <-> 162.213.22.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:18:34.589209 0.000325 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:34.589534 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:18:35.590741 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:36.592252 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:37.593304 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:38.594848 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:39.586194 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:40.588044 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:41.589149 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:42.590754 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:43.591925 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:44.593338 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:45.595199 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:46.586784 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:47.588055 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:48.589186 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:49.590844 0.175178 udp 10.0.2.22 51868 <-> 173.2.97.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:18:50.592648 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:51.463294 0.000133 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:18:51.593928 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:52.595054 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:53.586910 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:54.588285 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:55.589674 0.000108 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:55.589782 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:18:56.590851 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:57.592477 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:58.593715 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:18:59.594852 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:00.586389 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:01.588049 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:02.589916 4.005514 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:03.590829 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:05.594113 0.144923 udp 10.0.2.22 51868 <-> 162.213.22.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:19:07.586572 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:08.588540 0.000116 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:08.588656 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:19:09.589685 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:10.591079 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:11.592720 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:12.593647 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:13.595325 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:14.587205 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:15.588516 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:16.589482 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:17.591100 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:18.462162 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:19:19.594325 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:20.595291 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:21.586657 0.145541 udp 10.0.2.22 51868 <-> 162.213.22.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:19:22.588440 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:23.589640 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:24.591195 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:25.592696 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:26.593671 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:27.595123 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:28.586529 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:29.588636 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:30.589728 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:31.591291 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:32.592650 0.000108 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:32.592758 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:19:33.593783 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:34.595872 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:41.746990 3.036139 udp 10.0.2.22 51868 <-> 62.220.208.28 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:19:42.732889 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:45.692371 0.077901 udp 10.0.2.22 51868 <-> 85.228.144.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:19:46.671643 0.000000 udp 10.0.2.22 51868 -> 190.129.109.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:47.661851 0.355733 udp 10.0.2.22 51868 <-> 1.173.229.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:19:48.648882 0.206978 udp 10.0.2.22 51868 <-> 189.192.237.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:19:49.635839 0.000000 udp 10.0.2.22 51868 -> 180.19.158.116 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:50.491375 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:19:50.620253 0.105989 udp 10.0.2.22 51868 <-> 109.67.249.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:19:51.604089 0.154641 udp 10.0.2.22 51868 <-> 98.253.230.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:19:52.594411 0.143951 udp 10.0.2.22 51868 <-> 108.183.176.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:19:53.573703 0.148357 udp 10.0.2.22 51868 <-> 146.163.172.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:19:54.562292 1.167698 udp 10.0.2.22 51868 <-> 186.4.7.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:19:55.549493 0.143623 udp 10.0.2.22 51868 <-> 174.106.129.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:19:56.535565 0.277544 udp 10.0.2.22 51868 <-> 177.143.165.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:19:57.520272 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:58.505540 0.234678 udp 10.0.2.22 51868 <-> 190.94.240.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:19:59.495732 0.186510 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:19:59.682242 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:20:00.654039 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:01.642461 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:02.634067 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:03.619996 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:12.681697 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:13.665623 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:14.656138 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:15.635435 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:16.623529 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:17.610647 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:19.109204 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:20.095006 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:21.081209 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:23.051009 0.263130 udp 10.0.2.22 51868 <-> 190.94.240.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:20:24.042596 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:25.029780 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:25.897389 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:20:26.016364 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:27.001048 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:27.985922 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:28.976322 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:30.944268 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:31.931065 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:32.917412 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:33.902415 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:34.886460 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:35.877243 0.000047 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:35.877290 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:20:36.856838 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:37.844764 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:41.742644 0.000000 udp 10.0.2.22 51868 -> 115.241.122.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:42.728690 0.053636 udp 10.0.2.22 51868 <-> 85.187.232.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:20:43.713648 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:45.706793 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:46.697061 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:47.676008 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:49.651207 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:50.637264 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:51.621933 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:52.690808 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:53.681503 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:54.660514 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:55.648544 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:56.516523 0.000099 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:20:56.635675 0.000101 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:56.635776 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:20:57.621456 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:20:58.606149 0.336503 udp 10.0.2.22 51868 <-> 183.178.135.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:20:59.590313 0.148278 udp 10.0.2.22 51868 <-> 136.159.63.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:00.580559 0.077490 udp 10.0.2.22 51868 <-> 88.135.143.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:01.559824 0.000000 udp 10.0.2.22 51868 -> 88.241.238.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:21:02.548016 0.155287 udp 10.0.2.22 51868 <-> 68.11.235.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:03.534796 0.037710 udp 10.0.2.22 51868 <-> 188.24.81.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:04.520953 0.038284 udp 10.0.2.22 51868 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:05.506868 0.000000 udp 10.0.2.22 51868 -> 216.45.40.102 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:21:06.497591 0.088852 udp 10.0.2.22 51868 <-> 178.148.145.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:07.487766 0.000000 udp 10.0.2.22 51868 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:21:08.467223 0.049253 udp 10.0.2.22 51868 <-> 5.14.128.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:09.454828 1.725873 udp 10.0.2.22 51868 <-> 68.3.172.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:10.443726 0.319479 udp 10.0.2.22 51868 <-> 117.204.146.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:11.429582 0.171069 udp 10.0.2.22 51868 <-> 65.25.78.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:12.414205 0.000000 udp 10.0.2.22 51868 -> 37.45.134.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:21:13.405138 0.145072 udp 10.0.2.22 51868 <-> 69.121.228.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:14.395164 0.283325 udp 10.0.2.22 51868 <-> 190.94.240.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:15.374161 0.190005 udp 10.0.2.22 51868 <-> 89.247.92.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:16.362101 0.162225 udp 10.0.2.22 51868 <-> 174.102.72.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:17.348709 0.120521 udp 10.0.2.22 51868 <-> 209.54.79.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:18.334433 0.170751 udp 10.0.2.22 51868 <-> 97.81.50.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:22.023839 0.300590 udp 10.0.2.22 51868 -> 58.92.164.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:21:22.324429 0.000000 icmp 58.92.164.1 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 07:21:23.004920 0.000000 udp 10.0.2.22 51868 -> 78.70.192.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:21:23.994824 0.000000 udp 10.0.2.22 51868 -> 77.78.227.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:21:24.973735 0.000000 udp 10.0.2.22 51868 -> 24.193.20.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:21:25.842865 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:21:25.961888 0.154207 udp 10.0.2.22 51868 <-> 68.62.2.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:26.948719 0.023397 udp 10.0.2.22 51868 <-> 82.132.101.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:27.934366 0.038179 udp 10.0.2.22 51868 <-> 89.137.133.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:28.918816 0.044817 udp 10.0.2.22 51868 <-> 178.148.145.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:29.909751 2.315199 udp 10.0.2.22 51868 <-> 111.253.130.102 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:30.899513 0.046325 udp 10.0.2.22 51868 <-> 95.180.65.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:32.866374 0.300924 udp 10.0.2.22 51868 <-> 14.98.115.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:33.852980 0.171609 udp 10.0.2.22 51868 <-> 70.83.116.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:34.838565 0.171655 udp 10.0.2.22 51868 <-> 24.203.105.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:35.822982 0.671843 udp 10.0.2.22 51868 <-> 113.193.112.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:36.814148 0.000000 udp 10.0.2.22 51868 -> 31.181.59.112 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:21:37.803759 0.047422 udp 10.0.2.22 51868 <-> 5.12.11.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:38.782585 0.137756 udp 10.0.2.22 51868 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:39.773109 0.286942 udp 10.0.2.22 51868 <-> 190.74.247.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:40.759660 0.425211 udp 10.0.2.22 51868 <-> 190.38.37.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:41.745411 0.332867 udp 10.0.2.22 51868 <-> 189.54.34.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:42.729836 0.000000 udp 10.0.2.22 51868 -> 184.162.123.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:21:43.720661 0.196458 udp 10.0.2.22 51868 <-> 113.21.65.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:44.710392 0.168744 udp 10.0.2.22 51868 <-> 72.179.177.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:45.689207 0.987483 udp 10.0.2.22 51868 <-> 98.184.128.60 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:47.663441 0.301422 udp 10.0.2.22 51868 <-> 124.47.100.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:48.649101 0.354427 udp 10.0.2.22 51868 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:49.633631 0.000000 udp 10.0.2.22 51868 -> 118.160.130.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:21:50.624370 0.000000 udp 10.0.2.22 51868 -> 78.144.66.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:21:51.614156 2.040013 udp 10.0.2.22 51868 <-> 82.245.78.248 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:52.476874 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:21:52.595829 0.039701 udp 10.0.2.22 51868 <-> 5.15.99.5 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:54.570325 0.000000 udp 10.0.2.22 51868 -> 173.206.16.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:21:55.555642 0.172502 udp 10.0.2.22 51868 <-> 68.184.206.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:21:56.540205 0.000000 udp 10.0.2.22 51868 -> 66.175.164.49 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:21:57.530883 0.000000 udp 10.0.2.22 51868 -> 93.184.85.53 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:22:03.893745 0.000000 udp 10.0.2.22 51868 <- 93.184.85.53 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:22:03.971176 0.000000 udp 10.0.2.22 51868 -> 5.13.113.229 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:22:04.949912 0.046658 udp 10.0.2.22 51868 <-> 212.67.155.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:05.937350 0.050073 udp 10.0.2.22 51868 <-> 89.2.226.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:06.923868 2.964804 udp 10.0.2.22 51868 -> 94.197.234.60 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:22:07.914160 1.136793 udp 10.0.2.22 51868 <-> 74.129.39.118 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:10.878640 2.271289 udp 10.0.2.22 51868 <-> 171.97.87.157 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:11.857460 0.000000 udp 10.0.2.22 51868 -> 201.242.32.159 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:22:13.831612 0.283208 udp 10.0.2.22 51868 <-> 75.49.209.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:14.817273 2.151337 udp 10.0.2.22 51868 <-> 190.0.101.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:15.802263 0.129999 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:16.793016 0.052092 udp 10.0.2.22 51868 <-> 89.190.113.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:17.782805 0.336958 udp 10.0.2.22 51868 <-> 118.33.234.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:18.761540 0.025737 udp 10.0.2.22 51868 <-> 80.98.70.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:19.748905 0.159043 udp 10.0.2.22 51868 <-> 24.92.82.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:20.735371 0.193280 udp 10.0.2.22 51868 <-> 74.62.164.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:21.720930 0.208938 udp 10.0.2.22 51868 <-> 49.206.155.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:22.705137 0.255733 udp 10.0.2.22 51868 <-> 46.162.107.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:23.904132 0.000000 udp 10.0.2.22 51868 -> 109.203.185.53 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:22:29.724888 0.000000 udp 10.0.2.22 51868 <- 109.203.185.53 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:22:30.374337 0.000027 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:22:30.505020 0.053219 udp 10.0.2.22 51868 <-> 78.63.74.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:31.483655 0.306643 udp 10.0.2.22 51868 <-> 14.96.182.134 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:32.470987 0.228605 udp 10.0.2.22 51868 <-> 200.109.142.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:33.457467 0.053923 udp 10.0.2.22 51868 <-> 212.75.2.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:34.442709 0.000000 udp 10.0.2.22 51868 -> 192.226.149.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:22:35.426988 0.029829 udp 10.0.2.22 51868 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:36.419579 0.403006 udp 10.0.2.22 51868 <-> 190.79.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:37.409471 0.186589 udp 10.0.2.22 51868 <-> 184.57.62.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:38.387793 0.095556 udp 10.0.2.22 51868 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:39.375549 0.166022 udp 10.0.2.22 51868 <-> 123.201.36.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:40.361684 0.131057 udp 10.0.2.22 51868 <-> 75.109.75.198 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:41.347198 1.414957 udp 10.0.2.22 51868 <-> 184.244.8.72 16464 CON 0 0 4 496 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:43.322235 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:22:44.301800 0.339109 udp 10.0.2.22 51868 <-> 118.33.234.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:45.292764 0.000000 udp 10.0.2.22 51868 -> 92.62.67.209 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:22:46.279975 0.318875 udp 10.0.2.22 51868 <-> 101.0.73.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:47.266384 0.031634 udp 10.0.2.22 51868 <-> 95.111.72.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:48.251616 0.076474 udp 10.0.2.22 51868 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:49.235531 0.000000 udp 10.0.2.22 51868 -> 24.38.153.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:22:50.226562 0.000000 udp 10.0.2.22 51868 -> 86.124.151.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:22:51.205920 3.018590 udp 10.0.2.22 51868 <-> 94.52.120.253 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:52.194366 0.041114 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:53.181858 0.162476 udp 10.0.2.22 51868 <-> 174.57.198.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:55.159630 0.049477 udp 10.0.2.22 51868 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:56.143887 0.037859 udp 10.0.2.22 51868 <-> 91.65.0.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:57.005259 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:22:57.134149 0.000000 udp 10.0.2.22 51868 -> 116.203.96.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:22:58.113523 0.177192 udp 10.0.2.22 51868 <-> 49.205.220.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:22:59.101553 0.064170 udp 10.0.2.22 51868 <-> 86.124.151.247 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:23:00.088077 3.375438 udp 10.0.2.22 51868 <-> 174.57.198.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:23:04.275556 1.154676 udp 10.0.2.22 51868 <-> 76.16.13.14 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:23:06.242272 0.000000 udp 10.0.2.22 51868 -> 41.143.35.7 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:23:07.231155 0.238911 udp 10.0.2.22 51868 <-> 186.92.31.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:23:08.211241 2.959699 udp 10.0.2.22 51868 <-> 174.113.145.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:23:09.198465 0.000000 udp 10.0.2.22 51868 -> 115.242.193.178 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:23:10.184375 0.215821 udp 10.0.2.22 51868 <-> 208.110.33.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:23:10.511266 0.010187 udp 10.0.2.22 60042 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 07:23:10.521743 0.000000 udp 10.0.2.22 60043 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:23:11.169390 1.223998 udp 10.0.2.22 51868 <-> 186.4.7.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:23:12.153153 0.323596 udp 10.0.2.22 51868 <-> 61.70.140.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:23:13.135652 0.154594 udp 10.0.2.22 51868 <-> 23.28.66.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:23:14.124977 0.082542 udp 10.0.2.22 51868 <-> 151.32.149.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:23:15.103633 0.042117 udp 10.0.2.22 51868 <-> 5.20.145.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:23:16.090825 0.358366 udp 10.0.2.22 51868 <-> 58.177.49.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:23:17.076963 2.004580 udp 10.0.2.22 51868 <-> 95.111.22.139 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:23:18.061762 0.165539 udp 10.0.2.22 51868 <-> 70.185.202.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:23:20.035406 0.152788 udp 10.0.2.22 51868 <-> 71.74.77.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:23:21.027989 0.355490 udp 10.0.2.22 51868 <-> 219.78.101.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:23:22.993398 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:23:23.979198 0.000047 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:23:23.979245 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:23:24.964759 0.062141 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:23:25.948120 0.000000 udp 10.0.2.22 51868 -> 67.59.37.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:23:26.930876 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:23:27.792792 0.000090 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:23:27.921655 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:23:28.899831 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:23:29.887072 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:23:30.872685 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:23:31.857260 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:23:32.841593 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:23:33.824364 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:23:34.813493 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:23:36.816171 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:23:37.802989 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:23:38.788673 0.000000 udp 10.0.2.22 51868 -> 24.193.202.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:23:40.756500 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:23:41.737043 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:23:50.932943 0.051106 udp 10.0.2.22 51868 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:23:52.897678 0.361801 udp 10.0.2.22 51868 <-> 42.98.79.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:23:53.883243 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:23:54.867781 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:23:55.851519 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:23:56.833495 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:23:57.822599 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:23:58.800772 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:23:59.787815 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:24:00.773534 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:24:01.757697 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:24:03.602828 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:24:03.731523 0.130808 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:24:04.720819 0.000000 udp 10.0.2.22 51868 -> 176.226.159.169 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:24:05.698773 0.173114 udp 10.0.2.22 51868 <-> 183.83.32.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:24:06.685571 0.057556 udp 10.0.2.22 51868 <-> 94.176.156.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:24:07.671214 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:24:08.655803 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:24:09.639170 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:24:10.629171 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:24:17.430553 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:24:18.407968 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:24:19.394863 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:24:21.364811 0.236225 udp 10.0.2.22 51868 <-> 76.113.45.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:24:22.352089 0.674765 udp 10.0.2.22 51868 <-> 190.218.165.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:24:23.342339 0.210572 udp 10.0.2.22 51868 <-> 24.10.7.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:24:24.331161 0.305284 udp 10.0.2.22 51868 <-> 177.188.177.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:24:25.309390 2.375382 udp 10.0.2.22 51868 <-> 111.92.96.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:24:26.295854 0.000000 udp 10.0.2.22 51868 -> 116.193.141.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:24:27.281019 0.152583 udp 10.0.2.22 51868 <-> 50.88.67.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:24:29.248985 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:24:30.238441 3.938362 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:24:31.227237 0.000000 udp 10.0.2.22 51868 -> 115.242.57.149 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:24:32.205316 1.599624 udp 10.0.2.22 51868 <-> 218.164.207.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:24:33.192212 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:24:35.160793 0.156877 udp 10.0.2.22 51868 <-> 69.249.214.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:24:36.014952 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:24:36.143768 0.116489 udp 10.0.2.22 51868 <-> 89.138.92.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:24:37.134201 0.000000 udp 10.0.2.22 51868 -> 151.233.139.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:24:38.121731 0.159352 udp 10.0.2.22 51868 <-> 174.57.198.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:24:39.099546 0.000000 udp 10.0.2.22 51868 -> 86.38.55.49 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:24:40.086879 0.000000 udp 10.0.2.22 51868 -> 37.104.247.173 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:24:41.072283 0.118718 udp 10.0.2.22 51868 <-> 173.238.180.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:24:42.057564 0.000000 udp 10.0.2.22 51868 -> 201.213.98.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:24:48.299095 0.000000 udp 10.0.2.22 51868 <- 201.213.98.23 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:24:48.788327 0.035243 udp 10.0.2.22 51868 <-> 178.79.32.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:24:49.778077 0.078019 udp 10.0.2.22 51868 <-> 87.110.22.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:24:50.766575 0.041922 udp 10.0.2.22 51868 <-> 147.156.178.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:24:51.744310 0.000000 udp 10.0.2.22 51868 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:24:52.730881 0.292672 udp 10.0.2.22 51868 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:24:53.715815 0.000000 udp 10.0.2.22 51868 -> 62.221.143.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:24:54.699814 0.201417 udp 10.0.2.22 51868 <-> 190.252.196.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:24:55.683091 0.156883 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:24:56.672974 0.000000 udp 10.0.2.22 51868 -> 81.201.145.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:24:57.661730 1.957330 udp 10.0.2.22 51868 <-> 166.159.168.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:24:58.639433 0.268320 udp 10.0.2.22 51868 <-> 187.38.201.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:24:59.626096 1.534155 udp 10.0.2.22 51868 <-> 189.55.190.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:00.611418 0.442695 udp 10.0.2.22 51868 <-> 190.179.200.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:01.595554 0.064323 udp 10.0.2.22 51868 <-> 37.145.43.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:02.577870 0.000000 udp 10.0.2.22 51868 -> 117.200.251.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:25:03.569907 0.000000 udp 10.0.2.22 51868 -> 189.68.1.44 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:25:04.558490 0.114080 udp 10.0.2.22 51868 <-> 78.73.215.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:05.536097 0.055282 udp 10.0.2.22 51868 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:06.522525 0.000000 udp 10.0.2.22 51868 -> 70.184.95.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:25:07.507747 0.159066 udp 10.0.2.22 51868 <-> 75.132.170.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:08.362414 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:25:08.491211 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:25:09.474094 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:25:10.463993 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:25:11.452547 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:25:12.433476 0.164121 udp 10.0.2.22 51868 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:13.419764 0.141211 udp 10.0.2.22 51868 <-> 78.8.74.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:14.404990 0.062831 udp 10.0.2.22 51868 <-> 79.112.10.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:15.389108 1.316694 udp 10.0.2.22 51868 <-> 186.188.24.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:16.372083 0.990642 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:25:18.350935 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:25:21.714221 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:25:22.700642 0.208655 udp 10.0.2.22 51868 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:23.692550 0.205938 udp 10.0.2.22 51868 <-> 190.141.220.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:24.676214 0.062226 udp 10.0.2.22 51868 <-> 188.2.216.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:25.659204 0.304695 udp 10.0.2.22 51868 <-> 180.199.214.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:26.649339 0.043735 udp 10.0.2.22 51868 <-> 88.216.52.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:27.274147 2.956256 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 07:25:27.637774 0.000000 udp 10.0.2.22 51868 -> 199.188.251.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:25:28.615606 0.168007 udp 10.0.2.22 51868 <-> 71.89.50.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:29.601875 0.232236 udp 10.0.2.22 51868 <-> 189.197.164.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:30.587032 0.056904 udp 10.0.2.22 51868 <-> 217.174.48.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:31.572287 0.000000 udp 10.0.2.22 51868 -> 78.128.125.130 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:25:32.555994 0.133539 udp 10.0.2.22 51868 <-> 82.242.39.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:33.547087 0.032847 udp 10.0.2.22 51868 <-> 178.79.29.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:34.178870 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:25:34.535423 1.227511 udp 10.0.2.22 51868 <-> 190.201.102.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:35.512796 0.166838 udp 10.0.2.22 51868 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:36.499239 2.124573 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:37.365433 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:25:37.484361 0.000000 udp 10.0.2.22 51868 -> 212.92.251.134 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:25:39.452020 0.068069 udp 10.0.2.22 51868 <-> 78.73.215.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:40.441508 0.000000 udp 10.0.2.22 51868 -> 79.118.40.164 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:25:41.419299 0.547421 udp 10.0.2.22 51868 <-> 46.5.227.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:42.059844 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:25:42.406494 0.053978 udp 10.0.2.22 51868 <-> 212.75.2.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:43.392569 3.999014 udp 10.0.2.22 51868 <-> 79.112.193.201 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:44.377414 4.921539 udp 10.0.2.22 51868 <-> 178.127.191.81 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:45.361030 0.547670 udp 10.0.2.22 51868 <-> 187.105.33.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:46.343629 0.154523 udp 10.0.2.22 51868 <-> 74.65.173.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:48.311662 0.000000 udp 10.0.2.22 51868 -> 202.29.179.197 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:25:49.437241 0.013870 udp 10.0.2.22 51868 <- 178.127.191.81 16464 RSP 0 0 2 1780 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:25:50.285070 0.141685 udp 10.0.2.22 51868 <-> 24.75.169.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:51.269002 0.000000 udp 10.0.2.22 51868 -> 92.241.139.204 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:25:56.568437 2.947614 udp 10.0.2.22 51868 <-> 24.191.109.156 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:57.549998 0.022774 udp 10.0.2.22 51868 <-> 5.146.89.28 16464 CON 0 0 5 3618 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:25:58.538610 0.000000 udp 10.0.2.22 51868 -> 114.36.70.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:26:00.502430 0.010097 udp 10.0.2.22 51868 <-> 188.175.96.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:01.487631 0.000000 udp 10.0.2.22 51868 -> 216.106.166.168 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:26:02.125103 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:26:02.471339 0.043070 udp 10.0.2.22 51868 <-> 79.117.34.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:03.454022 0.000000 udp 10.0.2.22 51868 -> 1.34.204.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:26:04.436227 0.220053 udp 10.0.2.22 51868 <-> 85.230.174.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:05.424784 0.178176 udp 10.0.2.22 51868 <-> 173.23.12.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:06.402572 4.093065 udp 10.0.2.22 51868 <-> 24.254.138.13 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:07.388571 0.000000 udp 10.0.2.22 51868 -> 116.203.238.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:26:08.254845 0.000093 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:26:08.373677 1.222297 udp 10.0.2.22 51868 <-> 98.67.228.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:09.357552 0.137398 udp 10.0.2.22 51868 <-> 69.127.160.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:11.321567 0.000000 udp 10.0.2.22 51868 -> 24.69.66.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:26:12.310063 1.963056 udp 10.0.2.22 51868 -> 199.83.87.2 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:26:13.287439 0.047017 udp 10.0.2.22 51868 <-> 5.15.167.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:15.257965 0.157885 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:16.241569 0.134144 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:17.223839 0.067004 udp 10.0.2.22 51868 <-> 188.25.221.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:18.205149 0.000000 udp 10.0.2.22 51868 -> 79.26.248.94 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:26:19.193738 0.000000 udp 10.0.2.22 51868 -> 88.73.47.102 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:26:20.170942 0.000000 udp 10.0.2.22 51868 -> 190.193.54.54 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:26:21.156964 0.422507 udp 10.0.2.22 51868 <-> 201.243.173.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:22.140705 0.025351 udp 10.0.2.22 51868 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:23.124292 0.000000 udp 10.0.2.22 51868 -> 186.95.79.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:26:24.106581 0.066266 udp 10.0.2.22 51868 <-> 188.25.221.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:25.087920 0.164993 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:26.075317 0.000000 udp 10.0.2.22 51868 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:26:31.888450 2.166317 udp 10.0.2.22 51868 <-> 174.64.165.44 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:32.890408 0.167275 udp 10.0.2.22 51868 <-> 71.45.74.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:34.893307 3.195102 udp 10.0.2.22 51868 <-> 72.197.251.237 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:35.894388 3.153194 udp 10.0.2.22 51868 <-> 173.178.10.235 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:36.895224 0.000000 udp 10.0.2.22 51868 -> 186.93.166.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:26:38.548073 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 1 146 flow=Background 1970/01/01 07:26:39.769680 0.000097 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:26:39.889811 0.161981 udp 10.0.2.22 51868 <-> 67.166.246.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:40.891383 0.208190 udp 10.0.2.22 51868 <-> 190.38.66.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:41.892742 0.612756 udp 10.0.2.22 51868 <-> 201.231.197.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:42.894418 0.000000 udp 10.0.2.22 51868 -> 71.80.71.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:26:43.895093 0.157296 udp 10.0.2.22 51868 <-> 174.57.198.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:44.897431 0.133676 udp 10.0.2.22 51868 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:45.888763 0.161467 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:46.891980 0.135096 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:47.891973 0.000000 udp 10.0.2.22 51868 -> 201.231.197.241 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:26:48.893025 0.000000 udp 10.0.2.22 51868 -> 2.184.36.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:26:49.894320 0.285155 udp 10.0.2.22 51868 <-> 186.137.232.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:50.896456 0.192096 udp 10.0.2.22 51868 <-> 72.197.251.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:51.897194 0.051259 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:52.888764 2.146943 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:53.890209 0.174352 udp 10.0.2.22 51868 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:55.892748 1.996547 udp 10.0.2.22 51868 <-> 190.0.101.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:56.894464 0.040053 udp 10.0.2.22 51868 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:57.895896 0.286517 udp 10.0.2.22 51868 <-> 199.117.183.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:26:58.897186 0.000000 udp 10.0.2.22 51868 -> 212.117.58.48 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:26:59.888619 0.198355 udp 10.0.2.22 51868 <-> 1.23.94.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:00.890017 0.163635 udp 10.0.2.22 51868 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:01.891742 0.211795 udp 10.0.2.22 51868 <-> 24.7.146.40 16464 CON 0 0 2 668 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:02.893137 4.045187 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:03.894720 0.182972 udp 10.0.2.22 51868 <-> 76.92.155.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:04.895790 0.198784 udp 10.0.2.22 51868 <-> 74.140.150.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:05.897235 0.000000 udp 10.0.2.22 51868 -> 91.82.212.224 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:27:06.768602 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:27:07.890304 0.000000 udp 10.0.2.22 51868 -> 118.160.130.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:27:08.891545 0.167295 udp 10.0.2.22 51868 <-> 75.132.170.38 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:09.892991 0.047830 udp 10.0.2.22 51868 <-> 78.8.65.60 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:10.894676 0.020697 udp 10.0.2.22 51868 <-> 213.47.69.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:11.895855 0.366856 udp 10.0.2.22 51868 <-> 123.110.11.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:12.897218 0.000000 udp 10.0.2.22 51868 -> 216.110.251.115 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:27:13.888998 0.179468 udp 10.0.2.22 51868 <-> 74.62.164.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:14.890193 0.000000 udp 10.0.2.22 51868 -> 24.201.226.137 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:27:15.894100 0.147802 udp 10.0.2.22 51868 <-> 71.66.250.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:16.893862 0.494284 udp 10.0.2.22 51868 <-> 201.213.14.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:17.894531 2.298568 udp 10.0.2.22 51868 <-> 190.120.107.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:18.896189 0.160007 udp 10.0.2.22 51868 <-> 174.100.71.86 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:19.897338 1.044423 udp 10.0.2.22 51868 <-> 84.232.228.140 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:21.890270 0.460949 udp 10.0.2.22 51868 <-> 1.186.113.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:22.892014 0.135786 udp 10.0.2.22 51868 <-> 217.203.147.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:23.893220 0.000000 udp 10.0.2.22 51868 -> 135.19.220.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:27:24.897821 0.061459 udp 10.0.2.22 51868 <-> 62.83.219.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:25.897579 1.641894 udp 10.0.2.22 51868 <-> 166.159.168.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:26.897773 0.198375 udp 10.0.2.22 51868 <-> 66.237.94.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:27.889275 0.167093 udp 10.0.2.22 51868 <-> 71.199.218.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:28.890348 0.062385 udp 10.0.2.22 51868 <-> 188.24.154.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:29.891596 0.000000 udp 10.0.2.22 51868 -> 116.75.40.79 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:27:30.892935 0.000000 udp 10.0.2.22 51868 -> 114.37.15.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:27:31.894885 0.361951 udp 10.0.2.22 51868 <-> 5.190.123.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:32.896423 0.000000 udp 10.0.2.22 51868 -> 115.242.229.208 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:27:33.767226 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:27:33.897665 0.805292 udp 10.0.2.22 51868 <-> 200.90.98.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:34.888888 4.862294 udp 10.0.2.22 51868 <-> 184.63.28.131 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:35.890632 0.161280 udp 10.0.2.22 51868 <-> 98.240.160.218 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:36.895941 0.000000 udp 10.0.2.22 51868 -> 61.223.170.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:27:37.895154 0.042555 udp 10.0.2.22 51868 <-> 89.215.64.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:39.896192 0.073517 udp 10.0.2.22 51868 <-> 84.125.117.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:40.897790 0.146411 udp 10.0.2.22 51868 <-> 140.193.57.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:41.889236 3.003894 udp 10.0.2.22 51868 -> 201.241.29.30 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:27:42.890473 0.064679 udp 10.0.2.22 51868 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:43.892563 0.294535 udp 10.0.2.22 51868 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:45.894835 0.170863 udp 10.0.2.22 51868 <-> 96.2.150.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:46.896143 4.359318 udp 10.0.2.22 51868 <-> 113.254.247.11 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:47.897794 4.261017 udp 10.0.2.22 51868 <-> 180.215.229.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:48.889957 0.347158 udp 10.0.2.22 51868 <-> 177.9.168.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:49.890600 0.064805 udp 10.0.2.22 51868 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:51.893456 2.108494 udp 10.0.2.22 51868 <-> 179.216.83.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:52.895045 2.002862 udp 10.0.2.22 51868 -> 87.121.4.108 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:27:53.896309 0.000000 udp 10.0.2.22 51868 -> 78.157.7.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:27:55.889654 0.033480 udp 10.0.2.22 51868 <-> 79.117.37.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:56.890751 3.081320 udp 10.0.2.22 51868 <-> 188.2.163.17 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:57.892531 4.996801 udp 10.0.2.22 51868 <-> 151.52.90.249 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:27:58.893713 3.004133 udp 10.0.2.22 51868 -> 80.183.55.17 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:28:00.765983 0.000093 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:28:00.896329 2.994578 udp 10.0.2.22 51868 -> 190.120.66.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:28:02.995257 0.000000 udp 10.0.2.22 51868 <- 151.52.90.249 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:28:04.892317 0.074582 udp 10.0.2.22 51868 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:05.893682 0.058063 udp 10.0.2.22 51868 <-> 78.228.60.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:06.895164 0.790044 udp 10.0.2.22 51868 <-> 190.155.71.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:07.902613 0.000000 udp 10.0.2.22 51868 -> 77.78.239.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:28:08.902415 0.106393 udp 10.0.2.22 51868 <-> 62.99.117.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:09.892731 0.353939 udp 10.0.2.22 51868 <-> 94.74.144.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:10.892790 0.000000 udp 10.0.2.22 51868 -> 190.203.137.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:28:11.892391 0.143899 udp 10.0.2.22 51868 <-> 1.186.100.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:12.893995 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:28:13.894899 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:28:14.896460 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:28:15.897869 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:28:16.889582 0.117072 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:17.894912 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:28:18.895833 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:28:19.894752 0.000000 udp 10.0.2.22 51868 -> 68.173.128.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:28:20.894913 4.041412 udp 10.0.2.22 51868 <-> 5.15.167.2 16464 CON 0 0 6 3676 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:21.896865 0.120448 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:22.888210 0.351556 udp 10.0.2.22 51868 <-> 186.191.29.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:23.890382 0.035081 udp 10.0.2.22 51868 <-> 79.113.36.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:25.892376 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:28:26.894126 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:28:27.765164 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:28:27.896245 0.352217 udp 10.0.2.22 51868 <-> 186.191.29.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:28.896928 0.145614 udp 10.0.2.22 51868 <-> 24.138.62.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:29.888167 0.263653 udp 10.0.2.22 51868 <-> 173.26.91.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:30.889980 0.045377 udp 10.0.2.22 51868 <-> 178.150.200.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:31.890790 0.067485 udp 10.0.2.22 51868 <-> 188.32.59.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:32.892396 0.168445 udp 10.0.2.22 51868 <-> 71.238.253.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:34.895148 0.038469 udp 10.0.2.22 51868 <-> 109.227.119.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:35.896858 0.201624 udp 10.0.2.22 51868 <-> 108.232.93.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:36.888071 0.165493 udp 10.0.2.22 51868 <-> 75.86.159.42 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:37.889819 0.161141 udp 10.0.2.22 51868 <-> 67.242.133.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:38.890890 0.154560 udp 10.0.2.22 51868 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:39.892682 0.147454 udp 10.0.2.22 51868 <-> 24.144.240.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:40.894245 0.000000 udp 10.0.2.22 51868 -> 61.227.64.38 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:28:41.895119 0.218557 udp 10.0.2.22 51868 <-> 71.92.129.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:42.896801 0.047228 udp 10.0.2.22 51868 <-> 95.87.232.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:43.888350 0.092876 udp 10.0.2.22 51868 <-> 86.43.125.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:44.889519 0.047227 udp 10.0.2.22 51868 <-> 89.137.78.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:45.891371 0.193208 udp 10.0.2.22 51868 <-> 66.237.94.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:46.892528 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:28:47.894151 0.109993 udp 10.0.2.22 51868 <-> 80.181.236.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:48.895380 0.284230 udp 10.0.2.22 51868 <-> 27.142.181.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:49.900760 0.000000 udp 10.0.2.22 51868 -> 122.27.16.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:28:50.890923 0.027709 udp 10.0.2.22 51868 <-> 78.35.97.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:51.891092 0.119539 udp 10.0.2.22 51868 <-> 46.120.17.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:52.890970 0.223362 udp 10.0.2.22 51868 <-> 71.199.58.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:53.892630 0.267001 udp 10.0.2.22 51868 <-> 200.7.146.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:54.763333 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:28:54.894232 0.289212 udp 10.0.2.22 51868 <-> 121.2.97.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:55.895456 0.076023 udp 10.0.2.22 51868 <-> 213.64.74.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:56.897081 0.175369 udp 10.0.2.22 51868 <-> 82.49.169.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:57.888969 0.167917 udp 10.0.2.22 51868 <-> 66.169.99.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:58.889924 0.318689 udp 10.0.2.22 51868 <-> 175.179.203.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:28:59.891009 1.429277 udp 10.0.2.22 51868 <-> 201.210.213.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:00.892806 0.280808 udp 10.0.2.22 51868 <-> 119.171.126.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:01.893938 0.140227 udp 10.0.2.22 51868 <-> 146.163.172.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:02.894922 0.154425 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:03.896993 0.300985 udp 10.0.2.22 51868 <-> 121.84.135.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:04.892358 0.084325 udp 10.0.2.22 51868 <-> 151.16.159.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:05.892522 0.065502 udp 10.0.2.22 51868 <-> 93.72.70.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:06.892178 0.133983 udp 10.0.2.22 51868 <-> 83.26.168.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:07.892720 0.200448 udp 10.0.2.22 51868 <-> 115.69.241.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:08.894412 2.038204 udp 10.0.2.22 51868 <-> 86.5.66.187 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:09.895909 0.040245 udp 10.0.2.22 51868 <-> 46.237.64.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:11.888271 0.200774 udp 10.0.2.22 51868 <-> 79.32.107.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:12.890154 0.198476 udp 10.0.2.22 51868 <-> 75.80.119.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:13.891264 3.003876 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:29:14.892824 3.004410 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:29:15.894249 0.293089 udp 10.0.2.22 51868 <-> 190.163.230.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:18.888330 0.155352 udp 10.0.2.22 51868 <-> 71.82.74.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:19.890099 0.059113 udp 10.0.2.22 51868 <-> 86.123.54.53 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:20.891173 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:29:21.762506 0.000126 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:29:21.892973 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:29:22.894338 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:29:23.895196 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:29:24.898513 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:29:25.888583 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:29:26.890016 0.303816 udp 10.0.2.22 51868 <-> 175.193.245.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:27.891722 0.000000 udp 10.0.2.22 51868 -> 59.190.46.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:29:31.057425 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:29:32.044130 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:29:33.030357 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:29:34.021729 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:29:35.001799 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:29:35.991538 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:29:36.980316 0.304009 udp 10.0.2.22 51868 <-> 175.193.245.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:37.968125 0.297252 udp 10.0.2.22 51868 <-> 186.94.161.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:38.954526 0.382490 udp 10.0.2.22 51868 <-> 114.36.128.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:39.946747 0.000000 udp 10.0.2.22 51868 -> 83.221.86.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:29:40.940123 0.278186 udp 10.0.2.22 51868 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:41.920419 0.082445 udp 10.0.2.22 51868 <-> 176.194.179.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:42.910013 0.135860 udp 10.0.2.22 51868 <-> 65.96.181.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:43.898362 0.607941 udp 10.0.2.22 51868 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:44.885574 0.326185 udp 10.0.2.22 51868 <-> 101.1.105.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:45.871831 0.000000 udp 10.0.2.22 51868 -> 24.147.226.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:29:46.864190 0.269043 udp 10.0.2.22 51868 <-> 79.56.92.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:47.856545 0.319066 udp 10.0.2.22 51868 <-> 121.171.242.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:48.836879 0.175487 udp 10.0.2.22 51868 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:49.826513 0.320122 udp 10.0.2.22 51868 <-> 219.71.227.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:50.696005 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:29:50.815150 0.135599 udp 10.0.2.22 51868 <-> 24.131.78.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:51.802913 0.177936 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:52.789474 4.941646 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:53.781855 0.135900 udp 10.0.2.22 51868 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:54.773107 0.049677 udp 10.0.2.22 51868 <-> 94.52.120.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:55.753470 0.050480 udp 10.0.2.22 51868 <-> 78.96.30.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:56.742772 0.000000 udp 10.0.2.22 51868 -> 186.136.183.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:29:57.796577 0.000000 udp 10.0.2.22 51868 <- 46.73.205.253 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:29:58.718661 0.138168 udp 10.0.2.22 51868 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:29:59.705552 4.116074 udp 10.0.2.22 51868 <-> 108.176.154.248 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:00.697760 0.000000 udp 10.0.2.22 51868 -> 188.245.169.227 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:30:02.669472 1.699826 udp 10.0.2.22 51868 <-> 186.136.183.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:04.647553 0.294554 udp 10.0.2.22 51868 <-> 189.111.225.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:05.635190 0.038698 udp 10.0.2.22 51868 <-> 5.15.55.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:06.621868 0.155839 udp 10.0.2.22 51868 <-> 83.230.225.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:07.614178 0.000000 udp 10.0.2.22 51868 -> 14.99.209.177 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:30:08.605442 1.805232 udp 10.0.2.22 51868 <-> 200.126.193.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:09.585964 1.595597 udp 10.0.2.22 51868 <-> 62.57.201.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:10.575317 0.287999 udp 10.0.2.22 51868 <-> 201.46.169.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:11.564032 0.045173 udp 10.0.2.22 51868 <-> 80.216.234.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:12.551392 0.000000 udp 10.0.2.22 51868 -> 189.110.195.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:30:13.537621 0.000000 udp 10.0.2.22 51868 -> 66.192.95.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:30:14.529706 0.213437 udp 10.0.2.22 51868 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:15.521699 0.000000 udp 10.0.2.22 51868 -> 173.218.218.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:30:16.502073 0.392261 udp 10.0.2.22 51868 <-> 177.182.77.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:17.372332 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:30:17.491491 0.000000 udp 10.0.2.22 51868 -> 117.207.56.240 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:30:18.480102 0.000000 udp 10.0.2.22 51868 -> 151.52.90.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:30:19.467276 0.000000 udp 10.0.2.22 51868 -> 201.68.33.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:30:20.453846 0.000000 udp 10.0.2.22 51868 -> 88.87.219.238 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:30:21.446605 0.000000 udp 10.0.2.22 51868 -> 184.162.187.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:30:22.437917 0.000000 udp 10.0.2.22 51868 -> 189.110.195.236 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:30:23.418054 4.943892 udp 10.0.2.22 51868 -> 173.218.218.19 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:30:24.407406 0.207263 udp 10.0.2.22 51868 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:25.395784 0.227715 udp 10.0.2.22 51868 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:26.383157 0.000000 udp 10.0.2.22 51868 -> 66.192.95.2 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:30:27.369882 0.195169 udp 10.0.2.22 51868 <-> 184.162.187.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:29.353440 0.000000 udp 10.0.2.22 51868 -> 108.176.74.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:30:30.333518 0.300293 udp 10.0.2.22 51868 <-> 189.110.195.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:31.322275 3.026894 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:32.310799 0.000000 udp 10.0.2.22 51868 -> 72.199.138.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:30:33.297479 0.305207 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:35.274931 0.327921 udp 10.0.2.22 51868 <-> 190.173.2.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:36.266207 0.370219 udp 10.0.2.22 51868 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:37.246930 0.556132 udp 10.0.2.22 51868 <-> 117.201.119.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:38.236333 0.308502 udp 10.0.2.22 51868 <-> 183.104.46.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:39.224592 0.035101 udp 10.0.2.22 51868 <-> 90.156.58.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:40.211759 0.051650 udp 10.0.2.22 51868 <-> 5.14.145.222 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:41.197201 0.167038 udp 10.0.2.22 51868 <-> 75.132.170.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:42.189500 0.053540 udp 10.0.2.22 51868 <-> 212.75.2.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:43.180448 1.846468 udp 10.0.2.22 51868 <-> 58.152.190.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:44.042744 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:30:44.162034 0.000000 udp 10.0.2.22 51868 -> 151.73.60.122 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:30:45.151843 0.049462 udp 10.0.2.22 51868 <-> 88.174.18.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:46.139986 0.217403 udp 10.0.2.22 51868 <-> 24.17.54.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:47.127055 0.030481 udp 10.0.2.22 51868 <-> 82.192.233.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:48.114105 0.000000 udp 10.0.2.22 51868 -> 76.173.112.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:30:49.106155 3.948072 udp 10.0.2.22 51868 -> 14.99.56.113 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:30:50.097024 1.276147 udp 10.0.2.22 51868 <-> 180.199.144.137 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:52.066201 4.934340 udp 10.0.2.22 51868 -> 37.123.3.59 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:30:54.041542 0.357410 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:55.027847 0.047830 udp 10.0.2.22 51868 <-> 5.14.145.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:56.019514 0.000000 udp 10.0.2.22 51868 -> 97.85.36.125 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:30:57.084190 0.000000 udp 10.0.2.22 51868 <- 37.123.3.59 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:30:57.990495 0.266257 udp 10.0.2.22 51868 <-> 189.61.185.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:58.979374 0.220437 udp 10.0.2.22 51868 <-> 95.91.31.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:30:59.967279 0.000000 udp 10.0.2.22 51868 -> 190.198.69.160 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:31:00.954291 0.169998 udp 10.0.2.22 51868 <-> 208.107.49.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:01.940626 1.283078 udp 10.0.2.22 51868 <-> 60.56.154.77 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:03.913654 4.168380 udp 10.0.2.22 51868 <-> 98.242.27.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:04.903612 0.146785 udp 10.0.2.22 51868 <-> 24.126.146.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:05.893063 0.000000 udp 10.0.2.22 51868 -> 46.37.84.124 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:31:06.881162 0.209006 udp 10.0.2.22 51868 <-> 50.168.13.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:08.855402 0.532941 udp 10.0.2.22 51868 <-> 93.105.253.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:09.847239 0.135275 udp 10.0.2.22 51868 <-> 67.83.216.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:10.709475 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:31:10.828712 0.000000 udp 10.0.2.22 51868 -> 64.92.18.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:31:11.818457 0.068739 udp 10.0.2.22 51868 <-> 85.152.226.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:12.807818 0.000000 udp 10.0.2.22 51868 -> 115.241.149.83 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:31:13.796256 0.000000 udp 10.0.2.22 51868 -> 86.122.233.25 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:31:14.783324 0.051100 udp 10.0.2.22 51868 <-> 86.123.208.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:15.769283 0.000000 udp 10.0.2.22 51868 -> 199.188.251.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:31:16.761292 0.000000 udp 10.0.2.22 51868 -> 60.246.187.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:31:17.742228 0.298657 udp 10.0.2.22 51868 <-> 189.6.137.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:18.732115 1.172529 udp 10.0.2.22 51868 <-> 89.228.150.8 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:20.709381 0.256796 udp 10.0.2.22 51868 <-> 24.108.118.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:21.697930 2.731086 udp 10.0.2.22 51868 <-> 101.60.109.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:22.684450 0.137622 udp 10.0.2.22 51868 <-> 24.189.52.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:23.676184 0.214147 udp 10.0.2.22 51868 <-> 5.57.12.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:24.657019 0.252533 udp 10.0.2.22 51868 <-> 173.180.203.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:25.646629 1.050128 udp 10.0.2.22 51868 <-> 31.211.155.199 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:27.623373 0.059566 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:28.610151 0.000000 udp 10.0.2.22 51868 -> 59.94.19.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:31:29.595944 0.207805 udp 10.0.2.22 51868 <-> 50.168.13.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:30.588144 0.000000 udp 10.0.2.22 51868 -> 86.9.170.141 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:31:31.569278 0.255918 udp 10.0.2.22 51868 <-> 178.173.226.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:32.559067 0.000000 udp 10.0.2.22 51868 -> 118.169.110.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:31:33.548014 0.039883 udp 10.0.2.22 51868 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:34.536090 0.321822 udp 10.0.2.22 51868 <-> 122.145.172.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:35.525093 0.297866 udp 10.0.2.22 51868 <-> 61.27.76.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:36.511009 0.000000 udp 10.0.2.22 51868 -> 67.202.186.106 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:31:37.373727 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:31:37.502855 0.319341 udp 10.0.2.22 51868 <-> 183.83.120.224 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:38.483691 0.035802 udp 10.0.2.22 51868 <-> 80.253.61.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:39.473573 0.038694 udp 10.0.2.22 51868 <-> 89.253.143.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:40.462170 0.049981 udp 10.0.2.22 51868 <-> 85.202.146.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:41.450352 0.112806 udp 10.0.2.22 51868 <-> 130.15.154.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:42.437508 0.177428 udp 10.0.2.22 51868 <-> 84.229.39.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:43.423536 0.044564 udp 10.0.2.22 51868 <-> 178.117.252.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:44.415092 0.144158 udp 10.0.2.22 51868 <-> 75.143.172.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:45.396099 0.028038 udp 10.0.2.22 51868 <-> 46.150.57.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:46.385867 0.214318 udp 10.0.2.22 51868 <-> 106.51.61.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:47.376124 0.162774 udp 10.0.2.22 51868 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:48.364664 0.024621 udp 10.0.2.22 51868 <-> 80.99.71.252 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:49.351727 0.130831 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:50.337311 0.118048 udp 10.0.2.22 51868 <-> 199.192.212.170 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:51.329145 0.295812 udp 10.0.2.22 51868 <-> 122.131.251.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:52.309716 0.049038 udp 10.0.2.22 51868 <-> 130.204.169.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:53.299315 4.480432 udp 10.0.2.22 51868 <-> 119.63.168.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:54.287358 0.041844 udp 10.0.2.22 51868 <-> 86.20.15.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:55.275624 0.070800 udp 10.0.2.22 51868 <-> 77.7.133.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:56.262323 0.263132 udp 10.0.2.22 51868 <-> 187.121.67.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:57.248190 0.170038 udp 10.0.2.22 51868 <-> 24.113.18.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:58.239819 0.215740 udp 10.0.2.22 51868 <-> 24.10.7.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:31:59.220955 0.055997 udp 10.0.2.22 51868 <-> 81.253.5.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:32:00.210703 0.423182 udp 10.0.2.22 51868 <-> 111.220.218.12 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:32:01.199346 0.177395 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:32:02.186588 0.136675 udp 10.0.2.22 51868 <-> 24.45.223.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:32:03.173133 0.140347 udp 10.0.2.22 51868 <-> 67.21.98.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:32:04.029564 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:32:04.158717 0.217544 udp 10.0.2.22 51868 <-> 200.93.52.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:32:05.150172 0.173033 udp 10.0.2.22 51868 <-> 72.183.243.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:32:06.131134 0.000000 udp 10.0.2.22 51868 -> 83.46.244.84 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:07.120605 0.245431 udp 10.0.2.22 51868 <-> 97.107.107.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:32:08.109262 0.000000 udp 10.0.2.22 51868 -> 177.83.18.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:09.096980 1.014660 udp 10.0.2.22 51868 <-> 213.240.199.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:32:11.076099 0.080349 udp 10.0.2.22 51868 <-> 176.8.201.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:32:12.067644 1.261143 udp 10.0.2.22 51868 <-> 27.4.137.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:32:13.047880 0.062103 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:32:14.037277 0.039368 udp 10.0.2.22 51868 <-> 109.87.128.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:32:15.025776 0.000000 udp 10.0.2.22 51868 -> 190.246.109.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:16.013499 0.000000 udp 10.0.2.22 51868 -> 216.121.192.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:17.000171 0.267091 udp 10.0.2.22 51868 <-> 181.236.59.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:32:17.992470 0.302143 udp 10.0.2.22 51868 <-> 124.47.100.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:32:18.983648 0.190225 udp 10.0.2.22 51868 <-> 70.170.60.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:32:19.964427 0.147974 udp 10.0.2.22 51868 <-> 2.180.63.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:32:20.953499 0.134750 udp 10.0.2.22 51868 <-> 107.3.86.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:32:21.942335 0.047591 udp 10.0.2.22 51868 <-> 212.12.206.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:32:22.930466 0.219956 udp 10.0.2.22 51868 <-> 98.202.16.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:32:23.917154 0.095809 udp 10.0.2.22 51868 <-> 79.133.148.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:32:24.909546 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:25.901869 0.000049 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:25.901918 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:32:26.888603 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:27.890385 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:28.891909 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:29.893110 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:30.894621 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:31.765881 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:32:31.896101 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:32.897830 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:33.888733 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:34.890374 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:35.891898 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:36.893162 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:37.894576 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:38.896220 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:39.897776 0.099301 udp 10.0.2.22 51868 <-> 79.133.148.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:32:40.888909 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:41.890482 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:42.554894 3.000333 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 07:32:42.891879 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:43.893127 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:44.894642 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:45.895971 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:47.889183 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:48.890443 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:49.561543 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:32:49.891945 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:50.893232 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:51.894699 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:52.896420 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:53.897727 0.000065 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:53.897792 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:32:54.888976 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:55.890554 0.317170 udp 10.0.2.22 51868 <-> 124.121.94.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:32:56.891920 4.997197 udp 10.0.2.22 51868 <-> 24.242.53.41 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:32:57.562820 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:32:57.893610 0.000000 udp 10.0.2.22 51868 -> 72.197.251.237 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:32:58.894630 0.627303 udp 10.0.2.22 51868 <-> 181.165.132.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:32:59.766112 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:32:59.896369 0.052939 udp 10.0.2.22 51868 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:00.898001 0.000000 udp 10.0.2.22 51868 -> 2.68.0.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:33:02.054752 0.000000 udp 10.0.2.22 51868 <- 24.242.53.41 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:33:02.890518 0.147643 udp 10.0.2.22 51868 <-> 98.229.185.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:03.892119 0.000000 udp 10.0.2.22 51868 -> 107.209.224.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:33:04.893736 0.000000 udp 10.0.2.22 51868 -> 177.34.216.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:33:05.894922 0.162199 udp 10.0.2.22 51868 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:06.896332 1.992719 udp 10.0.2.22 51868 <-> 24.132.151.9 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:07.897920 3.995487 udp 10.0.2.22 51868 <-> 98.202.16.243 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:09.890612 0.070733 udp 10.0.2.22 51868 <-> 62.83.219.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:10.891856 0.000000 udp 10.0.2.22 51868 -> 119.2.103.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:33:12.895172 0.022675 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:13.566095 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:33:13.896376 0.320474 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:14.897972 0.761904 udp 10.0.2.22 51868 <-> 181.165.132.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:15.889250 0.036374 udp 10.0.2.22 51868 <-> 84.197.3.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:16.890493 0.765951 udp 10.0.2.22 51868 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:17.892129 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:33:18.893593 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:33:19.894982 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:33:20.896597 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:33:21.898123 0.051131 udp 10.0.2.22 51868 <-> 5.14.128.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:22.889482 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:33:24.020775 0.000064 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:33:24.020839 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:33:26.006018 0.238051 udp 10.0.2.22 51868 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:26.867754 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:33:26.997203 0.055993 udp 10.0.2.22 51868 <-> 91.211.110.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:27.991879 0.236353 udp 10.0.2.22 51868 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:28.976550 3.969711 udp 10.0.2.22 51868 <-> 62.221.143.16 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:29.969728 0.049512 udp 10.0.2.22 51868 <-> 5.14.226.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:30.962661 0.000000 udp 10.0.2.22 51868 -> 78.52.9.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:33:31.954857 0.371323 udp 10.0.2.22 51868 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:33.937603 0.311003 udp 10.0.2.22 51868 <-> 200.84.68.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:34.932165 0.164970 udp 10.0.2.22 51868 <-> 67.248.200.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:35.916309 0.134450 udp 10.0.2.22 51868 <-> 78.237.79.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:36.910060 0.139641 udp 10.0.2.22 51868 <-> 68.49.199.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:37.903196 1.018299 udp 10.0.2.22 51868 <-> 111.246.35.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:38.895331 0.178687 udp 10.0.2.22 51868 <-> 199.117.183.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:39.893565 4.997388 udp 10.0.2.22 51868 -> 177.54.140.9 16464 REQ 0 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:33:40.894874 3.049675 udp 10.0.2.22 51868 <-> 79.126.189.7 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:41.896869 0.128135 udp 10.0.2.22 51868 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:42.888368 1.193483 udp 10.0.2.22 51868 <-> 182.188.213.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:45.142374 0.000000 udp 10.0.2.22 51868 <- 177.54.140.9 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:33:45.572074 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:33:45.892427 0.054514 udp 10.0.2.22 51868 <-> 82.135.248.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:46.893496 0.000000 udp 10.0.2.22 51868 -> 79.126.189.7 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:33:47.895172 0.215995 udp 10.0.2.22 51868 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:48.896940 0.000000 udp 10.0.2.22 51868 -> 75.89.79.60 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:33:49.888397 0.036321 udp 10.0.2.22 51868 <-> 84.197.3.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:50.889488 0.158858 udp 10.0.2.22 51868 <-> 96.59.111.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:51.891333 0.000000 udp 10.0.2.22 51868 -> 118.169.223.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:33:52.892578 0.300929 udp 10.0.2.22 51868 <-> 201.211.111.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:53.763797 0.000113 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:33:53.894117 0.322440 udp 10.0.2.22 51868 <-> 211.211.69.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:54.895176 0.469755 udp 10.0.2.22 51868 <-> 117.197.240.241 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:55.896972 0.154377 udp 10.0.2.22 51868 <-> 46.50.27.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:56.888384 0.659936 udp 10.0.2.22 51868 <-> 183.83.111.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:58.351679 0.166795 udp 10.0.2.22 51868 <-> 77.235.110.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:33:59.343639 0.120652 udp 10.0.2.22 51868 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:00.334456 0.180666 udp 10.0.2.22 51868 <-> 68.179.181.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:01.324708 0.145858 udp 10.0.2.22 51868 <-> 24.75.169.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:02.313628 0.760979 udp 10.0.2.22 51868 <-> 177.149.100.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:03.307541 0.071005 udp 10.0.2.22 51868 <-> 85.84.170.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:04.290583 0.132701 udp 10.0.2.22 51868 <-> 75.109.40.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:05.283108 0.476173 udp 10.0.2.22 51868 <-> 210.119.21.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:06.274684 1.080503 udp 10.0.2.22 51868 <-> 190.195.127.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:07.265624 1.013966 udp 10.0.2.22 51868 <-> 89.143.49.111 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:09.245041 0.488236 udp 10.0.2.22 51868 <-> 177.83.18.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:10.238446 0.106399 udp 10.0.2.22 51868 <-> 95.75.59.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:11.221494 0.109596 udp 10.0.2.22 51868 <-> 95.46.217.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:12.218044 0.138407 udp 10.0.2.22 51868 <-> 24.47.109.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:13.209625 0.042504 udp 10.0.2.22 51868 <-> 95.90.117.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:14.200356 0.224042 udp 10.0.2.22 51868 <-> 190.74.77.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:15.190577 0.371667 udp 10.0.2.22 51868 <-> 125.224.37.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:16.182250 0.055727 udp 10.0.2.22 51868 <-> 188.143.15.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:17.176043 0.000000 udp 10.0.2.22 51868 -> 84.55.17.68 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:34:18.158875 0.201925 udp 10.0.2.22 51868 <-> 190.74.88.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:19.152605 0.096858 udp 10.0.2.22 51868 <-> 176.200.106.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:20.144174 0.000000 udp 10.0.2.22 51868 -> 90.228.224.189 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:34:21.005563 0.000105 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:34:21.134895 0.161944 udp 10.0.2.22 51868 <-> 49.204.136.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:22.125026 1.150459 udp 10.0.2.22 51868 <-> 173.28.68.119 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:24.107702 0.000000 udp 10.0.2.22 51868 -> 188.158.228.113 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:34:25.090840 0.155722 udp 10.0.2.22 51868 <-> 71.43.117.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:26.083317 0.458576 udp 10.0.2.22 51868 <-> 117.194.240.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:27.074782 0.588869 udp 10.0.2.22 51868 <-> 177.83.18.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:28.065559 0.062073 udp 10.0.2.22 51868 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:29.055213 0.000000 udp 10.0.2.22 51868 -> 186.95.79.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:34:30.045009 0.182249 udp 10.0.2.22 51868 <-> 98.165.26.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:31.038883 0.164546 udp 10.0.2.22 51868 <-> 71.199.218.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:32.022288 0.189782 udp 10.0.2.22 51868 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:33.014681 1.284577 udp 10.0.2.22 51868 <-> 190.163.230.144 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:34.996724 0.000000 udp 10.0.2.22 51868 -> 62.221.143.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:34:35.987614 2.965869 udp 10.0.2.22 51868 <-> 204.16.10.14 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:36.977044 1.571303 udp 10.0.2.22 51868 <-> 24.69.66.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:37.970471 0.000000 udp 10.0.2.22 51868 -> 206.28.48.39 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:34:39.946023 0.287241 udp 10.0.2.22 51868 <-> 190.163.230.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:40.937528 0.000000 udp 10.0.2.22 51868 -> 5.43.19.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:34:41.928280 0.051205 udp 10.0.2.22 51868 <-> 84.54.171.18 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:42.917832 0.237945 udp 10.0.2.22 51868 <-> 68.107.150.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:43.911799 0.139023 udp 10.0.2.22 51868 -> 173.186.95.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:34:44.050822 0.000000 icmp 173.186.95.10 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 07:34:44.905507 0.350851 udp 10.0.2.22 51868 <-> 123.192.49.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:45.888515 1.084620 udp 10.0.2.22 51868 <-> 128.68.67.11 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:47.774554 0.000090 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:34:47.894557 0.000000 udp 10.0.2.22 51868 -> 98.211.241.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:34:48.893924 0.118175 udp 10.0.2.22 51868 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:49.894267 0.042148 udp 10.0.2.22 51868 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:50.895922 0.238767 udp 10.0.2.22 51868 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:51.897483 3.329999 udp 10.0.2.22 51868 <-> 190.163.230.144 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:52.888654 0.000000 udp 10.0.2.22 51868 -> 5.15.195.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:34:53.890074 0.000000 udp 10.0.2.22 51868 -> 62.221.143.16 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:34:55.893038 0.000000 udp 10.0.2.22 51868 -> 31.185.116.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:34:56.900568 0.175837 udp 10.0.2.22 51868 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:57.903553 0.060445 udp 10.0.2.22 51868 <-> 85.204.248.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:34:58.901545 0.000000 udp 10.0.2.22 51868 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:34:59.888937 0.177728 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:00.890092 0.350895 udp 10.0.2.22 51868 <-> 204.16.10.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:01.891761 0.157221 udp 10.0.2.22 51868 <-> 97.101.194.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:02.893280 0.351372 udp 10.0.2.22 51868 <-> 112.158.196.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:03.894678 0.141144 udp 10.0.2.22 51868 <-> 24.239.220.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:04.896187 0.166998 udp 10.0.2.22 51868 <-> 173.172.19.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:05.897637 0.194827 udp 10.0.2.22 51868 <-> 98.127.16.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:06.889061 0.419515 udp 10.0.2.22 51868 <-> 36.227.117.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:07.890575 0.050592 udp 10.0.2.22 51868 <-> 87.97.201.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:08.892193 0.073501 udp 10.0.2.22 51868 <-> 85.86.71.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:09.893168 0.200823 udp 10.0.2.22 51868 <-> 190.74.88.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:10.894556 0.000000 udp 10.0.2.22 51868 -> 95.244.159.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:35:11.896500 0.135744 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:12.897960 0.290276 udp 10.0.2.22 51868 <-> 186.136.213.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:13.888991 0.336967 udp 10.0.2.22 51868 <-> 119.193.20.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:14.770105 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:35:14.890374 0.000000 udp 10.0.2.22 51868 -> 95.65.228.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:35:15.892034 0.000000 udp 10.0.2.22 51868 -> 85.73.133.9 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:35:16.893291 1.211215 udp 10.0.2.22 51868 <-> 24.9.113.237 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:18.896006 0.000000 udp 10.0.2.22 51868 -> 79.119.175.47 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:35:19.897431 0.152300 udp 10.0.2.22 51868 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:20.889011 0.054666 udp 10.0.2.22 51868 <-> 109.104.184.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:21.890336 0.056741 udp 10.0.2.22 51868 <-> 78.234.37.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:22.892040 0.158082 udp 10.0.2.22 51868 <-> 76.16.25.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:23.892785 0.067168 udp 10.0.2.22 51868 <-> 31.222.118.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:24.895940 0.290222 udp 10.0.2.22 51868 <-> 58.85.104.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:25.900043 0.306942 udp 10.0.2.22 51868 <-> 200.156.104.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:26.899923 0.252454 udp 10.0.2.22 51868 <-> 200.109.206.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:27.889759 0.000000 udp 10.0.2.22 51868 -> 116.72.203.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:35:28.890431 0.564937 udp 10.0.2.22 51868 <-> 173.23.113.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:30.279528 0.036777 udp 10.0.2.22 51868 <-> 147.143.243.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:31.270241 0.163199 udp 10.0.2.22 51868 <-> 70.114.34.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:32.260328 0.239803 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:33.254189 0.000000 udp 10.0.2.22 51868 -> 69.22.5.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:35:34.247447 0.165879 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:35.230143 0.144621 udp 10.0.2.22 51868 <-> 80.183.55.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:36.221831 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:35:37.213176 0.040838 udp 10.0.2.22 51868 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:38.204616 0.000000 udp 10.0.2.22 51868 -> 75.109.202.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:35:39.194128 0.000000 udp 10.0.2.22 51868 -> 84.1.56.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:35:40.187650 0.000000 udp 10.0.2.22 51868 -> 200.153.210.87 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:35:41.181204 0.000000 udp 10.0.2.22 51868 -> 101.62.35.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:35:42.044164 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:35:42.163573 0.164724 udp 10.0.2.22 51868 <-> 98.212.118.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:43.155818 0.067129 udp 10.0.2.22 51868 <-> 151.64.32.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:44.146793 0.154693 udp 10.0.2.22 51868 <-> 69.47.169.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:45.136955 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:35:46.126572 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:35:47.120338 0.065412 udp 10.0.2.22 51868 <-> 79.109.85.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:48.113510 0.773924 udp 10.0.2.22 51868 <-> 2.193.35.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:48.691713 0.000000 udp 10.0.2.22 51868 <- 101.62.35.20 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:35:49.095678 4.957248 udp 10.0.2.22 51868 <-> 14.198.30.245 16464 CON 0 0 5 1954 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:50.087412 0.025836 udp 10.0.2.22 51868 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:52.069590 0.030016 udp 10.0.2.22 51868 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:53.059070 1.183875 udp 10.0.2.22 51868 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:54.422298 0.000000 udp 10.0.2.22 51868 <- 14.198.30.245 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:35:55.046608 0.046694 udp 10.0.2.22 51868 <-> 24.132.151.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:56.029197 0.136254 udp 10.0.2.22 51868 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:57.021021 0.127996 udp 10.0.2.22 51868 <-> 85.230.174.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:58.011865 0.142697 udp 10.0.2.22 51868 <-> 71.15.226.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:59.002092 0.147671 udp 10.0.2.22 51868 <-> 96.23.154.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:35:59.991638 0.065401 udp 10.0.2.22 51868 <-> 89.36.248.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:00.985771 0.209182 udp 10.0.2.22 51868 <-> 108.178.146.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:01.969528 1.288128 udp 10.0.2.22 51868 <-> 58.85.104.142 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:03.953874 0.178493 udp 10.0.2.22 51868 <-> 31.222.103.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:04.944755 0.900243 udp 10.0.2.22 51868 <-> 201.81.192.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:06.380625 0.037154 udp 10.0.2.22 51868 <-> 213.112.230.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:07.366907 0.044681 udp 10.0.2.22 51868 <-> 188.25.189.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:08.358717 0.000000 udp 10.0.2.22 51868 -> 46.73.205.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:36:09.220566 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:36:09.339757 0.051410 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:10.329689 0.298467 udp 10.0.2.22 51868 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:11.318584 4.936688 udp 10.0.2.22 51868 -> 75.197.196.43 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:36:12.306670 0.508288 udp 10.0.2.22 51868 <-> 86.38.55.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:13.294480 0.393237 udp 10.0.2.22 51868 <-> 114.40.25.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:14.282184 0.000000 udp 10.0.2.22 51868 -> 67.21.98.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:36:15.274057 0.000000 udp 10.0.2.22 51868 -> 201.1.80.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:36:17.253020 0.000000 udp 10.0.2.22 51868 -> 67.22.175.78 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:36:18.241659 0.000000 udp 10.0.2.22 51868 -> 181.43.67.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:36:19.229512 0.505662 udp 10.0.2.22 51868 <-> 182.155.14.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:20.216369 0.162620 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:21.202476 0.143950 udp 10.0.2.22 51868 <-> 71.75.119.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:22.194277 0.361266 udp 10.0.2.22 51868 <-> 111.253.66.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:23.175527 2.201677 udp 10.0.2.22 51868 <-> 65.30.26.10 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:24.165289 0.136322 udp 10.0.2.22 51868 <-> 98.219.228.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:26.146883 0.000000 udp 10.0.2.22 51868 -> 27.4.145.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:36:27.134316 0.161603 udp 10.0.2.22 51868 <-> 37.213.218.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:28.120647 0.037783 udp 10.0.2.22 51868 <-> 91.65.0.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:29.112789 4.063107 udp 10.0.2.22 51868 -> 83.54.57.5 16464 INT 0 3 174 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:36:29.230421 3.945475 icmp 83.54.57.5 0x0303 -> 10.0.2.22 0x5040 URP 192 2 172 flow=Background 1970/01/01 07:36:30.093494 0.038589 udp 10.0.2.22 51868 <-> 5.15.99.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:32.072496 0.401127 udp 10.0.2.22 51868 <-> 84.110.120.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:34.049115 0.000000 udp 10.0.2.22 51868 -> 118.200.207.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:36:35.035513 0.136158 udp 10.0.2.22 51868 <-> 37.213.233.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:35.898241 0.139077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:36:36.156390 1.075287 udp 10.0.2.22 51868 <-> 85.86.71.115 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:38.127066 0.469249 udp 10.0.2.22 51868 <-> 122.121.6.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:39.116108 0.286201 udp 10.0.2.22 51868 <-> 212.251.106.187 16464 CON 0 0 2 668 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:40.104236 0.169587 udp 10.0.2.22 51868 <-> 98.194.208.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:41.091117 0.251206 udp 10.0.2.22 51868 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:42.277438 0.605691 udp 10.0.2.22 51868 <-> 181.53.224.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:43.269270 0.278191 udp 10.0.2.22 51868 <-> 201.211.111.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:44.249890 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:36:45.239853 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:36:46.228639 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:36:47.217481 0.986737 udp 10.0.2.22 51868 <-> 200.55.82.224 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:49.190581 0.075485 udp 10.0.2.22 51868 <-> 77.27.7.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:50.182519 0.390003 udp 10.0.2.22 51868 <-> 114.40.25.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:51.163272 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:36:52.152705 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:36:53.141575 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:36:54.129287 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:36:55.116067 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:36:56.101965 0.158501 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:36:57.093707 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:36:59.064009 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:00.052719 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:01.042247 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:02.028729 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:03.014991 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:03.877361 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:37:04.006473 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:04.987250 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:05.977241 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:12.361697 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:13.351707 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:14.338196 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:15.329476 0.000079 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:15.329555 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:37:16.319312 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:17.298708 0.158831 udp 10.0.2.22 51868 <-> 184.162.187.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:37:18.286843 0.402580 udp 10.0.2.22 51868 <-> 219.162.195.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:37:19.273873 0.000000 udp 10.0.2.22 51868 -> 46.24.80.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:20.262075 0.140905 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:37:22.230678 0.000000 udp 10.0.2.22 51868 -> 218.45.34.219 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:23.221414 0.000000 udp 10.0.2.22 51868 -> 189.68.134.233 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:24.200536 0.525287 udp 10.0.2.22 51868 <-> 70.132.115.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:37:25.188675 0.000000 udp 10.0.2.22 51868 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:26.181022 4.933839 udp 10.0.2.22 51868 <-> 109.52.156.239 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:37:27.166805 0.024212 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:37:28.151486 0.008555 udp 10.0.2.22 51868 <-> 152.66.219.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:37:29.145555 0.000000 udp 10.0.2.22 51868 -> 79.114.40.208 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:30.135968 0.053351 udp 10.0.2.22 51868 <-> 78.96.30.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:37:31.211477 0.000000 udp 10.0.2.22 51868 <- 109.52.156.239 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:32.102638 0.153426 udp 10.0.2.22 51868 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:37:33.089844 0.052634 udp 10.0.2.22 51868 <-> 78.225.90.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:37:34.076255 0.154207 udp 10.0.2.22 51868 <-> 98.237.3.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:37:35.060902 3.645075 udp 10.0.2.22 51868 <-> 24.182.200.4 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:37:35.923298 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:37:39.522250 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:40.501098 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:41.489057 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:42.476166 1.971870 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:43.462377 0.804899 udp 10.0.2.22 51868 <-> 84.41.31.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:37:45.438681 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:46.428441 0.000071 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:46.428512 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:37:47.407611 0.314976 udp 10.0.2.22 51868 <-> 211.36.185.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:37:47.734935 0.011950 udp 10.0.2.22 60044 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 07:37:47.747227 0.000000 udp 10.0.2.22 60045 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:48.395371 0.066072 udp 10.0.2.22 51868 <-> 78.242.194.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:37:49.381998 0.408912 udp 10.0.2.22 51868 <-> 213.233.181.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:37:50.367998 0.050866 udp 10.0.2.22 51868 <-> 85.67.109.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:37:51.352746 0.150438 udp 10.0.2.22 51868 <-> 66.187.121.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:37:52.343380 0.157113 udp 10.0.2.22 51868 <-> 98.237.3.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:37:53.333588 0.129818 udp 10.0.2.22 51868 <-> 178.127.106.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:37:54.312934 0.051423 udp 10.0.2.22 51868 <-> 87.247.96.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:37:55.301024 0.000000 udp 10.0.2.22 51868 -> 201.93.194.74 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:56.287807 0.000000 udp 10.0.2.22 51868 -> 24.122.167.188 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:37:57.273459 0.030394 udp 10.0.2.22 51868 <-> 158.58.248.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:37:58.258390 0.542182 udp 10.0.2.22 51868 <-> 50.27.74.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:37:59.249575 0.041198 udp 10.0.2.22 51868 <-> 91.67.53.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:00.239528 0.000000 udp 10.0.2.22 51868 -> 24.122.51.141 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:38:01.218356 0.132319 udp 10.0.2.22 51868 <-> 72.241.245.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:02.205991 2.982572 udp 10.0.2.22 51868 <-> 31.185.115.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:03.192350 0.110684 udp 10.0.2.22 51868 <-> 90.130.172.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:04.178050 0.361214 udp 10.0.2.22 51868 <-> 123.192.49.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:05.033558 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:38:05.162466 0.305553 udp 10.0.2.22 51868 <-> 122.27.16.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:06.153285 0.000000 udp 10.0.2.22 51868 -> 64.92.42.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:38:07.258222 0.619639 udp 10.0.2.22 51868 <-> 116.73.58.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:08.237476 0.050683 udp 10.0.2.22 51868 <-> 77.76.177.251 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:09.224816 0.089704 udp 10.0.2.22 51868 <-> 93.81.199.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:10.211363 0.332444 udp 10.0.2.22 51868 <-> 115.241.10.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:11.196904 0.064267 udp 10.0.2.22 51868 <-> 89.36.248.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:12.181467 0.000000 udp 10.0.2.22 51868 -> 195.174.46.0 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:38:13.172201 3.194051 udp 10.0.2.22 51868 -> 109.90.117.244 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:38:14.162046 0.381257 udp 10.0.2.22 51868 <-> 77.126.133.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:15.378703 0.328560 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:17.353099 0.295861 udp 10.0.2.22 51868 <-> 78.8.201.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:18.338773 0.211278 udp 10.0.2.22 51868 <-> 76.87.9.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:19.322927 0.244841 udp 10.0.2.22 51868 <-> 63.230.209.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:20.313912 0.305524 udp 10.0.2.22 51868 <-> 122.27.16.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:21.303719 0.060875 udp 10.0.2.22 51868 <-> 95.42.254.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:22.282515 0.300147 udp 10.0.2.22 51868 <-> 59.20.31.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:23.270478 0.062415 udp 10.0.2.22 51868 <-> 82.244.84.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:24.257075 0.072940 udp 10.0.2.22 51868 <-> 85.86.184.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:25.242702 0.940296 udp 10.0.2.22 51868 <-> 187.23.35.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:26.228369 0.000000 udp 10.0.2.22 51868 -> 2.32.69.143 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:38:27.219809 1.372112 udp 10.0.2.22 51868 <-> 108.178.146.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:28.212115 0.793981 udp 10.0.2.22 51868 <-> 172.243.183.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:29.191035 0.173257 udp 10.0.2.22 51868 <-> 206.28.48.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:30.178813 0.145707 udp 10.0.2.22 51868 <-> 65.185.171.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:31.165458 0.132279 udp 10.0.2.22 51868 <-> 62.211.235.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:32.021815 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:38:32.150986 0.260785 udp 10.0.2.22 51868 <-> 177.227.173.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:33.135108 0.124849 udp 10.0.2.22 51868 <-> 173.81.29.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:34.126243 0.029230 udp 10.0.2.22 51868 <-> 85.130.81.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:35.115764 0.000000 udp 10.0.2.22 51868 -> 69.15.200.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:38:36.094226 0.277460 udp 10.0.2.22 51868 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:37.081860 3.116828 udp 10.0.2.22 51868 <-> 67.184.116.232 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:38.068859 0.158186 udp 10.0.2.22 51868 <-> 98.214.215.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:39.053558 0.442124 udp 10.0.2.22 51868 <-> 112.158.196.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:41.028820 0.329245 udp 10.0.2.22 51868 <-> 190.160.37.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:42.008742 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:38:42.997459 0.000000 udp 10.0.2.22 51868 -> 219.77.69.157 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:38:43.987441 0.159505 udp 10.0.2.22 51868 <-> 68.52.86.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:44.974009 0.901842 udp 10.0.2.22 51868 <-> 87.0.240.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:46.748819 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:38:47.733321 0.198404 udp 10.0.2.22 51868 <-> 70.69.191.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:48.723958 0.213288 udp 10.0.2.22 51868 <-> 198.179.116.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:49.703492 0.302270 udp 10.0.2.22 51868 <-> 177.227.157.221 16464 CON 0 0 5 3618 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:50.692098 0.000000 udp 10.0.2.22 51868 -> 201.165.35.105 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:38:51.679715 0.146097 udp 10.0.2.22 51868 <-> 24.95.94.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:52.669026 0.166644 udp 10.0.2.22 51868 <-> 87.111.111.164 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:53.654256 0.127788 udp 10.0.2.22 51868 <-> 173.218.213.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:54.637915 0.384199 udp 10.0.2.22 51868 <-> 1.168.39.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:55.628878 0.024168 udp 10.0.2.22 51868 <-> 84.24.3.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:56.608539 0.146513 udp 10.0.2.22 51868 <-> 174.96.94.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:57.597303 0.085682 udp 10.0.2.22 51868 <-> 78.177.216.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:58.584610 0.381359 udp 10.0.2.22 51868 <-> 201.186.166.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:38:59.452154 0.000151 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:38:59.571142 0.332380 udp 10.0.2.22 51868 <-> 119.70.34.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:00.557071 0.170628 udp 10.0.2.22 51868 <-> 75.129.198.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:01.541249 0.000000 udp 10.0.2.22 51868 -> 14.97.201.55 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:39:02.531845 0.241489 udp 10.0.2.22 51868 <-> 187.244.81.0 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:03.511408 0.187019 udp 10.0.2.22 51868 <-> 49.204.100.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:04.499852 0.055894 udp 10.0.2.22 51868 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:05.487078 0.168748 udp 10.0.2.22 51868 <-> 98.194.123.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:06.473162 0.165460 udp 10.0.2.22 51868 <-> 97.76.164.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:11.873931 0.037804 udp 10.0.2.22 51868 <-> 78.128.125.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:12.847790 0.058612 udp 10.0.2.22 51868 <-> 213.193.25.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:13.838382 0.000000 udp 10.0.2.22 51868 -> 108.183.48.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:39:14.818064 0.255578 udp 10.0.2.22 51868 <-> 65.60.105.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:15.806449 0.300678 udp 10.0.2.22 51868 <-> 117.204.146.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:16.793638 0.235810 udp 10.0.2.22 51868 <-> 115.184.77.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:17.779862 0.256184 udp 10.0.2.22 51868 <-> 89.46.84.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:18.765308 0.000000 udp 10.0.2.22 51868 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:39:19.749437 0.270520 udp 10.0.2.22 51868 <-> 201.80.112.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:20.739676 3.261004 udp 10.0.2.22 51868 <-> 105.226.121.131 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:21.719043 0.000000 udp 10.0.2.22 51868 -> 101.63.197.243 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:39:22.707322 0.167344 udp 10.0.2.22 51868 <-> 135.19.58.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:24.680923 0.000000 udp 10.0.2.22 51868 -> 86.122.233.25 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:39:25.665817 0.060698 udp 10.0.2.22 51868 <-> 77.81.10.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:26.649736 0.146532 udp 10.0.2.22 51868 <-> 24.193.20.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:27.640255 0.156548 udp 10.0.2.22 51868 <-> 174.102.48.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:28.619888 0.330485 udp 10.0.2.22 51868 <-> 211.206.235.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:29.608253 0.178365 udp 10.0.2.22 51868 <-> 67.248.70.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:30.476703 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:39:30.595745 0.170577 udp 10.0.2.22 51868 <-> 96.2.150.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:31.581835 0.315240 udp 10.0.2.22 51868 <-> 82.229.113.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:32.566785 0.058537 udp 10.0.2.22 51868 <-> 84.43.137.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:33.550826 0.158283 udp 10.0.2.22 51868 <-> 98.251.112.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:34.541473 0.812481 udp 10.0.2.22 51868 <-> 89.229.25.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:35.520520 0.161462 udp 10.0.2.22 51868 <-> 49.204.136.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:36.508914 0.357615 udp 10.0.2.22 51868 <-> 46.5.227.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:37.496250 0.000000 udp 10.0.2.22 51868 -> 187.10.24.232 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:39:38.482242 0.258350 udp 10.0.2.22 51868 <-> 190.16.249.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:39.467349 0.168558 udp 10.0.2.22 51868 <-> 24.233.246.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:40.453928 0.216902 udp 10.0.2.22 51868 <-> 208.127.113.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:41.444267 0.000000 udp 10.0.2.22 51868 -> 92.62.67.209 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:39:42.423494 0.190671 udp 10.0.2.22 51868 <-> 183.82.95.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:43.411924 0.185923 udp 10.0.2.22 51868 <-> 206.28.48.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:44.398811 1.525547 udp 10.0.2.22 51868 <-> 72.242.83.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:45.386211 0.000000 udp 10.0.2.22 51868 -> 197.6.72.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:39:46.372786 0.065988 udp 10.0.2.22 51868 <-> 195.3.228.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:47.356796 0.069213 udp 10.0.2.22 51868 <-> 213.66.151.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:48.346799 0.140675 udp 10.0.2.22 51868 <-> 98.192.242.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:49.326468 0.160645 udp 10.0.2.22 51868 <-> 67.172.65.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:50.314795 0.051043 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:51.301915 0.053869 udp 10.0.2.22 51868 <-> 212.75.2.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:52.287889 0.410033 udp 10.0.2.22 51868 <-> 78.23.151.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:53.619230 0.159995 udp 10.0.2.22 51868 <-> 98.223.203.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:54.603185 0.000000 udp 10.0.2.22 51868 -> 83.83.164.209 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:39:55.593327 0.307715 udp 10.0.2.22 51868 <-> 58.68.94.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:56.575394 0.120285 udp 10.0.2.22 51868 <-> 216.164.210.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:57.444348 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:39:57.564752 0.269603 udp 10.0.2.22 51868 <-> 24.233.246.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:58.551987 0.279539 udp 10.0.2.22 51868 <-> 121.86.73.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:39:59.537463 3.126250 udp 10.0.2.22 51868 <-> 70.80.21.145 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:00.525312 0.000000 udp 10.0.2.22 51868 -> 95.57.165.122 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:40:01.194784 2.964701 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 07:40:03.478828 0.239877 udp 10.0.2.22 51868 <-> 208.127.113.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:04.467079 0.174588 udp 10.0.2.22 51868 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:05.453873 3.171570 udp 10.0.2.22 51868 <-> 71.95.246.43 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:06.439743 3.136359 udp 10.0.2.22 51868 <-> 24.113.18.33 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:07.425532 0.000000 udp 10.0.2.22 51868 -> 78.134.0.39 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:40:08.109312 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:40:10.385916 0.082736 udp 10.0.2.22 51868 <-> 81.180.18.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:11.373784 1.120392 udp 10.0.2.22 51868 <-> 24.0.29.18 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:13.345629 0.035420 udp 10.0.2.22 51868 <-> 89.212.98.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:14.330550 3.329188 udp 10.0.2.22 51868 <-> 119.237.49.3 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:15.321741 0.000000 udp 10.0.2.22 51868 -> 89.73.207.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:40:16.004864 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:40:16.312191 0.000000 udp 10.0.2.22 51868 -> 213.231.166.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:40:18.279705 0.000000 udp 10.0.2.22 51868 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:40:19.267891 0.039314 udp 10.0.2.22 51868 <-> 89.77.207.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:20.253808 0.267026 udp 10.0.2.22 51868 <-> 5.190.123.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:21.238580 0.000000 udp 10.0.2.22 51868 -> 2.185.126.32 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:40:22.229688 0.414927 udp 10.0.2.22 51868 <-> 187.5.243.111 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:23.219809 0.362609 udp 10.0.2.22 51868 <-> 92.36.202.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:24.080239 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:40:24.199205 0.309947 udp 10.0.2.22 51868 <-> 179.210.57.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:25.188448 1.200200 udp 10.0.2.22 51868 <-> 178.25.74.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:26.175017 0.049466 udp 10.0.2.22 51868 <-> 94.52.120.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:27.160833 0.321321 udp 10.0.2.22 51868 <-> 14.98.249.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:28.145255 0.136278 udp 10.0.2.22 51868 <-> 68.192.174.223 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:29.136121 0.403011 udp 10.0.2.22 51868 <-> 78.8.201.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:30.126043 0.225709 udp 10.0.2.22 51868 <-> 24.233.246.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:31.104967 0.000000 udp 10.0.2.22 51868 -> 89.36.248.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:40:31.795392 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:40:32.092755 0.000000 udp 10.0.2.22 51868 -> 94.214.37.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:40:33.079642 0.051490 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:34.065359 0.147111 udp 10.0.2.22 51868 <-> 68.196.251.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:35.049783 0.032586 udp 10.0.2.22 51868 <-> 151.100.96.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:36.041184 0.133284 udp 10.0.2.22 51868 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:37.031871 0.560676 udp 10.0.2.22 51868 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:38.010786 0.321271 udp 10.0.2.22 51868 <-> 190.160.37.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:38.998765 0.139887 udp 10.0.2.22 51868 <-> 72.240.76.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:39.985449 0.260606 udp 10.0.2.22 51868 <-> 97.102.73.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:40.971142 0.172283 udp 10.0.2.22 51868 <-> 97.106.251.17 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:41.956332 0.115658 udp 10.0.2.22 51868 <-> 86.107.198.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:42.947532 0.061022 udp 10.0.2.22 51868 <-> 89.223.50.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:43.937185 0.155350 udp 10.0.2.22 51868 <-> 67.172.65.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:44.916054 0.000000 udp 10.0.2.22 51868 -> 114.37.15.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:40:45.903614 0.856738 udp 10.0.2.22 51868 <-> 111.246.35.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:46.890820 0.249881 udp 10.0.2.22 51868 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:47.876279 0.000000 udp 10.0.2.22 51868 -> 223.233.150.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:40:48.862273 0.077916 udp 10.0.2.22 51868 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:49.853092 0.348607 udp 10.0.2.22 51868 <-> 122.118.71.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:50.714006 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:40:50.842908 0.301775 udp 10.0.2.22 51868 <-> 101.62.51.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:51.822152 0.068503 udp 10.0.2.22 51868 <-> 87.121.12.165 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:52.809916 0.388304 udp 10.0.2.22 51868 <-> 49.159.65.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:53.796434 0.183538 udp 10.0.2.22 51868 <-> 96.26.92.222 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:54.782078 0.000000 udp 10.0.2.22 51868 -> 202.43.160.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:40:55.766770 0.000000 udp 10.0.2.22 51868 -> 85.230.174.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:40:56.757586 0.148265 udp 10.0.2.22 51868 <-> 1.186.119.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:57.747797 0.078068 udp 10.0.2.22 51868 <-> 92.229.49.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:58.726593 0.057898 udp 10.0.2.22 51868 <-> 86.124.222.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:40:59.714437 0.139584 udp 10.0.2.22 51868 <-> 68.192.174.223 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:00.701011 0.000000 udp 10.0.2.22 51868 -> 82.56.138.112 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:41:01.686389 0.344432 udp 10.0.2.22 51868 <-> 1.175.217.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:02.670790 0.115327 udp 10.0.2.22 51868 <-> 95.85.163.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:03.382105 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:41:03.679214 0.000000 udp 10.0.2.22 51868 -> 184.162.123.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:41:04.668908 0.153282 udp 10.0.2.22 51868 <-> 67.61.177.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:05.647736 0.205540 udp 10.0.2.22 51868 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:06.635313 0.169841 udp 10.0.2.22 51868 <-> 24.214.119.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:07.621936 0.382923 udp 10.0.2.22 51868 <-> 112.133.130.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:08.607495 0.164376 udp 10.0.2.22 51868 <-> 50.73.12.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:09.591476 0.361614 udp 10.0.2.22 51868 <-> 200.55.82.224 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:10.582366 0.138256 udp 10.0.2.22 51868 <-> 37.214.49.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:11.572037 0.396745 udp 10.0.2.22 51868 <-> 190.204.24.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:12.550491 0.153317 udp 10.0.2.22 51868 <-> 68.62.2.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:13.538084 0.118895 udp 10.0.2.22 51868 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:14.524236 0.000000 udp 10.0.2.22 51868 -> 116.203.238.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:41:15.509611 0.047915 udp 10.0.2.22 51868 <-> 87.247.96.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:16.494132 0.113980 udp 10.0.2.22 51868 <-> 5.43.104.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:17.356581 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:41:17.485552 0.036538 udp 10.0.2.22 51868 <-> 81.180.18.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:18.465261 1.623507 udp 10.0.2.22 51868 <-> 31.131.180.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:19.453875 0.122785 udp 10.0.2.22 51868 <-> 24.75.190.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:20.441559 0.144424 udp 10.0.2.22 51868 <-> 46.233.24.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:21.428135 0.000000 udp 10.0.2.22 51868 -> 115.241.37.32 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:41:22.413704 0.151974 udp 10.0.2.22 51868 <-> 68.62.2.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:23.398079 0.036442 udp 10.0.2.22 51868 <-> 94.21.162.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:24.389085 2.995878 udp 10.0.2.22 51868 <-> 46.175.229.8 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:25.368555 0.000000 udp 10.0.2.22 51868 -> 116.203.238.33 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:41:26.357562 3.013885 udp 10.0.2.22 51868 <-> 87.247.96.38 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:28.333380 0.130641 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:30.302605 0.093848 udp 10.0.2.22 51868 <-> 46.233.24.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:31.293209 0.000000 udp 10.0.2.22 51868 -> 115.241.37.32 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:41:32.273604 1.904613 udp 10.0.2.22 51868 <-> 31.131.180.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:33.261778 0.120479 udp 10.0.2.22 51868 <-> 24.75.190.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:34.249129 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:41:35.237945 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:41:36.222748 0.000046 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:41:36.222794 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:41:37.206596 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:41:38.196914 0.997275 udp 10.0.2.22 51868 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:39.177392 0.033864 udp 10.0.2.22 51868 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:40.169264 1.914768 udp 10.0.2.22 51868 <-> 31.131.180.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:41.156747 0.162857 udp 10.0.2.22 51868 <-> 71.229.124.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:42.143092 0.042149 udp 10.0.2.22 51868 <-> 147.156.24.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:43.129656 0.000000 udp 10.0.2.22 51868 -> 66.237.94.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:41:43.985704 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:41:44.114699 0.276884 udp 10.0.2.22 51868 <-> 37.145.43.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:45.105446 0.379356 udp 10.0.2.22 51868 <-> 123.110.11.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:46.093448 0.042447 udp 10.0.2.22 51868 <-> 79.118.190.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:47.082161 3.340707 udp 10.0.2.22 51868 <-> 115.165.236.91 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:48.069219 1.830061 udp 10.0.2.22 51868 <-> 58.152.190.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:49.055349 0.000000 udp 10.0.2.22 51868 -> 87.112.84.9 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:41:51.023985 0.000000 udp 10.0.2.22 51868 -> 62.45.93.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:41:52.015359 0.118103 udp 10.0.2.22 51868 <-> 207.237.112.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:52.995020 0.142506 udp 10.0.2.22 51868 <-> 24.75.169.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:53.983268 0.809309 udp 10.0.2.22 51868 <-> 217.72.209.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:54.970290 0.000000 udp 10.0.2.22 51868 -> 71.126.172.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:41:55.956439 0.397980 udp 10.0.2.22 51868 <-> 5.57.12.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:41:56.941437 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:41:58.917218 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:41:59.896564 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:42:00.884828 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:42:01.871880 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:42:02.858029 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:42:03.842917 0.000079 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:42:03.842996 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:42:04.827034 0.259283 udp 10.0.2.22 51868 <-> 143.107.215.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:05.817008 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:42:06.796313 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:42:07.915221 0.055001 udp 10.0.2.22 51868 <-> 94.177.14.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:08.902278 0.092003 udp 10.0.2.22 51868 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:09.888314 0.158654 udp 10.0.2.22 51868 <-> 209.33.23.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:10.744207 0.000115 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:42:10.873127 0.352431 udp 10.0.2.22 51868 <-> 36.231.246.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:11.856959 0.173580 udp 10.0.2.22 51868 <-> 98.250.1.250 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:12.847170 0.000000 udp 10.0.2.22 51868 -> 184.162.187.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:42:13.826459 0.215772 udp 10.0.2.22 51868 <-> 24.7.146.40 16464 CON 0 0 2 668 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:14.817872 0.160549 udp 10.0.2.22 51868 <-> 98.170.237.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:15.807982 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:42:16.794084 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:42:17.779167 0.162378 udp 10.0.2.22 51868 <-> 50.158.78.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:18.763636 0.033808 udp 10.0.2.22 51868 <-> 31.19.152.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:19.753954 0.052786 udp 10.0.2.22 51868 <-> 77.91.50.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:20.733241 0.164180 udp 10.0.2.22 51868 <-> 68.200.12.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:21.721469 0.000000 udp 10.0.2.22 51868 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:42:22.708570 0.291391 udp 10.0.2.22 51868 <-> 200.104.248.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:23.694352 0.164822 udp 10.0.2.22 51868 <-> 184.170.169.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:24.679561 0.019334 udp 10.0.2.22 51868 <-> 89.47.233.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:25.663737 0.044497 udp 10.0.2.22 51868 <-> 5.20.72.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:26.653920 0.000000 udp 10.0.2.22 51868 -> 101.63.133.87 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:42:27.635606 0.138979 udp 10.0.2.22 51868 <-> 71.88.102.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:28.624012 0.186917 udp 10.0.2.22 51868 <-> 98.30.47.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:29.611215 0.039833 udp 10.0.2.22 51868 <-> 185.22.137.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:30.598797 1.037987 udp 10.0.2.22 51868 <-> 173.230.174.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:31.583378 0.145754 udp 10.0.2.22 51868 <-> 65.92.44.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:32.567334 0.147821 udp 10.0.2.22 51868 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:33.557659 0.183063 udp 10.0.2.22 51868 <-> 67.83.216.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:34.571780 0.000000 udp 10.0.2.22 51868 -> 173.163.185.233 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:42:35.559775 1.018104 udp 10.0.2.22 51868 <-> 77.70.120.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:37.403669 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:42:37.532700 0.024526 udp 10.0.2.22 51868 <-> 89.142.152.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:38.517535 0.243414 udp 10.0.2.22 51868 <-> 31.222.103.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:39.510395 0.207976 udp 10.0.2.22 51868 <-> 76.115.145.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:40.502389 0.000000 udp 10.0.2.22 51868 -> 178.167.99.54 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:42:41.481756 0.070160 udp 10.0.2.22 51868 <-> 88.183.181.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:42.470202 0.158449 udp 10.0.2.22 51868 <-> 76.72.33.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:43.459310 0.076967 udp 10.0.2.22 51868 <-> 151.15.58.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:44.445409 0.185798 udp 10.0.2.22 51868 <-> 70.173.33.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:45.429988 0.407855 udp 10.0.2.22 51868 <-> 186.54.122.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:46.421066 0.000000 udp 10.0.2.22 51868 -> 92.36.202.144 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:42:47.415745 0.184889 udp 10.0.2.22 51868 <-> 24.220.225.122 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:48.394545 0.000000 udp 10.0.2.22 51868 -> 178.205.27.117 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:42:49.382373 0.074383 udp 10.0.2.22 51868 <-> 92.2.231.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:50.369171 0.062632 udp 10.0.2.22 51868 <-> 109.194.231.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:51.355207 0.000000 udp 10.0.2.22 51868 -> 79.126.189.7 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:42:52.340240 0.000000 udp 10.0.2.22 51868 -> 72.199.138.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:42:54.639458 1.257129 udp 10.0.2.22 51868 <-> 50.80.122.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:55.629409 0.137418 udp 10.0.2.22 51868 <-> 67.83.216.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:56.608563 0.000000 udp 10.0.2.22 51868 -> 151.15.58.217 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:42:57.596211 1.303764 udp 10.0.2.22 51868 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:42:58.583128 0.000000 udp 10.0.2.22 51868 -> 89.142.152.236 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:42:59.569016 0.150215 udp 10.0.2.22 51868 <-> 24.119.66.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:00.553694 0.271203 udp 10.0.2.22 51868 <-> 187.63.102.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:01.544746 0.990003 udp 10.0.2.22 51868 <-> 14.97.195.136 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:03.513884 0.000000 udp 10.0.2.22 51868 -> 98.165.26.52 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:43:04.501673 0.212088 udp 10.0.2.22 51868 <-> 190.78.154.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:05.369533 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:43:05.488503 0.163683 udp 10.0.2.22 51868 <-> 67.242.133.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:06.474214 0.137243 udp 10.0.2.22 51868 <-> 68.193.113.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:07.458826 0.246058 udp 10.0.2.22 51868 <-> 187.247.105.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:08.449652 0.169918 udp 10.0.2.22 51868 <-> 173.177.41.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:09.439596 0.172266 udp 10.0.2.22 51868 <-> 66.190.71.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:10.419240 2.051716 udp 10.0.2.22 51868 <-> 201.41.10.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:11.408208 0.078125 udp 10.0.2.22 51868 <-> 151.45.195.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:12.395457 0.051435 udp 10.0.2.22 51868 <-> 31.129.21.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:13.381046 0.446000 udp 10.0.2.22 51868 <-> 114.51.153.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:14.365581 0.974159 udp 10.0.2.22 51868 <-> 181.16.28.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:15.356644 1.665021 udp 10.0.2.22 51868 <-> 62.57.201.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:16.346485 0.041992 udp 10.0.2.22 51868 <-> 147.156.153.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:17.325327 0.000000 udp 10.0.2.22 51868 -> 123.214.186.193 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:43:18.314433 0.034754 udp 10.0.2.22 51868 <-> 89.73.207.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:19.301171 0.670012 udp 10.0.2.22 51868 <-> 186.70.25.14 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:20.288353 0.167253 udp 10.0.2.22 51868 <-> 150.201.62.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:21.272960 2.124535 udp 10.0.2.22 51868 <-> 116.72.1.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:22.263694 0.151642 udp 10.0.2.22 51868 <-> 86.38.180.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:23.253499 0.114438 udp 10.0.2.22 51868 <-> 24.122.208.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:24.232510 0.173573 udp 10.0.2.22 51868 <-> 68.185.149.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:25.220990 3.124831 udp 10.0.2.22 51868 <-> 92.64.64.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:26.211016 0.183701 udp 10.0.2.22 51868 <-> 68.2.34.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:27.196676 0.055944 udp 10.0.2.22 51868 <-> 31.129.21.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:28.181116 0.192997 udp 10.0.2.22 51868 <-> 184.162.187.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:29.175480 1.429154 udp 10.0.2.22 51868 <-> 14.96.77.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:30.165259 0.038032 udp 10.0.2.22 51868 <-> 89.212.98.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:31.143991 2.071715 udp 10.0.2.22 51868 <-> 79.133.148.56 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:32.012829 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:43:32.131809 0.000000 udp 10.0.2.22 51868 -> 70.27.3.104 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:43:34.104144 0.252857 udp 10.0.2.22 51868 <-> 24.25.249.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:35.089518 0.042447 udp 10.0.2.22 51868 <-> 109.60.116.208 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:36.080357 0.059890 udp 10.0.2.22 51868 <-> 151.15.58.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:37.069944 0.406547 udp 10.0.2.22 51868 <-> 61.59.225.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:38.048915 0.216409 udp 10.0.2.22 51868 <-> 99.16.13.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:39.037523 0.158426 udp 10.0.2.22 51868 <-> 50.143.57.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:40.024234 0.158316 udp 10.0.2.22 51868 <-> 66.177.33.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:41.011121 0.153196 udp 10.0.2.22 51868 <-> 74.215.145.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:41.995566 0.306609 udp 10.0.2.22 51868 <-> 200.156.104.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:42.986410 1.189490 udp 10.0.2.22 51868 <-> 190.195.127.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:43.976198 0.226633 udp 10.0.2.22 51868 <-> 46.225.41.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:44.954954 0.062901 udp 10.0.2.22 51868 <-> 176.195.18.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:45.942785 0.314298 udp 10.0.2.22 51868 <-> 211.219.172.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:46.929255 0.000000 udp 10.0.2.22 51868 -> 137.175.214.204 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:43:48.235200 0.144574 udp 10.0.2.22 51868 <-> 174.89.51.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:49.219519 0.048491 udp 10.0.2.22 51868 <-> 178.118.247.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:50.210441 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:43:51.189757 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:43:52.178414 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:43:53.165894 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:43:54.152372 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:43:55.139288 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:43:56.123448 0.033738 udp 10.0.2.22 51868 <-> 31.19.152.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:43:57.114084 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:43:58.093903 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:43:58.963216 0.000039 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:43:59.082263 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:44:00.069463 0.075952 udp 10.0.2.22 51868 <-> 84.122.179.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:01.055809 1.197337 udp 10.0.2.22 51868 <-> 31.47.27.101 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:03.025425 2.360683 udp 10.0.2.22 51868 <-> 62.248.2.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:04.016203 0.281941 udp 10.0.2.22 51868 <-> 126.60.25.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:04.995972 0.239115 udp 10.0.2.22 51868 <-> 115.241.218.90 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:05.984755 0.054555 udp 10.0.2.22 51868 <-> 79.117.151.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:06.975604 1.567737 udp 10.0.2.22 51868 <-> 190.16.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:08.215635 0.066667 udp 10.0.2.22 51868 <-> 82.249.56.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:09.201329 0.000000 udp 10.0.2.22 51868 -> 78.170.113.45 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:44:10.185478 0.169934 udp 10.0.2.22 51868 <-> 72.51.46.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:11.176545 4.400557 udp 10.0.2.22 51868 <-> 211.128.83.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:12.158455 2.056170 udp 10.0.2.22 51868 <-> 210.115.47.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:13.146767 0.134797 udp 10.0.2.22 51868 <-> 24.47.139.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:14.134040 0.166312 udp 10.0.2.22 51868 <-> 49.207.99.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:15.120860 0.000000 udp 10.0.2.22 51868 -> 213.231.137.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:44:16.105987 0.045541 udp 10.0.2.22 51868 <-> 178.118.247.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:17.090098 0.023847 udp 10.0.2.22 51868 <-> 178.48.110.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:18.080712 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:44:19.060085 0.161573 udp 10.0.2.22 51868 <-> 72.131.44.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:20.048176 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:44:21.035668 4.981218 udp 10.0.2.22 51868 <-> 94.177.14.186 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:22.022068 0.047581 udp 10.0.2.22 51868 <-> 5.43.104.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:23.007114 0.000000 udp 10.0.2.22 51868 -> 91.6.234.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:44:23.991126 3.945740 udp 10.0.2.22 51868 -> 1.172.166.20 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:44:24.982266 1.967651 udp 10.0.2.22 51868 <-> 114.49.28.29 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:25.842727 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:44:28.923037 0.963665 udp 10.0.2.22 51868 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:29.908031 0.363441 udp 10.0.2.22 51868 <-> 123.192.49.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:30.892015 0.281750 udp 10.0.2.22 51868 <-> 126.60.25.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:31.882243 1.238652 udp 10.0.2.22 51868 <-> 181.165.163.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:32.861598 0.056483 udp 10.0.2.22 51868 <-> 109.87.240.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:33.849995 2.156009 udp 10.0.2.22 51868 <-> 49.205.17.150 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:34.837039 0.328844 udp 10.0.2.22 51868 <-> 186.36.70.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:36.808502 0.179177 udp 10.0.2.22 51868 <-> 67.148.202.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:37.792529 4.003414 udp 10.0.2.22 51868 <-> 79.116.136.102 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:38.782874 0.495654 udp 10.0.2.22 51868 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:39.762368 0.340323 udp 10.0.2.22 51868 <-> 181.166.65.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:40.750337 2.048641 udp 10.0.2.22 51868 <-> 190.142.240.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:42.723514 0.000000 udp 10.0.2.22 51868 -> 94.156.86.154 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:44:43.708568 0.162242 udp 10.0.2.22 51868 <-> 76.180.2.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:44.693608 0.112317 udp 10.0.2.22 51868 <-> 24.122.107.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:45.684451 0.100448 udp 10.0.2.22 51868 <-> 78.203.12.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:46.663676 0.251238 udp 10.0.2.22 51868 <-> 50.113.56.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:47.651906 0.956775 udp 10.0.2.22 51868 <-> 151.75.32.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:48.641796 4.263192 udp 10.0.2.22 51868 <-> 211.128.83.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:49.628721 0.190592 udp 10.0.2.22 51868 <-> 72.21.68.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:50.613767 0.241851 udp 10.0.2.22 51868 <-> 98.202.16.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:51.597769 0.958439 udp 10.0.2.22 51868 <-> 24.133.174.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:52.459237 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:44:52.588192 0.093895 udp 10.0.2.22 51868 <-> 85.56.52.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:53.566897 0.127716 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:54.555507 0.041098 udp 10.0.2.22 51868 <-> 80.78.224.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:55.542589 0.156586 udp 10.0.2.22 51868 <-> 27.106.26.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:56.528766 2.960804 udp 10.0.2.22 51868 <-> 173.188.107.246 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:57.514827 0.174279 udp 10.0.2.22 51868 <-> 68.113.165.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:44:58.498801 0.217462 udp 10.0.2.22 51868 <-> 24.10.7.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:00.469521 0.022445 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:01.457580 0.158582 udp 10.0.2.22 51868 <-> 85.202.213.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:02.444679 3.210477 udp 10.0.2.22 51868 <-> 186.22.32.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:03.430569 0.267630 udp 10.0.2.22 51868 <-> 190.75.56.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:04.415311 0.055372 udp 10.0.2.22 51868 <-> 94.177.14.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:05.399383 3.333586 udp 10.0.2.22 51868 <-> 123.110.11.43 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:06.389707 0.000000 udp 10.0.2.22 51868 -> 179.164.171.35 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:45:07.370935 0.052226 udp 10.0.2.22 51868 <-> 82.11.20.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:09.345534 0.000000 udp 10.0.2.22 51868 -> 186.95.79.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:45:10.346484 0.171703 udp 10.0.2.22 51868 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:11.331530 0.157306 udp 10.0.2.22 51868 <-> 75.118.77.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:12.315317 0.369808 udp 10.0.2.22 51868 <-> 89.229.25.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:13.305241 0.000000 udp 10.0.2.22 51868 -> 118.160.130.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:45:14.284586 0.368089 udp 10.0.2.22 51868 <-> 46.5.227.254 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:15.272719 0.000000 udp 10.0.2.22 51868 -> 85.224.201.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:45:16.260057 0.178228 udp 10.0.2.22 51868 <-> 75.138.21.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:17.245917 0.000000 udp 10.0.2.22 51868 -> 24.96.29.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:45:18.292329 0.058364 udp 10.0.2.22 51868 <-> 31.44.194.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:19.154451 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:45:19.283330 0.029464 udp 10.0.2.22 51868 <-> 79.136.87.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:20.273673 0.135394 udp 10.0.2.22 51868 <-> 71.224.28.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:21.252881 0.138778 udp 10.0.2.22 51868 <-> 67.82.210.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:22.240729 0.158668 udp 10.0.2.22 51868 <-> 65.60.153.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:23.227724 0.000044 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:45:23.227768 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:45:24.213491 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:45:25.198912 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:45:26.190657 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:45:27.180666 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:45:28.160716 2.960549 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:45:29.148483 0.139773 udp 10.0.2.22 51868 <-> 96.38.253.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:30.135518 0.103593 udp 10.0.2.22 51868 <-> 109.60.54.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:32.106066 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:45:33.097453 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:45:34.087322 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:45:36.054262 0.040241 udp 10.0.2.22 51868 <-> 89.215.145.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:37.041283 3.828919 udp 10.0.2.22 51868 <-> 186.18.149.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:38.026817 0.020526 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:39.012042 0.193460 udp 10.0.2.22 51868 <-> 27.106.35.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:40.005438 0.154760 udp 10.0.2.22 51868 <-> 74.127.151.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:40.995539 0.135816 udp 10.0.2.22 51868 <-> 67.87.224.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:41.974501 0.049262 udp 10.0.2.22 51868 <-> 188.24.204.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:42.962670 0.144859 udp 10.0.2.22 51868 <-> 24.98.204.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:44.935143 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:45:45.790959 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:45:45.919892 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:45:46.911079 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:45:47.901454 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:45:48.880161 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:45:49.868394 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:45:50.854878 0.000084 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:45:50.854962 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:45:51.840501 4.931574 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:45:52.825134 0.135862 udp 10.0.2.22 51868 <-> 24.44.159.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:45:53.815726 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:45:54.805647 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:45:55.784203 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:45:57.759044 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:45:58.744558 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:45:59.733604 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:01.714301 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:02.693120 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:03.680651 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:04.670436 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:05.658122 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:06.644161 0.000048 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:06.644209 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:46:07.634993 4.976887 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:08.624751 0.141745 udp 10.0.2.22 51868 <-> 67.87.224.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:46:09.603478 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:10.639643 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:11.626291 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:12.482933 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:46:13.598498 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:14.590682 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:15.580480 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:16.559114 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:17.546484 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:18.532815 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:19.518235 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:20.502800 0.000066 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:20.502866 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:46:21.493975 3.942753 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:22.473837 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:23.461965 0.299052 udp 10.0.2.22 51868 <-> 27.106.81.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:46:24.450250 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:26.421770 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:27.405991 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:29.376583 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:30.365218 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:31.352705 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:32.339026 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:33.324540 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:34.308906 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:35.302730 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:36.282349 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:37.270792 0.000052 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:37.270844 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:46:38.259586 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:39.126685 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:46:39.245691 0.148877 udp 10.0.2.22 51868 <-> 192.222.24.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:46:40.230689 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:41.215196 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:43.185689 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:44.174041 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:45.161618 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:46.148238 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:47.133351 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:48.117238 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:49.107722 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:50.087312 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:51.076612 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:52.068037 0.000083 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:52.068120 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:46:53.054218 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:54.039356 4.929662 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:55.024190 0.170111 udp 10.0.2.22 51868 <-> 49.204.213.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:46:56.014389 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:56.993659 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:46:59.955553 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:00.940610 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:01.924554 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:02.915033 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:03.894064 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:04.597581 2.968978 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 07:47:04.882348 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:05.763829 0.000111 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:47:05.882349 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:06.869046 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:07.854120 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:08.844994 0.000051 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:08.845045 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:47:09.835445 3.977459 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:10.848730 0.587549 udp 10.0.2.22 51868 <-> 1.200.197.107 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:47:11.559460 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:47:11.837800 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:12.825274 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:14.797877 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:15.782166 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:16.772762 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:17.755211 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:18.745569 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:19.455857 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:47:19.733570 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:20.719845 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:21.705009 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:23.679273 0.000055 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:23.679328 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:47:24.658389 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:25.646482 0.191145 udp 10.0.2.22 51868 <-> 64.179.179.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:47:26.633556 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:27.619717 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:28.604847 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:29.589872 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:30.580050 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:31.559321 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:32.428964 0.000039 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:47:32.548080 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:33.536801 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:34.522394 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:35.229680 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:47:36.492529 0.000049 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:36.492578 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:47:37.482684 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:38.461956 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:39.450073 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:40.437284 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:41.423102 0.000000 udp 10.0.2.22 51868 -> 94.21.135.93 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:42.407795 0.192382 udp 10.0.2.22 51868 <-> 64.179.179.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:47:43.391789 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:45.362470 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:46.351139 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:47.338284 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:48.324036 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:49.308904 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:50.301246 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:51.291248 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:52.270750 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:53.258637 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:54.245591 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:55.231442 0.000046 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:55.231488 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:47:56.215922 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:57.207030 0.251840 udp 10.0.2.22 51868 <-> 64.148.59.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:47:58.197528 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:47:59.058149 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:47:59.177196 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:48:00.165015 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:48:01.151828 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:48:02.137435 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:48:03.122271 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:48:04.113467 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:48:05.103564 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:48:06.083300 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:48:06.803509 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:48:07.071173 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:48:08.057826 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:48:09.043792 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:48:10.028398 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:48:11.021067 0.000047 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:48:11.021114 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:48:12.990285 0.031600 udp 10.0.2.22 51868 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:13.978453 1.016359 udp 10.0.2.22 51868 <-> 111.92.99.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:14.965115 0.296281 udp 10.0.2.22 51868 <-> 219.106.136.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:15.950973 0.147359 udp 10.0.2.22 51868 <-> 24.44.159.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:16.935689 0.081683 udp 10.0.2.22 51868 <-> 81.27.58.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:17.926945 0.168573 udp 10.0.2.22 51868 <-> 76.188.132.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:18.916721 0.000000 udp 10.0.2.22 51868 -> 82.67.100.118 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:48:19.895585 0.061634 udp 10.0.2.22 51868 <-> 89.28.101.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:20.883120 0.153571 udp 10.0.2.22 51868 <-> 174.110.129.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:21.869727 0.066155 udp 10.0.2.22 51868 <-> 62.162.75.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:22.855399 0.385051 udp 10.0.2.22 51868 <-> 122.108.68.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:23.839955 0.815590 udp 10.0.2.22 51868 <-> 111.248.57.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:24.830959 0.000000 udp 10.0.2.22 51868 -> 50.65.64.163 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:48:25.692734 0.000039 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:48:25.821692 1.206320 udp 10.0.2.22 51868 <-> 190.78.21.20 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:27.788412 0.168620 udp 10.0.2.22 51868 <-> 173.198.147.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:28.775121 0.163710 udp 10.0.2.22 51868 <-> 76.22.128.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:29.759517 0.204358 udp 10.0.2.22 51868 <-> 186.95.207.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:30.743814 0.212337 udp 10.0.2.22 51868 <-> 66.214.56.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:31.734734 0.032583 udp 10.0.2.22 51868 <-> 94.231.32.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:32.729060 0.000000 udp 10.0.2.22 51868 -> 49.202.52.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:48:33.707851 0.253088 udp 10.0.2.22 51868 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:34.695484 0.067228 udp 10.0.2.22 51868 <-> 82.249.56.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:35.681990 0.160069 udp 10.0.2.22 51868 <-> 65.32.237.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:36.667650 0.275675 udp 10.0.2.22 51868 <-> 115.253.125.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:37.652242 0.039552 udp 10.0.2.22 51868 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:38.643124 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:48:39.632733 1.336325 udp 10.0.2.22 51868 <-> 120.88.42.13 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:40.611655 0.190706 udp 10.0.2.22 51868 <-> 134.173.51.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:41.599603 0.059554 udp 10.0.2.22 51868 <-> 86.122.233.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:42.586255 0.358833 udp 10.0.2.22 51868 <-> 148.204.134.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:43.200917 0.000000 udp 10.0.2.22 51868 <- 49.202.52.46 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:48:43.571775 0.000000 udp 10.0.2.22 51868 -> 111.254.184.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:48:44.556308 0.279364 udp 10.0.2.22 51868 <-> 103.250.16.12 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:45.547859 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:48:46.537411 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:48:47.516286 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:48:48.503883 0.968517 udp 10.0.2.22 51868 <-> 124.120.213.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:49.490441 1.071360 udp 10.0.2.22 51868 <-> 88.82.203.51 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:51.461547 0.161525 udp 10.0.2.22 51868 <-> 24.201.162.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:52.323464 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:48:52.452447 0.043121 udp 10.0.2.22 51868 <-> 95.180.65.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:53.432698 0.398642 udp 10.0.2.22 51868 <-> 177.106.37.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:54.421425 0.157080 udp 10.0.2.22 51868 <-> 69.23.215.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:55.409871 0.126213 udp 10.0.2.22 51868 <-> 75.109.22.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:56.396455 0.258292 udp 10.0.2.22 51868 <-> 201.17.76.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:57.381669 0.485996 udp 10.0.2.22 51868 <-> 117.204.49.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:58.365718 0.365487 udp 10.0.2.22 51868 <-> 118.232.205.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:48:59.356305 0.216609 udp 10.0.2.22 51868 <-> 71.197.74.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:00.336335 0.132432 udp 10.0.2.22 51868 <-> 79.52.138.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:01.329378 0.158624 udp 10.0.2.22 51868 <-> 69.249.214.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:02.316925 0.115034 udp 10.0.2.22 51868 <-> 69.77.158.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:03.303226 0.185754 udp 10.0.2.22 51868 <-> 207.134.219.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:04.291330 0.305378 udp 10.0.2.22 51868 <-> 177.139.72.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:05.275824 0.337428 udp 10.0.2.22 51868 <-> 112.158.196.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:06.266938 0.183019 udp 10.0.2.22 51868 <-> 66.69.187.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:07.248294 0.161495 udp 10.0.2.22 51868 <-> 67.166.233.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:08.237020 0.274311 udp 10.0.2.22 51868 <-> 177.192.239.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:09.224376 0.210606 udp 10.0.2.22 51868 <-> 71.237.49.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:10.210599 0.063783 udp 10.0.2.22 51868 <-> 2.105.183.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:11.195954 0.046442 udp 10.0.2.22 51868 <-> 46.214.114.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:12.180026 0.907865 udp 10.0.2.22 51868 <-> 124.120.213.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:13.171868 0.348363 udp 10.0.2.22 51868 <-> 111.242.31.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:14.152206 0.323586 udp 10.0.2.22 51868 <-> 186.88.103.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:15.141415 0.047219 udp 10.0.2.22 51868 <-> 212.83.78.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:16.128904 0.361574 udp 10.0.2.22 51868 <-> 58.90.60.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:17.115518 0.454813 udp 10.0.2.22 51868 <-> 117.203.81.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:18.100633 0.222870 udp 10.0.2.22 51868 <-> 99.16.13.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:18.955787 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:49:19.084679 4.280372 udp 10.0.2.22 51868 <-> 71.45.74.208 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:20.078596 0.180182 udp 10.0.2.22 51868 <-> 107.5.244.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:21.072471 0.161346 udp 10.0.2.22 51868 <-> 174.71.4.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:22.060895 0.000000 udp 10.0.2.22 51868 -> 178.201.156.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:49:24.185035 0.000000 udp 10.0.2.22 51868 -> 213.43.140.91 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:49:25.170293 2.716792 udp 10.0.2.22 51868 <-> 186.4.7.194 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:26.154155 0.163992 udp 10.0.2.22 51868 <-> 71.45.74.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:28.127091 0.000000 udp 10.0.2.22 51868 -> 71.197.28.72 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:49:29.115498 0.115596 udp 10.0.2.22 51868 <-> 24.122.27.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:30.102879 0.039322 udp 10.0.2.22 51868 <-> 84.197.172.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:31.088911 0.060964 udp 10.0.2.22 51868 <-> 84.32.149.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:32.074259 0.000000 udp 10.0.2.22 51868 -> 49.202.52.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:49:32.400883 0.000000 udp 10.0.2.22 51868 <- 213.43.140.91 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:49:33.058168 0.352215 udp 10.0.2.22 51868 <-> 180.215.93.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:34.048619 0.055198 udp 10.0.2.22 51868 <-> 188.24.81.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:35.027973 0.036211 udp 10.0.2.22 51868 <-> 89.132.240.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:36.016577 0.032117 udp 10.0.2.22 51868 <-> 212.186.12.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:37.003885 0.149106 udp 10.0.2.22 51868 <-> 24.51.140.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:37.992291 0.000000 udp 10.0.2.22 51868 -> 14.96.162.120 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:49:38.977447 0.000000 udp 10.0.2.22 51868 -> 75.187.154.240 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:49:39.961494 0.090084 udp 10.0.2.22 51868 <-> 79.186.2.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:40.957102 0.292481 udp 10.0.2.22 51868 <-> 187.11.102.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:41.936764 0.191858 udp 10.0.2.22 51868 <-> 49.204.213.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:42.927754 0.252139 udp 10.0.2.22 51868 <-> 75.85.212.148 16464 CON 0 0 5 3618 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:43.914845 0.168276 udp 10.0.2.22 51868 <-> 67.11.181.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:44.900887 0.475450 udp 10.0.2.22 51868 <-> 49.159.145.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:45.760597 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:49:45.889525 0.356700 udp 10.0.2.22 51868 <-> 113.254.174.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:46.873570 0.188529 udp 10.0.2.22 51868 <-> 124.125.22.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:47.868853 0.154296 udp 10.0.2.22 51868 <-> 192.252.239.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:48.848451 0.023888 udp 10.0.2.22 51868 <-> 83.83.126.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:49.839046 0.000000 udp 10.0.2.22 51868 -> 203.194.101.117 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:49:50.826151 0.066118 udp 10.0.2.22 51868 <-> 151.28.125.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:51.814761 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:49:52.799871 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:49:54.774086 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:49:55.755860 0.000057 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:49:55.755917 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:49:56.744262 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:49:57.731396 0.152765 udp 10.0.2.22 51868 <-> 24.138.62.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:58.719995 0.149831 udp 10.0.2.22 51868 <-> 71.82.74.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:49:59.706930 0.236262 udp 10.0.2.22 51868 <-> 117.204.120.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:00.690805 0.554993 udp 10.0.2.22 51868 <-> 190.78.39.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:01.682532 0.042235 udp 10.0.2.22 51868 <-> 147.156.178.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:02.662213 0.000000 udp 10.0.2.22 51868 -> 98.197.51.196 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:50:03.650226 0.155291 udp 10.0.2.22 51868 <-> 184.74.147.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:04.637165 0.358341 udp 10.0.2.22 51868 <-> 123.241.42.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:05.623843 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:50:06.608329 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:50:07.592717 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:50:08.582947 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:50:09.562752 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:50:10.550932 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:50:11.538045 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:50:12.395266 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:50:13.508901 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:50:14.492665 0.056979 udp 10.0.2.22 51868 <-> 89.28.48.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:15.482695 0.148267 udp 10.0.2.22 51868 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:16.461896 0.053886 udp 10.0.2.22 51868 <-> 141.136.14.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:17.450018 0.056795 udp 10.0.2.22 51868 <-> 78.88.209.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:18.439839 0.036466 udp 10.0.2.22 51868 <-> 188.254.136.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:19.425755 0.042103 udp 10.0.2.22 51868 <-> 79.133.245.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:20.415066 0.000000 udp 10.0.2.22 51868 -> 79.140.165.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:50:21.406359 3.946478 udp 10.0.2.22 51868 <-> 116.202.167.2 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:22.398077 2.272579 udp 10.0.2.22 51868 <-> 153.161.235.248 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:23.377613 0.000000 udp 10.0.2.22 51868 -> 78.50.27.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:50:26.373869 0.057725 udp 10.0.2.22 51868 <-> 91.211.110.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:27.360553 0.379031 udp 10.0.2.22 51868 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:28.678828 0.427986 udp 10.0.2.22 51868 <-> 189.68.134.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:29.669010 0.099769 udp 10.0.2.22 51868 <-> 78.50.27.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:30.648035 0.060054 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:31.637157 0.000000 udp 10.0.2.22 51868 -> 116.202.167.2 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:50:32.624126 0.066807 udp 10.0.2.22 51868 <-> 79.140.165.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:33.609976 0.040060 udp 10.0.2.22 51868 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:34.595322 0.000000 udp 10.0.2.22 51868 -> 114.36.70.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:50:35.586420 0.060797 udp 10.0.2.22 51868 <-> 95.220.247.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:36.576510 0.328986 udp 10.0.2.22 51868 <-> 2.184.54.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:37.555604 0.133225 udp 10.0.2.22 51868 <-> 37.215.169.144 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:38.544055 0.202986 udp 10.0.2.22 51868 <-> 75.102.177.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:39.412176 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:50:39.531149 0.199910 udp 10.0.2.22 51868 <-> 76.169.87.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:40.517567 0.166279 udp 10.0.2.22 51868 <-> 174.64.165.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:41.502670 0.000000 udp 10.0.2.22 51868 -> 95.59.21.62 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:50:42.493608 0.000000 udp 10.0.2.22 51868 -> 71.90.71.217 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:50:43.484773 0.000000 udp 10.0.2.22 51868 -> 116.75.23.119 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:50:44.463827 0.053196 udp 10.0.2.22 51868 <-> 86.52.36.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:45.452458 0.046148 udp 10.0.2.22 51868 <-> 95.76.197.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:46.439340 0.193744 udp 10.0.2.22 51868 <-> 64.139.119.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:47.424859 0.066759 udp 10.0.2.22 51868 <-> 78.206.76.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:48.410686 0.000000 udp 10.0.2.22 51868 -> 178.135.219.135 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:50:49.401740 0.158083 udp 10.0.2.22 51868 <-> 68.57.213.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:50.391517 0.339389 udp 10.0.2.22 51868 <-> 182.225.0.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:51.370429 0.131586 udp 10.0.2.22 51868 <-> 67.244.20.5 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:52.358236 0.172581 udp 10.0.2.22 51868 <-> 87.111.111.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:53.345054 0.252202 udp 10.0.2.22 51868 <-> 75.28.107.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:54.330641 0.157934 udp 10.0.2.22 51868 <-> 76.122.95.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:55.318459 0.150117 udp 10.0.2.22 51868 <-> 24.236.189.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:56.309774 0.041636 udp 10.0.2.22 51868 <-> 78.90.253.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:57.298345 4.094241 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:50:58.277147 0.000000 udp 10.0.2.22 51868 -> 201.210.213.118 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:50:59.265317 0.163563 udp 10.0.2.22 51868 <-> 24.182.200.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:00.252980 0.199206 udp 10.0.2.22 51868 <-> 76.14.200.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:02.223454 0.154754 udp 10.0.2.22 51868 <-> 68.57.213.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:03.214390 0.060030 udp 10.0.2.22 51868 <-> 95.108.60.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:04.204149 0.000000 udp 10.0.2.22 51868 -> 190.112.98.186 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:51:05.182882 0.147268 udp 10.0.2.22 51868 <-> 74.69.201.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:06.051392 0.000039 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:51:06.170421 0.370135 udp 10.0.2.22 51868 <-> 180.218.116.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:07.157060 0.025730 udp 10.0.2.22 51868 <-> 158.58.226.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:08.142603 0.844858 udp 10.0.2.22 51868 <-> 201.17.76.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:09.126793 0.000000 udp 10.0.2.22 51868 -> 92.155.154.106 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:51:10.117541 1.021912 udp 10.0.2.22 51868 <-> 195.189.250.153 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:12.086563 0.152791 udp 10.0.2.22 51868 <-> 24.201.162.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:13.074161 0.649073 udp 10.0.2.22 51868 <-> 181.54.23.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:14.060754 0.145283 udp 10.0.2.22 51868 <-> 96.22.178.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:15.047438 0.216553 udp 10.0.2.22 51868 <-> 190.37.211.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:16.031758 2.959558 udp 10.0.2.22 51868 <-> 111.253.66.42 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:17.022598 0.000000 udp 10.0.2.22 51868 -> 82.141.118.92 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:51:18.012624 0.000000 udp 10.0.2.22 51868 -> 92.87.69.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:51:19.978806 0.214310 udp 10.0.2.22 51868 <-> 116.68.242.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:20.964910 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:51:21.950218 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:51:22.934636 0.000000 udp 10.0.2.22 51868 -> 79.21.217.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:51:23.925269 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:51:24.903934 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:51:25.892895 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:51:26.881399 2.956991 udp 10.0.2.22 51868 -> 49.137.239.107 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:51:27.868001 0.322202 udp 10.0.2.22 51868 <-> 122.29.57.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:28.854060 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:51:30.829519 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:51:31.809281 0.293502 udp 10.0.2.22 51868 <-> 187.11.102.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:32.678370 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:51:32.797446 2.052198 udp 10.0.2.22 51868 <-> 188.2.163.17 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:33.785083 0.000000 udp 10.0.2.22 51868 -> 190.110.186.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:51:35.249144 2.082866 udp 10.0.2.22 51868 <- 49.137.239.107 16464 RSP 0 0 2 1780 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:51:35.757210 0.384704 udp 10.0.2.22 51868 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:36.741467 0.218611 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:37.732014 0.066782 udp 10.0.2.22 51868 <-> 95.220.247.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:38.711771 0.160173 udp 10.0.2.22 51868 <-> 70.185.202.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:39.700543 0.000000 udp 10.0.2.22 51868 -> 181.51.139.128 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:51:40.688022 0.191416 udp 10.0.2.22 51868 <-> 68.108.78.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:41.674313 0.035347 udp 10.0.2.22 51868 <-> 79.113.31.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:42.659783 0.037670 udp 10.0.2.22 51868 <-> 46.108.178.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:43.644172 2.898296 udp 10.0.2.22 51868 <-> 190.107.103.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:44.634581 0.000000 udp 10.0.2.22 51868 -> 116.193.136.103 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:51:45.616548 0.071470 udp 10.0.2.22 51868 <-> 83.97.194.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:46.605382 2.236095 udp 10.0.2.22 51868 <-> 84.232.108.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:47.592890 3.280876 udp 10.0.2.22 51868 <-> 14.97.61.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:48.580038 0.982271 udp 10.0.2.22 51868 <-> 173.230.174.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:49.566123 0.022513 udp 10.0.2.22 51868 <-> 37.24.57.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:50.550216 0.360925 udp 10.0.2.22 51868 <-> 113.252.190.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:51.549865 0.321744 udp 10.0.2.22 51868 <-> 58.140.164.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:51:52.529672 0.000000 udp 10.0.2.22 51868 -> 117.199.54.210 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:51:53.520974 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:51:54.511218 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:51:55.498794 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:51:57.468149 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:51:58.460711 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:51:59.325306 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:51:59.444366 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:52:00.432608 0.000054 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:52:00.432662 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:52:01.419869 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:52:02.406086 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:52:03.391344 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:52:04.375346 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:52:05.369627 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:52:06.349062 0.321737 udp 10.0.2.22 51868 <-> 58.140.164.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:07.337523 0.160801 udp 10.0.2.22 51868 <-> 27.106.26.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:08.324814 0.048662 udp 10.0.2.22 51868 <-> 188.124.177.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:09.310991 0.094314 udp 10.0.2.22 51868 <-> 217.114.188.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:10.296295 0.000000 udp 10.0.2.22 51868 -> 178.148.154.56 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:52:11.281153 3.595901 udp 10.0.2.22 51868 <-> 190.19.174.192 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:12.275844 0.000000 udp 10.0.2.22 51868 -> 116.193.141.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:52:13.595302 0.161015 udp 10.0.2.22 51868 <-> 174.102.151.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:15.571858 0.404839 udp 10.0.2.22 51868 <-> 118.168.126.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:16.557977 0.080658 udp 10.0.2.22 51868 <-> 195.174.56.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:17.543299 0.000000 udp 10.0.2.22 51868 -> 5.190.115.40 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:52:18.527587 0.039466 udp 10.0.2.22 51868 <-> 178.164.176.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:19.518078 0.087021 udp 10.0.2.22 51868 <-> 85.86.73.137 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:20.497572 1.046182 udp 10.0.2.22 51868 <-> 46.10.227.146 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:22.472948 0.212724 udp 10.0.2.22 51868 <-> 117.213.222.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:23.460580 0.000000 udp 10.0.2.22 51868 -> 76.95.164.196 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:52:24.444892 0.195869 udp 10.0.2.22 51868 <-> 49.205.152.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:25.429594 0.035823 udp 10.0.2.22 51868 <-> 81.98.10.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:26.290813 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:52:26.419969 0.154610 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:27.398944 0.229750 udp 10.0.2.22 51868 <-> 92.249.152.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:28.387337 0.161892 udp 10.0.2.22 51868 <-> 71.56.93.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:29.374845 0.984331 udp 10.0.2.22 51868 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:30.360886 0.197330 udp 10.0.2.22 51868 <-> 103.29.98.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:31.345938 0.000000 udp 10.0.2.22 51868 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:52:32.329479 0.109900 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:33.320405 0.161696 udp 10.0.2.22 51868 <-> 76.107.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:34.299754 0.620630 udp 10.0.2.22 51868 <-> 86.58.36.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:35.287822 0.315898 udp 10.0.2.22 51868 <-> 121.93.46.211 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:36.274874 0.050039 udp 10.0.2.22 51868 <-> 93.79.133.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:37.260587 0.291391 udp 10.0.2.22 51868 <-> 190.80.114.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:38.246230 2.138764 udp 10.0.2.22 51868 <-> 77.184.157.125 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:39.231024 0.028770 udp 10.0.2.22 51868 <-> 95.111.72.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:41.201808 0.602371 udp 10.0.2.22 51868 <-> 82.119.19.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:42.190288 0.053412 udp 10.0.2.22 51868 <-> 89.228.144.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:43.177390 0.422043 udp 10.0.2.22 51868 <-> 201.250.181.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:44.164373 0.047719 udp 10.0.2.22 51868 <-> 155.158.53.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:44.492663 0.011878 udp 10.0.2.22 60046 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 07:52:44.504867 0.000000 udp 10.0.2.22 60047 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:52:45.150094 0.032512 udp 10.0.2.22 51868 <-> 151.100.96.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:46.134078 0.139194 udp 10.0.2.22 51868 <-> 24.44.159.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:47.125982 0.167055 udp 10.0.2.22 51868 <-> 74.135.42.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:48.105221 0.064196 udp 10.0.2.22 51868 -> 88.246.192.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:52:48.169417 0.000000 icmp 88.246.192.14 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 07:52:49.093445 1.258531 udp 10.0.2.22 51868 <-> 190.246.10.33 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:51.066437 0.159275 udp 10.0.2.22 51868 <-> 98.214.56.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:52.053289 0.112659 udp 10.0.2.22 51868 <-> 24.253.132.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:52.915594 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:52:53.044564 0.104110 udp 10.0.2.22 51868 <-> 80.70.153.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:54.034749 0.368917 udp 10.0.2.22 51868 <-> 114.42.212.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:55.015650 0.036476 udp 10.0.2.22 51868 <-> 109.60.116.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:56.003270 0.570994 udp 10.0.2.22 51868 <-> 173.117.98.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:57.030962 0.141573 udp 10.0.2.22 51868 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:58.016879 0.062764 udp 10.0.2.22 51868 <-> 78.246.60.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:59.001520 0.219311 udp 10.0.2.22 51868 <-> 71.94.164.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:52:59.992756 0.461096 udp 10.0.2.22 51868 <-> 190.206.205.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:00.983366 3.051732 udp 10.0.2.22 51868 -> 37.28.217.44 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:53:02.060373 0.344517 udp 10.0.2.22 51868 <-> 36.232.204.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:03.048407 1.084277 udp 10.0.2.22 51868 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:05.022957 0.329468 udp 10.0.2.22 51868 <-> 5.190.123.252 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:06.007860 1.132951 udp 10.0.2.22 51868 <-> 181.166.124.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:06.998974 0.405199 udp 10.0.2.22 51868 <-> 118.168.121.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:07.989245 0.053678 udp 10.0.2.22 51868 <-> 95.180.177.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:08.968238 0.283259 udp 10.0.2.22 51868 <-> 76.202.180.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:09.956465 0.148559 udp 10.0.2.22 51868 <-> 67.81.98.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:10.943291 0.132429 udp 10.0.2.22 51868 <-> 87.19.144.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:11.929227 0.079808 udp 10.0.2.22 51868 <-> 212.92.251.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:12.914162 0.058062 udp 10.0.2.22 51868 <-> 95.180.65.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:13.905228 4.331768 udp 10.0.2.22 51868 <-> 186.191.22.56 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:14.895196 1.062400 udp 10.0.2.22 51868 <-> 212.225.185.175 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:16.865590 0.341259 udp 10.0.2.22 51868 <-> 114.45.22.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:18.837498 0.000000 udp 10.0.2.22 51868 -> 200.112.162.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:53:19.692972 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:53:19.821933 0.000000 udp 10.0.2.22 51868 -> 189.83.236.185 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:53:20.813079 1.928797 udp 10.0.2.22 51868 <-> 180.74.71.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:21.803032 0.350788 udp 10.0.2.22 51868 <-> 49.144.9.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:22.782552 0.148415 udp 10.0.2.22 51868 <-> 5.139.91.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:23.773437 0.424600 udp 10.0.2.22 51868 <-> 200.215.19.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:24.760205 0.148460 udp 10.0.2.22 51868 <-> 69.249.127.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:25.746110 0.313943 udp 10.0.2.22 51868 <-> 202.95.61.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:26.731211 0.000000 udp 10.0.2.22 51868 -> 190.146.82.97 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:53:27.723524 0.000000 udp 10.0.2.22 51868 -> 24.163.56.182 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:53:28.713377 0.159913 udp 10.0.2.22 51868 <-> 12.39.137.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:29.691564 0.000000 udp 10.0.2.22 51868 -> 190.174.243.56 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:53:30.679854 0.220614 udp 10.0.2.22 51868 <-> 177.224.86.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:31.667034 0.206561 udp 10.0.2.22 51868 <-> 71.93.149.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:32.653099 0.084648 udp 10.0.2.22 51868 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:33.637601 0.174094 udp 10.0.2.22 51868 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:34.628350 0.060709 udp 10.0.2.22 51868 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:35.618602 0.226842 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:36.597304 0.338207 udp 10.0.2.22 51868 <-> 121.133.29.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:37.585982 0.162243 udp 10.0.2.22 51868 <-> 72.133.37.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:38.572490 2.016727 udp 10.0.2.22 51868 <-> 62.68.106.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:39.558076 0.047184 udp 10.0.2.22 51868 <-> 46.214.114.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:40.542607 0.206929 udp 10.0.2.22 51868 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:41.533458 3.823479 udp 10.0.2.22 51868 <-> 200.125.109.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:42.523150 0.000000 udp 10.0.2.22 51868 -> 80.253.61.151 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:53:43.501615 0.000000 udp 10.0.2.22 51868 -> 114.174.39.164 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:53:44.489600 0.513265 udp 10.0.2.22 51868 <-> 14.97.183.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:45.476279 0.000000 udp 10.0.2.22 51868 -> 71.89.50.92 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:53:46.332574 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:53:46.461468 0.064691 udp 10.0.2.22 51868 <-> 93.105.14.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:47.445743 1.713008 udp 10.0.2.22 51868 <-> 177.80.15.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:48.436565 0.678649 udp 10.0.2.22 51868 <-> 80.91.213.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:49.426547 0.034811 udp 10.0.2.22 51868 <-> 178.79.29.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:50.405563 0.063411 udp 10.0.2.22 51868 <-> 78.228.60.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:53:51.393274 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:53:52.381415 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:53:53.366920 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:53:54.351237 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:53:55.341873 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:53:56.321595 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:53:57.310018 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:53:58.297486 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:53:59.283744 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:00.269071 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:01.254035 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:02.244635 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:03.224368 0.055573 udp 10.0.2.22 51868 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:54:04.212869 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:05.200836 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:06.187271 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:06.907873 2.962171 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 07:54:07.172760 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:08.157228 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:09.147945 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:11.116539 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:12.104365 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:12.971528 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:54:13.090548 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:13.818049 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:54:14.075871 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:15.059942 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:16.050835 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:17.030226 0.000053 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:17.030279 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:54:18.021580 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:19.009051 0.055675 udp 10.0.2.22 51868 <-> 5.43.104.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:54:19.995168 0.115712 udp 10.0.2.22 51868 <-> 188.167.119.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:54:20.980091 0.038627 udp 10.0.2.22 51868 <-> 176.12.49.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:54:21.706519 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:54:21.964189 0.000000 udp 10.0.2.22 51868 -> 166.140.134.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:22.954577 0.000000 udp 10.0.2.22 51868 -> 76.173.112.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:23.934144 0.179322 udp 10.0.2.22 51868 <-> 103.250.145.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:54:24.923083 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:25.910721 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:26.897078 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:27.882016 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:28.866103 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:29.857454 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:30.837272 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:31.825861 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:32.813063 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:33.799313 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:34.784490 0.038364 udp 10.0.2.22 51868 <-> 176.12.49.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:54:35.768688 0.003957 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:35.772645 0.000000 icmp 195.113.235.65 0x0003 -> 10.0.2.22 0x9efe URN 192 1 110 flow=Background 1970/01/01 07:54:36.758976 0.000046 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:36.759022 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:54:37.490634 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:54:37.738414 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:38.726959 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:39.595192 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:54:39.714201 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:40.700653 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:41.685796 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:42.669672 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:43.661117 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:44.641440 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:45.629582 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:46.616796 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:47.602747 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:48.587778 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:49.571781 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:50.564940 0.000000 udp 10.0.2.22 51868 -> 84.182.163.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:51.544273 0.053470 udp 10.0.2.22 51868 <-> 213.214.69.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:54:52.532449 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:53.519854 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:54.505901 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:55.490746 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:56.474644 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:57.466446 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:58.446065 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:54:59.435413 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:00.422504 0.000046 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:00.422550 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:55:01.408565 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:03.377602 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:04.367899 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:05.347135 1.856322 arp 10.0.2.22 who 169.254.194.23 INT 3 126 flow=Background-ARP 1970/01/01 07:55:06.216247 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:55:06.335325 0.057428 udp 10.0.2.22 51868 <-> 212.104.169.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:55:07.322412 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:08.308664 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:09.046152 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 07:55:09.294135 0.000072 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:09.294207 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:55:10.278056 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:11.268752 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:12.248280 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:13.236353 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:14.223300 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:15.209052 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:16.193870 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:17.178418 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:18.168447 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:19.148747 2.960949 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:20.136678 2.957924 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:21.123529 0.135161 udp 10.0.2.22 51868 <-> 188.167.119.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:55:24.078800 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:25.068930 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:26.047908 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:27.036321 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:28.024521 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:29.010122 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:29.994798 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:30.985884 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:31.975944 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:32.835961 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:55:33.942775 0.000053 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:33.942828 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:55:34.929810 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:35.915904 1.847714 arp 10.0.2.22 who 169.254.194.23 INT 3 126 flow=Background-ARP 1970/01/01 07:55:36.900501 0.081315 udp 10.0.2.22 51868 <-> 188.167.119.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:55:37.892365 0.053453 udp 10.0.2.22 51868 <-> 213.214.69.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:55:38.882252 0.077175 udp 10.0.2.22 51868 <-> 134.249.0.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:55:39.861752 1.974504 udp 10.0.2.22 51868 -> 103.250.145.20 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:40.849630 0.163742 udp 10.0.2.22 51868 <-> 108.176.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:55:42.822027 0.000000 udp 10.0.2.22 51868 -> 166.140.134.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:43.806876 0.035486 udp 10.0.2.22 51868 <-> 178.79.32.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:55:44.798581 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:45.788496 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:46.767514 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:47.755405 0.960144 udp 10.0.2.22 51868 <-> 84.182.163.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:55:48.743973 0.264625 udp 10.0.2.22 51868 <-> 37.250.16.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:55:49.729497 0.041534 udp 10.0.2.22 51868 <-> 31.11.133.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:55:50.714032 0.262586 udp 10.0.2.22 51868 <-> 77.184.157.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:55:51.705211 0.032454 udp 10.0.2.22 51868 <-> 87.97.242.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:55:52.695065 0.000000 udp 10.0.2.22 51868 -> 90.244.199.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:53.673989 0.225274 udp 10.0.2.22 51868 <-> 68.199.153.224 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:55:54.661792 0.168257 udp 10.0.2.22 51868 <-> 24.113.18.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:55:55.649595 4.930464 udp 10.0.2.22 51868 <-> 181.166.124.51 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:55:56.635203 3.024634 udp 10.0.2.22 51868 <-> 188.173.128.69 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:55:57.619740 0.171264 udp 10.0.2.22 51868 <-> 72.191.6.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:55:58.611536 0.000000 udp 10.0.2.22 51868 -> 173.210.217.104 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:55:59.472350 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:56:01.567807 0.000000 udp 10.0.2.22 51868 -> 188.158.228.113 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:56:01.626691 0.000000 udp 10.0.2.22 51868 <- 181.166.124.51 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:56:02.603292 0.058763 udp 10.0.2.22 51868 <-> 188.173.128.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:56:03.589413 0.043248 udp 10.0.2.22 51868 <-> 84.252.22.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:56:04.574537 0.308463 udp 10.0.2.22 51868 <-> 151.77.121.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:56:05.565337 0.322194 udp 10.0.2.22 51868 <-> 186.94.84.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:56:06.555067 0.318492 udp 10.0.2.22 51868 <-> 76.119.125.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:56:07.679335 0.541466 udp 10.0.2.22 51868 <-> 31.185.113.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:56:08.667106 0.050193 udp 10.0.2.22 51868 <-> 31.176.241.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:56:09.653611 1.029314 udp 10.0.2.22 51868 <-> 89.136.139.4 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:56:11.623788 0.201170 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:56:12.648915 3.943024 udp 10.0.2.22 51868 <-> 69.193.106.231 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:56:13.638630 0.420953 udp 10.0.2.22 51868 <-> 75.187.154.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:56:14.617501 0.259084 udp 10.0.2.22 51868 <-> 186.70.25.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:56:15.605262 0.028466 udp 10.0.2.22 51868 <-> 213.240.199.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:56:25.983584 1.791115 udp 10.0.2.22 51868 <-> 69.193.106.231 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:56:28.765412 0.227886 udp 10.0.2.22 51868 <-> 79.7.27.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:56:29.755150 0.000000 udp 10.0.2.22 51868 -> 186.134.228.127 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:56:30.734944 0.325642 udp 10.0.2.22 51868 <-> 202.95.61.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:56:33.860130 0.000000 udp 10.0.2.22 51868 -> 98.183.15.44 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:56:34.836477 0.048278 udp 10.0.2.22 51868 <-> 217.24.79.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:56:35.821898 0.000000 udp 10.0.2.22 51868 -> 109.194.231.7 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:56:36.806443 0.000000 udp 10.0.2.22 51868 -> 75.187.154.240 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:56:37.668265 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:56:37.797269 0.656785 udp 10.0.2.22 51868 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:56:38.781241 0.278607 udp 10.0.2.22 51868 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:56:57.021837 0.000000 udp 10.0.2.22 51868 -> 179.57.31.53 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:56:57.998089 0.000000 udp 10.0.2.22 51868 -> 153.135.189.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:57:17.209849 0.000000 udp 10.0.2.22 51868 <- 153.135.189.22 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:57:17.878304 0.224954 udp 10.0.2.22 51868 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:57:18.862093 0.263347 udp 10.0.2.22 51868 <-> 190.207.157.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:57:19.848982 0.000000 udp 10.0.2.22 51868 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:57:20.838805 0.368646 udp 10.0.2.22 51868 <-> 114.37.15.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:57:21.817533 0.305534 udp 10.0.2.22 51868 <-> 190.160.37.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:57:22.805182 0.305880 udp 10.0.2.22 51868 <-> 153.135.189.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:57:23.791105 0.015427 udp 10.0.2.22 51868 <-> 164.8.204.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:57:24.776369 0.056592 udp 10.0.2.22 51868 <-> 85.204.248.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:57:25.760421 1.667243 udp 10.0.2.22 51868 <-> 186.18.157.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:57:26.744568 0.000000 udp 10.0.2.22 51868 -> 98.183.15.44 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:57:27.734153 0.096800 udp 10.0.2.22 51868 <-> 88.66.100.10 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:57:28.712868 0.397756 udp 10.0.2.22 51868 <-> 114.37.15.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:57:29.700749 0.685427 udp 10.0.2.22 51868 <-> 68.7.171.6 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:57:30.687515 0.042341 udp 10.0.2.22 51868 <-> 83.166.27.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:57:31.672600 3.935189 udp 10.0.2.22 51868 -> 74.69.165.61 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:57:32.656421 0.000000 udp 10.0.2.22 51868 -> 95.220.247.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:57:33.639450 0.115767 udp 10.0.2.22 51868 <-> 24.102.154.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:57:34.629176 4.921654 udp 10.0.2.22 51868 <-> 46.233.24.59 16464 CON 0 0 5 1954 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:57:37.581716 0.050248 udp 10.0.2.22 51868 <-> 5.14.226.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:57:38.567059 0.120523 udp 10.0.2.22 51868 <-> 24.57.120.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:57:39.717283 0.000000 udp 10.0.2.22 51868 <- 46.233.24.59 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:57:40.404795 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:57:40.533632 0.000000 udp 10.0.2.22 51868 -> 2.68.0.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:57:41.523208 0.278790 udp 10.0.2.22 51868 <-> 200.122.103.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:57:42.501501 0.216911 udp 10.0.2.22 51868 <-> 68.189.5.0 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:57:43.488588 0.346014 udp 10.0.2.22 51868 <-> 24.102.154.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:57:44.474872 0.216109 udp 10.0.2.22 51868 <-> 76.90.73.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:57:45.459847 0.559829 udp 10.0.2.22 51868 <-> 190.198.225.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:57:46.443818 0.509184 udp 10.0.2.22 51868 <-> 201.211.111.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:57:47.426375 0.000000 udp 10.0.2.22 51868 -> 46.233.24.59 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:57:47.980760 0.000000 udp 10.0.2.22 51868 <- 2.68.0.64 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:57:48.416175 0.326688 udp 10.0.2.22 51868 <-> 189.111.16.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:57:49.394611 0.000000 udp 10.0.2.22 51868 -> 74.69.165.61 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:57:50.381520 0.000000 udp 10.0.2.22 51868 -> 186.91.198.180 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:57:51.367607 0.152153 udp 10.0.2.22 51868 <-> 24.57.120.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:57:52.352539 0.540771 udp 10.0.2.22 51868 <-> 186.92.209.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:57:58.110008 0.120374 udp 10.0.2.22 51868 <-> 24.57.120.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:57:59.082741 0.000000 udp 10.0.2.22 51868 -> 94.197.234.60 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:58:00.072501 1.250628 udp 10.0.2.22 51868 <-> 190.49.221.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:01.049584 0.000000 udp 10.0.2.22 51868 -> 2.177.249.115 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:58:02.036902 0.030065 udp 10.0.2.22 51868 <-> 31.17.92.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:03.023593 0.147701 udp 10.0.2.22 51868 <-> 74.199.89.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:04.007811 0.153889 udp 10.0.2.22 51868 <-> 66.31.49.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:04.991653 0.000000 udp 10.0.2.22 51868 -> 166.159.168.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:58:05.973502 0.000000 udp 10.0.2.22 51868 -> 78.88.209.105 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:58:06.964401 0.041179 udp 10.0.2.22 51868 <-> 89.134.105.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:07.942676 0.000000 udp 10.0.2.22 51868 -> 74.161.16.231 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:58:08.929839 0.184816 udp 10.0.2.22 51868 <-> 79.22.181.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:09.916201 0.065851 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:10.901452 1.236953 udp 10.0.2.22 51868 <-> 201.17.131.137 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:11.756259 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:58:12.867482 1.153383 udp 10.0.2.22 51868 <-> 183.83.111.114 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:14.834923 1.167731 udp 10.0.2.22 51868 <-> 199.167.165.34 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:16.808341 0.744282 udp 10.0.2.22 51868 <-> 85.202.213.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:17.792453 2.039840 udp 10.0.2.22 51868 <-> 213.60.101.175 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:18.776951 1.971991 udp 10.0.2.22 51868 -> 173.238.13.174 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:58:21.727613 0.387629 udp 10.0.2.22 51868 <-> 190.199.66.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:22.714979 3.223229 udp 10.0.2.22 51868 <-> 79.7.27.9 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:23.706501 0.039048 udp 10.0.2.22 51868 <-> 89.73.207.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:24.691406 1.149865 udp 10.0.2.22 51868 <-> 195.174.174.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:26.657898 1.848561 arp 10.0.2.22 who 169.254.239.0 INT 3 126 flow=Background-ARP 1970/01/01 07:58:27.647540 0.039391 udp 10.0.2.22 51868 <-> 89.137.133.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:28.625526 0.030848 udp 10.0.2.22 51868 <-> 37.209.66.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:29.612944 0.275853 udp 10.0.2.22 51868 <-> 201.235.247.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:30.598847 0.180259 udp 10.0.2.22 51868 <-> 75.65.7.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:31.583707 0.046607 udp 10.0.2.22 51868 <-> 109.228.177.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:32.567417 0.164280 udp 10.0.2.22 51868 <-> 67.103.179.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:33.550254 4.806263 udp 10.0.2.22 51868 <-> 79.117.37.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:39.300755 0.059342 udp 10.0.2.22 51868 <-> 94.253.254.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:40.277950 0.000000 udp 10.0.2.22 51868 -> 93.44.76.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:58:41.263871 0.000000 udp 10.0.2.22 51868 -> 192.168.1.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:58:42.248775 1.027868 udp 10.0.2.22 51868 <-> 89.136.139.4 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:43.103591 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:58:44.215105 1.023361 udp 10.0.2.22 51868 <-> 81.232.31.141 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:46.184726 0.155033 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:47.161825 0.000000 udp 10.0.2.22 51868 -> 98.183.15.44 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:58:48.147787 0.000000 udp 10.0.2.22 51868 -> 186.92.209.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:58:49.132757 4.921451 udp 10.0.2.22 51868 <-> 66.131.122.48 16464 CON 0 0 5 1954 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:50.116326 0.051686 udp 10.0.2.22 51868 <-> 46.253.3.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:51.098997 1.977855 udp 10.0.2.22 51868 -> 109.122.245.47 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:58:54.296620 0.000000 udp 10.0.2.22 51868 <- 66.131.122.48 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:58:55.040126 0.044055 udp 10.0.2.22 51868 <-> 95.180.89.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:56.024543 0.031444 udp 10.0.2.22 51868 <-> 212.104.97.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:57.008104 0.216514 udp 10.0.2.22 51868 <-> 68.189.5.0 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:58:57.990449 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:58:58.980566 0.000047 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:58:58.980613 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:58:59.969185 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:00.946840 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:01.932724 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:02.917407 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:03.900890 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:04.883239 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:05.872432 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:06.860836 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:07.838052 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:08.823727 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:11.902262 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:59:12.021142 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:13.004765 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:13.987057 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:14.976302 0.193162 udp 10.0.2.22 51868 <-> 24.59.225.47 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:59:15.963163 0.036690 udp 10.0.2.22 51868 <-> 46.162.107.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:59:16.940082 0.074805 udp 10.0.2.22 51868 <-> 92.2.231.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:59:17.925549 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:18.910317 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:19.893572 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:20.875702 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:21.864978 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:22.852894 0.157752 udp 10.0.2.22 51868 <-> 96.59.16.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:59:23.832862 0.064291 udp 10.0.2.22 51868 <-> 94.190.190.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:59:24.818582 0.025051 udp 10.0.2.22 51868 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:59:25.803052 0.000000 udp 10.0.2.22 51868 -> 75.109.202.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:26.786511 0.000000 udp 10.0.2.22 51868 -> 116.202.167.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:27.769818 0.046274 udp 10.0.2.22 51868 <-> 89.136.139.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:59:28.759044 0.000000 udp 10.0.2.22 51868 -> 201.155.143.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:29.747237 0.000000 udp 10.0.2.22 51868 -> 151.66.144.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:30.725555 0.058490 udp 10.0.2.22 51868 <-> 82.242.254.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:59:31.711241 0.000000 udp 10.0.2.22 51868 -> 109.227.119.136 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:32.696500 0.057459 udp 10.0.2.22 51868 <-> 88.169.45.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:59:33.683099 0.068802 udp 10.0.2.22 51868 <-> 46.185.30.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:59:34.665157 0.000000 udp 10.0.2.22 51868 -> 223.223.153.112 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:35.654124 0.299186 udp 10.0.2.22 51868 <-> 175.111.126.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:59:36.641999 0.000000 udp 10.0.2.22 51868 -> 89.40.179.170 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:37.618821 0.000095 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:37.618916 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 07:59:38.485458 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 07:59:38.604295 0.053345 udp 10.0.2.22 51868 <-> 82.242.254.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:59:39.588725 0.036014 udp 10.0.2.22 51868 <-> 151.100.72.34 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:59:40.576396 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:41.559641 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:44.123857 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:45.117132 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:46.100289 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:47.091741 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:48.083043 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:49.076075 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:50.067700 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:51.061651 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:52.054745 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:53.037087 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:54.028890 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 07:59:55.019579 0.125387 udp 10.0.2.22 51868 <-> 206.132.60.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:59:56.010232 0.302221 udp 10.0.2.22 51868 <-> 201.227.74.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:59:56.999741 2.031383 udp 10.0.2.22 51868 <-> 89.216.146.135 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:59:57.993447 0.254848 udp 10.0.2.22 51868 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 07:59:59.980250 0.156426 udp 10.0.2.22 51868 <-> 71.234.71.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:00.972011 0.036065 udp 10.0.2.22 51868 <-> 79.118.181.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:01.963304 0.024290 udp 10.0.2.22 51868 <-> 82.101.244.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:02.956231 0.165731 udp 10.0.2.22 51868 <-> 124.123.111.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:03.946118 0.088641 udp 10.0.2.22 51868 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:04.940405 0.141705 udp 10.0.2.22 51868 <-> 97.80.163.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:05.926741 0.000000 udp 10.0.2.22 51868 -> 75.109.202.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:00:06.806912 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:00:06.927082 0.000000 udp 10.0.2.22 51868 -> 116.202.167.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:00:07.928378 0.000000 udp 10.0.2.22 51868 -> 201.155.143.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:00:08.930066 0.000000 udp 10.0.2.22 51868 -> 151.66.144.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:00:11.526003 2.109880 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:12.519125 0.227480 udp 10.0.2.22 51868 <-> 190.128.51.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:14.492470 0.174362 udp 10.0.2.22 51868 <-> 75.111.219.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:15.483829 0.304056 udp 10.0.2.22 51868 <-> 124.39.69.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:16.473047 0.143245 udp 10.0.2.22 51868 <-> 66.168.86.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:17.461202 0.132160 udp 10.0.2.22 51868 <-> 109.102.131.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:18.449580 0.400100 udp 10.0.2.22 51868 <-> 111.252.202.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:19.435858 0.000000 udp 10.0.2.22 51868 -> 37.190.195.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:00:20.427801 2.960270 udp 10.0.2.22 51868 -> 179.99.106.29 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:00:21.409088 3.993679 udp 10.0.2.22 51868 <-> 147.143.243.34 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:22.398948 0.048725 udp 10.0.2.22 51868 <-> 217.24.79.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:24.378377 1.292709 udp 10.0.2.22 51868 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:26.354189 0.124536 udp 10.0.2.22 51868 <-> 24.75.190.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:27.346429 0.057773 udp 10.0.2.22 51868 <-> 89.190.97.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:28.327848 0.124381 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:29.317929 1.107493 udp 10.0.2.22 51868 <-> 89.228.227.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:30.306455 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:00:31.295646 0.000000 udp 10.0.2.22 51868 -> 201.241.29.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:00:32.288787 0.048525 udp 10.0.2.22 51868 <-> 217.24.79.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:33.275341 0.173761 udp 10.0.2.22 51868 -> 204.195.60.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:00:33.449102 0.000000 icmp 204.195.60.21 0x0303 -> 10.0.2.22 0x5040 URP 192 1 70 flow=Background 1970/01/01 08:00:34.267283 0.000000 udp 10.0.2.22 51868 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:00:35.133182 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:00:35.252367 0.034919 udp 10.0.2.22 51868 <-> 92.244.2.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:36.244697 0.000000 udp 10.0.2.22 51868 -> 94.197.234.60 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:00:37.233408 0.000000 udp 10.0.2.22 51868 -> 88.163.39.243 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:00:38.221416 1.247072 udp 10.0.2.22 51868 <-> 89.228.227.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:39.214389 0.158997 udp 10.0.2.22 51868 <-> 69.1.2.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:40.200523 2.092726 udp 10.0.2.22 51868 <-> 94.134.22.242 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:41.192777 0.000000 udp 10.0.2.22 51868 -> 49.144.9.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:00:43.164237 0.041750 udp 10.0.2.22 51868 <-> 5.15.151.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:44.153562 0.000000 udp 10.0.2.22 51868 -> 79.21.217.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:00:45.141297 0.304581 udp 10.0.2.22 51868 <-> 186.94.84.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:46.129269 2.285961 udp 10.0.2.22 51868 <-> 36.86.156.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:49.127966 0.000000 udp 10.0.2.22 51868 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:00:50.118400 0.364816 udp 10.0.2.22 51868 <-> 125.1.93.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:51.097885 0.366052 udp 10.0.2.22 51868 <-> 111.252.202.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:52.086333 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:00:53.073707 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:00:54.059861 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:00:55.044927 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:00:56.029753 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:00:57.020314 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:00:57.999518 0.064957 udp 10.0.2.22 51868 <-> 217.175.12.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:58.990528 0.060304 udp 10.0.2.22 51868 <-> 89.190.97.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:00:59.977948 0.409170 udp 10.0.2.22 51868 <-> 75.214.226.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:00.965860 0.373114 udp 10.0.2.22 51868 <-> 118.161.173.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:01.950830 0.308747 udp 10.0.2.22 51868 <-> 189.110.195.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:02.934730 0.061769 udp 10.0.2.22 51868 <-> 31.222.103.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:03.796119 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:01:03.925011 0.321915 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:04.906375 0.041153 udp 10.0.2.22 51868 <-> 5.15.151.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:05.895069 1.714804 udp 10.0.2.22 51868 <-> 190.1.107.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:06.882326 0.158957 udp 10.0.2.22 51868 <-> 66.176.196.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:07.868445 1.189579 udp 10.0.2.22 51868 <-> 186.92.193.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:08.852586 0.000000 udp 10.0.2.22 51868 -> 77.52.79.55 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:01:09.836641 0.165472 udp 10.0.2.22 51868 <-> 75.73.227.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:10.826952 0.000000 udp 10.0.2.22 51868 -> 76.117.231.81 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:01:11.806308 0.561226 udp 10.0.2.22 51868 <-> 98.145.222.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:12.794429 1.973342 udp 10.0.2.22 51868 -> 115.242.146.176 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:01:13.781730 0.296786 udp 10.0.2.22 51868 <-> 70.189.102.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:15.752825 1.974240 udp 10.0.2.22 51868 -> 216.196.163.200 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:01:16.736893 0.054112 udp 10.0.2.22 51868 <-> 37.145.43.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:18.121958 0.000000 udp 10.0.2.22 51868 <- 115.242.146.176 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:01:18.706321 0.000000 udp 10.0.2.22 51868 -> 190.94.221.68 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:01:22.206319 0.000000 udp 10.0.2.22 51868 -> 189.110.195.236 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:01:23.193269 0.000000 udp 10.0.2.22 51868 -> 83.221.86.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:01:24.179139 0.147499 udp 10.0.2.22 51868 <-> 24.191.109.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:25.163817 0.137849 udp 10.0.2.22 51868 <-> 192.222.24.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:25.547335 0.000000 udp 10.0.2.22 51868 <- 190.94.221.68 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:01:26.147833 0.047064 udp 10.0.2.22 51868 <-> 77.78.239.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:27.138093 0.838693 udp 10.0.2.22 51868 <-> 203.192.241.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:28.117422 0.000000 udp 10.0.2.22 51868 -> 69.122.151.230 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:01:28.200978 0.000000 udp 10.0.2.22 51868 <- 76.117.231.81 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:01:29.106280 0.000000 udp 10.0.2.22 51868 -> 62.221.143.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:01:30.093241 0.150128 udp 10.0.2.22 51868 <-> 70.26.75.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:31.079106 0.348226 udp 10.0.2.22 51868 <-> 123.195.215.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:32.065605 0.093147 udp 10.0.2.22 51868 <-> 151.74.151.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:32.920515 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:01:33.049511 0.033161 udp 10.0.2.22 51868 <-> 77.236.190.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:34.039636 0.072471 udp 10.0.2.22 51868 <-> 128.71.112.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:35.019060 0.162260 udp 10.0.2.22 51868 <-> 24.126.146.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:36.009527 0.044770 udp 10.0.2.22 51868 <-> 5.13.113.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:36.996441 0.120050 udp 10.0.2.22 51868 <-> 24.230.249.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:37.981923 0.302053 udp 10.0.2.22 51868 <-> 113.42.119.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:38.966935 0.087819 udp 10.0.2.22 51868 <-> 77.78.246.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:39.958146 0.036504 udp 10.0.2.22 51868 <-> 89.71.59.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:40.947494 0.608153 udp 10.0.2.22 51868 <-> 177.35.181.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:41.929896 0.221218 udp 10.0.2.22 51868 <-> 190.146.36.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:42.920458 0.054947 udp 10.0.2.22 51868 <-> 92.52.156.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:43.909616 0.000000 udp 10.0.2.22 51868 -> 46.238.27.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:01:44.895476 0.125618 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:45.880273 0.136831 udp 10.0.2.22 51868 <-> 66.212.208.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:46.872403 0.139583 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:47.862649 0.255038 udp 10.0.2.22 51868 <-> 190.201.175.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:48.841878 0.063040 udp 10.0.2.22 51868 <-> 77.240.67.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:49.829861 0.167131 udp 10.0.2.22 51868 <-> 135.19.58.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:50.817604 0.433049 udp 10.0.2.22 51868 <-> 183.72.50.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:54.588908 0.070814 udp 10.0.2.22 51868 <-> 83.97.251.198 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:55.563573 0.196587 udp 10.0.2.22 51868 <-> 208.126.231.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:56.554572 0.187475 udp 10.0.2.22 51868 <-> 1.23.91.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:57.544652 0.069239 udp 10.0.2.22 51868 <-> 92.249.152.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:58.523834 0.675621 udp 10.0.2.22 51868 <-> 190.78.25.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:01:59.513660 0.139512 udp 10.0.2.22 51868 <-> 24.165.184.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:00.500395 0.158004 udp 10.0.2.22 51868 <-> 65.27.180.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:01.485755 0.120076 udp 10.0.2.22 51868 <-> 37.229.98.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:02.341553 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:02:02.470465 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:02:03.461629 0.088473 udp 10.0.2.22 51868 <-> 2.92.89.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:04.451632 0.000000 udp 10.0.2.22 51868 -> 85.84.235.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:02:05.430686 0.574762 udp 10.0.2.22 51868 <-> 124.171.169.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:06.418752 0.169447 udp 10.0.2.22 51868 <-> 68.113.207.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:07.405588 0.155891 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:08.394182 0.239054 udp 10.0.2.22 51868 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:09.382576 3.055864 udp 10.0.2.22 51868 <-> 62.113.14.245 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:11.365370 0.000000 udp 10.0.2.22 51868 -> 27.63.238.176 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:02:13.335252 0.427995 udp 10.0.2.22 51868 <-> 72.252.170.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:14.321853 0.070916 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:15.307332 0.285870 udp 10.0.2.22 51868 <-> 200.30.233.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:16.292168 0.000000 udp 10.0.2.22 51868 -> 82.64.182.140 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:02:17.283008 0.669361 udp 10.0.2.22 51868 <-> 85.231.171.243 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:18.028702 2.961177 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 08:02:18.273012 0.048355 udp 10.0.2.22 51868 <-> 78.62.44.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:19.253461 0.116447 udp 10.0.2.22 51868 <-> 2.193.226.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:20.240907 0.140274 udp 10.0.2.22 51868 <-> 79.22.103.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:21.228005 0.916651 udp 10.0.2.22 51868 <-> 179.215.152.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:22.213460 0.061515 udp 10.0.2.22 51868 <-> 82.242.254.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:23.197905 0.143005 udp 10.0.2.22 51868 <-> 24.44.159.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:24.188836 0.366093 udp 10.0.2.22 51868 <-> 190.78.25.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:24.940792 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:02:27.591205 3.167531 udp 10.0.2.22 51868 <-> 50.193.233.87 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:28.570244 0.000000 udp 10.0.2.22 51868 -> 66.31.49.90 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:02:29.557862 0.185344 udp 10.0.2.22 51868 <-> 74.77.183.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:31.401305 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:02:31.530226 0.042331 udp 10.0.2.22 51868 <-> 84.212.44.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:32.514602 0.076781 udp 10.0.2.22 51868 <-> 176.194.179.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:33.505480 0.160076 udp 10.0.2.22 51868 <-> 69.14.223.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:34.485202 0.318569 udp 10.0.2.22 51868 <-> 187.74.78.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:35.255886 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:02:35.473983 0.152085 udp 10.0.2.22 51868 <-> 68.198.80.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:36.461583 0.000000 udp 10.0.2.22 51868 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:02:37.448244 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:02:38.440428 0.064895 udp 10.0.2.22 51868 <-> 188.2.139.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:39.425007 0.286007 udp 10.0.2.22 51868 <-> 181.166.30.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:40.417048 0.045615 udp 10.0.2.22 51868 <-> 178.150.200.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:41.396932 0.000000 udp 10.0.2.22 51868 -> 117.207.154.172 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:02:42.385561 0.196160 udp 10.0.2.22 51868 <-> 71.92.82.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:43.373063 0.152296 udp 10.0.2.22 51868 <-> 174.108.102.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:44.359455 0.566912 udp 10.0.2.22 51868 <-> 181.166.176.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:45.345178 0.190116 udp 10.0.2.22 51868 <-> 68.101.204.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:46.329571 1.394880 udp 10.0.2.22 51868 <-> 49.202.236.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:47.320289 0.140150 udp 10.0.2.22 51868 <-> 120.88.42.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:48.299928 0.143359 udp 10.0.2.22 51868 <-> 109.54.96.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:49.288574 0.239191 udp 10.0.2.22 51868 <-> 177.226.26.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:50.276297 0.039127 udp 10.0.2.22 51868 <-> 85.226.28.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:51.044680 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:02:51.262781 2.130796 udp 10.0.2.22 51868 <-> 204.195.53.234 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:52.248389 0.137038 udp 10.0.2.22 51868 <-> 24.91.138.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:54.224277 0.166835 udp 10.0.2.22 51868 <-> 68.226.220.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:55.203937 0.358537 udp 10.0.2.22 51868 <-> 124.6.23.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:02:56.194240 0.000000 udp 10.0.2.22 51868 -> 79.113.119.126 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:02:57.181197 0.347021 udp 10.0.2.22 51868 <-> 187.49.27.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:03:01.659130 0.000137 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:03:01.768064 0.000000 udp 10.0.2.22 51868 -> 70.233.97.220 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:02.753497 0.325235 udp 10.0.2.22 51868 <-> 119.14.177.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:03:03.738395 0.157800 udp 10.0.2.22 51868 <-> 98.212.63.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:03:04.729895 0.000000 udp 10.0.2.22 51868 -> 176.200.210.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:05.709828 0.000000 udp 10.0.2.22 51868 -> 14.97.132.119 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:06.698193 0.245042 udp 10.0.2.22 51868 <-> 109.105.207.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:03:07.883333 0.168604 udp 10.0.2.22 51868 <-> 98.235.73.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:03:08.870731 0.444731 udp 10.0.2.22 51868 <-> 124.171.169.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:03:09.856066 0.138126 udp 10.0.2.22 51868 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:03:10.842233 1.048177 udp 10.0.2.22 51868 <-> 190.74.80.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:03:11.832896 0.057995 udp 10.0.2.22 51868 <-> 37.72.79.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:03:12.812651 0.052673 udp 10.0.2.22 51868 <-> 89.69.52.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:03:13.801423 0.261941 udp 10.0.2.22 51868 <-> 190.73.247.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:03:14.788711 0.050897 udp 10.0.2.22 51868 <-> 78.61.221.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:03:15.776359 0.000000 udp 10.0.2.22 51868 -> 118.6.66.92 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:16.762204 0.300071 udp 10.0.2.22 51868 <-> 186.218.187.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:03:17.746382 0.182346 udp 10.0.2.22 51868 <-> 70.167.76.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:03:18.736569 0.000000 udp 10.0.2.22 51868 -> 75.186.45.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:19.398157 0.000000 udp 10.0.2.22 51868 <- 176.200.210.12 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:19.717175 0.048662 udp 10.0.2.22 51868 <-> 77.21.132.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:03:20.706768 0.065122 udp 10.0.2.22 51868 <-> 176.195.18.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:03:21.694319 0.245850 udp 10.0.2.22 51868 <-> 201.19.114.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:03:22.680558 0.000000 udp 10.0.2.22 51868 -> 184.147.80.62 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:23.665458 0.285732 udp 10.0.2.22 51868 <-> 187.107.55.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:03:24.651534 0.000000 udp 10.0.2.22 51868 -> 175.182.2.62 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:25.642303 0.039868 udp 10.0.2.22 51868 <-> 188.127.30.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:03:26.413646 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:03:26.621764 0.314762 udp 10.0.2.22 51868 <-> 24.102.154.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:03:27.610279 0.038781 udp 10.0.2.22 51868 <-> 212.104.97.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:03:28.478473 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:03:28.597522 1.189950 udp 10.0.2.22 51868 <-> 98.232.99.101 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:03:30.569115 0.153426 udp 10.0.2.22 51868 <-> 69.250.40.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:03:31.554160 0.336437 udp 10.0.2.22 51868 <-> 67.251.77.65 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:03:32.544662 0.068883 udp 10.0.2.22 51868 <-> 95.173.42.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:03:33.524409 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:34.513422 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:35.501910 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:36.487742 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:37.472949 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:38.456926 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:39.447750 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:40.427070 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:41.415489 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:42.402719 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:43.388676 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:44.380629 0.000000 udp 10.0.2.22 51868 -> 114.24.166.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:45.364544 0.041128 udp 10.0.2.22 51868 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:03:46.354872 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:47.337611 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:48.325931 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:49.313078 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:50.299113 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:51.284362 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:52.269246 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:53.259548 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:54.238821 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:55.107962 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:03:55.226998 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:56.218806 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:57.208139 0.000109 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:03:57.208248 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:03:58.193047 3.941782 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:00.167508 0.219047 udp 10.0.2.22 51868 <-> 24.10.7.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:04:01.146672 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:03.535866 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:04.521986 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:05.506627 0.000045 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:05.506672 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:04:06.490895 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:07.481009 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:08.460386 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:09.448354 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:11.422627 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:12.408759 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:13.392710 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:14.383180 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:15.362567 0.169417 udp 10.0.2.22 51868 <-> 95.173.42.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:04:16.350697 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:17.337716 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:18.323971 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:19.310083 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:20.293949 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:21.284107 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:22.144646 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:04:22.263683 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:23.252733 0.126830 udp 10.0.2.22 51868 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:04:24.239889 0.000000 udp 10.0.2.22 51868 -> 84.40.72.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:25.225608 0.036124 udp 10.0.2.22 51868 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:04:26.210490 4.987313 udp 10.0.2.22 51868 <-> 92.108.115.16 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:04:27.202679 0.000000 udp 10.0.2.22 51868 -> 216.121.192.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:28.196381 0.000000 udp 10.0.2.22 51868 -> 87.3.208.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:29.175508 4.937433 udp 10.0.2.22 51868 <-> 66.131.32.6 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:04:30.163683 0.000000 udp 10.0.2.22 51868 -> 79.196.196.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:32.137085 0.000000 udp 10.0.2.22 51868 -> 95.173.42.5 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:33.122044 0.149548 udp 10.0.2.22 51868 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:04:34.272288 0.000000 udp 10.0.2.22 51868 <- 66.131.32.6 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:35.102946 0.033303 udp 10.0.2.22 51868 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:04:36.082004 0.000000 udp 10.0.2.22 51868 -> 79.183.172.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:37.069928 0.099222 udp 10.0.2.22 51868 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:04:38.056644 3.358992 udp 10.0.2.22 51868 <-> 95.173.42.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:04:42.263322 0.000000 udp 10.0.2.22 51868 -> 114.24.166.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:43.247838 0.000000 udp 10.0.2.22 51868 -> 187.25.181.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:44.239238 0.126471 udp 10.0.2.22 51868 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:04:45.229528 0.099390 udp 10.0.2.22 51868 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:04:46.208847 0.124243 udp 10.0.2.22 51868 <-> 24.204.248.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:04:47.196084 0.000000 udp 10.0.2.22 51868 -> 101.63.184.121 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:48.183058 0.000000 udp 10.0.2.22 51868 -> 5.56.192.101 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:49.168824 0.000000 udp 10.0.2.22 51868 -> 75.150.126.57 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:50.153524 0.209351 udp 10.0.2.22 51868 <-> 223.223.153.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:04:51.144359 0.155498 udp 10.0.2.22 51868 <-> 24.59.225.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:04:52.005433 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:04:52.134355 2.364705 udp 10.0.2.22 51868 <-> 186.19.203.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:04:53.113632 0.307669 udp 10.0.2.22 51868 <-> 200.156.104.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:04:54.101606 0.294909 udp 10.0.2.22 51868 <-> 153.161.235.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:04:55.088742 0.000000 udp 10.0.2.22 51868 -> 70.30.90.88 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:56.074469 0.161605 udp 10.0.2.22 51868 <-> 71.235.63.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:04:57.058864 0.156061 udp 10.0.2.22 51868 <-> 216.81.125.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:04:58.050149 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:04:59.040112 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:00.020795 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:01.008271 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:01.994646 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:02.980194 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:03.965606 0.000059 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:03.965665 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:05:05.946246 0.171773 udp 10.0.2.22 51868 <-> 24.201.107.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:05:06.925243 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:07.912939 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:08.899817 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:09.885479 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:10.869994 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:11.860467 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:14.727272 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:15.715953 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:16.704357 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:17.691008 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:18.676513 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:19.669167 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:20.531252 0.000105 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:05:20.660179 0.000060 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:20.660239 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:05:22.630320 0.000000 udp 10.0.2.22 51868 -> 27.4.145.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:23.618005 0.050841 udp 10.0.2.22 51868 <-> 176.103.18.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:05:25.591921 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:26.576362 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:27.566999 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:28.546769 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:29.535545 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:30.523122 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:31.512407 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:32.499548 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:33.484597 3.946915 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:33.484634 3.946878 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 2 172 flow=Background 1970/01/01 08:05:34.475390 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:35.455137 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:36.443841 0.331003 udp 10.0.2.22 51868 <-> 101.63.184.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:05:38.417887 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:39.403190 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:40.387830 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:41.378518 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:42.358275 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:43.347126 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:45.320130 0.162349 udp 10.0.2.22 51868 <-> 78.246.60.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:05:46.394986 0.000000 udp 10.0.2.22 51868 -> 24.23.214.104 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:47.250257 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:05:47.379097 0.021268 udp 10.0.2.22 51868 <-> 46.223.135.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:05:48.371682 0.130989 udp 10.0.2.22 51868 <-> 178.123.151.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:05:49.351352 0.180897 udp 10.0.2.22 51868 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:05:50.339785 0.059513 udp 10.0.2.22 51868 <-> 78.42.232.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:05:51.327105 0.164709 udp 10.0.2.22 51868 <-> 183.87.170.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:05:52.313499 0.160346 udp 10.0.2.22 51868 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:05:53.296774 0.000000 udp 10.0.2.22 51868 -> 117.235.126.42 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:05:54.280890 0.160016 udp 10.0.2.22 51868 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:05:55.271617 0.122136 udp 10.0.2.22 51868 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:05:56.251500 0.242125 udp 10.0.2.22 51868 <-> 190.206.217.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:05:57.240180 0.325868 udp 10.0.2.22 51868 <-> 190.54.229.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:05:58.227468 0.153483 udp 10.0.2.22 51868 <-> 216.81.125.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:05:59.213627 0.135577 udp 10.0.2.22 51868 <-> 98.204.79.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:00.198736 0.000000 udp 10.0.2.22 51868 -> 124.182.211.62 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:06:01.182826 0.162566 udp 10.0.2.22 51868 <-> 68.54.122.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:02.172846 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:06:03.152503 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:06:04.140959 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:06:05.128606 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:06:06.118481 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:06:07.103821 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:06:08.088026 0.116974 udp 10.0.2.22 51868 <-> 24.36.173.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:09.078656 0.156225 udp 10.0.2.22 51868 <-> 96.42.34.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:10.057946 0.057732 udp 10.0.2.22 51868 <-> 88.169.89.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:11.048482 0.196282 udp 10.0.2.22 51868 <-> 2.180.137.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:12.035345 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:06:13.021964 0.000000 udp 10.0.2.22 51868 -> 98.80.235.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:06:13.879122 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:06:14.008086 1.093337 udp 10.0.2.22 51868 <-> 31.192.7.2 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:15.982162 0.000000 udp 10.0.2.22 51868 -> 70.184.172.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:06:18.053106 0.475598 udp 10.0.2.22 51868 <-> 117.204.49.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:19.041511 0.394782 udp 10.0.2.22 51868 <-> 190.189.116.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:20.028887 0.015262 udp 10.0.2.22 51868 <-> 164.8.214.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:21.014925 0.051380 udp 10.0.2.22 51868 <-> 178.148.145.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:22.000069 0.157064 udp 10.0.2.22 51868 <-> 66.56.172.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:22.983856 0.136671 udp 10.0.2.22 51868 <-> 77.210.35.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:23.975330 0.000000 udp 10.0.2.22 51868 -> 24.77.20.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:06:24.954688 0.133842 udp 10.0.2.22 51868 <-> 68.169.187.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:25.942788 0.890412 udp 10.0.2.22 51868 <-> 115.117.75.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:26.930064 0.031171 udp 10.0.2.22 51868 <-> 77.236.190.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:27.916493 0.200595 udp 10.0.2.22 51868 <-> 186.93.5.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:28.901592 0.141118 udp 10.0.2.22 51868 <-> 67.86.90.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:29.885600 4.349589 udp 10.0.2.22 51868 <-> 77.221.21.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:30.875733 1.621113 udp 10.0.2.22 51868 <-> 189.54.80.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:31.855231 0.374352 udp 10.0.2.22 51868 <-> 112.133.130.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:32.846559 0.192336 udp 10.0.2.22 51868 <-> 68.117.244.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:33.833649 0.307985 udp 10.0.2.22 51868 <-> 58.114.74.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:34.819758 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:06:35.804696 0.047736 udp 10.0.2.22 51868 <-> 88.223.54.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:36.797034 0.268713 udp 10.0.2.22 51868 <-> 186.95.110.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:37.788081 0.371841 udp 10.0.2.22 51868 <-> 36.224.100.225 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:38.767372 0.343027 udp 10.0.2.22 51868 <-> 187.102.85.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:39.755436 0.133717 udp 10.0.2.22 51868 <-> 68.169.187.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:40.742954 0.452258 udp 10.0.2.22 51868 <-> 177.83.18.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:41.600094 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:06:41.729042 0.000000 udp 10.0.2.22 51868 -> 84.54.171.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:06:42.714603 0.166548 udp 10.0.2.22 51868 <-> 50.71.21.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:43.698607 0.408609 udp 10.0.2.22 51868 <-> 27.2.203.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:44.688846 0.395259 udp 10.0.2.22 51868 <-> 60.231.84.237 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:45.668801 0.000000 udp 10.0.2.22 51868 -> 187.11.182.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:06:46.657003 0.058869 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:47.643857 2.884896 udp 10.0.2.22 51868 <-> 98.26.209.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:51.365588 0.070082 udp 10.0.2.22 51868 <-> 77.77.29.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:52.350361 0.864657 udp 10.0.2.22 51868 <-> 177.141.225.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:53.334380 0.167470 udp 10.0.2.22 51868 <-> 68.117.244.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:54.324500 1.263267 udp 10.0.2.22 51868 <-> 142.165.248.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:55.303744 0.000000 udp 10.0.2.22 51868 -> 89.137.195.168 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:06:56.291842 0.368696 udp 10.0.2.22 51868 <-> 1.168.39.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:57.278953 0.185020 udp 10.0.2.22 51868 <-> 24.139.142.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:58.264785 0.273668 udp 10.0.2.22 51868 <-> 201.81.202.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:06:59.249641 0.409106 udp 10.0.2.22 51868 <-> 117.236.137.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:00.233650 0.147728 udp 10.0.2.22 51868 <-> 98.253.252.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:01.223839 0.069801 udp 10.0.2.22 51868 <-> 78.251.75.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:02.204378 0.313207 udp 10.0.2.22 51868 <-> 189.110.0.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:03.192375 0.000000 udp 10.0.2.22 51868 -> 24.77.20.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:07:04.179276 0.072442 udp 10.0.2.22 51868 <-> 212.231.224.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:05.165191 2.019864 udp 10.0.2.22 51868 <-> 87.206.84.198 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:06.150142 0.101483 udp 10.0.2.22 51868 <-> 151.25.203.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:08.131932 0.216741 udp 10.0.2.22 51868 <-> 71.197.74.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:09.110510 0.038080 udp 10.0.2.22 51868 <-> 95.77.141.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:10.098253 0.166025 udp 10.0.2.22 51868 <-> 79.2.118.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:10.966212 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:07:11.085218 0.096557 udp 10.0.2.22 51868 <-> 87.13.77.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:12.071440 0.185576 udp 10.0.2.22 51868 <-> 64.207.73.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:13.056965 0.152207 udp 10.0.2.22 51868 <-> 24.186.58.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:14.048154 0.146290 udp 10.0.2.22 51868 <-> 37.150.85.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:15.039520 0.323765 udp 10.0.2.22 51868 <-> 153.135.189.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:16.018430 0.068046 udp 10.0.2.22 51868 <-> 46.242.0.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:17.006397 0.000000 udp 10.0.2.22 51868 -> 200.112.162.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:07:17.993150 0.163538 udp 10.0.2.22 51868 <-> 71.61.103.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:18.979152 0.367023 udp 10.0.2.22 51868 <-> 118.232.181.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:19.966810 0.201217 udp 10.0.2.22 51868 <-> 69.5.109.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:20.960359 0.000000 udp 10.0.2.22 51868 -> 98.213.124.118 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:07:30.026796 0.000000 udp 10.0.2.22 51868 <- 98.213.124.118 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:07:30.846350 0.156420 udp 10.0.2.22 51868 <-> 87.10.13.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:31.825479 0.165475 udp 10.0.2.22 51868 <-> 65.25.78.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:32.813608 0.315936 udp 10.0.2.22 51868 <-> 113.61.212.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:33.800746 0.295977 udp 10.0.2.22 51868 <-> 223.133.79.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:34.786329 1.116126 udp 10.0.2.22 51868 <-> 5.236.230.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:35.770877 0.591478 udp 10.0.2.22 51868 <-> 98.89.107.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:36.762074 0.369943 udp 10.0.2.22 51868 <-> 183.178.125.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:37.752185 0.153916 udp 10.0.2.22 51868 <-> 68.62.2.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:38.733769 0.145224 udp 10.0.2.22 51868 <-> 65.92.44.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:39.724132 0.000000 udp 10.0.2.22 51868 -> 95.32.214.155 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:07:40.710766 0.047449 udp 10.0.2.22 51868 <-> 78.60.103.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:41.696562 0.028187 udp 10.0.2.22 51868 <-> 89.134.236.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:42.681432 0.137929 udp 10.0.2.22 51868 <-> 98.204.79.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:43.674148 0.861130 udp 10.0.2.22 51868 <-> 101.223.215.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:44.664100 0.119924 udp 10.0.2.22 51868 <-> 217.10.134.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:45.643268 0.162379 udp 10.0.2.22 51868 <-> 65.34.172.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:46.511900 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:07:46.630926 0.097499 udp 10.0.2.22 51868 <-> 95.155.27.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:47.617590 0.366759 udp 10.0.2.22 51868 <-> 118.232.181.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:48.607165 0.000000 udp 10.0.2.22 51868 -> 109.53.93.187 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:07:49.591621 0.145156 udp 10.0.2.22 51868 <-> 82.59.53.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:50.582546 0.000000 udp 10.0.2.22 51868 -> 14.97.173.131 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:07:51.572322 3.166822 udp 10.0.2.22 51868 <-> 1.23.41.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:52.551086 0.314455 udp 10.0.2.22 51868 <-> 58.114.242.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:53.538880 0.167421 udp 10.0.2.22 51868 <-> 68.201.88.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:54.525466 0.340406 udp 10.0.2.22 51868 <-> 36.224.196.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:55.511029 0.060922 udp 10.0.2.22 51868 <-> 84.232.34.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:56.495471 0.133311 udp 10.0.2.22 51868 <-> 178.172.245.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:57.486221 0.151097 udp 10.0.2.22 51868 <-> 31.15.210.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:58.466031 0.031993 udp 10.0.2.22 51868 <-> 77.238.195.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:07:59.454849 0.105007 udp 10.0.2.22 51868 <-> 85.231.171.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:08:00.442277 1.264389 udp 10.0.2.22 51868 <-> 89.34.96.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:08:02.632146 0.027628 udp 10.0.2.22 51868 <-> 213.66.78.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:08:03.617641 0.337110 udp 10.0.2.22 51868 <-> 183.179.33.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:08:04.604006 0.060487 udp 10.0.2.22 51868 <-> 77.81.10.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:08:05.594528 0.229361 udp 10.0.2.22 51868 <-> 203.193.142.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:08:07.562979 2.428950 udp 10.0.2.22 51868 <-> 178.25.74.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:08:09.841854 0.153933 udp 10.0.2.22 51868 <-> 69.123.197.24 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:08:10.169181 0.023402 udp 10.0.2.22 60048 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 08:08:10.192888 0.000000 udp 10.0.2.22 60049 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:10.829692 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:11.815114 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:12.799684 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:13.790425 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:14.770328 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:15.642547 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:08:15.761591 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:16.749922 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:17.736451 0.272082 udp 10.0.2.22 51868 <-> 79.37.73.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:08:18.721994 3.099037 udp 10.0.2.22 51868 <-> 96.56.91.162 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:08:19.706517 3.021294 udp 10.0.2.22 51868 <-> 93.73.2.21 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:08:20.697632 0.000000 udp 10.0.2.22 51868 -> 68.108.92.217 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:23.653892 0.221467 udp 10.0.2.22 51868 <-> 203.193.142.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:08:24.640557 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:25.625771 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:26.610051 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:27.601359 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:29.571156 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:30.558668 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:31.546887 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:32.532293 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:33.516355 0.000000 udp 10.0.2.22 51868 -> 79.116.203.243 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:34.507380 1.040351 udp 10.0.2.22 51868 <-> 93.73.2.21 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:08:36.475186 0.249061 udp 10.0.2.22 51868 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:08:37.462796 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:38.449515 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:39.434762 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:40.419575 0.000057 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:40.419632 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:08:41.410329 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:42.270911 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:08:43.380935 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:44.368486 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:45.355204 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:46.340321 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:47.327362 1.679492 udp 10.0.2.22 51868 <-> 66.79.231.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:08:48.318014 0.811527 udp 10.0.2.22 51868 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:08:49.297894 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:51.274747 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:55.581276 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:56.565650 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:57.548675 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:58.538520 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:08:59.519019 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:00.507086 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:01.493534 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:02.478355 0.000059 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:02.478414 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:09:03.462193 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:04.445980 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:05.435480 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:06.413943 0.000000 udp 10.0.2.22 51868 -> 181.43.43.44 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:07.400670 0.156841 udp 10.0.2.22 51868 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:09:08.386695 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:09.374352 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:10.358019 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:11.340806 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:12.201472 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:09:12.330224 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:13.309525 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:15.281980 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:16.267152 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:17.251060 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:18.236720 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:19.225941 0.000044 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:19.225985 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:09:20.204316 3.942567 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:21.191298 3.938075 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:22.178038 0.040380 udp 10.0.2.22 51868 <-> 77.103.126.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:09:23.163000 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:26.118499 0.000045 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:26.118544 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:09:27.096825 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:28.083642 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:29.070683 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:30.055524 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:31.040508 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:32.022920 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:33.990876 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:34.977881 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:35.963623 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:36.949049 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:37.932592 0.000000 udp 10.0.2.22 51868 -> 181.43.43.44 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:38.787069 0.000106 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:09:38.915823 0.000000 udp 10.0.2.22 51868 -> 197.6.72.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:39.905014 0.290730 udp 10.0.2.22 51868 <-> 126.36.45.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:09:40.883285 0.000091 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:40.883376 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:09:41.871745 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:42.860028 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:43.845336 0.167447 udp 10.0.2.22 51868 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:09:44.829145 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:45.811450 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:46.800748 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:47.780005 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:48.768039 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:49.756669 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:51.340515 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:52.323855 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:53.316894 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:55.290013 0.000082 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:55.290095 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:09:56.277529 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:57.266049 0.000000 udp 10.0.2.22 51868 -> 66.79.231.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:09:58.250650 0.225152 udp 10.0.2.22 51868 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:09:59.029027 2.965537 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 08:09:59.234379 0.531222 udp 10.0.2.22 51868 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:00.224718 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:10:01.214351 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:10:02.192617 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:10:03.179301 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:10:04.164961 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:10:05.149472 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:10:05.934847 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:10:06.004177 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:10:06.133012 0.000047 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:10:06.133059 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:10:08.112782 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:10:09.091073 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:10:10.077876 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:10:11.064143 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:10:12.048821 0.000000 udp 10.0.2.22 51868 -> 181.43.43.44 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:10:13.031854 0.290633 udp 10.0.2.22 51868 <-> 126.36.45.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:13.823660 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:10:14.021720 0.150125 udp 10.0.2.22 51868 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:15.010853 0.093173 udp 10.0.2.22 51868 <-> 84.122.212.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:15.990866 0.183534 udp 10.0.2.22 51868 <-> 68.108.78.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:16.977896 0.161236 udp 10.0.2.22 51868 <-> 50.171.133.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:17.964302 0.153032 udp 10.0.2.22 51868 <-> 174.108.102.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:18.949178 0.186807 udp 10.0.2.22 51868 <-> 68.149.112.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:19.932219 0.000000 udp 10.0.2.22 51868 -> 174.106.129.93 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:10:20.926468 0.274061 udp 10.0.2.22 51868 <-> 216.114.61.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:21.915331 0.340442 udp 10.0.2.22 51868 <-> 190.247.155.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:22.893216 0.031958 udp 10.0.2.22 51868 <-> 158.58.245.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:23.879933 0.140699 udp 10.0.2.22 51868 <-> 71.7.230.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:24.865767 0.110495 udp 10.0.2.22 51868 <-> 85.92.236.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:25.850147 0.000000 udp 10.0.2.22 51868 -> 201.93.194.74 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:10:26.833427 0.027030 udp 10.0.2.22 51868 <-> 158.58.240.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:27.823427 0.259567 udp 10.0.2.22 51868 <-> 190.78.154.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:28.815309 0.149878 udp 10.0.2.22 51868 <-> 75.131.180.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:29.604616 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:10:29.792820 0.000000 udp 10.0.2.22 51868 -> 179.164.107.68 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:10:30.779368 0.000000 udp 10.0.2.22 51868 -> 101.109.95.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:10:31.765083 0.371984 udp 10.0.2.22 51868 <-> 201.93.194.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:32.620939 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:10:32.749801 0.190392 udp 10.0.2.22 51868 <-> 68.108.98.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:33.731978 1.302694 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:35.700547 0.678639 udp 10.0.2.22 51868 <-> 190.73.13.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:36.688590 0.000000 udp 10.0.2.22 51868 -> 201.68.33.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:10:37.675639 0.347649 udp 10.0.2.22 51868 <-> 111.254.125.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:38.660550 0.164148 udp 10.0.2.22 51868 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:39.644425 0.473344 udp 10.0.2.22 51868 <-> 14.99.64.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:40.627697 0.137549 udp 10.0.2.22 51868 <-> 24.228.86.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:41.617449 0.212918 udp 10.0.2.22 51868 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:42.596725 0.145462 udp 10.0.2.22 51868 <-> 192.226.149.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:43.584323 0.356294 udp 10.0.2.22 51868 <-> 114.49.28.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:44.570926 0.136097 udp 10.0.2.22 51868 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:45.558330 0.055100 udp 10.0.2.22 51868 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:46.542410 0.106791 udp 10.0.2.22 51868 <-> 77.239.84.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:47.525591 0.039292 udp 10.0.2.22 51868 <-> 91.218.81.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:48.515590 0.052264 udp 10.0.2.22 51868 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:49.495143 0.450439 udp 10.0.2.22 51868 <-> 93.105.253.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:50.482680 1.971692 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:10:51.468954 0.033010 udp 10.0.2.22 51868 <-> 95.111.22.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:53.438342 1.843837 arp 10.0.2.22 who 169.254.49.242 INT 3 126 flow=Background-ARP 1970/01/01 08:10:54.421203 3.943733 udp 10.0.2.22 51868 <-> 123.201.123.233 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:55.411068 0.146026 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:56.389741 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:10:57.377566 0.208706 udp 10.0.2.22 51868 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:10:59.231236 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:10:59.350177 0.045558 udp 10.0.2.22 51868 <-> 77.238.194.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:00.206387 0.000000 udp 10.0.2.22 51868 <- 123.201.123.233 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:11:00.333673 1.997499 udp 10.0.2.22 51868 <-> 5.146.89.28 16464 CON 0 0 6 3676 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:01.128562 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:11:01.316624 0.168327 udp 10.0.2.22 51868 <-> 76.183.28.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:03.285315 0.000000 udp 10.0.2.22 51868 -> 75.110.50.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:11:04.272440 0.000000 udp 10.0.2.22 51868 -> 115.241.56.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:11:05.258653 0.034618 udp 10.0.2.22 51868 <-> 85.130.12.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:06.243842 0.173075 udp 10.0.2.22 51868 <-> 103.250.160.198 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:07.228421 3.195663 udp 10.0.2.22 51868 <-> 59.95.52.191 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:08.210990 0.273123 udp 10.0.2.22 51868 <-> 187.37.104.223 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:09.200748 0.117749 udp 10.0.2.22 51868 <-> 79.19.221.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:11.169361 0.076574 udp 10.0.2.22 51868 <-> 151.16.39.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:12.155655 0.000000 udp 10.0.2.22 51868 -> 186.15.0.154 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:11:13.141505 0.133495 udp 10.0.2.22 51868 <-> 82.53.38.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:14.125388 0.226131 udp 10.0.2.22 51868 <-> 46.225.85.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:15.107933 0.075269 udp 10.0.2.22 51868 <-> 84.55.13.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:16.097686 0.125547 udp 10.0.2.22 51868 <-> 78.251.143.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:17.076481 1.133404 udp 10.0.2.22 51868 <-> 76.181.153.102 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:19.050500 0.000000 udp 10.0.2.22 51868 -> 190.206.217.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:11:20.035591 0.000000 udp 10.0.2.22 51868 -> 223.225.141.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:11:21.019595 0.000000 udp 10.0.2.22 51868 -> 87.10.29.233 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:11:22.002596 2.955337 udp 10.0.2.22 51868 -> 59.93.199.123 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:11:22.992209 0.400099 udp 10.0.2.22 51868 <-> 173.214.226.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:23.970623 0.000000 udp 10.0.2.22 51868 -> 31.19.152.56 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:11:25.826643 0.000097 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:11:25.945500 0.000000 udp 10.0.2.22 51868 -> 190.73.13.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:11:26.930662 0.000000 udp 10.0.2.22 51868 -> 111.249.120.65 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:11:27.914330 0.076017 udp 10.0.2.22 51868 <-> 95.173.42.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:28.896931 0.037155 udp 10.0.2.22 51868 <-> 94.21.162.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:29.886388 1.136950 udp 10.0.2.22 51868 <-> 98.217.103.252 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:31.852818 0.118244 udp 10.0.2.22 51868 <-> 78.251.143.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:32.839362 0.155316 udp 10.0.2.22 51868 <-> 71.89.50.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:33.824206 0.032900 udp 10.0.2.22 51868 <-> 31.19.152.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:34.808326 0.060030 udp 10.0.2.22 51868 <-> 94.253.231.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:35.789947 0.949217 udp 10.0.2.22 51868 <-> 174.108.49.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:37.568331 0.359182 udp 10.0.2.22 51868 <-> 183.179.33.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:38.546671 3.942616 udp 10.0.2.22 51868 -> 186.14.58.73 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:11:39.534087 2.256031 udp 10.0.2.22 51868 <-> 190.188.235.94 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:40.520739 0.035077 udp 10.0.2.22 51868 <-> 79.117.59.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:43.472397 0.000000 udp 10.0.2.22 51868 -> 95.244.159.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:11:44.461787 0.143730 udp 10.0.2.22 51868 <-> 71.77.141.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:45.439794 0.316379 udp 10.0.2.22 51868 <-> 201.213.98.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:46.426865 0.000000 udp 10.0.2.22 51868 -> 79.117.59.57 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:11:47.412898 0.018320 udp 10.0.2.22 51868 <-> 213.47.69.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:48.398326 0.153012 udp 10.0.2.22 51868 <-> 46.249.179.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:49.382355 0.037989 udp 10.0.2.22 51868 <-> 213.92.136.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:50.367670 0.000000 udp 10.0.2.22 51868 -> 181.16.7.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:11:51.360642 0.174432 udp 10.0.2.22 51868 <-> 174.99.84.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:52.339475 0.000000 udp 10.0.2.22 51868 -> 177.182.77.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:11:53.207582 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:11:53.326457 0.146895 udp 10.0.2.22 51868 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:54.313393 0.000000 udp 10.0.2.22 51868 -> 71.59.124.237 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:11:55.298681 3.041510 udp 10.0.2.22 51868 <-> 46.191.214.12 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:56.283052 0.000000 udp 10.0.2.22 51868 -> 181.16.7.22 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:11:57.265699 0.044307 udp 10.0.2.22 51868 <-> 89.2.226.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:11:59.234113 0.175304 udp 10.0.2.22 51868 <-> 24.48.169.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:12:00.221264 0.329181 udp 10.0.2.22 51868 <-> 114.24.114.205 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:12:01.207177 0.051575 udp 10.0.2.22 51868 <-> 5.13.11.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:12:02.193561 0.000000 udp 10.0.2.22 51868 -> 84.221.197.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:03.177587 1.117375 udp 10.0.2.22 51868 <-> 68.83.113.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:12:05.149719 0.047760 udp 10.0.2.22 51868 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:12:06.128029 3.008080 udp 10.0.2.22 51868 <-> 186.18.83.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:12:07.115080 0.056689 udp 10.0.2.22 51868 <-> 89.228.144.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:12:08.101172 0.000000 udp 10.0.2.22 51868 -> 76.173.112.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:09.085756 0.000000 udp 10.0.2.22 51868 -> 94.244.66.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:10.070152 0.176004 udp 10.0.2.22 51868 <-> 75.111.219.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:12:11.052603 0.077333 udp 10.0.2.22 51868 <-> 85.226.38.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:12:12.043354 0.156113 udp 10.0.2.22 51868 <-> 113.193.40.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:12:13.020512 0.069885 udp 10.0.2.22 51868 <-> 84.126.6.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:12:14.007472 0.059229 udp 10.0.2.22 51868 <-> 89.45.98.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:12:14.993550 0.000000 udp 10.0.2.22 51868 -> 2.185.101.63 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:15.976663 0.144414 udp 10.0.2.22 51868 <-> 71.71.254.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:12:16.959980 1.280248 udp 10.0.2.22 51868 <-> 65.30.26.10 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:12:18.961447 0.142575 udp 10.0.2.22 51868 <-> 96.37.226.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:12:19.823645 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:12:19.942527 0.146920 udp 10.0.2.22 51868 <-> 216.129.180.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:12:20.931002 0.130071 udp 10.0.2.22 51868 <-> 76.106.23.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:12:21.916715 0.372543 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:12:22.901565 0.178884 udp 10.0.2.22 51868 <-> 98.196.143.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:12:23.885019 0.320524 udp 10.0.2.22 51868 <-> 202.95.61.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:12:24.868021 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:25.857498 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:26.835483 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:27.821817 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:28.807989 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:29.792995 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:30.776436 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:31.766618 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:32.755821 2.950992 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:33.734404 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:34.721456 0.141846 udp 10.0.2.22 51868 <-> 98.235.43.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:12:36.693324 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:37.676679 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:38.667333 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:39.656649 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:40.634638 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:41.623518 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:42.610886 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:43.595318 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:44.578747 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:46.428584 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:12:46.557413 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:47.536410 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:48.523196 0.000049 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:48.523245 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:12:49.510092 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:50.494484 0.078055 udp 10.0.2.22 51868 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:12:51.478158 0.302565 udp 10.0.2.22 51868 <-> 180.15.183.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:12:52.468655 0.249914 udp 10.0.2.22 51868 <-> 190.39.122.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:12:53.457556 0.000000 udp 10.0.2.22 51868 -> 101.62.163.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:54.435458 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:55.421969 0.235126 udp 10.0.2.22 51868 <-> 71.93.103.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:12:56.407618 0.055679 udp 10.0.2.22 51868 <-> 193.106.145.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:12:57.392052 0.286203 udp 10.0.2.22 51868 <-> 75.187.154.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:12:58.375589 0.000000 udp 10.0.2.22 51868 -> 79.183.172.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:12:59.365732 0.855463 udp 10.0.2.22 51868 <-> 67.100.230.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:00.354526 3.040122 udp 10.0.2.22 51868 <-> 31.185.115.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:01.332957 0.042440 udp 10.0.2.22 51868 <-> 147.156.170.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:02.319551 0.295249 udp 10.0.2.22 51868 <-> 203.202.216.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:03.305435 0.303183 udp 10.0.2.22 51868 <-> 186.79.242.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:04.289587 0.000000 udp 10.0.2.22 51868 -> 190.177.182.77 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:13:05.272688 0.212859 udp 10.0.2.22 51868 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:06.262683 0.000000 udp 10.0.2.22 51868 -> 84.236.106.206 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:13:07.240983 0.000000 udp 10.0.2.22 51868 -> 67.166.246.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:13:08.228426 0.135152 udp 10.0.2.22 51868 <-> 24.148.90.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:09.214980 0.080872 udp 10.0.2.22 51868 <-> 82.252.241.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:10.200868 0.209171 udp 10.0.2.22 51868 <-> 130.180.208.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:11.184954 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:13:12.168002 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:13:13.028728 0.365018 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:13:13.511796 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:13:15.479266 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:13:16.465705 0.000072 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:13:16.465777 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:13:17.450919 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:13:18.435197 0.000000 udp 10.0.2.22 51868 -> 190.220.88.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:13:19.420415 0.227438 udp 10.0.2.22 51868 <-> 108.210.184.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:20.412321 0.144528 udp 10.0.2.22 51868 <-> 37.212.96.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:21.391065 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:13:22.378532 0.000000 udp 10.0.2.22 51868 -> 177.104.237.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:13:23.365065 0.159088 udp 10.0.2.22 51868 <-> 75.86.159.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:24.354053 0.151821 udp 10.0.2.22 51868 <-> 71.43.117.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:25.340739 0.088432 udp 10.0.2.22 51868 <-> 89.205.104.107 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:26.324042 0.000000 udp 10.0.2.22 51868 -> 78.134.0.39 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:13:27.313376 0.077979 udp 10.0.2.22 51868 <-> 85.86.32.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:28.292024 0.038094 udp 10.0.2.22 51868 <-> 213.240.213.220 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:29.279027 0.143640 udp 10.0.2.22 51868 <-> 37.212.96.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:30.265429 3.275479 udp 10.0.2.22 51868 <-> 113.193.107.112 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:31.250657 2.956209 udp 10.0.2.22 51868 -> 78.183.40.224 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:13:32.234185 0.067982 udp 10.0.2.22 51868 <-> 79.140.165.245 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:35.185783 0.158497 udp 10.0.2.22 51868 <-> 76.122.95.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:36.173930 0.153099 udp 10.0.2.22 51868 <-> 71.43.117.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:37.160048 0.171443 udp 10.0.2.22 51868 <-> 71.229.16.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:38.145591 0.050640 udp 10.0.2.22 51868 <-> 86.123.208.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:39.129529 0.233819 udp 10.0.2.22 51868 <-> 2.132.173.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:39.983415 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:13:40.112168 0.162586 udp 10.0.2.22 51868 <-> 70.60.4.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:41.101862 0.028922 udp 10.0.2.22 51868 <-> 77.70.49.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:42.080643 0.093080 udp 10.0.2.22 51868 <-> 82.83.65.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:43.068166 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:13:44.054301 0.563477 udp 10.0.2.22 51868 <-> 66.72.190.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:45.331261 0.322228 udp 10.0.2.22 51868 <-> 219.210.12.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:46.315152 0.852504 udp 10.0.2.22 51868 <-> 190.39.171.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:47.297993 0.056359 udp 10.0.2.22 51868 <-> 193.106.145.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:48.287585 0.143296 udp 10.0.2.22 51868 <-> 65.185.171.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:49.266118 0.164302 udp 10.0.2.22 51868 <-> 71.229.124.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:50.253613 0.151237 udp 10.0.2.22 51868 <-> 74.133.226.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:51.239450 0.048132 udp 10.0.2.22 51868 <-> 46.162.64.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:52.224379 0.290365 udp 10.0.2.22 51868 <-> 177.139.72.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:53.208226 0.039877 udp 10.0.2.22 51868 <-> 178.150.156.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:54.194843 1.246110 udp 10.0.2.22 51868 <-> 75.214.226.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:55.184652 0.064462 udp 10.0.2.22 51868 <-> 79.112.70.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:56.164441 0.085205 udp 10.0.2.22 51868 <-> 5.248.35.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:57.151972 0.332400 udp 10.0.2.22 51868 <-> 219.210.12.93 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:58.138478 0.022722 udp 10.0.2.22 51868 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:13:59.123414 0.000000 udp 10.0.2.22 51868 -> 78.148.60.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:14:00.107294 0.000000 udp 10.0.2.22 51868 -> 83.230.230.166 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:14:01.090733 0.082419 udp 10.0.2.22 51868 <-> 109.55.142.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:02.081710 0.163078 udp 10.0.2.22 51868 <-> 173.28.51.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:03.060192 0.036331 udp 10.0.2.22 51868 <-> 95.77.166.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:04.047829 0.129414 udp 10.0.2.22 51868 <-> 98.124.92.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:05.033945 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:14:06.019532 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:14:06.876973 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:14:07.009431 0.000043 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:14:07.009474 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:14:07.991736 0.937378 udp 10.0.2.22 51868 <-> 75.243.221.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:08.981583 0.154782 udp 10.0.2.22 51868 <-> 50.147.192.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:09.959990 0.323677 udp 10.0.2.22 51868 <-> 219.210.12.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:10.947019 0.000000 udp 10.0.2.22 51868 -> 83.251.242.139 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:14:11.933962 0.000000 udp 10.0.2.22 51868 -> 98.183.15.44 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:14:12.919177 0.137648 udp 10.0.2.22 51868 <-> 24.228.86.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:13.902505 0.000000 udp 10.0.2.22 51868 -> 201.210.215.132 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:14:14.884774 0.000000 udp 10.0.2.22 51868 -> 187.21.207.162 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:14:20.062299 0.000000 udp 10.0.2.22 51868 <- 201.210.215.132 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:14:20.325656 0.000000 udp 10.0.2.22 51868 <- 187.21.207.162 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:14:21.041510 4.276009 udp 10.0.2.22 51868 <-> 31.222.103.14 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:22.019722 0.062548 udp 10.0.2.22 51868 <-> 86.121.142.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:23.008209 0.000000 udp 10.0.2.22 51868 -> 95.21.101.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:14:23.994260 0.171795 udp 10.0.2.22 51868 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:25.963435 1.799027 udp 10.0.2.22 51868 <-> 14.96.110.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:26.946119 0.146219 udp 10.0.2.22 51868 <-> 162.213.22.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:27.935334 0.153832 udp 10.0.2.22 51868 <-> 27.106.110.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:28.913721 0.229877 udp 10.0.2.22 51868 <-> 24.123.44.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:29.900627 0.013299 udp 10.0.2.22 51868 <-> 131.246.84.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:30.886703 0.312607 udp 10.0.2.22 51868 <-> 106.185.9.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:31.871404 0.769477 udp 10.0.2.22 51868 <-> 80.117.194.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:32.855283 0.716572 udp 10.0.2.22 51868 <-> 190.155.71.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:33.837741 0.000000 udp 10.0.2.22 51868 -> 177.157.118.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:14:34.826428 0.045511 udp 10.0.2.22 51868 <-> 94.244.66.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:35.804924 0.348098 udp 10.0.2.22 51868 <-> 24.247.36.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:36.791420 0.000000 udp 10.0.2.22 51868 -> 37.236.40.235 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:14:37.777194 0.735317 udp 10.0.2.22 51868 <-> 188.167.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:38.633217 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:14:38.761898 0.182499 udp 10.0.2.22 51868 <-> 66.69.187.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:39.745466 0.042388 udp 10.0.2.22 51868 <-> 178.148.147.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:40.728030 0.145328 udp 10.0.2.22 51868 <-> 71.7.212.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:41.717496 0.024410 udp 10.0.2.22 51868 <-> 80.98.243.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:42.695588 0.000000 udp 10.0.2.22 51868 -> 14.96.110.233 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:14:43.682325 0.029704 udp 10.0.2.22 51868 <-> 80.99.15.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:44.667923 0.041243 udp 10.0.2.22 51868 <-> 89.0.200.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:45.652573 0.198478 udp 10.0.2.22 51868 <-> 71.227.148.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:46.636097 0.028624 udp 10.0.2.22 51868 <-> 89.134.236.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:47.618874 0.173449 udp 10.0.2.22 51868 <-> 207.32.49.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:48.608432 2.950393 udp 10.0.2.22 51868 <-> 115.124.175.52 16464 CON 0 0 4 1064 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:50.573237 0.756984 udp 10.0.2.22 51868 <-> 200.232.254.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:52.542552 0.000000 udp 10.0.2.22 51868 -> 116.193.136.103 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:14:54.361826 0.000000 udp 10.0.2.22 51868 -> 46.249.179.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:14:55.344185 0.000000 udp 10.0.2.22 51868 -> 190.79.130.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:14:56.333483 0.160504 udp 10.0.2.22 51868 <-> 50.165.123.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:57.311621 0.150661 udp 10.0.2.22 51868 <-> 174.108.102.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:58.302924 0.239574 udp 10.0.2.22 51868 <-> 122.99.102.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:14:59.288755 0.000000 udp 10.0.2.22 51868 -> 5.20.145.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:15:00.273613 0.049524 udp 10.0.2.22 51868 <-> 78.96.104.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:01.257295 0.000000 udp 10.0.2.22 51868 -> 93.183.191.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:15:02.239304 0.145023 udp 10.0.2.22 51868 <-> 24.209.250.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:03.228366 0.075438 udp 10.0.2.22 51868 <-> 178.167.99.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:04.206883 1.729825 udp 10.0.2.22 51868 <-> 186.18.76.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:05.192962 0.051509 udp 10.0.2.22 51868 <-> 79.118.170.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:06.059957 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:15:06.178881 0.045814 udp 10.0.2.22 51868 <-> 95.180.65.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:07.163394 0.000000 udp 10.0.2.22 51868 -> 24.229.141.132 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:15:08.147447 0.029506 udp 10.0.2.22 51868 <-> 82.192.233.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:09.137893 0.057282 udp 10.0.2.22 51868 <-> 86.20.162.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:10.126077 3.073417 udp 10.0.2.22 51868 <-> 84.123.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:11.104147 0.870652 udp 10.0.2.22 51868 <-> 95.85.162.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:11.249734 0.000000 udp 10.0.2.22 51868 <- 190.79.130.76 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:15:12.091158 0.030355 udp 10.0.2.22 51868 <-> 195.189.250.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:13.076618 0.207001 udp 10.0.2.22 51868 <-> 98.232.131.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:14.060394 0.271374 udp 10.0.2.22 51868 <-> 65.15.129.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:15.043837 0.227073 udp 10.0.2.22 51868 <-> 190.73.169.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:16.033754 0.143260 udp 10.0.2.22 51868 <-> 219.91.211.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:17.022833 0.000000 udp 10.0.2.22 51868 -> 50.72.204.82 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:15:18.001550 0.319299 udp 10.0.2.22 51868 <-> 200.239.150.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:18.988956 0.169591 udp 10.0.2.22 51868 <-> 71.199.218.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:19.973929 0.076908 udp 10.0.2.22 51868 <-> 91.120.99.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:20.958504 0.435405 udp 10.0.2.22 51868 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:21.941915 0.238166 udp 10.0.2.22 51868 <-> 78.228.60.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:22.932153 2.731279 udp 10.0.2.22 51868 <-> 109.122.73.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:23.921072 0.196799 udp 10.0.2.22 51868 <-> 108.176.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:24.899114 0.047738 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:25.885655 0.048947 udp 10.0.2.22 51868 <-> 78.28.15.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:26.870447 0.145681 udp 10.0.2.22 51868 <-> 67.85.178.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:27.853848 0.158827 udp 10.0.2.22 51868 <-> 209.182.117.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:28.836849 0.102716 udp 10.0.2.22 51868 <-> 213.66.160.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:29.856392 0.287686 udp 10.0.2.22 51868 <-> 60.148.85.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:30.845482 0.061793 udp 10.0.2.22 51868 <-> 86.124.151.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:31.823426 0.000000 udp 10.0.2.22 51868 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:15:32.691203 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:15:32.810101 0.134952 udp 10.0.2.22 51868 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:33.795610 0.088358 udp 10.0.2.22 51868 <-> 85.155.5.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:34.779895 0.253323 udp 10.0.2.22 51868 <-> 75.206.30.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:35.763078 0.365478 udp 10.0.2.22 51868 <-> 174.102.48.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:36.754148 1.476128 udp 10.0.2.22 51868 <-> 190.12.97.110 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:38.719917 0.094649 udp 10.0.2.22 51868 <-> 176.215.215.44 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:39.706535 0.334420 udp 10.0.2.22 51868 <-> 187.20.40.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:40.692006 0.582331 udp 10.0.2.22 51868 <-> 202.29.179.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:41.676365 0.059515 udp 10.0.2.22 51868 <-> 77.81.10.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:42.659463 0.147655 udp 10.0.2.22 51868 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:43.649045 1.033166 udp 10.0.2.22 51868 <-> 213.214.69.42 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:45.615832 0.000000 udp 10.0.2.22 51868 -> 89.71.59.189 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:15:46.601650 0.309287 udp 10.0.2.22 51868 <-> 124.39.69.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:47.587233 0.214597 udp 10.0.2.22 51868 <-> 174.108.102.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:48.571217 0.000000 udp 10.0.2.22 51868 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:15:49.554703 2.100475 udp 10.0.2.22 51868 <-> 186.19.71.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:50.544743 2.345878 udp 10.0.2.22 51868 <-> 75.143.122.221 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:51.523462 0.038346 udp 10.0.2.22 51868 <-> 92.233.16.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:53.497800 0.034051 udp 10.0.2.22 51868 <-> 79.118.181.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:54.482904 0.000000 udp 10.0.2.22 51868 -> 78.251.143.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:15:55.467252 0.060541 udp 10.0.2.22 51868 <-> 188.173.128.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:56.450314 0.293435 udp 10.0.2.22 51868 <-> 190.19.174.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:57.440074 0.704490 udp 10.0.2.22 51868 <-> 117.195.37.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:15:58.418994 0.000000 udp 10.0.2.22 51868 -> 2.132.173.56 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:15:59.287917 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:15:59.406920 0.521448 udp 10.0.2.22 51868 <-> 37.190.195.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:00.392831 0.061857 udp 10.0.2.22 51868 <-> 77.244.39.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:01.377921 0.135555 udp 10.0.2.22 51868 <-> 68.193.213.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:02.362241 0.138647 udp 10.0.2.22 51868 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:03.345320 0.292672 udp 10.0.2.22 51868 <-> 126.60.25.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:04.334852 2.722540 udp 10.0.2.22 51868 <-> 172.162.41.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:05.731422 0.465758 udp 10.0.2.22 51868 <-> 186.89.100.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:06.719004 0.306201 udp 10.0.2.22 51868 <-> 61.114.38.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:07.705059 0.124731 udp 10.0.2.22 51868 <-> 206.74.136.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:08.690280 0.089509 udp 10.0.2.22 51868 <-> 85.155.5.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:09.675565 0.128882 udp 10.0.2.22 51868 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:10.658378 0.130002 udp 10.0.2.22 51868 <-> 90.236.42.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:11.647977 0.090311 udp 10.0.2.22 51868 <-> 77.121.85.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:12.626914 0.051720 udp 10.0.2.22 51868 <-> 79.118.98.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:13.613716 0.000000 udp 10.0.2.22 51868 -> 108.163.249.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:16:14.600282 0.000000 udp 10.0.2.22 51868 -> 108.163.253.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:16:15.585608 0.000000 udp 10.0.2.22 51868 -> 108.163.249.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:16:16.569640 0.000000 udp 10.0.2.22 51868 -> 108.163.253.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:16:17.552718 0.000000 udp 10.0.2.22 51868 -> 65.96.81.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:16:18.542459 0.000000 udp 10.0.2.22 51868 -> 189.68.2.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:16:19.521323 3.072315 udp 10.0.2.22 51868 -> 108.163.249.251 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:16:22.593638 0.000000 icmp 108.163.249.251 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 08:16:20.508814 4.048140 udp 10.0.2.22 51868 -> 108.163.253.252 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:16:24.556954 0.000000 icmp 108.163.253.252 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 08:16:21.495060 0.181021 udp 10.0.2.22 51868 <-> 82.48.115.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:23.463827 0.110743 udp 10.0.2.22 51868 -> 108.163.253.250 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:16:23.574570 0.000000 icmp 108.163.253.250 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 08:16:25.436373 0.168715 udp 10.0.2.22 51868 <-> 98.194.208.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:26.296142 0.000112 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:16:26.415057 0.082999 udp 10.0.2.22 51868 <-> 77.121.85.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:27.402495 0.000000 udp 10.0.2.22 51868 -> 82.140.62.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:16:28.388869 0.497447 udp 10.0.2.22 51868 <-> 1.186.113.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:29.373760 0.431050 udp 10.0.2.22 51868 <-> 117.205.11.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:30.357620 0.141538 udp 10.0.2.22 51868 <-> 98.236.115.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:31.340327 0.272044 udp 10.0.2.22 51868 <-> 181.166.65.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:32.329501 0.190861 udp 10.0.2.22 51868 <-> 75.115.165.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:33.307360 0.069886 udp 10.0.2.22 51868 <-> 77.10.237.125 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:34.294447 0.033272 udp 10.0.2.22 51868 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:35.280559 0.098894 udp 10.0.2.22 51868 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:36.264994 0.218437 udp 10.0.2.22 51868 <-> 37.213.12.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:37.248892 0.336650 udp 10.0.2.22 51868 <-> 190.173.2.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:38.231711 0.000090 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:16:38.231801 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:16:40.199619 0.288508 udp 10.0.2.22 51868 <-> 181.31.103.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:41.186258 0.746701 udp 10.0.2.22 51868 <-> 166.140.134.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:42.172155 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:16:43.157086 0.037428 udp 10.0.2.22 51868 <-> 46.162.107.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:44.140968 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:16:45.123870 0.075805 udp 10.0.2.22 51868 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:46.112864 0.978718 udp 10.0.2.22 51868 <-> 201.231.197.241 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:48.079111 0.153313 udp 10.0.2.22 51868 <-> 71.80.71.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:49.064674 0.174454 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:50.049528 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:16:51.033353 0.061649 udp 10.0.2.22 51868 <-> 86.124.151.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:52.015836 4.926799 udp 10.0.2.22 51868 -> 174.59.159.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:16:52.876479 0.000039 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:16:53.005410 1.114629 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:54.970787 0.042051 udp 10.0.2.22 51868 <-> 147.156.178.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:16:55.958037 0.000000 udp 10.0.2.22 51868 -> 24.77.20.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:16:57.925702 0.000000 udp 10.0.2.22 51868 -> 75.109.202.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:16:58.907634 0.000000 udp 10.0.2.22 51868 -> 87.0.26.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:16:59.897131 0.000000 udp 10.0.2.22 51868 -> 92.16.51.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:00.875758 0.139870 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:17:01.862660 1.047376 udp 10.0.2.22 51868 <-> 86.124.151.247 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:17:03.833701 0.302257 udp 10.0.2.22 51868 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:17:04.817207 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:05.799694 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:06.789148 0.000074 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:06.789222 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:17:07.591659 2.955117 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 08:17:08.754074 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:09.740001 0.258196 udp 10.0.2.22 51868 <-> 190.37.211.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:17:10.724748 0.042087 udp 10.0.2.22 51868 <-> 147.156.178.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:17:11.708337 0.179453 udp 10.0.2.22 51868 <-> 87.0.26.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:17:12.690816 0.170473 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:17:13.680170 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:14.490215 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:17:14.658228 0.342818 udp 10.0.2.22 51868 <-> 122.100.75.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:17:15.644746 0.206919 udp 10.0.2.22 51868 <-> 186.68.6.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:17:16.630686 0.140381 udp 10.0.2.22 51868 <-> 76.116.43.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:17:17.615281 0.043325 udp 10.0.2.22 51868 <-> 89.137.195.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:17:18.598685 0.000000 udp 10.0.2.22 51868 -> 178.167.99.54 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:19.452557 0.000037 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:17:19.581391 0.269673 udp 10.0.2.22 51868 <-> 190.246.10.33 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:17:20.570598 0.000000 udp 10.0.2.22 51868 -> 75.120.2.82 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:21.549514 0.000000 udp 10.0.2.22 51868 -> 82.245.150.146 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:22.369002 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:17:22.536597 0.383663 udp 10.0.2.22 51868 <-> 217.9.246.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:17:23.522281 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:24.506966 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:25.489753 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:26.472231 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:27.461527 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:28.439901 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:29.426646 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:30.412416 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:31.396970 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:32.380355 0.053474 udp 10.0.2.22 51868 <-> 89.137.77.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:17:33.362927 0.062082 udp 10.0.2.22 51868 <-> 176.223.35.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:17:35.330085 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:36.316630 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:37.302524 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:38.118675 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:17:38.287041 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:39.270305 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:40.261195 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:41.250232 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:42.229776 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:43.216430 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:44.202043 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:45.186493 0.000076 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:45.186569 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:17:46.044175 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:17:46.173035 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:47.164673 0.198234 udp 10.0.2.22 51868 <-> 75.120.2.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:17:48.153762 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:49.131561 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:50.118210 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:51.105935 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:52.090440 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:53.073946 0.000044 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:53.073990 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:17:54.064117 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:55.053252 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:56.030276 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:57.016948 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:58.002631 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:58.987460 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:17:59.972012 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:01.953899 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:02.931565 1.044076 udp 10.0.2.22 51868 <-> 86.121.142.131 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:18:04.903799 0.046020 udp 10.0.2.22 51868 <-> 89.137.195.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:18:05.891278 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:06.874182 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:07.864313 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:08.853169 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:09.672288 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:18:09.830844 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:11.803141 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:12.658469 0.000039 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:18:12.787300 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:13.770524 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:14.760337 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:15.739401 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:16.727035 0.000048 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:16.727083 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:18:17.713694 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:18.698989 0.000000 udp 10.0.2.22 51868 -> 82.245.150.146 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:19.685470 0.187527 udp 10.0.2.22 51868 <-> 75.120.2.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:18:20.668586 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:21.658695 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:22.637572 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:23.625190 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:24.611688 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:25.597032 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:26.581063 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:27.564144 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:28.553966 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:29.532883 0.000000 udp 10.0.2.22 51868 -> 82.245.150.146 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:30.520495 0.000000 udp 10.0.2.22 51868 -> 81.37.252.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:31.507236 0.451236 udp 10.0.2.22 51868 <-> 217.9.246.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:18:32.492666 0.145171 udp 10.0.2.22 51868 <-> 173.44.108.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:18:33.476797 0.169262 udp 10.0.2.22 51868 <-> 74.193.135.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:18:34.459783 0.000000 udp 10.0.2.22 51868 -> 95.25.29.149 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:35.449811 0.033427 udp 10.0.2.22 51868 <-> 78.97.175.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:18:36.428601 0.077653 udp 10.0.2.22 51868 <-> 176.8.201.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:18:37.416025 0.083696 udp 10.0.2.22 51868 <-> 176.194.213.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:18:38.402276 0.000000 udp 10.0.2.22 51868 -> 70.83.116.152 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:39.268310 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:18:39.387198 0.298519 udp 10.0.2.22 51868 <-> 24.232.15.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:18:40.371143 0.000000 udp 10.0.2.22 51868 -> 68.62.2.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:41.353889 0.248325 udp 10.0.2.22 51868 <-> 70.95.118.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:18:42.343775 0.156919 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:18:43.322475 0.000000 udp 10.0.2.22 51868 -> 89.137.195.168 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:44.309918 0.051115 udp 10.0.2.22 51868 <-> 93.152.154.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:18:45.296358 0.167036 udp 10.0.2.22 51868 <-> 98.100.135.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:18:46.281560 0.170683 udp 10.0.2.22 51868 <-> 98.194.123.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:18:47.265700 0.315632 udp 10.0.2.22 51868 <-> 189.68.131.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:18:48.249017 0.165020 udp 10.0.2.22 51868 <-> 69.204.114.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:18:49.238932 0.000000 udp 10.0.2.22 51868 -> 1.34.204.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:50.217917 0.000000 udp 10.0.2.22 51868 -> 98.183.15.44 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:51.205373 0.161309 udp 10.0.2.22 51868 <-> 74.193.135.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:18:52.191605 0.000000 udp 10.0.2.22 51868 -> 80.99.71.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:53.177014 1.980513 udp 10.0.2.22 51868 <-> 188.230.151.102 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:18:54.160573 3.745332 udp 10.0.2.22 51868 <-> 109.122.73.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:18:56.132987 1.480076 udp 10.0.2.22 51868 <-> 84.110.120.250 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:18:58.099048 0.000000 udp 10.0.2.22 51868 -> 71.63.13.85 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:18:59.085317 1.328603 udp 10.0.2.22 51868 <-> 201.210.246.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:00.070491 0.162065 udp 10.0.2.22 51868 <-> 74.193.135.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:01.054481 4.610526 udp 10.0.2.22 51868 <-> 109.122.73.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:02.036756 0.000000 udp 10.0.2.22 51868 -> 76.173.112.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:19:03.026350 0.000000 udp 10.0.2.22 51868 -> 78.240.221.99 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:19:04.004950 0.185667 udp 10.0.2.22 51868 <-> 190.141.88.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:04.991552 0.059391 udp 10.0.2.22 51868 <-> 89.40.50.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:05.859172 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:19:05.978078 4.001462 udp 10.0.2.22 51868 <-> 95.180.65.54 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:06.963028 3.545701 udp 10.0.2.22 51868 <-> 109.122.73.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:07.947250 1.331580 udp 10.0.2.22 51868 <-> 201.210.246.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:08.929366 0.013710 udp 10.0.2.22 51868 <-> 188.230.151.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:10.897135 0.212256 udp 10.0.2.22 51868 <-> 79.33.141.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:11.884412 0.238167 udp 10.0.2.22 51868 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:12.870545 0.479632 udp 10.0.2.22 51868 <-> 117.230.180.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:13.855714 0.039644 udp 10.0.2.22 51868 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:14.840009 0.000000 udp 10.0.2.22 51868 -> 96.30.202.193 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:19:15.822792 0.177617 udp 10.0.2.22 51868 <-> 67.148.202.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:16.812196 0.000000 udp 10.0.2.22 51868 -> 62.68.100.219 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:19:17.790526 0.037410 udp 10.0.2.22 51868 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:18.779275 0.000000 udp 10.0.2.22 51868 -> 151.52.90.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:19:19.765353 0.155456 udp 10.0.2.22 51868 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:20.750108 0.351942 udp 10.0.2.22 51868 <-> 78.251.143.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:21.733727 0.172695 udp 10.0.2.22 51868 <-> 88.156.7.146 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:22.719573 0.036685 udp 10.0.2.22 51868 <-> 46.162.107.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:23.708609 0.051972 udp 10.0.2.22 51868 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:24.687024 2.146072 udp 10.0.2.22 51868 <-> 192.226.149.28 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:25.674224 0.392314 udp 10.0.2.22 51868 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:27.645516 0.295983 udp 10.0.2.22 51868 <-> 179.216.19.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:28.629340 0.164160 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:29.612062 0.148431 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:30.601510 0.036762 udp 10.0.2.22 51868 <-> 46.162.107.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:31.580069 0.310792 udp 10.0.2.22 51868 <-> 78.251.143.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:32.448489 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:19:32.567376 0.064631 udp 10.0.2.22 51868 <-> 188.26.225.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:33.553441 0.049504 udp 10.0.2.22 51868 <-> 94.52.120.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:34.538290 0.059677 udp 10.0.2.22 51868 <-> 89.230.129.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:35.522087 4.151560 udp 10.0.2.22 51868 <-> 27.51.56.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:36.504188 0.162828 udp 10.0.2.22 51868 <-> 75.134.145.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:37.493557 0.141750 udp 10.0.2.22 51868 <-> 85.230.174.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:38.471933 0.049640 udp 10.0.2.22 51868 <-> 217.77.28.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:39.458906 0.177497 udp 10.0.2.22 51868 <-> 74.62.164.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:40.444745 0.825758 udp 10.0.2.22 51868 <-> 184.91.50.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:41.429867 0.283254 udp 10.0.2.22 51868 <-> 69.209.207.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:42.413652 0.045634 udp 10.0.2.22 51868 <-> 86.122.238.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:43.395924 0.047789 udp 10.0.2.22 51868 <-> 188.114.180.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:44.385300 4.943089 udp 10.0.2.22 51868 <-> 83.83.164.209 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:45.363563 0.214756 udp 10.0.2.22 51868 <-> 70.82.157.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:46.350093 1.745210 udp 10.0.2.22 51868 <-> 187.105.33.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:47.336231 0.000000 udp 10.0.2.22 51868 -> 114.27.181.161 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:19:48.320333 0.150991 udp 10.0.2.22 51868 <-> 98.214.215.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:50.286836 0.000000 udp 10.0.2.22 51868 -> 180.215.60.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:19:51.275599 0.000000 udp 10.0.2.22 51868 -> 2.92.4.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:19:52.253623 2.957358 udp 10.0.2.22 51868 <-> 24.232.19.31 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:53.240313 4.060382 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:56.194717 0.352214 udp 10.0.2.22 51868 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:19:58.166303 0.000000 udp 10.0.2.22 51868 -> 114.27.181.161 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:19:59.025501 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:19:59.144417 2.156442 udp 10.0.2.22 51868 <-> 68.108.78.72 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:00.131306 0.025940 udp 10.0.2.22 51868 <-> 83.83.164.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:02.101379 0.055480 udp 10.0.2.22 51868 <-> 188.114.180.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:03.084757 0.164914 udp 10.0.2.22 51868 <-> 70.82.157.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:04.067709 0.123130 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:05.056967 2.953771 udp 10.0.2.22 51868 -> 173.240.24.2 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:20:06.035020 0.000000 udp 10.0.2.22 51868 -> 87.0.26.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:20:07.022654 0.017478 udp 10.0.2.22 51868 <-> 5.146.89.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:08.995328 0.319331 udp 10.0.2.22 51868 <-> 64.233.158.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:09.978847 0.603241 udp 10.0.2.22 51868 <-> 187.57.60.156 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:10.961553 2.634136 udp 10.0.2.22 51868 <-> 201.40.48.211 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:11.950547 3.035251 udp 10.0.2.22 51868 <-> 78.49.234.99 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:13.919680 1.865181 udp 10.0.2.22 51868 <-> 98.82.26.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:16.054494 0.072664 udp 10.0.2.22 51868 <-> 83.213.126.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:17.027652 0.000000 udp 10.0.2.22 51868 -> 95.244.159.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:20:18.017536 0.151060 udp 10.0.2.22 51868 <-> 24.154.191.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:19.006104 0.155639 udp 10.0.2.22 51868 <-> 98.30.8.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:19.984034 0.000000 udp 10.0.2.22 51868 -> 82.79.212.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:20:20.970550 0.000000 udp 10.0.2.22 51868 -> 37.237.79.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:20:21.956044 0.000000 udp 10.0.2.22 51868 -> 180.215.78.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:20:22.940152 0.044499 udp 10.0.2.22 51868 <-> 89.160.39.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:23.923548 0.000000 udp 10.0.2.22 51868 -> 161.200.173.68 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:20:24.912801 0.177892 udp 10.0.2.22 51868 <-> 189.220.27.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:25.772884 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:20:25.901682 0.172927 udp 10.0.2.22 51868 <-> 96.63.219.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:26.879591 0.000000 udp 10.0.2.22 51868 -> 153.183.232.53 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:20:27.866542 0.150618 udp 10.0.2.22 51868 <-> 23.28.66.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:28.851880 0.565987 udp 10.0.2.22 51868 <-> 87.111.111.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:29.836416 0.045082 udp 10.0.2.22 51868 <-> 77.88.129.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:30.819631 0.065154 udp 10.0.2.22 51868 <-> 83.135.111.95 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:31.809798 0.000000 udp 10.0.2.22 51868 -> 76.98.41.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:20:32.798652 0.197284 udp 10.0.2.22 51868 <-> 79.183.172.249 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:33.776687 0.000000 udp 10.0.2.22 51868 -> 201.81.192.158 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:20:34.763365 0.146507 udp 10.0.2.22 51868 <-> 69.142.3.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:35.748780 1.172422 udp 10.0.2.22 51868 <-> 176.227.151.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:36.733132 0.000000 udp 10.0.2.22 51868 -> 14.99.12.118 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:20:37.716323 0.080652 udp 10.0.2.22 51868 <-> 82.211.188.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:38.706236 0.065743 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:39.694980 0.174757 udp 10.0.2.22 51868 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:40.672829 0.322336 udp 10.0.2.22 51868 <-> 124.34.178.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:41.659473 0.158787 udp 10.0.2.22 51868 <-> 74.195.167.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:42.644885 0.202732 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:43.629003 0.160127 udp 10.0.2.22 51868 <-> 76.119.161.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:44.612121 0.000000 udp 10.0.2.22 51868 -> 31.212.91.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:20:45.602309 0.065612 udp 10.0.2.22 51868 <-> 37.235.189.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:46.581389 0.168748 udp 10.0.2.22 51868 <-> 75.67.160.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:47.568996 0.299986 udp 10.0.2.22 51868 <-> 179.216.19.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:48.555030 0.121421 udp 10.0.2.22 51868 <-> 24.122.251.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:49.540438 0.256566 udp 10.0.2.22 51868 <-> 117.220.49.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:51.507544 0.029954 udp 10.0.2.22 51868 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:20:52.368714 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:20:52.497513 0.000061 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:20:52.497574 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:20:53.476380 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:20:54.464017 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:20:55.450460 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:20:56.435981 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:20:57.420201 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:20:58.403016 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:20:59.393036 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:00.371652 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:01.359177 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:02.345587 4.922117 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:03.330883 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:04.315065 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:05.299251 3.942479 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:06.288950 0.063928 udp 10.0.2.22 51868 <-> 188.26.225.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:21:08.255298 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:10.227056 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:11.210858 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:12.193800 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:13.183436 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:14.162269 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:15.150089 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:16.136726 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:18.106212 0.000040 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:18.106252 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:21:18.960438 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:21:19.089206 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:20.078875 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:21.058827 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:22.046318 0.000000 udp 10.0.2.22 51868 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:23.032517 0.335362 udp 10.0.2.22 51868 <-> 121.147.28.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:21:24.017667 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:25.001721 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:25.984595 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:26.974327 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:27.953004 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:28.940391 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:29.926391 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:30.911422 0.000072 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:30.911494 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:21:31.895377 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:32.878080 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:33.867480 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:34.846104 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:35.833387 4.928888 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:37.804229 0.048865 udp 10.0.2.22 51868 <-> 78.22.247.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:21:38.790545 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:39.773069 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:41.741097 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:42.728566 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:43.714726 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:44.832555 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:45.687782 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:21:46.798981 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:47.788531 0.000070 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:47.788601 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:21:48.766932 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:49.754097 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:50.740100 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:51.724817 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:52.708500 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:53.691544 0.160118 udp 10.0.2.22 51868 <-> 66.61.104.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:21:54.680949 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:55.658344 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:56.645270 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:57.631051 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:58.615811 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:21:59.599445 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:00.582010 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:01.571281 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:02.549587 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:03.536224 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:04.522147 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:05.507057 0.000071 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:05.507128 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:22:06.490960 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:08.462377 4.920007 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:09.440670 0.335694 udp 10.0.2.22 51868 <-> 121.147.28.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:22:10.427696 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:12.398591 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:13.253545 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:22:14.364871 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:15.353864 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:16.331366 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:17.318291 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:18.304052 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:19.288450 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:20.272133 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:21.254873 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:22.244050 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:23.222293 0.000065 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:23.222358 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:22:24.209519 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:25.195465 0.347144 udp 10.0.2.22 51868 <-> 190.77.199.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:22:26.180119 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:27.163996 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:28.146834 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:29.136175 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:30.114290 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:31.101360 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:32.087103 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:33.071676 0.155941 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:22:34.055526 0.069444 udp 10.0.2.22 51868 <-> 85.176.89.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:22:35.046495 0.000000 udp 10.0.2.22 51868 -> 84.196.249.25 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:36.035762 0.111924 udp 10.0.2.22 51868 <-> 79.177.207.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:22:37.013965 0.167496 udp 10.0.2.22 51868 <-> 76.28.110.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:22:38.000205 0.357472 udp 10.0.2.22 51868 <-> 111.234.113.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:22:38.985762 0.417371 udp 10.0.2.22 51868 <-> 177.149.100.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:22:39.841657 0.000037 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:22:39.970445 0.000000 udp 10.0.2.22 51868 -> 103.25.168.140 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:40.954109 0.159069 udp 10.0.2.22 51868 <-> 173.26.91.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:22:41.936556 0.044043 udp 10.0.2.22 51868 <-> 31.31.96.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:22:42.925680 3.934704 udp 10.0.2.22 51868 -> 216.121.192.14 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:43.903253 0.111606 udp 10.0.2.22 51868 <-> 95.74.171.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:22:44.890147 0.000000 udp 10.0.2.22 51868 -> 81.190.155.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:45.875676 0.125441 udp 10.0.2.22 51868 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:22:47.843914 1.156659 udp 10.0.2.22 51868 <-> 184.161.209.173 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:22:49.823280 0.161567 udp 10.0.2.22 51868 <-> 50.88.67.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:22:50.801514 0.207161 udp 10.0.2.22 51868 <-> 67.168.98.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:22:51.787519 0.156431 udp 10.0.2.22 51868 <-> 75.129.238.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:22:52.773147 0.000000 udp 10.0.2.22 51868 -> 181.43.43.44 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:53.757911 0.542452 udp 10.0.2.22 51868 <-> 58.146.126.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:22:54.741398 0.000000 udp 10.0.2.22 51868 -> 180.215.177.38 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:22:55.731528 0.046161 udp 10.0.2.22 51868 <-> 188.219.92.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:22:56.720615 0.008981 udp 10.0.2.22 51868 <-> 82.209.26.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:22:57.698421 0.077003 udp 10.0.2.22 51868 <-> 93.156.61.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:22:58.685064 0.496407 udp 10.0.2.22 51868 <-> 179.104.107.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:22:59.761701 0.267975 udp 10.0.2.22 51868 <-> 186.90.110.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:00.748971 0.000000 udp 10.0.2.22 51868 -> 75.158.248.133 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:23:01.732214 0.819384 udp 10.0.2.22 51868 <-> 203.111.214.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:02.722377 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:23:03.711455 0.000000 udp 10.0.2.22 51868 -> 1.175.115.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:23:04.689504 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:23:05.676362 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:23:06.542918 0.000090 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:23:06.661948 0.160830 udp 10.0.2.22 51868 <-> 50.142.135.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:07.646279 0.320661 udp 10.0.2.22 51868 <-> 186.89.152.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:08.629378 0.068209 udp 10.0.2.22 51868 <-> 84.124.226.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:08.956592 0.021660 udp 10.0.2.22 60050 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 08:23:08.978584 0.000000 udp 10.0.2.22 60051 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:23:09.619681 1.967199 udp 10.0.2.22 51868 <-> 14.98.164.135 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:10.608586 1.107981 udp 10.0.2.22 51868 <-> 201.210.213.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:12.573491 0.388199 udp 10.0.2.22 51868 <-> 94.197.234.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:13.558881 1.242313 udp 10.0.2.22 51868 <-> 223.177.175.240 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:15.525711 0.204880 udp 10.0.2.22 51868 <-> 223.29.202.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:16.515243 0.978976 udp 10.0.2.22 51868 <-> 187.57.60.156 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:18.482132 0.057400 udp 10.0.2.22 51868 <-> 77.103.126.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:19.468686 0.361494 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:20.454272 0.042115 udp 10.0.2.22 51868 <-> 212.233.198.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:21.438662 0.125915 udp 10.0.2.22 51868 <-> 84.228.222.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:22.422041 1.717289 udp 10.0.2.22 51868 <-> 81.190.155.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:24.391118 0.036248 udp 10.0.2.22 51868 <-> 77.103.126.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:25.378785 0.152082 udp 10.0.2.22 51868 <-> 72.198.87.227 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:26.365504 0.303530 udp 10.0.2.22 51868 <-> 58.177.117.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:27.350430 0.155126 udp 10.0.2.22 51868 <-> 74.141.52.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:28.334903 0.000000 udp 10.0.2.22 51868 -> 24.171.57.206 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:23:29.317798 0.237191 udp 10.0.2.22 51868 <-> 190.78.59.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:30.307772 0.248416 udp 10.0.2.22 51868 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:31.286302 0.000000 udp 10.0.2.22 51868 -> 79.47.59.49 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:23:32.273927 0.287570 udp 10.0.2.22 51868 <-> 210.194.128.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:33.141483 0.000039 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:23:33.260366 0.000000 udp 10.0.2.22 51868 -> 5.20.145.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:23:34.245694 0.059441 udp 10.0.2.22 51868 <-> 93.105.99.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:35.229811 0.159081 udp 10.0.2.22 51868 <-> 24.202.130.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:36.213191 0.208600 udp 10.0.2.22 51868 <-> 142.136.206.4 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:37.202963 0.052237 udp 10.0.2.22 51868 <-> 88.174.239.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:38.181904 0.212048 udp 10.0.2.22 51868 <-> 76.115.145.87 16464 CON 0 0 5 3618 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:39.169393 0.143634 udp 10.0.2.22 51868 <-> 24.240.26.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:40.158551 0.067624 udp 10.0.2.22 51868 <-> 188.36.133.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:41.143836 0.000000 udp 10.0.2.22 51868 -> 207.6.119.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:23:42.128129 3.117735 udp 10.0.2.22 51868 <-> 184.59.192.233 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:43.111167 0.300781 udp 10.0.2.22 51868 <-> 106.218.72.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:44.100995 0.159956 udp 10.0.2.22 51868 <-> 174.103.239.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:46.067049 4.950650 udp 10.0.2.22 51868 <-> 46.223.226.175 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:47.053417 2.989540 udp 10.0.2.22 51868 <-> 95.77.141.217 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:48.038863 0.000000 udp 10.0.2.22 51868 -> 202.29.178.204 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:23:49.022894 0.324117 udp 10.0.2.22 51868 <-> 180.60.36.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:51.973406 0.000000 udp 10.0.2.22 51868 -> 107.196.134.131 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:23:52.960741 0.000000 udp 10.0.2.22 51868 -> 89.146.131.126 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:23:53.947220 0.172128 udp 10.0.2.22 51868 <-> 151.77.121.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:54.932728 0.124293 udp 10.0.2.22 51868 <-> 93.151.1.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:55.916707 0.036783 udp 10.0.2.22 51868 <-> 5.15.202.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:56.899826 4.931964 udp 10.0.2.22 51868 <-> 60.37.183.143 16464 CON 0 0 5 1954 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:57.889555 4.926336 udp 10.0.2.22 51868 <-> 206.28.48.39 16464 CON 0 0 5 1954 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:23:59.736949 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:23:59.860599 0.000000 udp 10.0.2.22 51868 -> 109.193.154.184 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:24:02.158283 0.000000 udp 10.0.2.22 51868 <- 60.37.183.143 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:24:03.122583 0.000000 udp 10.0.2.22 51868 <- 206.28.48.39 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:24:03.798857 0.000000 udp 10.0.2.22 51868 -> 46.214.114.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:24:04.787257 0.254831 udp 10.0.2.22 51868 <-> 202.142.86.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:05.765898 0.069625 udp 10.0.2.22 51868 <-> 79.109.248.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:06.753174 0.341744 udp 10.0.2.22 51868 <-> 114.40.25.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:07.739592 0.151017 udp 10.0.2.22 51868 <-> 90.130.138.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:08.569076 2.967873 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 08:24:08.724823 3.901940 udp 10.0.2.22 51868 <-> 94.54.227.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:09.723242 0.000000 udp 10.0.2.22 51868 -> 31.176.169.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:24:10.705755 0.165857 udp 10.0.2.22 51868 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:11.695395 0.094123 udp 10.0.2.22 51868 <-> 89.134.21.110 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:12.674083 0.000000 udp 10.0.2.22 51868 -> 150.163.5.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:24:13.661598 0.000000 udp 10.0.2.22 51868 -> 128.68.67.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:24:14.649502 0.052240 udp 10.0.2.22 51868 <-> 88.174.239.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:15.486005 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:24:15.634610 0.000000 udp 10.0.2.22 51868 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:24:16.618483 0.171130 udp 10.0.2.22 51868 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:17.601284 0.223044 udp 10.0.2.22 51868 <-> 76.115.145.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:18.591047 0.000000 udp 10.0.2.22 51868 -> 68.185.124.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:24:19.569512 0.303256 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:20.556932 0.150010 udp 10.0.2.22 51868 <-> 69.249.127.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:21.543276 0.146498 udp 10.0.2.22 51868 <-> 75.99.69.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:22.528171 0.136575 udp 10.0.2.22 51868 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:23.363655 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:24:23.512215 0.078751 udp 10.0.2.22 51868 <-> 217.129.118.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:24.494854 0.000000 udp 10.0.2.22 51868 -> 2.32.248.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:24:25.484130 0.144551 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:26.343869 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:24:26.462895 0.000000 udp 10.0.2.22 51868 -> 65.30.26.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:24:27.449926 0.000000 udp 10.0.2.22 51868 -> 71.70.83.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:24:28.435982 3.941990 udp 10.0.2.22 51868 -> 85.224.225.174 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:24:29.421012 4.923538 udp 10.0.2.22 51868 <-> 75.228.14.1 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:30.405028 0.108771 udp 10.0.2.22 51868 <-> 95.133.193.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:31.387896 0.153312 udp 10.0.2.22 51868 <-> 74.69.201.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:33.357305 0.064210 udp 10.0.2.22 51868 <-> 95.25.29.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:34.622620 0.945218 udp 10.0.2.22 51868 <-> 75.228.14.1 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:36.315575 0.112658 udp 10.0.2.22 51868 <-> 95.133.193.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:37.299521 4.967173 udp 10.0.2.22 51868 <-> 77.76.177.251 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:38.281655 0.000000 udp 10.0.2.22 51868 -> 78.157.7.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:24:39.122339 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:24:39.270873 0.171970 udp 10.0.2.22 51868 <-> 69.1.2.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:40.249109 0.143870 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:41.235959 0.156252 udp 10.0.2.22 51868 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:43.206912 0.134862 udp 10.0.2.22 51868 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:44.190583 0.097203 udp 10.0.2.22 51868 <-> 78.157.7.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:45.173469 0.000000 udp 10.0.2.22 51868 -> 14.99.197.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:24:46.162626 0.038587 udp 10.0.2.22 51868 <-> 86.124.250.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:47.140978 0.000000 udp 10.0.2.22 51868 -> 46.35.110.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:24:48.130527 0.136614 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:49.116569 0.067509 udp 10.0.2.22 51868 <-> 128.71.112.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:50.101391 0.151391 udp 10.0.2.22 51868 <-> 71.43.117.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:51.085561 0.346931 udp 10.0.2.22 51868 <-> 190.110.186.13 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:52.068056 0.044087 udp 10.0.2.22 51868 <-> 46.35.173.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:52.928472 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:24:53.057232 0.349388 udp 10.0.2.22 51868 <-> 114.43.65.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:54.035277 2.119772 udp 10.0.2.22 51868 <-> 184.162.187.14 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:55.022317 0.055744 udp 10.0.2.22 51868 <-> 88.170.100.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:56.993124 0.404761 udp 10.0.2.22 51868 <-> 200.127.30.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:57.976814 0.243727 udp 10.0.2.22 51868 <-> 190.199.213.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:24:58.958555 0.000000 udp 10.0.2.22 51868 -> 201.158.68.166 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:24:59.948007 0.305950 udp 10.0.2.22 51868 <-> 61.117.140.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:25:00.926292 0.329008 udp 10.0.2.22 51868 <-> 113.37.177.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:25:01.913077 0.061347 udp 10.0.2.22 51868 <-> 78.82.62.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:25:03.882656 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:04.866651 0.000046 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:04.866697 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:25:05.849115 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:06.838550 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:07.816749 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:08.803979 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:09.789880 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:10.635833 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:25:10.774434 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:11.757943 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:12.740351 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:13.729499 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:14.707422 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:15.694470 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:16.680857 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:17.665589 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:18.648893 0.296738 udp 10.0.2.22 51868 <-> 190.200.61.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:25:19.510861 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:25:19.639634 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:20.628639 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:21.607061 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:22.594090 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:23.579668 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:24.563978 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:25.547357 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:26.537527 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:27.526389 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:28.504413 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:29.491300 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:30.476998 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:31.461535 0.000090 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:31.461625 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:25:32.444771 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:34.423527 0.643092 udp 10.0.2.22 51868 <-> 93.184.85.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:25:35.401562 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:36.388490 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:37.373943 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:38.358493 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:39.341641 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:40.331917 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:42.298024 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:43.285113 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:44.270661 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:45.255027 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:46.238149 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:47.099339 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:25:47.228235 0.000053 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:47.228288 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:25:48.207291 3.947001 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:49.195164 0.000000 udp 10.0.2.22 51868 -> 203.165.248.179 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:50.184274 0.283530 udp 10.0.2.22 51868 <-> 27.140.82.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:25:51.169821 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:53.137367 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:25:54.127129 0.060248 udp 10.0.2.22 51868 <-> 83.153.3.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:25:55.105393 0.062632 udp 10.0.2.22 51868 <-> 81.61.202.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:25:56.093113 3.124321 udp 10.0.2.22 51868 <-> 68.59.212.45 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:25:57.079495 1.031202 udp 10.0.2.22 51868 <-> 178.119.205.46 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:00.032715 0.024154 udp 10.0.2.22 51868 <-> 176.63.96.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:01.022859 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:26:02.001691 0.000000 udp 10.0.2.22 51868 -> 118.160.23.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:26:02.989469 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:26:03.976188 0.000049 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:26:03.976237 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:26:04.961682 0.000000 udp 10.0.2.22 51868 -> 75.148.112.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:26:06.928784 0.134196 udp 10.0.2.22 51868 <-> 162.17.224.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:07.918512 0.325004 udp 10.0.2.22 51868 <-> 223.182.73.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:08.897510 0.167757 udp 10.0.2.22 51868 <-> 192.226.149.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:09.885011 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:26:10.871402 3.202238 udp 10.0.2.22 51868 <-> 186.92.164.37 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:11.856542 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:26:12.840811 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:26:13.694554 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:26:14.813519 0.214365 udp 10.0.2.22 51868 <-> 209.106.45.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:15.792204 0.019551 udp 10.0.2.22 51868 <-> 88.132.62.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:16.780140 0.444837 udp 10.0.2.22 51868 <-> 114.49.28.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:17.766525 0.043139 udp 10.0.2.22 51868 <-> 88.72.192.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:18.752013 0.000000 udp 10.0.2.22 51868 -> 5.103.62.70 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:26:19.735395 0.000000 udp 10.0.2.22 51868 -> 79.119.175.47 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:26:20.718251 0.152549 udp 10.0.2.22 51868 <-> 24.31.217.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:21.707983 0.067731 udp 10.0.2.22 51868 <-> 84.232.15.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:22.686777 1.499857 udp 10.0.2.22 51868 <-> 79.46.244.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:23.675318 0.047517 udp 10.0.2.22 51868 <-> 86.125.184.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:24.661479 1.130447 udp 10.0.2.22 51868 <-> 201.210.215.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:25.647435 0.408646 udp 10.0.2.22 51868 <-> 24.67.23.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:26.631491 0.000000 udp 10.0.2.22 51868 -> 180.215.10.80 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:26:27.616829 0.130143 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:28.606549 0.211991 udp 10.0.2.22 51868 <-> 189.193.106.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:29.585512 0.068300 udp 10.0.2.22 51868 <-> 78.50.49.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:30.572949 0.267916 udp 10.0.2.22 51868 <-> 187.61.128.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:31.559458 0.055622 udp 10.0.2.22 51868 <-> 89.165.189.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:32.546639 4.922539 udp 10.0.2.22 51868 <-> 180.199.214.65 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:33.530616 0.128066 udp 10.0.2.22 51868 <-> 79.16.230.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:34.513466 2.026928 udp 10.0.2.22 51868 <-> 37.145.43.57 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:35.503079 0.041276 udp 10.0.2.22 51868 <-> 89.137.133.71 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:37.777469 0.000000 udp 10.0.2.22 51868 <- 180.199.214.65 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:26:38.456385 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:26:39.441605 0.219435 udp 10.0.2.22 51868 <-> 209.106.45.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:40.296757 0.000117 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:26:40.425594 0.452089 udp 10.0.2.22 51868 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:41.410421 0.047971 udp 10.0.2.22 51868 <-> 5.13.214.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:42.404170 0.182954 udp 10.0.2.22 51868 <-> 75.111.95.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:43.382906 0.136175 udp 10.0.2.22 51868 <-> 47.16.108.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:44.371192 0.162696 udp 10.0.2.22 51868 <-> 71.203.98.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:45.357655 1.065641 udp 10.0.2.22 51868 <-> 173.230.174.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:46.342698 0.143152 udp 10.0.2.22 51868 <-> 24.185.176.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:47.326429 0.082477 udp 10.0.2.22 51868 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:48.309681 0.185902 udp 10.0.2.22 51868 <-> 209.106.45.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:49.299449 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:26:50.278086 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:26:51.265398 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:26:52.251491 0.000000 udp 10.0.2.22 51868 -> 67.166.233.209 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:26:53.236685 0.181370 udp 10.0.2.22 51868 <-> 96.20.123.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:54.220534 0.172959 udp 10.0.2.22 51868 <-> 70.83.116.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:55.203254 0.137694 udp 10.0.2.22 51868 <-> 71.199.116.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:56.192743 0.160853 udp 10.0.2.22 51868 <-> 67.241.19.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:57.171221 0.190967 udp 10.0.2.22 51868 <-> 184.162.187.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:58.158515 0.142985 udp 10.0.2.22 51868 <-> 24.185.176.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:26:59.144615 0.131144 udp 10.0.2.22 51868 <-> 69.161.78.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:00.129707 0.088349 udp 10.0.2.22 51868 <-> 95.113.51.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:01.113322 0.330472 udp 10.0.2.22 51868 <-> 186.136.194.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:02.096074 0.553910 udp 10.0.2.22 51868 <-> 190.179.130.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:03.085133 0.000000 udp 10.0.2.22 51868 -> 114.45.22.188 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:27:04.063480 0.163217 udp 10.0.2.22 51868 <-> 24.243.8.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:05.050307 0.000000 udp 10.0.2.22 51868 -> 186.18.83.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:27:06.036273 0.068435 udp 10.0.2.22 51868 <-> 178.79.29.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:06.892104 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:27:07.020897 0.161708 udp 10.0.2.22 51868 <-> 71.89.115.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:08.004759 1.211442 udp 10.0.2.22 51868 <-> 190.254.197.42 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:09.976773 0.195051 udp 10.0.2.22 51868 <-> 95.238.31.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:10.955272 0.219817 udp 10.0.2.22 51868 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:11.942306 0.192061 udp 10.0.2.22 51868 <-> 162.192.99.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:12.928238 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:27:13.913017 0.125984 udp 10.0.2.22 51868 <-> 24.122.167.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:14.896682 0.139354 udp 10.0.2.22 51868 <-> 24.158.66.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:15.879903 0.056699 udp 10.0.2.22 51868 <-> 79.118.9.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:16.869253 0.286657 udp 10.0.2.22 51868 <-> 96.20.104.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:17.846834 0.000000 udp 10.0.2.22 51868 -> 190.163.230.144 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:27:18.833933 0.051079 udp 10.0.2.22 51868 <-> 79.114.24.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:19.819854 0.230321 udp 10.0.2.22 51868 <-> 68.185.37.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:20.804700 0.214611 udp 10.0.2.22 51868 <-> 24.10.7.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:21.788305 0.346950 udp 10.0.2.22 51868 <-> 187.10.24.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:22.770897 0.176089 udp 10.0.2.22 51868 <-> 184.49.10.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:23.760171 0.167696 udp 10.0.2.22 51868 <-> 98.194.123.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:24.738470 0.000000 udp 10.0.2.22 51868 -> 79.151.97.240 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:27:25.727646 0.022361 udp 10.0.2.22 51868 <-> 130.83.54.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:26.713777 0.108040 udp 10.0.2.22 51868 <-> 145.236.151.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:27.698619 0.000000 udp 10.0.2.22 51868 -> 114.39.18.175 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:27:28.682026 0.180296 udp 10.0.2.22 51868 <-> 151.77.138.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:29.664782 0.252124 udp 10.0.2.22 51868 <-> 50.113.56.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:30.654095 0.042532 udp 10.0.2.22 51868 <-> 212.233.198.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:31.632358 0.307161 udp 10.0.2.22 51868 <-> 114.180.118.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:32.619465 0.000000 udp 10.0.2.22 51868 -> 105.137.79.38 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:27:33.486379 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:27:33.605490 0.589394 udp 10.0.2.22 51868 <-> 201.209.126.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:34.590255 0.000000 udp 10.0.2.22 51868 -> 190.110.186.148 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:27:35.573982 0.000000 udp 10.0.2.22 51868 -> 78.28.15.56 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:27:36.555895 0.214006 udp 10.0.2.22 51868 <-> 71.93.149.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:37.545346 2.274024 udp 10.0.2.22 51868 <-> 180.199.214.65 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:38.523589 0.000000 udp 10.0.2.22 51868 -> 153.137.57.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:27:40.496964 0.000000 udp 10.0.2.22 51868 -> 190.110.186.148 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:27:41.481590 0.145889 udp 10.0.2.22 51868 <-> 174.97.209.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:42.465009 0.279194 udp 10.0.2.22 51868 <-> 190.193.86.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:43.447459 0.049208 udp 10.0.2.22 51868 <-> 188.190.84.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:44.436627 0.254282 udp 10.0.2.22 51868 <-> 200.84.68.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:45.413890 0.053361 udp 10.0.2.22 51868 <-> 212.75.2.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:46.400990 3.984219 udp 10.0.2.22 51868 <-> 180.215.211.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:47.386250 0.322180 udp 10.0.2.22 51868 <-> 153.135.189.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:48.371052 0.154980 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:49.354318 0.000000 udp 10.0.2.22 51868 -> 190.16.41.244 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:27:50.336754 0.064157 udp 10.0.2.22 51868 <-> 81.190.247.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:51.325395 0.140943 udp 10.0.2.22 51868 <-> 70.26.75.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:52.303458 0.000000 udp 10.0.2.22 51868 -> 114.26.25.173 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:27:53.290463 0.078026 udp 10.0.2.22 51868 <-> 151.77.138.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:54.276306 0.143928 udp 10.0.2.22 51868 <-> 71.77.141.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:55.260790 0.158896 udp 10.0.2.22 51868 <-> 70.60.4.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:56.244225 0.000000 udp 10.0.2.22 51868 -> 212.104.97.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:27:57.234298 0.248011 udp 10.0.2.22 51868 <-> 91.15.138.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:58.223414 1.225499 udp 10.0.2.22 51868 <-> 50.80.122.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:27:59.201567 0.357394 udp 10.0.2.22 51868 <-> 187.49.27.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:00.069135 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:28:00.188030 0.103372 udp 10.0.2.22 51868 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:01.173851 0.053581 udp 10.0.2.22 51868 <-> 89.137.201.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:02.158416 4.012741 udp 10.0.2.22 51868 <-> 188.25.69.227 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:03.141929 0.000000 udp 10.0.2.22 51868 -> 14.98.167.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:28:04.132124 0.053485 udp 10.0.2.22 51868 <-> 79.113.103.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:05.122994 0.298333 udp 10.0.2.22 51868 <-> 221.115.144.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:07.087994 0.056908 udp 10.0.2.22 51868 <-> 89.137.201.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:08.073287 0.155917 udp 10.0.2.22 51868 <-> 173.26.253.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:09.058036 0.053434 udp 10.0.2.22 51868 <-> 94.21.66.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:10.041277 0.000000 udp 10.0.2.22 51868 -> 24.53.88.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:28:11.031496 1.305195 udp 10.0.2.22 51868 <-> 117.199.123.1 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:12.998330 0.135294 udp 10.0.2.22 51868 <-> 178.121.247.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:13.984998 0.761499 udp 10.0.2.22 51868 <-> 186.90.31.45 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:14.970317 0.038936 udp 10.0.2.22 51868 <-> 46.10.187.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:15.954886 2.450911 udp 10.0.2.22 51868 <-> 182.188.213.61 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:16.938189 0.059713 udp 10.0.2.22 51868 <-> 178.75.248.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:18.907249 0.225716 udp 10.0.2.22 51868 <-> 201.140.193.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:19.895007 0.049565 udp 10.0.2.22 51868 <-> 188.190.84.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:20.881661 0.000000 udp 10.0.2.22 51868 -> 77.40.71.68 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:28:21.867063 0.057404 udp 10.0.2.22 51868 <-> 217.174.48.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:22.851279 0.038904 udp 10.0.2.22 51868 <-> 46.10.187.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:23.834477 0.000000 udp 10.0.2.22 51868 -> 75.185.188.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:28:24.824308 0.242049 udp 10.0.2.22 51868 <-> 186.90.31.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:25.802489 0.390135 udp 10.0.2.22 51868 <-> 187.35.67.198 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:26.671000 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:28:26.790157 0.172605 udp 10.0.2.22 51868 <-> 71.45.74.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:27.776144 1.968924 udp 10.0.2.22 51868 -> 41.211.70.44 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:28:28.761690 0.524372 udp 10.0.2.22 51868 <-> 84.228.222.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:30.728159 0.000000 udp 10.0.2.22 51868 -> 2.177.249.115 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:28:31.718293 0.066061 udp 10.0.2.22 51868 <-> 93.186.103.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:32.697156 0.000000 udp 10.0.2.22 51868 -> 211.109.254.215 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:28:33.684164 2.987452 udp 10.0.2.22 51868 <-> 186.18.157.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:34.670685 0.250437 udp 10.0.2.22 51868 <-> 84.228.222.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:35.655962 0.338342 udp 10.0.2.22 51868 <-> 190.17.169.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:36.640339 0.000000 udp 10.0.2.22 51868 -> 79.32.107.219 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:28:37.623309 0.230857 udp 10.0.2.22 51868 <-> 190.207.195.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:38.613203 0.000000 udp 10.0.2.22 51868 -> 41.102.155.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:28:39.591962 0.294068 udp 10.0.2.22 51868 <-> 122.145.189.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:40.579800 0.172559 udp 10.0.2.22 51868 <-> 24.217.52.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:41.566308 0.147550 udp 10.0.2.22 51868 <-> 174.102.8.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:42.551389 0.179714 udp 10.0.2.22 51868 <-> 68.113.165.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:43.535614 0.334853 udp 10.0.2.22 51868 <-> 190.178.240.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:44.518830 0.000000 udp 10.0.2.22 51868 -> 50.128.173.120 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:28:45.508751 0.176436 udp 10.0.2.22 51868 <-> 49.206.41.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:46.487325 0.000000 udp 10.0.2.22 51868 -> 10.10.51.139 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:28:47.474851 0.374643 udp 10.0.2.22 51868 <-> 183.178.135.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:48.461107 0.057815 udp 10.0.2.22 51868 <-> 94.253.238.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:49.446462 0.148884 udp 10.0.2.22 51868 <-> 37.150.85.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:50.429934 0.329553 udp 10.0.2.22 51868 <-> 58.115.17.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:51.413098 1.150037 udp 10.0.2.22 51868 <-> 96.20.36.116 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:53.263001 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:28:53.381938 0.031597 udp 10.0.2.22 51868 <-> 89.253.136.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:54.369335 0.145231 udp 10.0.2.22 51868 <-> 219.91.211.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:55.355848 0.000000 udp 10.0.2.22 51868 -> 49.205.253.170 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:28:56.345549 0.143154 udp 10.0.2.22 51868 <-> 98.235.43.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:28:57.329575 0.000000 udp 10.0.2.22 51868 -> 95.173.42.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:28:58.312432 0.000000 udp 10.0.2.22 51868 -> 190.75.56.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:28:59.302106 0.166252 udp 10.0.2.22 51868 <-> 24.171.57.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:00.280981 0.000000 udp 10.0.2.22 51868 -> 88.216.52.44 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:29:01.268326 0.000000 udp 10.0.2.22 51868 -> 116.202.86.143 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:29:02.254785 0.173496 udp 10.0.2.22 51868 <-> 76.125.64.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:03.240828 3.084258 udp 10.0.2.22 51868 <-> 66.103.51.143 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:04.224568 4.108398 udp 10.0.2.22 51868 <-> 71.63.13.85 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:05.207612 0.244241 udp 10.0.2.22 51868 <-> 84.38.87.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:07.175949 0.000000 udp 10.0.2.22 51868 -> 184.45.78.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:29:09.152635 0.056306 udp 10.0.2.22 51868 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:10.137670 0.306528 udp 10.0.2.22 51868 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:11.121500 0.000000 udp 10.0.2.22 51868 -> 186.18.88.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:29:12.104056 2.112563 udp 10.0.2.22 51868 <-> 67.86.105.68 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:13.093821 0.044771 udp 10.0.2.22 51868 <-> 95.180.65.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:16.047258 1.240039 udp 10.0.2.22 51868 <-> 89.228.227.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:17.032178 0.000054 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:29:17.032232 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:29:18.015895 0.184790 udp 10.0.2.22 51868 <-> 174.68.99.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:18.998432 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:29:19.988147 0.059323 udp 10.0.2.22 51868 <-> 79.118.212.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:20.847203 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:29:20.966179 0.000000 udp 10.0.2.22 51868 -> 207.42.135.185 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:29:21.953569 0.297801 udp 10.0.2.22 51868 <-> 70.132.115.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:22.939195 0.064621 udp 10.0.2.22 51868 <-> 92.32.25.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:23.924927 2.130728 udp 10.0.2.22 51868 <-> 75.109.202.145 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:24.908684 1.003365 udp 10.0.2.22 51868 <-> 216.249.94.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:26.880777 0.197606 udp 10.0.2.22 51868 <-> 98.237.186.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:27.859111 4.734715 udp 10.0.2.22 51868 <-> 195.174.102.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:28.846002 0.306750 udp 10.0.2.22 51868 <-> 190.72.55.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:29.831961 0.286720 udp 10.0.2.22 51868 <-> 66.131.206.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:30.819580 0.338709 udp 10.0.2.22 51868 <-> 182.221.14.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:31.802656 0.126990 udp 10.0.2.22 51868 <-> 68.39.15.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:32.785369 0.372610 udp 10.0.2.22 51868 <-> 27.2.158.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:33.774691 0.753665 udp 10.0.2.22 51868 <-> 188.167.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:34.752978 0.159043 udp 10.0.2.22 51868 <-> 66.61.104.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:35.741002 0.000000 udp 10.0.2.22 51868 -> 106.51.82.189 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:29:36.727149 0.055615 udp 10.0.2.22 51868 <-> 78.225.90.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:37.712147 0.145805 udp 10.0.2.22 51868 <-> 98.30.47.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:38.696082 3.157874 udp 10.0.2.22 51868 <-> 67.185.146.161 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:39.679117 0.140562 udp 10.0.2.22 51868 <-> 98.103.10.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:42.634312 0.343782 udp 10.0.2.22 51868 <-> 14.96.192.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:43.620371 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:29:44.605594 0.145037 udp 10.0.2.22 51868 <-> 174.108.102.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:46.571789 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:29:47.432512 0.000114 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:29:47.561471 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:29:48.539258 0.132609 udp 10.0.2.22 51868 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:49.525848 0.178680 udp 10.0.2.22 51868 <-> 24.202.109.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:50.512062 0.193799 udp 10.0.2.22 51868 <-> 208.84.191.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:51.497152 0.101353 udp 10.0.2.22 51868 <-> 78.62.30.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:52.480972 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:29:53.463247 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:29:54.453532 0.000000 udp 10.0.2.22 51868 -> 89.143.49.111 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:29:55.431848 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:29:56.419205 0.000069 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:29:56.419274 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:29:57.404979 0.094709 udp 10.0.2.22 51868 <-> 217.114.188.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:58.391427 0.472695 udp 10.0.2.22 51868 <-> 92.229.38.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:29:59.377420 0.000000 udp 10.0.2.22 51868 -> 179.44.1.228 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:00.360269 0.926166 udp 10.0.2.22 51868 <-> 173.34.197.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:30:01.349560 0.137485 udp 10.0.2.22 51868 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:30:02.327765 1.229173 udp 10.0.2.22 51868 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:30:03.313799 1.222962 udp 10.0.2.22 51868 <-> 181.166.124.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:30:04.299815 0.167403 udp 10.0.2.22 51868 <-> 24.113.18.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:30:05.284766 0.000000 udp 10.0.2.22 51868 -> 79.148.227.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:06.269694 0.144680 udp 10.0.2.22 51868 <-> 65.191.100.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:30:07.251970 0.105783 udp 10.0.2.22 51868 <-> 46.50.27.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:30:08.241281 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:09.221125 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:10.208061 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:11.194783 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:12.180187 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:13.163610 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:14.021479 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:30:14.150264 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:15.143603 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:16.122313 0.000065 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:16.122378 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:30:17.109660 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:18.095369 0.135335 udp 10.0.2.22 51868 <-> 79.42.25.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:30:19.079971 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:20.063667 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:21.046443 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:22.037474 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:23.017871 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:24.004964 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:25.975074 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:26.958514 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:27.948825 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:28.937853 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:29.915524 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:30.903468 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:31.889057 0.000050 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:31.889107 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:30:32.873920 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:33.857548 0.210891 udp 10.0.2.22 51868 <-> 71.92.249.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:30:34.847912 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:35.836614 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:36.815276 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:37.801772 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:38.787569 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:39.771838 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:40.626571 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:30:40.755457 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:41.745505 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:42.734276 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:43.711759 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:44.698611 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:45.683978 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:46.668206 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:47.651252 0.000060 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:47.651312 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:30:49.620946 0.115746 udp 10.0.2.22 51868 <-> 128.164.237.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:30:50.609005 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:51.595532 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:52.581170 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:54.548429 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:55.538495 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:56.517530 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:57.505379 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:58.492041 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:30:59.477613 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:00.461907 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:01.445157 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:02.435155 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:03.413992 0.000066 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:03.414058 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:31:04.402351 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:05.388829 0.115608 udp 10.0.2.22 51868 <-> 128.164.237.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:31:06.374058 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:07.229504 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:31:07.358298 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:08.340975 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:09.194800 2.960123 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 08:31:09.331066 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:10.309866 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:11.297560 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:13.268982 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:14.253280 0.000044 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:14.253324 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:31:15.236536 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:16.097684 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:31:16.226421 3.938367 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:17.205359 3.943458 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:18.192963 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:19.179491 0.115633 udp 10.0.2.22 51868 <-> 128.164.237.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:31:22.131838 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:23.121695 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:23.981909 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:31:24.100733 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:25.088076 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:26.074446 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:27.059721 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:28.043923 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:30.016160 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:30.994954 0.000048 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:30.995002 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:31:31.982338 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:32.969019 0.138217 udp 10.0.2.22 51868 <-> 128.164.237.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:31:33.965490 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:34.820536 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:31:34.949532 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:35.932411 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:36.922179 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:37.900764 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:38.888188 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:39.755609 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:31:39.874471 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:40.859575 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:41.843492 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:42.826699 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:43.816320 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:44.794762 0.000097 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:44.794859 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:31:45.782029 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:46.768393 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:48.737025 0.119014 udp 10.0.2.22 51868 <-> 46.50.27.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:31:49.719875 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:50.713765 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:51.692577 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:52.679967 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:53.666319 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:54.651260 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:55.635263 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:56.617039 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:57.605986 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:58.584563 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:31:59.572034 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:32:00.558201 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:32:01.414439 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:32:01.543232 0.000100 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:32:01.543332 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:32:03.509874 4.927935 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:32:04.499118 0.116495 udp 10.0.2.22 51868 <-> 128.164.237.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:05.478477 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:32:06.467026 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:32:07.453051 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:32:09.421803 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:32:10.405902 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:32:11.280124 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:32:11.398977 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:32:12.383437 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:32:13.370109 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:32:14.356354 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:32:15.341103 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:32:16.324951 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:32:17.307821 0.000066 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:32:17.307887 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:32:18.297522 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:32:19.276009 1.973322 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:32:20.263250 0.152980 udp 10.0.2.22 51868 <-> 76.11.73.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:22.234169 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:32:23.223535 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:32:24.206078 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:32:25.195800 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:32:27.161625 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:32:28.028879 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:32:28.147745 0.115508 udp 10.0.2.22 51868 <-> 128.164.237.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:29.132351 0.000000 udp 10.0.2.22 51868 -> 188.27.82.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:32:30.115967 0.000000 udp 10.0.2.22 51868 -> 88.247.225.233 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:32:31.098480 0.167689 udp 10.0.2.22 51868 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:32.087759 0.125055 udp 10.0.2.22 51868 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:33.066094 0.698825 udp 10.0.2.22 51868 <-> 80.91.213.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:34.053155 0.055329 udp 10.0.2.22 51868 <-> 89.137.78.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:35.038899 0.158972 udp 10.0.2.22 51868 <-> 75.68.219.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:36.023645 0.066268 udp 10.0.2.22 51868 <-> 83.213.201.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:37.007268 0.328308 udp 10.0.2.22 51868 <-> 189.68.140.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:37.990098 0.237391 udp 10.0.2.22 51868 <-> 79.46.184.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:38.979596 0.144131 udp 10.0.2.22 51868 <-> 24.240.26.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:39.958117 0.051260 udp 10.0.2.22 51868 <-> 84.51.169.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:40.945092 0.028652 udp 10.0.2.22 51868 <-> 77.242.145.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:41.930880 0.083387 udp 10.0.2.22 51868 <-> 31.176.250.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:42.915568 0.210797 udp 10.0.2.22 51868 <-> 67.160.81.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:43.899192 0.000000 udp 10.0.2.22 51868 -> 190.201.175.169 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:32:44.881192 0.214216 udp 10.0.2.22 51868 <-> 223.223.134.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:45.870307 0.042837 udp 10.0.2.22 51868 <-> 109.227.119.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:46.848545 0.083320 udp 10.0.2.22 51868 <-> 176.194.179.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:47.835596 0.127731 udp 10.0.2.22 51868 <-> 93.89.196.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:48.821560 0.159267 udp 10.0.2.22 51868 <-> 108.183.48.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:49.806530 0.032499 udp 10.0.2.22 51868 <-> 212.104.97.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:50.789584 0.596416 udp 10.0.2.22 51868 <-> 71.178.136.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:51.772402 0.693451 udp 10.0.2.22 51868 <-> 219.81.225.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:52.761602 0.165163 udp 10.0.2.22 51868 <-> 75.132.170.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:53.739228 0.145458 udp 10.0.2.22 51868 <-> 71.89.8.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:54.607394 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:32:54.726335 0.156446 udp 10.0.2.22 51868 <-> 71.61.202.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:55.712372 0.320394 udp 10.0.2.22 51868 <-> 106.218.72.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:56.696998 0.115080 udp 10.0.2.22 51868 <-> 68.230.129.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:57.679815 0.194037 udp 10.0.2.22 51868 <-> 202.131.117.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:58.670170 2.151559 udp 10.0.2.22 51868 <-> 124.253.227.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:32:59.659476 0.197110 udp 10.0.2.22 51868 <-> 49.206.142.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:00.637672 0.212361 udp 10.0.2.22 51868 <-> 189.194.83.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:01.624390 0.475710 udp 10.0.2.22 51868 <-> 122.121.6.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:02.609932 0.114857 udp 10.0.2.22 51868 <-> 78.131.17.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:03.594754 0.334204 udp 10.0.2.22 51868 <-> 114.24.119.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:04.577882 0.061629 udp 10.0.2.22 51868 <-> 88.161.227.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:05.567672 0.000000 udp 10.0.2.22 51868 -> 108.83.113.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:33:06.557014 0.265999 udp 10.0.2.22 51868 <-> 186.92.60.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:07.534886 0.757070 udp 10.0.2.22 51868 <-> 200.44.254.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:08.521729 0.558914 udp 10.0.2.22 51868 <-> 190.190.123.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:09.507458 2.241121 udp 10.0.2.22 51868 <-> 190.206.94.148 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:10.491846 0.032023 udp 10.0.2.22 51868 <-> 86.48.43.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:12.464807 0.292907 udp 10.0.2.22 51868 <-> 202.140.211.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:13.453728 0.527976 udp 10.0.2.22 51868 <-> 190.74.247.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:14.430538 0.224492 udp 10.0.2.22 51868 <-> 74.56.219.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:15.418740 2.036061 udp 10.0.2.22 51868 <-> 85.85.71.52 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:16.404322 0.658625 udp 10.0.2.22 51868 <-> 182.188.192.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:18.372051 0.000000 udp 10.0.2.22 51868 -> 105.139.71.155 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:33:19.362088 0.066264 udp 10.0.2.22 51868 <-> 93.186.103.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:20.341178 0.086495 udp 10.0.2.22 51868 <-> 88.166.83.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:21.210246 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:33:21.329109 0.297537 udp 10.0.2.22 51868 <-> 200.104.248.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:22.315802 0.023890 udp 10.0.2.22 51868 <-> 37.24.57.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:23.301322 0.587127 udp 10.0.2.22 51868 <-> 14.99.12.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:24.285707 0.295255 udp 10.0.2.22 51868 <-> 186.236.196.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:25.268562 0.193688 udp 10.0.2.22 51868 <-> 172.219.86.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:26.258668 0.000000 udp 10.0.2.22 51868 -> 117.207.34.97 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:33:27.237669 0.000000 udp 10.0.2.22 51868 -> 91.105.12.196 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:33:28.225437 0.275392 udp 10.0.2.22 51868 <-> 223.133.79.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:29.211960 0.000000 udp 10.0.2.22 51868 -> 114.26.249.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:33:30.197512 0.386114 udp 10.0.2.22 51868 <-> 190.54.229.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:31.181678 0.331778 udp 10.0.2.22 51868 <-> 218.164.7.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:32.164865 0.000000 udp 10.0.2.22 51868 -> 93.103.63.167 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:33:33.155127 0.196598 udp 10.0.2.22 51868 <-> 75.111.95.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:34.134039 0.353324 udp 10.0.2.22 51868 <-> 61.223.85.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:35.121631 3.587172 udp 10.0.2.22 51868 <-> 200.125.109.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:36.108209 0.171973 udp 10.0.2.22 51868 <-> 68.59.249.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:37.093468 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:33:38.077491 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:33:39.060391 1.995706 udp 10.0.2.22 51868 <-> 46.108.178.184 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:40.050518 0.018907 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:42.016438 0.000000 udp 10.0.2.22 51868 -> 88.160.79.98 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:33:43.003092 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:33:43.988273 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:33:44.972387 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:33:45.955082 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:33:46.944792 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:33:47.804599 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:33:47.923500 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:33:48.911277 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:33:49.897738 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:33:50.883013 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:33:52.850477 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:33:53.840600 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:33:54.819223 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:33:55.806870 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:33:56.793181 0.000048 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:33:56.793229 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:33:57.778467 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:33:58.762676 0.381397 udp 10.0.2.22 51868 <-> 187.57.60.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:33:59.745483 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:00.735195 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:01.714109 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:02.702079 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:03.688480 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:04.673987 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:05.658161 0.000041 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:05.658202 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:34:06.641126 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:07.630836 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:08.609549 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:09.597327 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:10.583635 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:11.568812 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:12.551739 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:14.395169 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:34:14.523942 0.101248 udp 10.0.2.22 51868 <-> 46.147.142.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:34:15.502464 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:16.489869 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:17.476272 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:19.444621 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:20.427447 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:21.416960 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:22.395595 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:23.383200 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:24.369514 0.000082 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:24.369596 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:34:25.354420 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:26.338331 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:27.321007 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:28.310601 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:29.288934 4.925159 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:30.276367 0.153525 udp 10.0.2.22 51868 <-> 71.72.193.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:34:31.262432 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:32.247446 0.000045 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:32.247491 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:34:33.231296 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:35.203697 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:36.182082 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:37.169539 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:38.155659 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:39.140487 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:40.124467 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:40.978619 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:34:41.107425 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:42.096767 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:43.075262 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:44.062543 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:45.048781 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:46.033486 0.000000 udp 10.0.2.22 51868 -> 86.38.55.49 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:47.017394 0.158457 udp 10.0.2.22 51868 <-> 50.158.29.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:34:47.999987 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:48.989526 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:49.967710 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:50.954911 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:51.940954 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:52.925628 0.000062 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:52.925690 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:34:53.909503 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:54.891873 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:55.881353 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:56.859846 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:57.847210 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:58.832898 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:34:59.817297 3.933843 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:00.800676 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:01.783435 0.116380 udp 10.0.2.22 51868 <-> 46.147.142.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:35:02.772932 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:04.737959 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:05.724062 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:06.708810 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:07.563533 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:35:07.692343 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:08.674984 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:10.642523 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:11.629527 0.000062 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:11.629589 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:35:12.615460 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:13.600159 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:14.583636 3.936884 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:15.566158 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:16.555387 0.117215 udp 10.0.2.22 51868 <-> 46.147.142.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:35:17.533493 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:19.506267 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:20.491099 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:21.474504 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:22.457003 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:23.446098 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:24.424280 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:25.411211 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:26.396413 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:27.380938 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:28.364370 0.000087 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:28.364457 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:35:29.354566 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:31.322102 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:32.309113 0.126729 udp 10.0.2.22 51868 <-> 46.147.142.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:35:33.295048 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:34.150726 0.000039 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:35:34.279561 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:35.263235 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:36.253939 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:37.241640 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:38.219887 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:39.207041 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:40.192774 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:41.177509 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:42.160721 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:43.151029 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:44.140763 0.000054 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:44.140817 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:35:45.118723 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:46.105381 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:47.091046 4.924836 udp 10.0.2.22 51868 -> 50.158.29.142 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:48.075595 0.139644 udp 10.0.2.22 51868 <-> 86.180.223.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:35:49.058866 0.514230 udp 10.0.2.22 51868 <-> 187.57.60.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:35:50.049189 0.354885 udp 10.0.2.22 51868 <-> 86.38.55.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:35:51.028138 0.328604 udp 10.0.2.22 51868 <-> 119.18.179.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:35:52.171497 0.000000 udp 10.0.2.22 51868 <- 50.158.29.142 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:53.002483 1.046822 udp 10.0.2.22 51868 <-> 181.164.143.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:35:53.988086 0.038638 udp 10.0.2.22 51868 <-> 5.15.31.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:35:54.972313 0.027374 udp 10.0.2.22 51868 <-> 46.108.178.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:35:55.956384 0.274465 udp 10.0.2.22 51868 <-> 190.205.229.220 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:35:56.946301 0.353836 udp 10.0.2.22 51868 <-> 117.222.20.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:35:57.924815 0.060942 udp 10.0.2.22 51868 <-> 93.73.2.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:35:58.912559 0.153044 udp 10.0.2.22 51868 <-> 46.233.24.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:35:59.899413 0.082622 udp 10.0.2.22 51868 -> 88.3.242.73 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:35:59.982035 0.000000 icmp 88.3.242.73 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 08:36:00.766018 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:36:00.884881 0.794074 udp 10.0.2.22 51868 <-> 181.28.59.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:01.869424 0.111771 udp 10.0.2.22 51868 <-> 137.99.97.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:02.852703 0.142172 udp 10.0.2.22 51868 <-> 208.53.245.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:03.842842 0.198379 udp 10.0.2.22 51868 <-> 208.99.142.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:04.821574 0.277873 udp 10.0.2.22 51868 <-> 116.202.189.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:05.809368 0.222122 udp 10.0.2.22 51868 <-> 71.92.217.0 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:06.795847 0.000000 udp 10.0.2.22 51868 -> 37.123.35.148 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:36:07.781511 0.058025 udp 10.0.2.22 51868 <-> 89.230.29.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:08.765647 2.131772 udp 10.0.2.22 51868 <-> 186.14.63.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:09.748786 0.023630 udp 10.0.2.22 51868 <-> 91.89.112.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:10.738825 0.286660 udp 10.0.2.22 51868 <-> 181.16.84.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:11.717754 0.297178 udp 10.0.2.22 51868 <-> 117.109.248.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:12.705529 0.000000 udp 10.0.2.22 51868 -> 135.19.220.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:36:13.692760 0.026457 udp 10.0.2.22 51868 <-> 84.118.201.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:14.678042 3.383573 udp 10.0.2.22 51868 <-> 84.110.120.250 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:15.662296 0.113795 udp 10.0.2.22 51868 <-> 24.253.132.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:16.645712 0.000000 udp 10.0.2.22 51868 -> 177.98.228.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:36:18.614630 0.711862 udp 10.0.2.22 51868 <-> 186.70.25.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:19.602223 0.362832 udp 10.0.2.22 51868 <-> 118.169.130.176 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:20.588737 0.000000 udp 10.0.2.22 51868 -> 176.70.157.144 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:36:21.574150 0.386798 udp 10.0.2.22 51868 <-> 117.222.38.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:22.562422 0.162089 udp 10.0.2.22 51868 <-> 66.30.24.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:23.546822 0.169720 udp 10.0.2.22 51868 <-> 68.207.191.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:24.536747 0.151202 udp 10.0.2.22 51868 <-> 24.236.189.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:25.516798 0.239392 udp 10.0.2.22 51868 <-> 200.84.227.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:26.504332 0.470082 udp 10.0.2.22 51868 <-> 201.17.76.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:27.372712 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:36:27.491598 0.000000 udp 10.0.2.22 51868 -> 220.129.1.155 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:36:28.476952 0.000000 udp 10.0.2.22 51868 -> 188.114.139.68 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:36:29.460881 0.027609 udp 10.0.2.22 51868 <-> 91.89.112.109 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:30.447829 0.125212 udp 10.0.2.22 51868 <-> 71.90.194.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:31.437315 0.148325 udp 10.0.2.22 51868 <-> 108.202.146.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:32.416449 0.317903 udp 10.0.2.22 51868 <-> 219.71.81.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:33.404059 0.073523 udp 10.0.2.22 51868 <-> 91.82.34.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:34.390304 0.234090 udp 10.0.2.22 51868 <-> 190.205.207.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:35.376034 0.059008 udp 10.0.2.22 51868 <-> 212.3.13.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:36.360268 1.103896 udp 10.0.2.22 51868 <-> 68.207.92.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:37.343322 0.170162 udp 10.0.2.22 51868 <-> 98.251.239.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:38.342615 0.000000 udp 10.0.2.22 51868 -> 89.214.182.224 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:36:39.321516 0.176474 udp 10.0.2.22 51868 <-> 75.66.83.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:40.307869 0.056238 udp 10.0.2.22 51868 <-> 93.134.103.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:41.294096 0.113476 udp 10.0.2.22 51868 <-> 24.253.132.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:42.279439 0.000000 udp 10.0.2.22 51868 -> 99.1.149.171 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:36:43.263284 0.000000 udp 10.0.2.22 51868 -> 68.117.185.142 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:36:44.246135 0.000000 udp 10.0.2.22 51868 -> 71.95.45.207 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:36:45.235196 0.000000 udp 10.0.2.22 51868 -> 128.177.76.205 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:36:46.213912 0.000000 udp 10.0.2.22 51868 -> 210.89.56.198 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:36:47.201551 0.239093 udp 10.0.2.22 51868 <-> 190.205.207.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:48.187808 0.000000 udp 10.0.2.22 51868 -> 77.78.227.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:36:49.173214 0.342669 udp 10.0.2.22 51868 <-> 109.52.183.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:50.156869 0.180875 udp 10.0.2.22 51868 <-> 68.117.185.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:51.139804 0.159216 udp 10.0.2.22 51868 <-> 68.59.89.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:52.129517 0.000000 udp 10.0.2.22 51868 -> 77.38.98.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:36:53.108063 0.879196 udp 10.0.2.22 51868 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:53.976545 0.000114 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:36:54.095420 0.305029 udp 10.0.2.22 51868 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:55.090206 1.393806 udp 10.0.2.22 51868 <-> 31.185.116.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:56.075635 0.141033 udp 10.0.2.22 51868 <-> 65.189.203.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:57.061829 0.352272 udp 10.0.2.22 51868 <-> 2.185.126.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:58.044607 0.145428 udp 10.0.2.22 51868 <-> 68.192.76.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:36:59.034334 0.114648 udp 10.0.2.22 51868 <-> 24.150.162.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:37:00.012812 0.970414 udp 10.0.2.22 51868 <-> 116.73.58.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:37:00.999505 0.248440 udp 10.0.2.22 51868 <-> 223.179.104.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:37:01.985661 0.139217 udp 10.0.2.22 51868 <-> 75.99.213.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:37:02.970922 0.692322 udp 10.0.2.22 51868 <-> 190.195.127.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:37:03.955111 0.368641 udp 10.0.2.22 51868 <-> 117.203.51.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:37:04.937733 0.000000 udp 10.0.2.22 51868 -> 199.188.251.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:05.927402 0.065370 udp 10.0.2.22 51868 <-> 91.90.2.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:37:06.905668 0.144790 udp 10.0.2.22 51868 <-> 24.191.109.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:37:07.893195 0.311787 udp 10.0.2.22 51868 <-> 211.36.185.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:37:08.879279 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:09.864347 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:10.847956 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:11.830695 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:12.820663 0.000064 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:12.820727 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:37:13.799375 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:14.787268 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:15.773296 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:16.758014 0.000000 udp 10.0.2.22 51868 -> 173.174.0.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:17.742214 0.000000 udp 10.0.2.22 51868 -> 192.168.1.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:18.724968 0.000000 udp 10.0.2.22 51868 -> 79.116.107.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:19.714682 0.208443 udp 10.0.2.22 51868 <-> 71.196.205.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:37:20.574185 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:37:20.693106 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:21.680263 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:22.666100 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:23.651059 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:24.634692 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:25.617346 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:26.606701 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:27.584951 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:28.572069 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:29.558044 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:30.542399 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:31.526051 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:32.508630 1.148190 udp 10.0.2.22 51868 <-> 96.58.51.222 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:37:34.475998 0.052480 udp 10.0.2.22 51868 <-> 93.79.133.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:37:35.463034 0.000000 udp 10.0.2.22 51868 -> 95.247.81.47 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:36.449542 0.000000 udp 10.0.2.22 51868 -> 68.59.72.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:37.437299 0.000000 udp 10.0.2.22 51868 -> 89.215.228.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:38.421306 0.210522 udp 10.0.2.22 51868 <-> 189.193.106.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:37:40.394071 0.000056 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:40.394127 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:37:41.372958 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:42.360277 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:43.346090 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:44.330900 4.920006 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:45.314429 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:46.296913 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:47.156852 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:37:47.285702 0.151296 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:37:48.263986 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:50.236537 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:51.221550 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:52.204757 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:53.187223 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:54.177181 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:55.155497 1.972497 udp 10.0.2.22 51868 -> 84.2.254.239 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:55.482427 0.012476 udp 10.0.2.22 60052 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 08:37:55.495206 0.000000 udp 10.0.2.22 60053 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:37:56.142237 0.647282 udp 10.0.2.22 51868 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:37:58.112770 0.142305 udp 10.0.2.22 51868 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:37:59.096347 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:00.078091 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:01.067243 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:02.045531 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:03.031617 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:04.017290 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:05.985283 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:06.975482 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:07.964034 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:08.942109 0.000048 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:08.942157 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:38:09.823084 2.951480 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 08:38:09.929446 1.970267 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:10.915259 0.666844 udp 10.0.2.22 51868 <-> 62.93.121.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:38:12.883521 0.000000 udp 10.0.2.22 51868 -> 24.244.127.249 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:13.873779 2.954011 udp 10.0.2.22 51868 -> 84.2.254.239 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:14.733785 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:38:14.862607 0.049076 udp 10.0.2.22 51868 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:38:15.840948 0.076052 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:38:16.728775 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:38:17.813440 0.166602 udp 10.0.2.22 51868 <-> 174.57.198.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:38:18.797677 0.000000 udp 10.0.2.22 51868 -> 95.85.134.40 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:19.780689 0.125666 udp 10.0.2.22 51868 <-> 173.238.152.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:38:20.771062 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:21.751461 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:22.739324 4.929403 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:23.725506 0.000080 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:23.725586 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:38:24.611978 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:38:24.711017 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:26.678627 0.091055 udp 10.0.2.22 51868 <-> 78.188.164.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:38:28.647976 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:29.636059 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:30.625971 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:31.612083 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:32.596751 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:33.579939 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:34.572751 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:35.551183 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:36.539271 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:37.530239 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:38.516401 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:40.384766 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:38:40.483827 3.946169 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:41.348031 0.000116 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:38:41.477143 1.064475 udp 10.0.2.22 51868 <-> 78.188.164.28 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:38:43.443560 0.180732 udp 10.0.2.22 51868 <-> 74.62.164.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:38:45.415482 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:46.399990 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:47.383432 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:48.375207 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:49.354157 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:51.328561 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:52.313484 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:53.296757 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:54.280446 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:55.269880 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:56.248463 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:38:57.242683 1.255579 udp 10.0.2.22 51868 <-> 151.74.151.161 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:38:59.214886 0.161220 udp 10.0.2.22 51868 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:00.199225 0.000000 udp 10.0.2.22 51868 -> 161.200.173.68 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:39:01.183470 0.015443 udp 10.0.2.22 51868 <-> 164.8.108.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:02.174078 0.073761 udp 10.0.2.22 51868 <-> 46.175.229.8 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:03.152923 0.051857 udp 10.0.2.22 51868 <-> 87.97.201.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:04.140562 1.971880 udp 10.0.2.22 51868 -> 192.168.1.13 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:39:05.127004 0.134439 udp 10.0.2.22 51868 <-> 88.187.104.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:07.096378 1.086389 udp 10.0.2.22 51868 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:07.950770 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:39:08.079565 0.050242 udp 10.0.2.22 51868 <-> 79.118.98.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:09.071980 3.108654 udp 10.0.2.22 51868 <-> 27.106.26.16 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:10.053676 0.022088 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:11.041215 0.180673 udp 10.0.2.22 51868 <-> 97.106.251.17 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:11.938574 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:39:13.013050 0.039263 udp 10.0.2.22 51868 <-> 5.15.99.5 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:13.997532 0.139034 udp 10.0.2.22 51868 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:14.980251 0.075937 udp 10.0.2.22 51868 <-> 195.174.55.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:15.969905 0.155254 udp 10.0.2.22 51868 <-> 74.135.11.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:16.948586 1.974140 udp 10.0.2.22 51868 -> 90.180.66.41 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:39:17.936037 0.354164 udp 10.0.2.22 51868 <-> 187.2.67.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:19.966158 1.887384 udp 10.0.2.22 51868 <-> 179.216.83.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:20.950117 0.125619 udp 10.0.2.22 51868 <-> 24.75.190.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:21.933206 0.097341 udp 10.0.2.22 51868 <-> 95.86.47.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:22.922865 3.173408 udp 10.0.2.22 51868 <-> 68.189.5.0 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:23.901356 0.053432 udp 10.0.2.22 51868 <-> 62.45.13.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:24.889936 0.000000 udp 10.0.2.22 51868 -> 90.180.66.41 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:39:26.861500 0.517216 udp 10.0.2.22 51868 <-> 187.2.67.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:27.845503 0.055451 udp 10.0.2.22 51868 <-> 79.117.216.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:28.828195 0.031528 udp 10.0.2.22 51868 <-> 130.204.169.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:29.817924 0.620725 udp 10.0.2.22 51868 <-> 188.246.70.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:30.796473 0.149870 udp 10.0.2.22 51868 <-> 37.213.134.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:31.783689 0.689782 udp 10.0.2.22 51868 <-> 77.221.8.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:32.769970 0.121436 udp 10.0.2.22 51868 <-> 24.75.190.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:33.754802 0.346387 udp 10.0.2.22 51868 <-> 187.2.67.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:34.609445 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:39:34.738254 4.925695 udp 10.0.2.22 51868 <-> 74.135.11.74 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:35.722146 1.157622 udp 10.0.2.22 51868 <-> 98.194.123.59 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:37.690685 0.000000 udp 10.0.2.22 51868 -> 84.252.22.95 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:39:38.677797 0.466726 udp 10.0.2.22 51868 <-> 188.246.70.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:39.818401 0.000000 udp 10.0.2.22 51868 <- 74.135.11.74 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:39:40.649067 0.027311 udp 10.0.2.22 51868 <-> 82.192.233.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:41.632796 0.032800 udp 10.0.2.22 51868 <-> 62.45.13.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:42.614858 0.000000 udp 10.0.2.22 51868 -> 192.168.0.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:39:43.604269 0.000000 udp 10.0.2.22 51868 -> 85.84.135.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:39:44.582923 0.987106 udp 10.0.2.22 51868 <-> 190.218.165.1 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:46.559565 0.176050 udp 10.0.2.22 51868 <-> 76.84.28.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:47.544350 0.181519 udp 10.0.2.22 51868 <-> 106.51.31.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:48.528224 0.178821 udp 10.0.2.22 51868 <-> 97.106.251.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:49.511613 0.198837 udp 10.0.2.22 51868 <-> 174.1.110.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:50.501507 0.000000 udp 10.0.2.22 51868 -> 200.82.132.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:39:51.479169 0.000000 udp 10.0.2.22 51868 -> 86.125.184.50 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:39:52.466423 0.067298 udp 10.0.2.22 51868 <-> 79.112.143.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:53.451997 0.343071 udp 10.0.2.22 51868 <-> 186.221.45.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:54.436973 0.186185 udp 10.0.2.22 51868 <-> 213.245.163.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:55.420665 1.502640 udp 10.0.2.22 51868 <-> 58.152.190.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:56.403186 0.279415 udp 10.0.2.22 51868 <-> 27.140.82.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:57.392617 0.074566 udp 10.0.2.22 51868 <-> 46.72.180.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:58.370879 0.064497 udp 10.0.2.22 51868 <-> 89.253.144.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:39:59.358309 4.927383 udp 10.0.2.22 51868 -> 108.176.217.52 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:40:00.344284 2.951826 udp 10.0.2.22 51868 -> 195.101.139.143 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:40:01.200512 0.000039 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:40:01.329310 0.176181 udp 10.0.2.22 51868 <-> 76.84.156.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:02.312913 0.000000 udp 10.0.2.22 51868 -> 98.67.186.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:40:04.445418 0.000000 udp 10.0.2.22 51868 <- 108.176.217.52 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:40:05.264159 0.033035 udp 10.0.2.22 51868 <-> 89.253.144.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:06.250693 0.035790 udp 10.0.2.22 51868 <-> 178.79.32.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:07.236578 0.000000 udp 10.0.2.22 51868 -> 46.72.180.205 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:40:08.220873 0.175547 udp 10.0.2.22 51868 <-> 76.84.156.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:09.204492 0.000000 udp 10.0.2.22 51868 -> 77.76.177.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:40:10.187064 2.131492 udp 10.0.2.22 51868 <-> 68.59.56.94 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:11.176151 0.000000 udp 10.0.2.22 51868 -> 180.215.60.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:40:13.142038 0.048908 udp 10.0.2.22 51868 <-> 5.14.70.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:14.127946 0.075148 udp 10.0.2.22 51868 <-> 46.72.180.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:15.112752 0.000000 udp 10.0.2.22 51868 -> 174.106.129.93 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:40:16.096126 0.000000 udp 10.0.2.22 51868 -> 195.101.139.143 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:40:17.078602 0.301333 udp 10.0.2.22 51868 <-> 108.176.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:18.067669 0.291123 udp 10.0.2.22 51868 <-> 201.242.77.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:19.047088 0.137889 udp 10.0.2.22 51868 <-> 76.127.177.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:20.033987 0.000000 udp 10.0.2.22 51868 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:40:21.019849 0.216314 udp 10.0.2.22 51868 <-> 92.249.152.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:22.004346 0.642306 udp 10.0.2.22 51868 <-> 190.73.13.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:22.988055 0.046608 udp 10.0.2.22 51868 <-> 178.148.145.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:23.970955 0.000000 udp 10.0.2.22 51868 -> 87.109.74.125 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:40:24.960243 0.155941 udp 10.0.2.22 51868 <-> 92.41.174.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:25.938622 0.155301 udp 10.0.2.22 51868 <-> 96.59.111.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:26.925573 0.935217 udp 10.0.2.22 51868 <-> 114.27.181.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:27.791960 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:40:27.910835 0.151457 udp 10.0.2.22 51868 <-> 58.146.126.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:28.895767 0.218205 udp 10.0.2.22 51868 <-> 174.1.110.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:29.888441 0.060448 udp 10.0.2.22 51868 <-> 86.122.23.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:30.870877 0.045742 udp 10.0.2.22 51868 <-> 77.89.104.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:31.859938 0.000000 udp 10.0.2.22 51868 -> 46.35.110.44 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:40:32.838103 0.183650 udp 10.0.2.22 51868 <-> 72.183.243.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:33.825196 0.099740 udp 10.0.2.22 51868 <-> 83.153.3.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:34.811069 2.095305 udp 10.0.2.22 51868 <-> 79.50.212.236 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:35.795661 0.051132 udp 10.0.2.22 51868 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:37.769553 0.086011 udp 10.0.2.22 51868 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:38.758215 0.000000 udp 10.0.2.22 51868 -> 201.214.63.238 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:40:39.736388 0.161120 udp 10.0.2.22 51868 <-> 94.197.247.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:40.723758 0.000000 udp 10.0.2.22 51868 -> 91.116.202.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:40:41.709871 0.059880 udp 10.0.2.22 51868 <-> 94.156.49.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:42.693650 2.694729 udp 10.0.2.22 51868 <-> 31.131.180.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:43.676870 0.034720 udp 10.0.2.22 51868 <-> 92.244.2.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:44.666545 0.000000 udp 10.0.2.22 51868 -> 71.80.71.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:40:45.655467 0.194614 udp 10.0.2.22 51868 <-> 50.27.74.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:46.633446 0.409436 udp 10.0.2.22 51868 <-> 117.194.80.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:47.620453 0.748803 udp 10.0.2.22 51868 <-> 185.29.13.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:48.605894 0.061795 udp 10.0.2.22 51868 <-> 195.3.228.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:49.590072 0.040123 udp 10.0.2.22 51868 <-> 89.215.145.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:50.573530 0.000000 udp 10.0.2.22 51868 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:40:51.563486 1.348317 udp 10.0.2.22 51868 <-> 122.121.6.112 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:53.530258 0.142335 udp 10.0.2.22 51868 <-> 1.186.109.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:54.397879 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:40:54.516802 0.164349 udp 10.0.2.22 51868 <-> 75.115.165.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:55.502187 0.051718 udp 10.0.2.22 51868 <-> 86.126.97.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:56.486623 0.065211 udp 10.0.2.22 51868 <-> 212.225.185.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:57.471864 0.360522 udp 10.0.2.22 51868 <-> 125.149.110.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:40:58.462098 0.000000 udp 10.0.2.22 51868 -> 190.174.242.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:40:59.441433 0.000000 udp 10.0.2.22 51868 -> 111.254.125.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:41:00.429394 0.165327 udp 10.0.2.22 51868 <-> 71.89.115.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:01.416003 0.000000 udp 10.0.2.22 51868 -> 112.118.16.39 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:41:02.401696 0.000000 udp 10.0.2.22 51868 -> 50.199.68.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:41:03.386070 0.000000 udp 10.0.2.22 51868 -> 118.216.142.152 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:41:04.369377 1.427056 udp 10.0.2.22 51868 <-> 98.94.57.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:05.359458 0.129154 udp 10.0.2.22 51868 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:06.338354 1.033104 udp 10.0.2.22 51868 <-> 95.108.60.23 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:08.312703 0.000000 udp 10.0.2.22 51868 -> 83.153.3.81 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:41:09.298259 0.295850 udp 10.0.2.22 51868 <-> 186.9.15.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:10.282683 0.000000 udp 10.0.2.22 51868 -> 62.18.121.107 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:41:11.265885 0.000000 udp 10.0.2.22 51868 -> 5.12.223.91 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:41:12.255956 0.044003 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:13.234829 0.290513 udp 10.0.2.22 51868 <-> 177.192.200.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:14.222695 0.055467 udp 10.0.2.22 51868 <-> 93.152.154.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:15.209488 0.233742 udp 10.0.2.22 51868 <-> 161.200.125.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:16.194672 2.208804 udp 10.0.2.22 51868 <-> 105.229.138.31 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:17.178816 0.036044 udp 10.0.2.22 51868 <-> 89.73.207.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:17.558167 0.000000 udp 10.0.2.22 51868 <- 62.18.121.107 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:41:19.152042 0.111325 udp 10.0.2.22 51868 -> 79.150.235.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:41:19.263367 0.000000 icmp 79.150.235.247 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 08:41:20.130391 0.485201 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:20.999037 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:41:21.117934 0.000000 udp 10.0.2.22 51868 -> 190.248.150.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:41:22.104555 0.242978 udp 10.0.2.22 51868 <-> 105.229.138.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:23.090116 1.347611 udp 10.0.2.22 51868 <-> 50.80.122.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:24.074330 0.000000 udp 10.0.2.22 51868 -> 24.114.78.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:41:25.057421 0.051172 udp 10.0.2.22 51868 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:26.047137 0.155723 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:27.026021 0.149364 udp 10.0.2.22 51868 <-> 90.233.130.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:28.013724 2.190733 udp 10.0.2.22 51868 <-> 190.203.137.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:29.000085 1.126710 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:30.969482 0.269598 udp 10.0.2.22 51868 <-> 117.197.209.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:31.952600 0.204821 udp 10.0.2.22 51868 <-> 108.184.253.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:32.942361 0.748635 udp 10.0.2.22 51868 <-> 188.167.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:33.921190 0.172590 udp 10.0.2.22 51868 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:34.918897 0.168701 udp 10.0.2.22 51868 <-> 24.170.247.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:35.905194 0.000000 udp 10.0.2.22 51868 -> 79.115.173.230 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:41:36.890427 0.000000 udp 10.0.2.22 51868 -> 2.30.190.9 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:41:37.874563 0.000000 udp 10.0.2.22 51868 -> 93.183.191.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:41:38.857455 0.154466 udp 10.0.2.22 51868 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:39.847198 0.189441 udp 10.0.2.22 51868 <-> 72.199.206.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:40.825687 1.340992 udp 10.0.2.22 51868 <-> 14.98.113.186 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:42.800023 0.000000 udp 10.0.2.22 51868 -> 176.70.157.144 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:41:43.785075 0.059331 udp 10.0.2.22 51868 <-> 86.124.228.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:44.768409 4.986692 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:45.751855 0.000000 udp 10.0.2.22 51868 -> 77.76.177.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:41:46.741482 0.000000 udp 10.0.2.22 51868 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:41:47.600763 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:41:47.719688 0.000000 udp 10.0.2.22 51868 -> 85.230.174.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:41:48.706959 0.000000 udp 10.0.2.22 51868 -> 176.43.120.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:41:50.678352 0.346499 udp 10.0.2.22 51868 <-> 123.195.215.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:41:52.645197 0.000063 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:41:52.645260 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:41:53.635094 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:41:54.613674 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:41:55.600946 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:41:56.587361 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:41:57.572380 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:41:58.556338 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:41:59.539427 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:42:00.528966 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:42:01.507458 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:42:02.494289 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:42:03.480569 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:42:04.465715 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:42:05.449532 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:42:06.432276 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:42:07.421497 0.059008 udp 10.0.2.22 51868 <-> 78.235.244.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:08.399845 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:42:09.387033 0.025540 udp 10.0.2.22 51868 <-> 109.192.130.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:10.373433 0.036814 udp 10.0.2.22 51868 <-> 89.71.59.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:11.358128 0.042507 udp 10.0.2.22 51868 <-> 37.143.247.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:12.342201 0.238347 udp 10.0.2.22 51868 <-> 190.75.147.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:13.324786 0.066915 udp 10.0.2.22 51868 <-> 176.195.18.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:14.185818 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:42:14.314668 0.146523 udp 10.0.2.22 51868 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:15.293145 0.257753 udp 10.0.2.22 51868 <-> 74.58.30.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:16.280589 0.031268 udp 10.0.2.22 51868 <-> 77.46.40.14 16464 CON 0 0 2 528 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:17.266840 0.076486 udp 10.0.2.22 51868 <-> 84.217.192.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:18.251910 0.000000 udp 10.0.2.22 51868 -> 130.83.54.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:42:19.235675 2.009812 udp 10.0.2.22 51868 <-> 91.137.154.174 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:20.218278 0.000000 udp 10.0.2.22 51868 -> 50.55.237.122 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:42:22.186061 0.151899 udp 10.0.2.22 51868 <-> 174.102.183.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:23.173145 0.347532 udp 10.0.2.22 51868 <-> 5.234.92.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:24.159151 0.301645 udp 10.0.2.22 51868 <-> 106.51.82.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:25.144153 0.297442 udp 10.0.2.22 51868 <-> 189.103.84.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:26.127919 0.098580 udp 10.0.2.22 51868 <-> 109.175.127.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:27.109745 0.248738 udp 10.0.2.22 51868 <-> 86.38.180.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:28.099174 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:42:30.064186 0.036361 udp 10.0.2.22 51868 <-> 188.192.179.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:31.050253 0.133265 udp 10.0.2.22 51868 <-> 68.82.41.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:32.034844 0.302374 udp 10.0.2.22 51868 <-> 58.11.172.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:33.018665 0.047829 udp 10.0.2.22 51868 <-> 62.195.179.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:34.001501 0.170213 udp 10.0.2.22 51868 <-> 75.64.134.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:34.990830 0.040505 udp 10.0.2.22 51868 <-> 46.237.76.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:35.969186 0.310190 udp 10.0.2.22 51868 <-> 14.32.249.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:36.956595 0.000000 udp 10.0.2.22 51868 -> 98.196.143.186 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:42:37.942679 0.167352 udp 10.0.2.22 51868 <-> 66.130.254.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:38.927710 4.201679 udp 10.0.2.22 51868 <-> 179.209.89.25 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:39.911424 0.404177 udp 10.0.2.22 51868 <-> 182.188.192.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:40.764602 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:42:40.893473 0.085653 udp 10.0.2.22 51868 <-> 95.95.72.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:41.881885 0.000000 udp 10.0.2.22 51868 -> 72.177.63.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:42:43.846952 0.157083 udp 10.0.2.22 51868 <-> 75.115.30.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:44.832858 0.054397 udp 10.0.2.22 51868 <-> 79.118.105.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:45.817957 0.990552 udp 10.0.2.22 51868 <-> 125.63.103.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:46.801100 0.161723 udp 10.0.2.22 51868 <-> 27.106.26.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:47.783665 0.361935 udp 10.0.2.22 51868 <-> 14.53.244.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:48.771488 0.065184 udp 10.0.2.22 51868 <-> 93.105.99.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:49.749423 0.046586 udp 10.0.2.22 51868 <-> 46.214.114.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:50.736596 0.157769 udp 10.0.2.22 51868 <-> 97.100.98.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:51.722632 0.000000 udp 10.0.2.22 51868 -> 219.106.136.189 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:42:52.710455 0.065639 udp 10.0.2.22 51868 <-> 193.68.211.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:53.693928 0.256562 udp 10.0.2.22 51868 <-> 68.88.77.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:54.676506 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:42:55.665176 0.186237 udp 10.0.2.22 51868 <-> 216.196.163.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:56.644470 3.921479 udp 10.0.2.22 51868 <-> 50.70.132.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:57.631423 0.134629 udp 10.0.2.22 51868 <-> 88.0.186.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:58.622208 0.292196 udp 10.0.2.22 51868 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:42:59.607714 0.202179 udp 10.0.2.22 51868 <-> 50.27.74.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:00.591272 0.047917 udp 10.0.2.22 51868 <-> 82.25.161.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:01.573736 0.153704 udp 10.0.2.22 51868 <-> 24.185.38.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:02.562518 0.035227 udp 10.0.2.22 51868 <-> 92.76.248.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:03.541531 0.310909 udp 10.0.2.22 51868 <-> 150.162.192.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:04.528456 0.053793 udp 10.0.2.22 51868 <-> 95.168.240.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:05.514059 0.000000 udp 10.0.2.22 51868 -> 37.145.43.57 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:43:06.498775 0.219997 udp 10.0.2.22 51868 <-> 190.36.72.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:07.354627 0.000090 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:43:07.483413 3.162721 udp 10.0.2.22 51868 <-> 178.81.164.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:08.473538 0.000000 udp 10.0.2.22 51868 -> 125.4.4.25 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:43:09.464151 0.153704 udp 10.0.2.22 51868 <-> 58.146.96.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:10.442403 0.180209 udp 10.0.2.22 51868 <-> 74.65.45.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:11.429501 1.148165 udp 10.0.2.22 51868 <-> 72.137.144.197 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:13.400417 0.320447 udp 10.0.2.22 51868 <-> 190.178.240.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:14.383850 0.430131 udp 10.0.2.22 51868 <-> 14.99.2.65 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:15.373175 0.160312 udp 10.0.2.22 51868 <-> 136.159.63.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:16.362235 0.160050 udp 10.0.2.22 51868 <-> 74.193.110.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:17.340243 0.177884 udp 10.0.2.22 51868 <-> 24.202.102.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:18.326960 0.037958 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:19.312755 0.258717 udp 10.0.2.22 51868 <-> 187.38.122.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:20.297543 0.191418 udp 10.0.2.22 51868 <-> 68.185.149.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:21.280839 0.000054 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:43:21.280893 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:43:22.271051 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:43:23.250092 0.502619 udp 10.0.2.22 51868 <-> 186.9.241.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:24.238384 0.135767 udp 10.0.2.22 51868 <-> 69.115.113.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:25.224860 0.000000 udp 10.0.2.22 51868 -> 190.38.101.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:43:26.210423 0.177959 udp 10.0.2.22 51868 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:27.196117 0.000000 udp 10.0.2.22 51868 -> 95.220.247.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:43:28.178357 0.201313 udp 10.0.2.22 51868 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:29.168301 0.120384 udp 10.0.2.22 51868 <-> 83.39.30.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:30.147037 0.288399 udp 10.0.2.22 51868 <-> 210.194.167.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:31.134639 0.209134 udp 10.0.2.22 51868 <-> 24.68.141.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:32.121341 0.308564 udp 10.0.2.22 51868 <-> 122.50.39.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:33.107032 0.206509 udp 10.0.2.22 51868 <-> 95.74.205.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:33.962656 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:43:34.091428 1.466993 udp 10.0.2.22 51868 <-> 189.47.222.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:35.074485 0.412325 udp 10.0.2.22 51868 <-> 201.209.42.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:36.064723 0.060932 udp 10.0.2.22 51868 <-> 178.167.33.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:37.043468 0.000000 udp 10.0.2.22 51868 -> 86.122.97.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:43:38.031304 0.201997 udp 10.0.2.22 51868 <-> 109.52.183.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:39.017919 0.160479 udp 10.0.2.22 51868 <-> 50.143.57.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:40.003445 0.313748 udp 10.0.2.22 51868 <-> 14.99.64.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:40.988035 1.258152 udp 10.0.2.22 51868 <-> 201.213.50.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:41.970985 0.000000 udp 10.0.2.22 51868 -> 117.205.12.25 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:43:42.961124 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:43:43.940147 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:43:44.927963 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:43:45.914579 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:43:46.899483 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:43:47.883535 0.000117 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:43:47.883652 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:43:48.866683 1.195664 udp 10.0.2.22 51868 <-> 201.213.50.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:49.856776 0.144372 udp 10.0.2.22 51868 <-> 198.179.116.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:50.835030 0.196777 udp 10.0.2.22 51868 <-> 75.80.36.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:51.823099 0.141625 udp 10.0.2.22 51868 <-> 111.91.35.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:52.809695 0.484632 udp 10.0.2.22 51868 <-> 201.209.42.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:53.795308 0.029447 udp 10.0.2.22 51868 <-> 77.70.44.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:54.779956 0.000000 udp 10.0.2.22 51868 -> 46.249.179.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:43:55.763041 0.483146 udp 10.0.2.22 51868 <-> 200.109.62.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:56.753115 0.056681 udp 10.0.2.22 51868 <-> 37.8.208.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:57.732207 0.182917 udp 10.0.2.22 51868 <-> 50.4.187.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:58.719632 0.275719 udp 10.0.2.22 51868 <-> 85.92.236.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:43:59.705571 0.000000 udp 10.0.2.22 51868 -> 81.191.116.155 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:44:00.562010 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:44:00.690814 1.921841 udp 10.0.2.22 51868 <-> 27.49.106.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:01.675175 0.130712 udp 10.0.2.22 51868 <-> 98.204.116.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:02.658276 1.968782 udp 10.0.2.22 51868 <-> 36.232.204.18 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:03.648169 0.000000 udp 10.0.2.22 51868 -> 62.18.22.175 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:44:05.614705 0.289662 udp 10.0.2.22 51868 <-> 79.50.28.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:06.601307 0.000000 udp 10.0.2.22 51868 -> 14.97.241.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:44:07.586985 0.521169 udp 10.0.2.22 51868 <-> 213.233.181.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:08.570206 0.248059 udp 10.0.2.22 51868 <-> 178.78.186.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:09.553091 0.224370 udp 10.0.2.22 51868 <-> 76.217.58.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:10.542243 0.167568 udp 10.0.2.22 51868 <-> 174.103.239.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:11.522981 0.345340 udp 10.0.2.22 51868 <-> 61.223.150.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:12.510526 0.064498 udp 10.0.2.22 51868 <-> 94.190.190.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:13.496626 0.094636 udp 10.0.2.22 51868 <-> 88.207.58.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:14.481595 0.064392 udp 10.0.2.22 51868 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:15.465925 0.056315 udp 10.0.2.22 51868 <-> 81.61.202.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:16.448748 0.261592 udp 10.0.2.22 51868 <-> 190.79.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:17.438645 0.066642 udp 10.0.2.22 51868 <-> 151.65.231.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:18.417702 0.346803 udp 10.0.2.22 51868 <-> 186.58.26.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:19.405783 0.000000 udp 10.0.2.22 51868 -> 116.202.11.164 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:44:20.392172 0.237950 udp 10.0.2.22 51868 <-> 115.118.170.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:21.377169 0.160145 udp 10.0.2.22 51868 <-> 123.236.7.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:22.361562 0.112805 udp 10.0.2.22 51868 <-> 24.253.132.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:23.344376 0.020886 udp 10.0.2.22 51868 <-> 161.53.166.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:24.334132 0.011446 udp 10.0.2.22 51868 <-> 212.59.229.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:25.312762 0.000000 udp 10.0.2.22 51868 -> 64.92.18.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:44:26.300388 0.000000 udp 10.0.2.22 51868 -> 122.102.121.232 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:44:27.167943 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:44:27.286864 0.068793 udp 10.0.2.22 51868 <-> 78.52.41.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:28.272565 0.170942 udp 10.0.2.22 51868 <-> 76.217.58.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:29.256602 2.983031 udp 10.0.2.22 51868 <-> 134.3.82.19 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:30.239344 0.138755 udp 10.0.2.22 51868 <-> 24.45.223.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:33.195951 0.324442 udp 10.0.2.22 51868 <-> 210.222.222.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:34.182018 0.000000 udp 10.0.2.22 51868 -> 201.241.29.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:44:35.167080 0.331677 udp 10.0.2.22 51868 <-> 88.207.58.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:36.151050 2.201427 udp 10.0.2.22 51868 <-> 71.92.217.0 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:37.133694 0.055014 udp 10.0.2.22 51868 <-> 95.77.123.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:39.102038 0.097125 udp 10.0.2.22 51868 <-> 87.111.41.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:40.089560 0.321215 udp 10.0.2.22 51868 <-> 112.164.233.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:41.075635 1.269151 udp 10.0.2.22 51868 <-> 205.240.139.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:42.060266 0.361875 udp 10.0.2.22 51868 <-> 187.102.85.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:43.044292 0.046700 udp 10.0.2.22 51868 <-> 46.214.114.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:44.026436 0.139355 udp 10.0.2.22 51868 <-> 78.58.198.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:45.018290 1.379608 udp 10.0.2.22 51868 <-> 61.227.76.99 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:46.983947 0.160500 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:47.970229 0.047257 udp 10.0.2.22 51868 <-> 95.155.219.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:48.955326 0.247908 udp 10.0.2.22 51868 <-> 115.69.241.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:49.939228 0.222226 udp 10.0.2.22 51868 <-> 76.87.9.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:50.921959 0.150494 udp 10.0.2.22 51868 <-> 72.198.68.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:51.911709 0.132415 udp 10.0.2.22 51868 <-> 98.124.111.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:52.889947 0.249062 udp 10.0.2.22 51868 <-> 189.192.237.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:53.758428 0.000117 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:44:53.877286 0.000000 udp 10.0.2.22 51868 -> 67.87.175.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:44:54.863672 0.000000 udp 10.0.2.22 51868 -> 84.55.0.177 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:44:55.848529 0.167540 udp 10.0.2.22 51868 <-> 72.137.144.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:56.832343 0.000000 udp 10.0.2.22 51868 -> 14.97.50.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:44:57.815066 0.025935 udp 10.0.2.22 51868 <-> 89.33.186.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:58.804653 0.792477 udp 10.0.2.22 51868 <-> 27.4.145.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:44:59.783299 1.200001 udp 10.0.2.22 51868 <-> 70.66.226.152 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:01.756394 2.953694 udp 10.0.2.22 51868 -> 84.236.70.25 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:45:02.741497 0.054476 udp 10.0.2.22 51868 <-> 86.121.77.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:03.728001 4.103642 udp 10.0.2.22 51868 <-> 70.178.155.208 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:05.700957 0.184311 udp 10.0.2.22 51868 <-> 75.65.20.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:06.679360 0.127380 udp 10.0.2.22 51868 <-> 178.172.245.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:08.652261 0.478725 udp 10.0.2.22 51868 <-> 190.208.185.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:09.639835 0.176568 udp 10.0.2.22 51868 <-> 65.25.78.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:10.537044 2.957474 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 08:45:10.623607 0.060538 udp 10.0.2.22 51868 <-> 91.210.111.92 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:11.606061 2.266782 udp 10.0.2.22 51868 <-> 61.46.123.153 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:12.595397 0.298065 udp 10.0.2.22 51868 <-> 107.213.251.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:14.560954 0.040943 udp 10.0.2.22 51868 <-> 5.15.99.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:15.546806 0.000000 udp 10.0.2.22 51868 -> 190.74.23.57 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:45:16.531789 0.305826 udp 10.0.2.22 51868 <-> 201.214.63.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:17.437436 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:45:17.516604 1.161118 udp 10.0.2.22 51868 <-> 66.131.122.48 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:19.495118 0.340835 udp 10.0.2.22 51868 <-> 114.40.182.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:20.354343 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:45:20.473375 0.147533 udp 10.0.2.22 51868 <-> 67.186.187.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:21.460221 0.032280 udp 10.0.2.22 51868 <-> 212.104.97.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:22.446058 0.000000 udp 10.0.2.22 51868 -> 188.246.91.113 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:45:23.433635 2.882496 udp 10.0.2.22 51868 <-> 116.73.165.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:24.419745 0.000000 udp 10.0.2.22 51868 -> 107.9.221.225 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:45:25.334653 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:45:25.413877 0.156782 udp 10.0.2.22 51868 <-> 68.62.2.28 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:26.405084 0.000000 udp 10.0.2.22 51868 -> 180.215.208.220 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:45:27.383386 0.000000 udp 10.0.2.22 51868 -> 31.147.117.138 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:45:28.372486 0.257101 udp 10.0.2.22 51868 <-> 201.242.77.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:29.358248 0.064077 udp 10.0.2.22 51868 <-> 83.249.190.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:30.343281 0.000000 udp 10.0.2.22 51868 -> 50.201.176.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:45:31.326324 4.147903 udp 10.0.2.22 51868 <-> 201.213.50.20 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:32.314158 0.000000 udp 10.0.2.22 51868 -> 77.21.189.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:45:33.303256 0.243581 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:35.269464 0.000000 udp 10.0.2.22 51868 -> 217.203.18.25 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:45:36.255011 0.053059 udp 10.0.2.22 51868 <-> 92.108.115.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:37.239616 0.000000 udp 10.0.2.22 51868 -> 79.116.107.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:45:38.224209 2.108256 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:39.206608 1.219968 udp 10.0.2.22 51868 <-> 178.25.74.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:41.104496 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:45:41.173847 0.309129 udp 10.0.2.22 51868 <-> 201.241.2.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:42.160733 0.145695 udp 10.0.2.22 51868 <-> 98.235.43.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:43.146808 0.212761 udp 10.0.2.22 51868 <-> 70.66.226.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:44.133933 0.049266 udp 10.0.2.22 51868 <-> 78.96.104.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:45.118436 0.000000 udp 10.0.2.22 51868 -> 86.18.63.38 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:45:45.977934 0.000000 udp 10.0.2.22 51868 <- 107.9.221.225 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:45:46.108707 2.955987 udp 10.0.2.22 51868 -> 14.98.210.16 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:45:46.968893 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:45:47.097686 1.257942 udp 10.0.2.22 51868 <-> 177.80.55.15 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:50.050706 0.942381 udp 10.0.2.22 51868 <-> 115.241.18.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:51.035045 0.155997 udp 10.0.2.22 51868 <-> 96.59.111.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:51.771382 0.000000 udp 10.0.2.22 51868 <- 14.98.210.16 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:45:52.022806 2.486009 udp 10.0.2.22 51868 <-> 14.98.48.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:53.013174 0.632066 udp 10.0.2.22 51868 <-> 177.59.118.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:53.992404 0.158065 udp 10.0.2.22 51868 <-> 76.122.95.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:54.980347 3.940214 udp 10.0.2.22 51868 <-> 212.117.58.48 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:55.967253 0.217971 udp 10.0.2.22 51868 <-> 177.224.86.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:56.952799 3.428705 udp 10.0.2.22 51868 <-> 94.197.234.60 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:45:57.937198 0.061453 udp 10.0.2.22 51868 <-> 94.42.125.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:46:00.889664 0.200511 udp 10.0.2.22 51868 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:46:01.877881 0.000000 udp 10.0.2.22 51868 -> 186.89.252.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:02.864756 0.244485 udp 10.0.2.22 51868 <-> 76.202.180.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:46:03.850669 0.201062 udp 10.0.2.22 51868 <-> 50.11.51.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:46:04.838276 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:05.821517 0.000050 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:05.821567 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:46:06.812266 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:07.790601 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:08.778296 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:09.765351 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:10.750830 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:11.735463 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:12.649160 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:46:12.718476 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:13.579529 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:46:13.708404 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:14.687270 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:15.674384 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:16.660908 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:17.646280 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:18.630722 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:19.613889 3.303827 udp 10.0.2.22 51868 <-> 98.94.57.47 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:46:20.603640 0.000000 udp 10.0.2.22 51868 -> 65.188.45.164 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:22.570498 0.072989 udp 10.0.2.22 51868 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:46:23.557180 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:25.527881 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:26.511187 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:27.501238 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:28.479892 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:29.467213 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:30.453691 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:31.438971 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:32.423324 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:33.405544 0.000052 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:33.405596 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:46:34.395676 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:35.374828 1.529150 udp 10.0.2.22 51868 <-> 98.94.57.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:46:36.366532 0.000000 udp 10.0.2.22 51868 -> 65.188.45.164 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:37.354676 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:39.328159 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:40.183425 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:46:40.311659 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:41.305693 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:42.284397 0.000068 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:42.284465 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:46:43.271990 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:44.258272 1.353449 udp 10.0.2.22 51868 <-> 98.94.57.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:46:45.245144 0.983985 udp 10.0.2.22 51868 -> 65.188.45.164 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:47.212015 0.356995 udp 10.0.2.22 51868 <-> 146.83.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:46:48.202009 0.175836 udp 10.0.2.22 51868 <-> 66.169.204.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:46:49.180778 0.054128 udp 10.0.2.22 51868 <-> 188.121.26.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:46:50.168410 0.000000 udp 10.0.2.22 51868 -> 24.23.214.104 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:51.154823 1.176604 udp 10.0.2.22 51868 <-> 190.219.0.107 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:46:53.124025 0.106541 udp 10.0.2.22 51868 <-> 24.135.86.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:46:54.106788 0.168769 udp 10.0.2.22 51868 <-> 72.241.245.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:46:55.096719 0.000000 udp 10.0.2.22 51868 -> 201.93.194.74 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:46:56.075403 0.053386 udp 10.0.2.22 51868 <-> 78.61.221.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:46:57.062738 0.149514 udp 10.0.2.22 51868 <-> 173.23.113.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:46:58.048541 0.028596 udp 10.0.2.22 51868 <-> 141.170.193.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:46:59.033139 0.025248 udp 10.0.2.22 51868 <-> 194.94.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:00.017113 0.178424 udp 10.0.2.22 51868 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:00.999943 0.000000 udp 10.0.2.22 51868 -> 187.35.225.29 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:47:01.989680 0.166415 udp 10.0.2.22 51868 <-> 76.183.28.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:02.968428 0.061879 udp 10.0.2.22 51868 <-> 188.24.136.26 16464 CON 0 0 2 668 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:03.955867 0.114594 udp 10.0.2.22 51868 -> 86.108.88.244 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:47:04.070461 0.000000 icmp 86.108.88.244 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 08:47:04.942157 0.360460 udp 10.0.2.22 51868 <-> 5.190.123.252 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:05.926997 1.966921 udp 10.0.2.22 51868 -> 190.120.66.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:47:06.782174 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:47:06.911256 1.972353 udp 10.0.2.22 51868 <-> 79.183.172.249 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:09.861885 0.058679 udp 10.0.2.22 51868 <-> 86.122.234.248 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:10.849104 0.000000 udp 10.0.2.22 51868 -> 5.190.123.252 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:47:11.835874 0.266364 udp 10.0.2.22 51868 <-> 36.86.156.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:12.820181 0.072845 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:13.803971 0.000000 udp 10.0.2.22 51868 -> 114.51.132.127 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:47:14.786695 0.119809 udp 10.0.2.22 51868 <-> 77.210.91.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:15.776647 0.000000 udp 10.0.2.22 51868 -> 187.35.225.29 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:47:16.755214 4.953854 udp 10.0.2.22 51868 <-> 194.94.79.240 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:17.742269 1.975154 udp 10.0.2.22 51868 <-> 84.236.70.25 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:18.729524 0.145549 udp 10.0.2.22 51868 <-> 79.183.172.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:20.701614 0.000000 udp 10.0.2.22 51868 -> 77.210.91.28 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:47:22.673633 0.025023 udp 10.0.2.22 51868 <-> 194.94.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:23.652217 0.051249 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:24.639458 0.205748 udp 10.0.2.22 51868 <-> 68.109.145.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:25.625208 0.000000 udp 10.0.2.22 51868 -> 130.83.54.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:47:26.610126 3.041339 udp 10.0.2.22 51868 <-> 2.92.89.22 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:27.593934 0.948216 udp 10.0.2.22 51868 <-> 182.188.192.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:28.575866 0.170115 udp 10.0.2.22 51868 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:30.544422 0.051465 udp 10.0.2.22 51868 <-> 79.113.174.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:31.532188 0.058006 udp 10.0.2.22 51868 <-> 77.103.126.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:32.518249 0.350625 udp 10.0.2.22 51868 <-> 31.15.210.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:33.374283 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:47:33.502542 0.381957 udp 10.0.2.22 51868 <-> 14.97.56.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:34.489390 0.019431 udp 10.0.2.22 51868 <-> 89.47.233.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:35.471960 0.034104 udp 10.0.2.22 51868 <-> 79.117.65.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:36.461550 0.176658 udp 10.0.2.22 51868 <-> 68.184.206.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:37.441238 0.000000 udp 10.0.2.22 51868 -> 70.197.11.244 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:47:38.428458 0.368695 udp 10.0.2.22 51868 <-> 186.88.170.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:39.414511 0.050737 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:40.399219 0.306303 udp 10.0.2.22 51868 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:41.383162 0.000000 udp 10.0.2.22 51868 -> 93.221.115.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:47:42.365808 0.144531 udp 10.0.2.22 51868 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:43.355321 0.159529 udp 10.0.2.22 51868 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:44.333720 3.347251 udp 10.0.2.22 51868 <-> 201.213.98.23 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:45.320785 0.000000 udp 10.0.2.22 51868 -> 81.226.243.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:47:46.306425 0.582493 udp 10.0.2.22 51868 <-> 108.230.246.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:48.275267 0.000000 udp 10.0.2.22 51868 -> 115.241.113.50 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:47:49.258101 0.347386 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:50.247263 0.033084 udp 10.0.2.22 51868 <-> 188.254.174.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:51.225493 0.107549 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:52.212348 0.539300 udp 10.0.2.22 51868 <-> 177.82.176.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:53.198062 0.000000 udp 10.0.2.22 51868 -> 79.163.36.145 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:47:54.182626 0.292143 udp 10.0.2.22 51868 <-> 200.109.62.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:55.166288 0.000000 udp 10.0.2.22 51868 -> 71.186.195.114 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:47:56.148839 0.350613 udp 10.0.2.22 51868 <-> 111.242.5.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:57.137989 0.322976 udp 10.0.2.22 51868 <-> 117.109.248.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:47:58.116219 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:47:59.103227 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:47:59.969981 0.000082 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:48:00.092707 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:48:01.077210 0.000000 udp 10.0.2.22 51868 -> 190.141.88.104 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:48:02.060791 0.442195 udp 10.0.2.22 51868 <-> 201.189.224.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:03.043540 0.060221 udp 10.0.2.22 51868 <-> 77.81.10.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:04.032806 0.034535 udp 10.0.2.22 51868 <-> 92.244.2.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:05.011215 4.283127 udp 10.0.2.22 51868 <-> 123.110.11.43 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:05.998111 0.049279 udp 10.0.2.22 51868 <-> 85.204.248.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:06.984028 0.000000 udp 10.0.2.22 51868 -> 80.54.213.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:48:07.968584 0.000000 udp 10.0.2.22 51868 -> 173.218.218.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:48:09.934706 0.237326 udp 10.0.2.22 51868 <-> 64.219.232.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:10.923836 0.189546 udp 10.0.2.22 51868 <-> 49.205.220.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:11.901955 0.159891 udp 10.0.2.22 51868 <-> 209.182.117.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:12.888815 0.064673 udp 10.0.2.22 51868 <-> 78.54.186.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:13.874419 0.466390 udp 10.0.2.22 51868 <-> 187.94.178.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:14.858900 3.940629 udp 10.0.2.22 51868 <-> 79.19.221.226 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:15.842140 0.071528 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:16.832377 0.000000 udp 10.0.2.22 51868 -> 89.142.152.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:48:17.821531 0.000000 udp 10.0.2.22 51868 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:48:19.789488 1.973278 udp 10.0.2.22 51868 <-> 115.242.245.246 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:20.775445 0.364058 udp 10.0.2.22 51868 <-> 101.63.69.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:21.761929 0.280761 udp 10.0.2.22 51868 <-> 76.90.73.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:22.745556 0.130527 udp 10.0.2.22 51868 <-> 68.83.76.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:23.735676 0.067462 udp 10.0.2.22 51868 <-> 82.225.217.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:24.714878 0.296898 udp 10.0.2.22 51868 <-> 103.250.16.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:25.705172 0.316862 udp 10.0.2.22 51868 <-> 115.240.102.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:26.572515 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:48:26.691482 0.048135 udp 10.0.2.22 51868 <-> 85.204.248.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:27.676741 0.378028 udp 10.0.2.22 51868 <-> 188.191.205.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:28.661232 0.154513 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:29.644410 0.047285 udp 10.0.2.22 51868 <-> 80.216.234.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:30.634692 0.042059 udp 10.0.2.22 51868 <-> 188.25.189.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:31.613647 0.132607 udp 10.0.2.22 51868 <-> 79.235.71.236 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:32.603992 0.054578 udp 10.0.2.22 51868 <-> 89.165.189.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:33.591599 0.158280 udp 10.0.2.22 51868 <-> 66.177.33.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:34.577450 0.054056 udp 10.0.2.22 51868 <-> 81.173.137.35 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:35.561920 0.356271 udp 10.0.2.22 51868 <-> 111.254.131.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:36.545522 0.224014 udp 10.0.2.22 51868 <-> 190.37.124.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:37.535452 0.000000 udp 10.0.2.22 51868 -> 200.82.58.162 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:48:38.514571 0.209199 udp 10.0.2.22 51868 <-> 70.66.226.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:39.502423 1.253894 udp 10.0.2.22 51868 <-> 201.80.112.184 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:41.474880 0.000000 udp 10.0.2.22 51868 -> 77.103.126.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:48:42.459128 0.201450 udp 10.0.2.22 51868 <-> 216.114.61.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:43.442086 0.000000 udp 10.0.2.22 51868 -> 142.196.189.210 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:48:44.431446 0.159671 udp 10.0.2.22 51868 <-> 65.189.49.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:45.410367 0.157492 udp 10.0.2.22 51868 <-> 192.226.151.208 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:46.398129 0.151056 udp 10.0.2.22 51868 <-> 72.226.86.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:47.384707 0.087719 udp 10.0.2.22 51868 <-> 88.57.184.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:48.370221 0.028950 udp 10.0.2.22 51868 <-> 77.56.229.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:49.354436 0.155634 udp 10.0.2.22 51868 <-> 67.241.19.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:50.337574 0.149281 udp 10.0.2.22 51868 <-> 114.79.148.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:51.327486 0.152805 udp 10.0.2.22 51868 <-> 50.90.85.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:52.306479 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:48:53.175404 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:48:53.294340 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:48:55.266253 0.184389 udp 10.0.2.22 51868 <-> 178.120.201.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:56.250354 1.934611 udp 10.0.2.22 51868 <-> 176.240.246.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:57.233564 0.152734 udp 10.0.2.22 51868 <-> 50.90.85.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:58.223421 0.361917 udp 10.0.2.22 51868 <-> 61.221.222.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:48:59.202274 1.199882 udp 10.0.2.22 51868 <-> 186.206.236.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:00.189857 0.185712 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:01.176304 0.209202 udp 10.0.2.22 51868 <-> 166.159.178.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:02.161704 0.039301 udp 10.0.2.22 51868 <-> 178.165.25.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:03.146065 0.000000 udp 10.0.2.22 51868 -> 190.75.66.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:49:04.128474 3.569913 udp 10.0.2.22 51868 <-> 109.54.36.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:05.118587 0.169946 udp 10.0.2.22 51868 <-> 98.201.252.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:06.097703 0.196640 udp 10.0.2.22 51868 <-> 1.186.49.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:07.084661 0.182688 udp 10.0.2.22 51868 <-> 97.106.251.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:08.070634 0.194991 udp 10.0.2.22 51868 <-> 67.215.24.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:09.056018 0.212822 udp 10.0.2.22 51868 <-> 202.78.235.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:10.040192 0.145796 udp 10.0.2.22 51868 <-> 66.168.106.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:11.023458 0.292372 udp 10.0.2.22 51868 <-> 183.87.66.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:12.012900 0.068968 udp 10.0.2.22 51868 <-> 84.125.117.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:12.991428 0.277229 udp 10.0.2.22 51868 <-> 201.53.219.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:14.965517 0.291468 udp 10.0.2.22 51868 <-> 59.190.37.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:15.950121 0.061181 udp 10.0.2.22 51868 <-> 188.25.121.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:16.934139 0.015900 udp 10.0.2.22 51868 <-> 84.118.6.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:17.917122 1.641311 udp 10.0.2.22 51868 <-> 208.1.38.221 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:19.766812 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:49:19.885774 0.085625 udp 10.0.2.22 51868 <-> 84.247.60.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:20.873528 0.189344 udp 10.0.2.22 51868 <-> 184.189.232.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:21.859759 0.507709 udp 10.0.2.22 51868 <-> 179.208.248.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:22.844857 0.000000 udp 10.0.2.22 51868 -> 27.59.124.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:49:23.829158 0.327213 udp 10.0.2.22 51868 <-> 176.240.109.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:24.812056 2.319136 udp 10.0.2.22 51868 <-> 122.106.43.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:25.801779 0.341339 udp 10.0.2.22 51868 <-> 39.1.3.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:26.780592 0.000000 udp 10.0.2.22 51868 -> 183.171.173.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:49:27.767980 0.038148 udp 10.0.2.22 51868 <-> 130.204.193.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:28.754893 0.196262 udp 10.0.2.22 51868 <-> 67.215.24.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:29.739994 0.143385 udp 10.0.2.22 51868 <-> 67.248.209.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:30.723858 0.099407 udp 10.0.2.22 51868 <-> 46.117.83.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:31.706283 0.000000 udp 10.0.2.22 51868 -> 93.147.110.0 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:49:32.695723 1.273353 udp 10.0.2.22 51868 <-> 190.174.242.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:33.674291 0.065428 udp 10.0.2.22 51868 <-> 83.173.181.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:34.661710 0.150423 udp 10.0.2.22 51868 <-> 24.127.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:35.648015 0.312075 udp 10.0.2.22 51868 <-> 200.239.150.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:36.632928 0.329983 udp 10.0.2.22 51868 <-> 121.147.28.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:37.617050 0.181254 udp 10.0.2.22 51868 <-> 103.5.186.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:38.600161 0.279265 udp 10.0.2.22 51868 <-> 190.195.85.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:39.589714 0.062555 udp 10.0.2.22 51868 <-> 46.35.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:40.568368 0.947830 udp 10.0.2.22 51868 <-> 190.78.188.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:41.555675 0.078198 udp 10.0.2.22 51868 <-> 85.152.248.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:42.541409 0.082234 udp 10.0.2.22 51868 <-> 80.116.194.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:43.525505 0.000000 udp 10.0.2.22 51868 -> 184.162.187.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:49:44.509576 0.000000 udp 10.0.2.22 51868 -> 31.147.134.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:49:45.492273 0.031154 udp 10.0.2.22 51868 <-> 212.104.97.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:46.353102 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:49:46.481907 0.162308 udp 10.0.2.22 51868 <-> 71.45.112.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:47.460437 0.056233 udp 10.0.2.22 51868 <-> 86.127.163.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:48.447429 1.205894 udp 10.0.2.22 51868 <-> 115.240.68.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:49.434035 0.062928 udp 10.0.2.22 51868 <-> 194.79.12.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:50.419176 0.152633 udp 10.0.2.22 51868 <-> 24.179.39.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:51.403126 0.577574 udp 10.0.2.22 51868 <-> 117.195.236.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:52.385890 0.342531 udp 10.0.2.22 51868 <-> 101.58.23.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:53.375423 0.213521 udp 10.0.2.22 51868 <-> 24.6.8.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:54.353946 1.138303 udp 10.0.2.22 51868 <-> 24.241.36.250 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:56.327547 0.349471 udp 10.0.2.22 51868 <-> 114.27.114.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:57.312368 0.039294 udp 10.0.2.22 51868 <-> 91.218.81.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:58.296242 0.140260 udp 10.0.2.22 51868 <-> 24.187.116.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:49:59.278108 0.101859 udp 10.0.2.22 51868 <-> 79.47.207.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:50:00.267607 0.070401 udp 10.0.2.22 51868 <-> 95.51.31.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:50:01.246165 0.183679 udp 10.0.2.22 51868 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:50:02.233768 0.000000 udp 10.0.2.22 51868 -> 2.177.189.134 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:03.219804 0.075863 udp 10.0.2.22 51868 <-> 188.171.7.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:50:04.204799 4.696195 udp 10.0.2.22 51868 <-> 101.63.20.79 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:50:05.188816 0.319877 udp 10.0.2.22 51868 <-> 200.146.193.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:50:06.171489 3.558767 udp 10.0.2.22 51868 <-> 197.7.114.93 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:50:07.160823 0.049604 udp 10.0.2.22 51868 <-> 62.221.143.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:50:09.126001 1.344050 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:50:11.097007 0.000000 udp 10.0.2.22 51868 -> 81.37.252.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:12.080770 0.000000 udp 10.0.2.22 51868 -> 80.97.242.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:12.934712 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:50:13.063523 0.000000 udp 10.0.2.22 51868 -> 117.205.29.7 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:14.052924 0.270644 udp 10.0.2.22 51868 <-> 177.192.55.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:50:15.031349 0.361082 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:50:17.003697 0.000043 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:17.003740 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:50:17.988343 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:18.971999 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:19.954665 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:20.944231 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:21.922720 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:22.909738 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:23.895656 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:24.880429 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:25.863884 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:26.846384 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:27.835795 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:28.814086 3.941967 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:29.801235 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:30.787167 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:31.772067 0.559661 udp 10.0.2.22 51868 <-> 87.6.60.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:50:33.738822 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:34.728015 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:35.706515 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:36.693503 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:37.679030 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:38.663769 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:39.518835 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:50:39.647659 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:40.630121 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:41.619444 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:42.597226 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:44.569879 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:45.553952 0.000063 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:45.554015 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:50:46.538872 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:47.528944 1.560690 udp 10.0.2.22 51868 <-> 89.141.65.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:50:48.518121 0.305299 udp 10.0.2.22 51868 <-> 117.220.49.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:50:49.496150 0.157210 udp 10.0.2.22 51868 <-> 50.82.72.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:50:50.483080 0.039176 udp 10.0.2.22 51868 <-> 188.254.207.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:50:51.468737 0.149209 udp 10.0.2.22 51868 <-> 67.253.48.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:50:53.436762 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:54.427064 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:55.405916 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:56.393949 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:57.381228 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:58.367253 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:50:59.351570 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:51:00.334764 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:51:01.325070 0.000045 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:51:01.325115 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:51:02.304225 0.002203 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:51:02.306428 0.000000 icmp 195.113.235.65 0x0003 -> 10.0.2.22 0x9efe URN 192 1 110 flow=Background 1970/01/01 08:51:03.292172 4.186734 udp 10.0.2.22 51868 <-> 77.54.48.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:04.278305 0.330062 udp 10.0.2.22 51868 <-> 220.80.230.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:05.263998 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:51:07.102758 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:51:07.231568 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:51:08.222023 0.211538 udp 10.0.2.22 51868 <-> 148.204.134.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:09.201218 0.146233 udp 10.0.2.22 51868 <-> 24.144.247.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:10.188887 0.058561 udp 10.0.2.22 51868 <-> 87.188.164.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:11.175588 0.168781 udp 10.0.2.22 51868 <-> 84.240.226.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:12.161130 0.171479 udp 10.0.2.22 51868 <-> 50.123.134.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:13.145983 0.425502 udp 10.0.2.22 51868 <-> 5.200.224.179 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:14.129544 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:51:15.119457 0.164570 udp 10.0.2.22 51868 <-> 173.23.62.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:16.098674 0.301172 udp 10.0.2.22 51868 <-> 201.214.63.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:17.086435 0.141913 udp 10.0.2.22 51868 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:18.072859 0.192189 udp 10.0.2.22 51868 <-> 70.181.157.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:19.058296 0.064796 udp 10.0.2.22 51868 <-> 79.112.2.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:20.042861 0.181282 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:21.025960 0.181281 udp 10.0.2.22 51868 <-> 174.56.140.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:22.015966 0.060642 udp 10.0.2.22 51868 <-> 79.116.213.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:22.994726 0.050827 udp 10.0.2.22 51868 <-> 86.122.238.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:23.982479 0.030538 udp 10.0.2.22 51868 <-> 158.181.66.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:24.968795 0.220958 udp 10.0.2.22 51868 <-> 151.74.151.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:25.954282 0.144516 udp 10.0.2.22 51868 <-> 65.185.76.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:26.938515 0.073175 udp 10.0.2.22 51868 <-> 178.42.151.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:27.921545 0.291685 udp 10.0.2.22 51868 <-> 60.148.85.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:28.911256 0.199646 udp 10.0.2.22 51868 <-> 223.223.134.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:29.890233 1.497577 udp 10.0.2.22 51868 <-> 195.174.174.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:30.877905 0.161125 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:31.864430 0.328461 udp 10.0.2.22 51868 <-> 115.240.68.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:32.850145 0.000000 udp 10.0.2.22 51868 -> 151.74.93.125 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:51:33.705536 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:51:33.834486 0.233735 udp 10.0.2.22 51868 <-> 90.232.194.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:34.817675 0.099573 udp 10.0.2.22 51868 <-> 79.179.19.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:35.807746 0.000000 udp 10.0.2.22 51868 -> 98.127.236.231 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:51:36.786799 0.159948 udp 10.0.2.22 51868 <-> 72.209.205.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:37.774551 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:51:38.761362 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:51:39.746639 0.065550 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:40.730691 0.038736 udp 10.0.2.22 51868 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:41.713783 0.087091 udp 10.0.2.22 51868 <-> 93.89.196.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:42.704853 0.272205 udp 10.0.2.22 51868 <-> 86.58.36.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:43.683570 0.000000 udp 10.0.2.22 51868 -> 177.29.103.149 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:51:44.670694 0.293659 udp 10.0.2.22 51868 <-> 124.121.94.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:45.657170 0.303602 udp 10.0.2.22 51868 <-> 75.197.131.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:46.642336 0.160001 udp 10.0.2.22 51868 <-> 136.159.63.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:47.626699 0.030565 udp 10.0.2.22 51868 <-> 188.127.96.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:48.609487 0.293658 udp 10.0.2.22 51868 <-> 119.26.179.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:49.599260 0.000000 udp 10.0.2.22 51868 -> 93.144.39.164 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:51:50.578147 0.000000 udp 10.0.2.22 51868 -> 75.118.148.187 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:51:51.082576 0.000000 udp 10.0.2.22 51868 <- 98.127.236.231 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:51:51.565727 0.158239 udp 10.0.2.22 51868 <-> 76.122.95.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:52.551805 0.137775 udp 10.0.2.22 51868 <-> 68.42.12.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:53.536582 0.338049 udp 10.0.2.22 51868 <-> 114.36.70.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:54.520777 0.000000 udp 10.0.2.22 51868 -> 161.200.125.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:51:55.503833 0.209302 udp 10.0.2.22 51868 <-> 186.95.213.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:56.493621 2.954006 udp 10.0.2.22 51868 -> 186.95.79.43 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:51:57.472485 0.173011 udp 10.0.2.22 51868 <-> 74.140.150.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:51:58.459982 2.182638 udp 10.0.2.22 51868 <-> 50.26.30.66 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:00.304084 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:52:01.416926 0.000000 udp 10.0.2.22 51868 -> 189.168.94.216 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:52:02.400885 0.331057 udp 10.0.2.22 51868 <-> 75.244.138.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:03.390552 2.100935 udp 10.0.2.22 51868 <-> 173.80.197.248 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:04.369036 0.000000 udp 10.0.2.22 51868 -> 12.219.218.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:52:06.342674 3.101506 udp 10.0.2.22 51868 <-> 85.84.235.254 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:07.327810 0.064681 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:08.311995 0.000000 udp 10.0.2.22 51868 -> 89.164.132.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:52:10.284589 2.586801 udp 10.0.2.22 51868 <-> 84.123.162.245 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:11.206393 2.955355 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 08:52:11.263219 0.296130 udp 10.0.2.22 51868 <-> 119.26.179.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:13.236909 0.000000 udp 10.0.2.22 51868 -> 76.244.146.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:52:14.221221 0.046725 udp 10.0.2.22 51868 <-> 79.118.96.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:15.205591 1.019821 udp 10.0.2.22 51868 <-> 94.21.162.26 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:17.178187 0.060297 udp 10.0.2.22 51868 <-> 89.40.192.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:18.107147 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:52:18.156608 0.000000 udp 10.0.2.22 51868 -> 175.145.184.183 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:52:19.143882 0.000000 udp 10.0.2.22 51868 -> 5.13.91.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:52:20.129877 0.000000 udp 10.0.2.22 51868 -> 192.135.209.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:52:21.114846 0.145284 udp 10.0.2.22 51868 <-> 24.89.222.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:22.098824 0.431325 udp 10.0.2.22 51868 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:23.081508 0.179758 udp 10.0.2.22 51868 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:24.071105 4.920343 udp 10.0.2.22 51868 <-> 186.90.22.102 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:25.049188 0.229343 udp 10.0.2.22 51868 <-> 96.20.190.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:25.986851 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:52:26.036357 1.376302 udp 10.0.2.22 51868 <-> 111.240.40.248 16464 CON 0 0 6 3676 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:26.903582 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:52:28.007659 0.186202 udp 10.0.2.22 51868 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:29.234618 0.000000 udp 10.0.2.22 51868 <- 186.90.22.102 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:52:29.973943 0.163834 udp 10.0.2.22 51868 <-> 71.45.41.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:30.963665 0.000000 udp 10.0.2.22 51868 -> 123.108.227.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:52:31.942126 0.119639 udp 10.0.2.22 51868 <-> 95.59.166.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:32.929486 0.055701 udp 10.0.2.22 51868 <-> 188.2.254.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:33.915827 0.050717 udp 10.0.2.22 51868 <-> 188.26.188.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:34.900492 0.000000 udp 10.0.2.22 51868 -> 216.121.192.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:52:35.884533 0.315576 udp 10.0.2.22 51868 <-> 200.232.201.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:36.867220 0.000000 udp 10.0.2.22 51868 -> 88.242.0.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:52:37.855745 0.201941 udp 10.0.2.22 51868 <-> 70.173.33.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:38.834054 0.161390 udp 10.0.2.22 51868 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:39.821506 0.000000 udp 10.0.2.22 51868 -> 71.55.68.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:52:40.807517 0.297436 udp 10.0.2.22 51868 <-> 186.94.17.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:41.742820 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:52:41.792311 0.342256 udp 10.0.2.22 51868 <-> 114.40.25.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:42.119355 0.010872 udp 10.0.2.22 60054 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 08:52:42.130467 0.000000 udp 10.0.2.22 60055 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:52:42.776160 2.227320 udp 10.0.2.22 51868 <-> 177.227.173.10 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:43.762126 0.042904 udp 10.0.2.22 51868 <-> 5.13.57.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:45.730218 0.170478 udp 10.0.2.22 51868 <-> 79.183.172.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:46.717408 0.167760 udp 10.0.2.22 51868 <-> 72.202.193.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:47.703244 3.405388 udp 10.0.2.22 51868 <-> 14.98.149.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:48.688336 0.163700 udp 10.0.2.22 51868 <-> 76.107.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:49.671935 0.158685 udp 10.0.2.22 51868 <-> 116.73.207.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:50.654693 0.194283 udp 10.0.2.22 51868 <-> 148.204.134.29 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:51.644079 0.011816 udp 10.0.2.22 51868 <-> 93.103.161.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:52.621807 0.078113 udp 10.0.2.22 51868 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:53.490014 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:52:53.608996 0.000000 udp 10.0.2.22 51868 -> 5.250.119.227 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:52:54.594853 0.049494 udp 10.0.2.22 51868 <-> 80.243.20.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:55.579618 0.153666 udp 10.0.2.22 51868 <-> 71.88.178.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:56.563567 0.285978 udp 10.0.2.22 51868 <-> 181.16.84.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:57.546018 3.940068 udp 10.0.2.22 51868 -> 135.19.220.28 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:52:58.535637 0.045453 udp 10.0.2.22 51868 <-> 95.76.197.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:52:59.513927 0.000000 udp 10.0.2.22 51868 -> 173.210.217.104 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:53:00.500226 0.000000 udp 10.0.2.22 51868 -> 86.124.7.155 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:53:02.471235 0.000000 udp 10.0.2.22 51868 -> 77.54.48.105 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:53:03.454798 0.000000 udp 10.0.2.22 51868 -> 212.89.176.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:53:04.437216 1.237196 udp 10.0.2.22 51868 <-> 103.25.168.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:05.426640 0.000000 udp 10.0.2.22 51868 -> 101.218.51.131 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:53:06.409979 1.058212 udp 10.0.2.22 51868 <-> 95.25.29.149 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:08.386740 0.000000 udp 10.0.2.22 51868 -> 114.36.213.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:53:09.375652 0.189712 udp 10.0.2.22 51868 <-> 68.149.112.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:10.359564 0.134684 udp 10.0.2.22 51868 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:11.341992 0.000000 udp 10.0.2.22 51868 -> 77.54.48.105 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:53:12.331446 0.000000 udp 10.0.2.22 51868 -> 135.19.220.28 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:53:13.270461 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 08:53:13.309954 0.000000 udp 10.0.2.22 51868 -> 67.42.197.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:53:14.296809 1.975378 udp 10.0.2.22 51868 -> 173.210.217.104 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:53:15.283801 0.346812 udp 10.0.2.22 51868 <-> 114.36.213.71 16464 CON 0 0 5 3618 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:17.255453 0.044666 udp 10.0.2.22 51868 <-> 86.124.7.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:18.239445 0.000000 udp 10.0.2.22 51868 -> 135.19.220.28 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:53:19.228691 0.289071 udp 10.0.2.22 51868 <-> 190.19.95.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:20.087787 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:53:20.206714 0.045425 udp 10.0.2.22 51868 <-> 95.76.197.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:21.193540 1.670974 udp 10.0.2.22 51868 <-> 186.124.166.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:22.182673 0.184268 udp 10.0.2.22 51868 <-> 68.149.112.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:23.168239 1.229874 udp 10.0.2.22 51868 <-> 50.134.240.23 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:25.174563 0.000000 udp 10.0.2.22 51868 -> 181.135.0.72 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:53:26.153801 0.000000 udp 10.0.2.22 51868 -> 95.59.21.62 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:53:27.141672 0.147680 udp 10.0.2.22 51868 <-> 173.212.89.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:28.129848 0.055900 udp 10.0.2.22 51868 <-> 84.232.228.140 16464 CON 0 0 5 3618 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:29.115486 0.000000 udp 10.0.2.22 51868 -> 77.78.246.63 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:53:30.104258 0.310353 udp 10.0.2.22 51868 <-> 187.35.225.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:31.087565 4.030029 udp 10.0.2.22 51868 <-> 87.120.215.67 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:32.081935 0.980375 udp 10.0.2.22 51868 <-> 85.179.124.254 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:34.050231 0.000000 udp 10.0.2.22 51868 -> 181.135.0.72 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:53:36.023279 0.158951 udp 10.0.2.22 51868 <-> 173.212.89.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:37.007637 0.345096 udp 10.0.2.22 51868 <-> 220.136.8.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:37.990904 0.000000 udp 10.0.2.22 51868 -> 69.119.31.104 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:53:38.980496 1.029371 udp 10.0.2.22 51868 <-> 213.118.190.142 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:40.952062 2.099339 udp 10.0.2.22 51868 <-> 49.201.149.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:41.938719 0.032709 udp 10.0.2.22 51868 <-> 77.238.195.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:42.924100 0.057789 udp 10.0.2.22 51868 <-> 82.244.84.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:43.908393 0.123229 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:44.891690 0.052186 udp 10.0.2.22 51868 <-> 84.51.169.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:45.881841 0.115279 udp 10.0.2.22 51868 <-> 24.150.162.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:46.741731 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:53:46.860622 0.031990 udp 10.0.2.22 51868 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:47.848548 0.288597 udp 10.0.2.22 51868 <-> 178.79.11.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:48.836078 0.059275 udp 10.0.2.22 51868 <-> 79.118.203.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:49.820942 0.286478 udp 10.0.2.22 51868 <-> 177.100.110.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:50.806475 4.925935 udp 10.0.2.22 51868 -> 50.143.3.25 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:53:51.789532 0.033931 udp 10.0.2.22 51868 <-> 178.79.32.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:52.779630 4.805364 udp 10.0.2.22 51868 <-> 197.7.27.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:53.758223 0.126690 udp 10.0.2.22 51868 <-> 24.156.248.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:54.745872 0.286521 udp 10.0.2.22 51868 <-> 113.39.129.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:55.896866 0.000025 udp 10.0.2.22 51868 <- 50.143.3.25 16464 RSP 0 0 2 1780 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:53:56.717884 0.000000 udp 10.0.2.22 51868 -> 93.145.162.140 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:53:57.702075 0.132436 udp 10.0.2.22 51868 <-> 24.3.193.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:58.685437 0.157353 udp 10.0.2.22 51868 <-> 69.205.77.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:53:59.675266 0.000000 udp 10.0.2.22 51868 -> 83.29.154.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:00.654240 3.944089 udp 10.0.2.22 51868 <-> 66.79.231.41 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:54:01.641952 0.342188 udp 10.0.2.22 51868 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:54:02.628583 0.074382 udp 10.0.2.22 51868 <-> 46.35.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:54:03.614090 0.000000 udp 10.0.2.22 51868 -> 72.183.243.88 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:05.581375 0.041113 udp 10.0.2.22 51868 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:54:06.571216 0.000000 udp 10.0.2.22 51868 -> 178.201.156.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:07.549828 0.000000 udp 10.0.2.22 51868 -> 193.151.100.29 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:08.537468 0.321589 udp 10.0.2.22 51868 <-> 190.179.8.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:54:09.523867 0.176857 udp 10.0.2.22 51868 <-> 173.23.208.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:54:10.509286 0.164909 udp 10.0.2.22 51868 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:54:11.493486 0.069075 udp 10.0.2.22 51868 <-> 78.70.192.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:54:12.476741 0.083899 udp 10.0.2.22 51868 <-> 89.205.104.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:54:13.337836 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:54:13.466632 0.220098 udp 10.0.2.22 51868 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:54:14.445509 0.186895 udp 10.0.2.22 51868 <-> 69.193.106.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:54:15.434699 0.356809 udp 10.0.2.22 51868 <-> 204.16.10.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:54:16.421138 0.292096 udp 10.0.2.22 51868 <-> 201.241.2.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:54:17.406227 0.106305 udp 10.0.2.22 51868 <-> 78.204.132.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:54:18.390286 0.000000 udp 10.0.2.22 51868 -> 80.253.61.151 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:19.373082 0.023802 udp 10.0.2.22 51868 <-> 80.99.14.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:54:20.362876 2.853008 udp 10.0.2.22 51868 <-> 207.210.56.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:54:21.341714 0.300897 udp 10.0.2.22 51868 <-> 180.215.67.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:54:22.329199 0.000000 udp 10.0.2.22 51868 -> 190.194.201.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:23.319251 0.059653 udp 10.0.2.22 51868 <-> 94.156.49.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:54:24.304430 0.140253 udp 10.0.2.22 51868 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:54:25.288405 0.041047 udp 10.0.2.22 51868 <-> 77.238.195.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:54:26.271278 0.092960 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:54:27.261332 0.030974 udp 10.0.2.22 51868 <-> 89.64.246.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:54:29.227337 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:30.213630 0.000064 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:30.213694 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:54:31.198762 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:32.181273 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:33.166488 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:34.156162 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:35.135068 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:36.125560 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:37.112066 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:38.096940 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:39.080935 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:39.935005 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:54:40.063776 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:41.053691 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:42.032105 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:43.019627 2.955360 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:44.005873 0.009381 udp 10.0.2.22 51868 <-> 94.74.245.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:54:44.991059 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:46.957755 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:47.947441 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:48.925845 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:49.927072 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:50.928726 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:51.930379 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:52.931126 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:53.933252 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:54.934688 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:56.926958 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:57.928639 0.000084 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:57.928723 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:54:58.930247 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:54:59.931385 0.009379 udp 10.0.2.22 51868 <-> 94.74.245.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:55:00.932885 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:02.925764 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:03.927602 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:04.928973 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:05.930274 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:06.934450 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:07.804332 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:55:07.934431 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:08.934648 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:09.926390 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:10.933055 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:11.932211 0.000049 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:11.932260 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:55:12.936810 3.989335 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:13.933584 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:14.932985 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:15.934786 0.009363 udp 10.0.2.22 51868 <-> 94.74.245.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:55:17.927651 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:18.929152 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:19.933991 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:20.934576 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:21.935731 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:22.935756 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:23.927201 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:24.930403 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:25.929759 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:26.930560 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:27.932172 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:28.934107 0.000078 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:28.934185 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:55:29.936595 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:30.926851 0.009360 udp 10.0.2.22 51868 <-> 94.74.245.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:55:31.927544 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:32.935039 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:33.935011 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:34.809477 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:55:34.939569 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:35.936261 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:36.934535 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:37.926205 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:38.927560 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:39.929428 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:40.930672 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:41.932150 0.000051 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:41.932201 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:55:42.933414 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:43.935224 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:44.928880 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:46.929806 0.292645 udp 10.0.2.22 51868 <-> 117.214.221.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:55:47.930632 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:49.933999 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:50.925169 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:51.926336 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:52.927906 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:53.929565 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:54.930644 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:55.932115 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:56.934244 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:57.925413 0.000056 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:57.925469 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:55:58.926546 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:55:59.927826 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:00.929703 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:01.800420 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:56:01.930833 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:02.932288 0.228533 udp 10.0.2.22 51868 <-> 69.230.102.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:56:03.934045 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:04.925243 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:06.928211 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:07.929429 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:08.930930 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:09.932352 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:10.933759 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:11.925145 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:12.926613 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:13.928215 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:14.929285 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:15.931134 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:16.932813 0.000134 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:16.932947 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:56:17.933730 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:18.925561 0.293855 udp 10.0.2.22 51868 <-> 117.214.221.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:56:19.926745 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:20.928062 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:21.929731 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:23.932900 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:24.933888 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:25.925204 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:26.926797 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:27.928445 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:28.809392 0.000039 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:56:28.929465 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:29.931243 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:30.932608 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:31.934065 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:32.925123 0.000086 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:32.925209 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:56:33.926737 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:34.928221 0.299531 udp 10.0.2.22 51868 <-> 117.214.221.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:56:35.929624 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:36.931070 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:37.932577 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:38.934187 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:39.925964 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:40.926978 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:41.928265 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:42.931996 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:44.932609 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:45.934232 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:46.925784 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:47.926903 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:48.928643 0.000060 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:48.928703 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:56:49.929620 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:50.931158 0.305825 udp 10.0.2.22 51868 <-> 117.214.221.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:56:52.934252 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:53.925715 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:54.937667 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:55.815491 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:56:55.935618 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:56.932635 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:57.931307 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:58.932786 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:56:59.934179 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:00.926232 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:01.927167 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:02.928440 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:03.930069 0.000076 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:03.930145 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:57:04.931082 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:05.933051 4.998947 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:06.937945 0.338092 udp 10.0.2.22 51868 <-> 117.214.221.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:57:08.927890 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:09.928670 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:11.931852 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:12.932690 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:13.934308 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:14.925840 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:15.927342 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:16.928572 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:17.930188 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:18.931571 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:19.932932 0.000074 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:19.933006 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:57:20.934436 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:21.925985 0.330485 udp 10.0.2.22 51868 <-> 117.214.221.200 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:57:22.807049 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:57:22.927201 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:23.928879 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:24.930043 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:25.931272 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:26.932939 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:27.934475 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:28.925871 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:29.927636 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:30.928858 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:31.930511 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:32.931947 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:33.933305 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:34.934745 0.000063 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:34.934808 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:57:35.926039 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:37.928736 0.309922 udp 10.0.2.22 51868 <-> 117.214.221.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:57:38.930620 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:39.931468 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:40.933072 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:41.934529 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:42.926217 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:43.927644 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:44.928783 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:45.930625 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:46.931923 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:47.933641 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:48.934743 0.000097 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:48.934840 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:57:49.805990 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:57:49.926147 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:50.927859 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:51.928862 4.005854 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:53.931892 0.319515 udp 10.0.2.22 51868 <-> 117.214.221.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:57:54.933345 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:56.926262 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:57.927725 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:58.929234 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:57:59.930615 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:00.931998 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:01.933067 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:02.934634 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:03.926367 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:04.927887 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:05.929215 0.000042 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:05.929257 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:58:06.930638 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:08.933248 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:09.934756 0.290405 udp 10.0.2.22 51868 <-> 117.214.221.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:58:10.926302 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:11.927922 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:12.929050 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:13.930707 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:14.932204 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:15.933727 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:16.804763 0.000097 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:58:16.935119 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:17.926236 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:18.927950 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:19.929060 4.997239 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:20.930675 0.000050 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:20.930725 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:58:21.934065 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:22.933740 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:23.925098 0.288446 udp 10.0.2.22 51868 <-> 117.214.221.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:58:25.927962 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:26.929656 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:27.930951 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:28.932321 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:29.933898 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:30.925022 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:31.926691 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:32.927997 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:33.929476 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:34.930953 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:35.932401 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:36.933950 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:37.925078 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:38.926477 4.005716 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:38.926525 4.005668 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 2 172 flow=Background 1970/01/01 08:58:39.928081 0.295205 udp 10.0.2.22 51868 <-> 117.214.221.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:58:41.930859 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:43.934009 0.355017 udp 10.0.2.22 51868 <-> 106.1.132.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:58:44.805107 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:58:44.925516 0.142457 udp 10.0.2.22 51868 <-> 68.198.80.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:58:45.926610 0.154223 udp 10.0.2.22 51868 <-> 24.112.203.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:58:46.928155 0.142501 udp 10.0.2.22 51868 <-> 96.35.117.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:58:47.929737 0.000000 udp 10.0.2.22 51868 -> 190.107.109.178 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:48.931026 0.279557 udp 10.0.2.22 51868 <-> 190.247.210.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:58:49.932384 0.145888 udp 10.0.2.22 51868 <-> 24.158.131.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:58:50.933811 2.570524 udp 10.0.2.22 51868 <-> 187.69.61.47 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:58:51.925267 0.067619 udp 10.0.2.22 51868 <-> 87.198.116.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:58:53.928194 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:54.929971 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:55.931033 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:56.932363 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:57.933836 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:58.925124 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:58:59.926670 0.369288 udp 10.0.2.22 51868 <-> 187.69.61.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:00.928231 0.000064 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:59:00.928295 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:59:01.929718 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:59:02.930815 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:59:04.933960 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:59:05.925634 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:59:06.926692 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:59:07.928113 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:59:08.929984 0.176083 udp 10.0.2.22 51868 <-> 49.206.17.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:09.931277 0.269708 udp 10.0.2.22 51868 <-> 92.40.234.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:10.932541 0.129466 udp 10.0.2.22 51868 <-> 37.213.134.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:11.804328 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:59:11.934692 0.149171 udp 10.0.2.22 51868 <-> 72.226.86.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:12.925759 0.329719 udp 10.0.2.22 51868 <-> 121.147.28.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:13.926943 0.426137 udp 10.0.2.22 51868 <-> 14.98.32.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:14.928275 0.282366 udp 10.0.2.22 51868 <-> 179.235.4.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:16.930761 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:59:17.932664 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:59:18.934013 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:59:19.925633 0.000064 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:59:19.925697 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:59:20.926875 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:59:21.928530 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:59:22.929843 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:59:23.931381 0.142541 udp 10.0.2.22 51868 <-> 24.45.80.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:24.932719 0.076280 udp 10.0.2.22 51868 <-> 85.86.187.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:25.934289 0.339474 udp 10.0.2.22 51868 <-> 36.224.167.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:26.925809 0.166677 udp 10.0.2.22 51868 <-> 98.209.179.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:27.926928 0.329224 udp 10.0.2.22 51868 <-> 218.164.7.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:28.928523 0.277256 udp 10.0.2.22 51868 <-> 190.16.249.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:29.929669 0.048105 udp 10.0.2.22 51868 <-> 89.99.62.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:30.931205 0.000000 udp 10.0.2.22 51868 -> 176.200.111.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:59:31.932712 0.000000 udp 10.0.2.22 51868 -> 77.76.177.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:59:32.934228 0.223062 udp 10.0.2.22 51868 <-> 85.224.201.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:33.925794 0.155372 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:34.927097 0.000112 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:59:34.927209 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 08:59:35.928578 0.066483 udp 10.0.2.22 51868 <-> 85.87.224.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:36.929908 0.155689 udp 10.0.2.22 51868 <-> 66.190.218.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:37.931583 0.353603 udp 10.0.2.22 51868 <-> 117.222.38.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:38.802818 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 08:59:38.932679 0.129712 udp 10.0.2.22 51868 <-> 37.213.134.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:39.934406 0.249335 udp 10.0.2.22 51868 <-> 176.200.111.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:40.925982 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:59:41.926917 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:59:42.928650 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:59:43.930229 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:59:44.931724 0.046712 udp 10.0.2.22 51868 <-> 95.87.232.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:45.932966 0.000000 udp 10.0.2.22 51868 -> 71.59.124.237 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:59:46.934687 0.000000 udp 10.0.2.22 51868 -> 67.59.37.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:59:47.925690 0.161747 udp 10.0.2.22 51868 <-> 77.45.49.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:48.927001 0.298476 udp 10.0.2.22 51868 <-> 60.56.154.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:49.928551 0.182492 udp 10.0.2.22 51868 <-> 151.28.138.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:50.930415 0.000000 udp 10.0.2.22 51868 -> 88.222.170.133 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:59:51.931019 0.225977 udp 10.0.2.22 51868 <-> 203.193.142.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:52.933018 0.038781 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:53.934422 0.211871 udp 10.0.2.22 51868 <-> 67.168.98.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:54.925936 0.309329 udp 10.0.2.22 51868 <-> 105.229.138.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:55.929733 0.000000 udp 10.0.2.22 51868 -> 190.206.205.233 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:59:56.929985 0.094668 udp 10.0.2.22 51868 <-> 188.29.124.154 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:57.930438 0.000000 udp 10.0.2.22 51868 -> 134.3.82.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 08:59:58.931584 2.048178 udp 10.0.2.22 51868 <-> 5.20.145.20 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 08:59:59.933222 0.522437 udp 10.0.2.22 51868 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:01.925890 0.772606 udp 10.0.2.22 51868 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:02.933437 0.288317 udp 10.0.2.22 51868 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:03.936143 0.045475 udp 10.0.2.22 51868 <-> 91.187.95.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:04.933497 0.520751 udp 10.0.2.22 51868 <-> 14.98.233.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:05.801638 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:00:05.934174 0.314190 udp 10.0.2.22 51868 <-> 122.27.16.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:06.933795 1.246647 udp 10.0.2.22 51868 <-> 37.8.223.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:07.934312 0.149702 udp 10.0.2.22 51868 <-> 68.197.121.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:08.925471 0.301481 udp 10.0.2.22 51868 <-> 106.218.72.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:09.927691 0.065381 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:10.928984 0.322577 udp 10.0.2.22 51868 <-> 201.95.117.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:11.930423 0.050841 udp 10.0.2.22 51868 <-> 109.175.80.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:12.931791 0.000000 udp 10.0.2.22 51868 -> 81.148.15.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:00:13.933072 0.034871 udp 10.0.2.22 51868 <-> 90.156.12.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:14.934749 0.167261 udp 10.0.2.22 51868 <-> 74.133.226.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:15.926144 0.052354 udp 10.0.2.22 51868 <-> 79.118.178.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:16.927383 0.000000 udp 10.0.2.22 51868 -> 2.68.0.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:00:17.928931 0.067475 udp 10.0.2.22 51868 <-> 93.156.85.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:18.930481 0.044976 udp 10.0.2.22 51868 <-> 88.216.11.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:19.932097 0.041892 udp 10.0.2.22 51868 <-> 89.66.178.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:20.933176 0.029112 udp 10.0.2.22 51868 <-> 95.111.26.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:21.934736 0.000000 udp 10.0.2.22 51868 -> 79.119.36.107 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:00:22.926239 1.090585 udp 10.0.2.22 51868 <-> 66.115.84.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:23.932981 1.906256 udp 10.0.2.22 51868 <-> 186.81.212.80 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:24.932903 0.139491 udp 10.0.2.22 51868 <-> 76.99.43.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:25.932815 0.163886 udp 10.0.2.22 51868 <-> 68.103.85.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:26.932130 0.273879 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:27.933450 0.000000 udp 10.0.2.22 51868 -> 77.102.200.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:00:28.934620 0.153795 udp 10.0.2.22 51868 <-> 24.193.20.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:29.926677 0.161833 udp 10.0.2.22 51868 <-> 50.143.3.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:30.927736 0.034713 udp 10.0.2.22 51868 <-> 90.156.12.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:31.929022 0.210146 udp 10.0.2.22 51868 <-> 24.8.139.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:32.800448 0.000097 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:00:32.930517 0.045994 udp 10.0.2.22 51868 <-> 86.125.174.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:33.932007 0.145032 udp 10.0.2.22 51868 <-> 68.198.80.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:34.933745 0.113136 udp 10.0.2.22 51868 <-> 169.244.248.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:35.934709 0.619301 udp 10.0.2.22 51868 <-> 186.210.126.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:36.926450 0.293446 udp 10.0.2.22 51868 <-> 115.244.236.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:37.927560 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:00:38.929249 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:00:39.930548 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:00:40.932019 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:00:41.933911 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:00:42.934711 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:00:44.927447 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:00:45.928807 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:00:46.930687 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:00:47.932005 0.000065 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:00:47.932070 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:00:48.933492 4.997079 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:00:49.934882 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:00:50.926358 0.077924 udp 10.0.2.22 51868 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:51.928000 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:00:52.929211 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:00:54.932098 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:00:55.933923 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:00:56.925091 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:00:57.926553 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:00:58.928031 0.078244 udp 10.0.2.22 51868 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:00:59.809109 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:00:59.929247 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:01:00.930733 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:01:01.932307 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:01:02.933644 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:01:03.925306 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:01:04.926640 0.077888 udp 10.0.2.22 51868 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:05.927839 1.466680 udp 10.0.2.22 51868 <-> 186.81.212.80 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:06.929623 0.375752 udp 10.0.2.22 51868 <-> 189.15.241.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:07.930790 0.516364 udp 10.0.2.22 51868 <-> 81.226.243.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:08.932303 3.690343 udp 10.0.2.22 51868 <-> 46.196.100.226 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:09.933861 0.145815 udp 10.0.2.22 51868 <-> 108.202.146.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:11.926551 0.150186 udp 10.0.2.22 51868 <-> 72.198.68.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:12.927778 0.030512 udp 10.0.2.22 51868 <-> 80.253.61.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:13.929414 0.517702 udp 10.0.2.22 51868 <-> 117.195.152.203 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:14.642848 0.000000 udp 10.0.2.22 51868 <- 46.196.100.226 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:01:14.930724 0.032394 udp 10.0.2.22 51868 <-> 84.252.22.95 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:15.932310 0.013908 udp 10.0.2.22 51868 <-> 131.246.84.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:16.934031 0.155701 udp 10.0.2.22 51868 <-> 84.228.222.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:17.898693 3.001171 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 09:01:17.925273 0.000000 udp 10.0.2.22 51868 -> 173.210.217.104 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:01:18.926752 0.354837 udp 10.0.2.22 51868 <-> 117.197.227.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:19.928297 0.019579 udp 10.0.2.22 51868 <-> 149.172.182.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:20.929882 1.340204 udp 10.0.2.22 51868 <-> 101.212.51.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:21.930933 0.000000 udp 10.0.2.22 51868 -> 190.103.194.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:01:22.932481 0.149439 udp 10.0.2.22 51868 <-> 37.45.40.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:23.933804 1.007867 udp 10.0.2.22 51868 <-> 61.114.37.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:24.905098 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:01:24.925156 0.161038 udp 10.0.2.22 51868 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:25.926603 0.025473 udp 10.0.2.22 51868 <-> 158.58.226.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:26.807769 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:01:26.928076 0.000000 udp 10.0.2.22 51868 -> 115.241.5.111 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:01:27.929564 0.328888 udp 10.0.2.22 51868 <-> 36.229.51.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:28.931018 3.326568 udp 10.0.2.22 51868 <-> 94.139.18.253 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:29.932596 0.158280 udp 10.0.2.22 51868 <-> 173.28.51.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:31.925561 0.164769 udp 10.0.2.22 51868 <-> 72.191.127.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:32.906737 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:01:32.926728 0.161025 udp 10.0.2.22 51868 <-> 71.233.24.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:33.928136 0.067594 udp 10.0.2.22 51868 <-> 93.81.118.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:34.929426 0.107383 udp 10.0.2.22 51868 <-> 79.40.117.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:35.034273 0.000000 udp 10.0.2.22 51868 <- 94.139.18.253 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:01:35.931165 1.343526 udp 10.0.2.22 51868 <-> 201.211.111.236 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:37.934009 0.146943 udp 10.0.2.22 51868 <-> 78.236.112.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:38.925665 0.000000 udp 10.0.2.22 51868 -> 109.182.53.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:01:39.926716 0.060429 udp 10.0.2.22 51868 <-> 2.3.129.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:40.928312 0.154246 udp 10.0.2.22 51868 <-> 65.28.245.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:41.929886 0.048911 udp 10.0.2.22 51868 <-> 78.228.60.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:42.931283 0.323735 udp 10.0.2.22 51868 <-> 114.174.40.45 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:43.932492 0.252036 udp 10.0.2.22 51868 <-> 200.93.68.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:44.933959 0.229500 udp 10.0.2.22 51868 <-> 199.247.230.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:45.925676 0.057636 udp 10.0.2.22 51868 <-> 81.226.52.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:46.926857 0.000000 udp 10.0.2.22 51868 -> 201.95.139.200 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:01:47.928401 0.148704 udp 10.0.2.22 51868 <-> 174.109.218.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:48.911299 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:01:48.931218 3.169790 udp 10.0.2.22 51868 <-> 72.191.127.222 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:49.931074 0.060493 udp 10.0.2.22 51868 <-> 95.169.196.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:50.937469 0.000000 udp 10.0.2.22 51868 -> 74.172.239.214 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:01:52.925159 0.198601 udp 10.0.2.22 51868 <-> 75.54.70.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:53.806582 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:01:53.926854 0.164258 udp 10.0.2.22 51868 <-> 71.91.184.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:54.928319 0.135933 udp 10.0.2.22 51868 <-> 74.88.126.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:55.929751 0.297066 udp 10.0.2.22 51868 <-> 190.185.220.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:01:56.931190 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:01:57.933406 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:01:58.934108 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:01:59.925620 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:02:00.926949 0.385276 udp 10.0.2.22 51868 <-> 202.163.182.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:01.928454 0.139673 udp 10.0.2.22 51868 <-> 24.45.80.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:02.929893 0.000000 udp 10.0.2.22 51868 -> 46.159.185.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:02:03.931995 1.158843 udp 10.0.2.22 51868 <-> 74.199.89.82 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:05.939838 0.000000 udp 10.0.2.22 51868 -> 82.103.122.205 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:02:06.929783 0.170541 udp 10.0.2.22 51868 <-> 49.204.142.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:07.929993 0.282346 udp 10.0.2.22 51868 <-> 189.79.96.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:08.929889 0.193954 udp 10.0.2.22 51868 <-> 67.149.214.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:09.929842 2.153747 udp 10.0.2.22 51868 <-> 67.240.151.164 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:10.931298 0.233837 udp 10.0.2.22 51868 <-> 24.228.86.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:12.934295 0.039541 udp 10.0.2.22 51868 <-> 87.254.183.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:13.925846 2.002786 udp 10.0.2.22 51868 <-> 49.207.111.86 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:14.926808 0.283107 udp 10.0.2.22 51868 <-> 189.79.96.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:16.929780 0.208578 udp 10.0.2.22 51868 <-> 68.35.78.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:17.931027 0.158609 udp 10.0.2.22 51868 <-> 75.86.159.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:18.933131 4.032110 udp 10.0.2.22 51868 <-> 178.79.11.31 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:19.934621 0.086069 udp 10.0.2.22 51868 <-> 2.92.89.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:20.805245 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:02:20.915879 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:02:21.932838 0.000000 udp 10.0.2.22 51868 -> 192.226.149.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:02:23.932011 1.088007 udp 10.0.2.22 51868 <-> 81.61.64.72 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:25.933623 0.177560 udp 10.0.2.22 51868 <-> 173.17.3.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:26.934711 0.071873 udp 10.0.2.22 51868 <-> 85.84.86.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:27.925782 0.045797 udp 10.0.2.22 51868 <-> 178.117.252.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:28.927180 0.000000 udp 10.0.2.22 51868 -> 31.147.134.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:02:29.928508 0.288994 udp 10.0.2.22 51868 <-> 190.208.103.70 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:30.930347 0.044902 udp 10.0.2.22 51868 <-> 89.216.146.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:31.931913 0.050804 udp 10.0.2.22 51868 <-> 95.87.232.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:32.933145 0.220644 udp 10.0.2.22 51868 <-> 69.204.114.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:33.934596 0.296200 udp 10.0.2.22 51868 <-> 190.138.32.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:34.925549 0.324361 udp 10.0.2.22 51868 <-> 61.228.94.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:35.927187 0.176118 udp 10.0.2.22 51868 <-> 103.251.216.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:36.932541 0.146691 udp 10.0.2.22 51868 <-> 24.247.93.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:37.931794 0.138372 udp 10.0.2.22 51868 <-> 74.88.126.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:38.931755 0.039348 udp 10.0.2.22 51868 <-> 81.104.29.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:39.933111 0.508286 udp 10.0.2.22 51868 <-> 179.101.199.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:40.935271 0.171217 udp 10.0.2.22 51868 <-> 70.112.234.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:41.931764 0.081499 udp 10.0.2.22 51868 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:42.929620 0.076190 udp 10.0.2.22 51868 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:43.931108 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:02:44.930204 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:02:45.931862 0.000000 udp 10.0.2.22 51868 -> 14.99.227.9 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:02:46.935999 0.000000 udp 10.0.2.22 51868 -> 79.51.215.42 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:02:47.805920 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:02:47.936075 0.208904 udp 10.0.2.22 51868 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:48.926480 0.366972 udp 10.0.2.22 51868 <-> 124.12.33.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:49.927511 2.529747 udp 10.0.2.22 51868 <-> 24.137.128.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:50.928966 0.537176 udp 10.0.2.22 51868 <-> 201.21.179.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:51.930764 0.317235 udp 10.0.2.22 51868 <-> 190.198.218.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:52.932011 0.000000 udp 10.0.2.22 51868 -> 70.243.123.231 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:02:53.933643 0.000000 udp 10.0.2.22 51868 -> 83.11.160.233 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:02:54.935215 0.321376 udp 10.0.2.22 51868 <-> 190.75.163.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:55.926192 0.078031 udp 10.0.2.22 51868 <-> 188.171.7.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:56.927776 0.042249 udp 10.0.2.22 51868 <-> 147.156.178.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:57.929112 0.042143 udp 10.0.2.22 51868 <-> 85.228.202.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:02:58.930381 0.042463 udp 10.0.2.22 51868 <-> 81.232.31.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:03:00.933292 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:01.935183 0.000098 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:01.935281 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:03:02.926086 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:03.927703 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:04.928762 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:05.932355 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:06.932189 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:07.933001 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:08.934616 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:09.925997 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:10.927778 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:11.928972 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:12.930823 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:13.931926 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:14.803362 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:03:14.933714 1.992441 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:15.934845 0.342005 udp 10.0.2.22 51868 <-> 180.176.104.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:03:17.928114 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:19.930806 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:20.932165 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:21.933353 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:22.934867 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:23.926352 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:24.927814 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:25.929437 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:26.930774 0.000049 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:26.930823 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:03:27.932013 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:28.933739 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:29.925012 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:30.926498 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:31.927732 0.140061 udp 10.0.2.22 51868 <-> 24.45.80.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:03:32.929451 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:33.930822 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:34.932002 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:35.933840 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:36.925224 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:38.928110 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:39.929675 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:40.930742 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:41.801988 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:03:41.931992 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:42.933453 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:43.925091 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:44.926556 0.000085 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:44.926641 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:03:45.928279 2.002443 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:46.929460 0.342340 udp 10.0.2.22 51868 <-> 180.176.104.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:03:49.933775 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:50.925273 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:51.926537 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:52.927911 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:53.928979 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:54.930712 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:55.931989 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:56.933958 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:57.925310 0.000058 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:57.925368 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:03:58.926667 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:03:59.928148 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:04:00.929663 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:04:01.930871 0.195444 udp 10.0.2.22 51868 <-> 70.180.235.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:02.932454 0.261027 udp 10.0.2.22 51868 <-> 201.80.212.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:03.934021 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:04:04.925090 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:04:06.928407 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:04:07.929834 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:04:08.800686 0.000123 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:04:08.930980 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:04:09.932638 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:04:10.934119 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:04:11.925077 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:04:12.926606 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:04:13.928382 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:04:14.929765 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:04:15.930930 0.000052 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:04:15.930982 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:04:16.932277 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:04:17.934015 0.194792 udp 10.0.2.22 51868 <-> 70.180.235.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:18.925214 0.262631 udp 10.0.2.22 51868 <-> 201.80.212.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:19.926646 0.345234 udp 10.0.2.22 51868 <-> 180.176.104.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:20.928251 0.151793 udp 10.0.2.22 51868 <-> 67.61.177.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:21.929265 0.000000 udp 10.0.2.22 51868 -> 81.117.164.212 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:04:22.931200 0.058449 udp 10.0.2.22 51868 <-> 79.113.237.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:23.937290 0.143602 udp 10.0.2.22 51868 <-> 69.124.203.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:24.938748 0.189802 udp 10.0.2.22 51868 <-> 166.230.66.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:25.930085 0.108097 udp 10.0.2.22 51868 <-> 93.144.2.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:26.930562 0.318711 udp 10.0.2.22 51868 <-> 189.68.131.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:27.930031 0.139219 udp 10.0.2.22 51868 <-> 24.182.92.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:28.930024 0.119658 udp 10.0.2.22 51868 <-> 70.160.231.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:29.931039 1.260661 udp 10.0.2.22 51868 <-> 98.112.167.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:30.936574 0.000000 udp 10.0.2.22 51868 -> 79.113.221.91 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:04:31.937161 0.075564 udp 10.0.2.22 51868 <-> 85.87.80.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:32.928332 0.336950 udp 10.0.2.22 51868 <-> 211.105.150.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:33.928929 0.015000 udp 10.0.2.22 51868 <-> 188.230.247.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:34.929943 0.040692 udp 10.0.2.22 51868 <-> 91.67.136.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:35.804891 0.000037 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:04:35.935055 0.322388 udp 10.0.2.22 51868 <-> 1.163.129.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:36.935271 0.154893 udp 10.0.2.22 51868 <-> 174.97.209.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:37.936060 0.321651 udp 10.0.2.22 51868 <-> 112.164.233.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:38.936300 0.164907 udp 10.0.2.22 51868 <-> 108.183.220.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:39.926346 0.300542 udp 10.0.2.22 51868 <-> 177.82.176.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:40.927232 0.439767 udp 10.0.2.22 51868 <-> 59.93.198.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:41.928878 0.098225 udp 10.0.2.22 51868 <-> 158.148.150.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:42.930013 2.282241 udp 10.0.2.22 51868 <-> 77.52.119.220 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:43.931256 0.058052 udp 10.0.2.22 51868 <-> 213.37.230.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:44.933000 0.271992 udp 10.0.2.22 51868 <-> 14.99.61.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:45.934931 1.199609 udp 10.0.2.22 51868 <-> 76.178.38.26 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:47.927077 0.057637 udp 10.0.2.22 51868 <-> 85.204.248.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:48.928999 0.234598 udp 10.0.2.22 51868 <-> 90.129.90.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:49.929912 1.047426 udp 10.0.2.22 51868 <-> 1.22.174.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:50.931134 0.161002 udp 10.0.2.22 51868 <-> 75.115.10.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:51.933543 0.000000 udp 10.0.2.22 51868 -> 189.107.130.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:04:52.934626 0.381621 udp 10.0.2.22 51868 <-> 190.189.116.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:53.926275 0.260838 udp 10.0.2.22 51868 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:54.927227 0.178937 udp 10.0.2.22 51868 <-> 98.177.241.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:55.928823 0.214777 udp 10.0.2.22 51868 <-> 172.190.104.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:56.930138 0.000000 udp 10.0.2.22 51868 -> 202.29.179.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:04:57.931547 0.563799 udp 10.0.2.22 51868 <-> 69.180.10.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:58.933436 0.038860 udp 10.0.2.22 51868 <-> 5.15.99.5 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:04:59.934965 0.167928 udp 10.0.2.22 51868 <-> 24.224.21.188 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:00.926192 0.178276 udp 10.0.2.22 51868 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:01.927259 0.047607 udp 10.0.2.22 51868 <-> 77.77.29.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:02.808704 0.000132 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:05:02.928562 0.144022 udp 10.0.2.22 51868 <-> 80.108.38.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:03.930014 1.816877 udp 10.0.2.22 51868 <-> 2.178.77.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:04.931748 0.000000 udp 10.0.2.22 51868 -> 83.166.27.110 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:05:05.933568 0.124401 udp 10.0.2.22 51868 <-> 24.35.53.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:06.934743 0.190358 udp 10.0.2.22 51868 <-> 75.180.55.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:07.926079 0.101347 udp 10.0.2.22 51868 <-> 77.242.54.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:08.927352 0.076253 udp 10.0.2.22 51868 <-> 85.86.187.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:09.929298 0.044978 udp 10.0.2.22 51868 <-> 91.187.95.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:10.930065 3.806089 udp 10.0.2.22 51868 <-> 14.96.254.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:11.931937 0.052460 udp 10.0.2.22 51868 <-> 88.160.246.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:12.933379 0.222801 udp 10.0.2.22 51868 <-> 190.37.56.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:13.934478 0.072117 udp 10.0.2.22 51868 <-> 188.171.7.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:14.926447 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:05:15.927888 0.025638 udp 10.0.2.22 51868 <-> 176.63.96.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:16.929005 0.558161 udp 10.0.2.22 51868 <-> 179.208.248.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:17.930421 0.000000 udp 10.0.2.22 51868 -> 174.108.49.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:05:18.932029 0.261623 udp 10.0.2.22 51868 <-> 177.192.55.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:19.933091 0.167619 udp 10.0.2.22 51868 <-> 68.59.249.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:20.934958 0.000000 udp 10.0.2.22 51868 -> 94.6.218.73 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:05:21.926080 0.111338 udp 10.0.2.22 51868 <-> 128.143.29.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:22.927832 0.153387 udp 10.0.2.22 51868 <-> 71.74.132.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:23.928836 0.020072 udp 10.0.2.22 51868 <-> 78.94.106.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:24.930575 0.288778 udp 10.0.2.22 51868 <-> 161.200.212.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:25.931965 0.036707 udp 10.0.2.22 51868 <-> 46.162.107.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:26.933243 0.155659 udp 10.0.2.22 51868 <-> 24.63.83.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:27.934628 0.544125 udp 10.0.2.22 51868 <-> 187.102.85.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:28.926829 0.225388 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:29.807417 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:05:29.927457 0.031233 udp 10.0.2.22 51868 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:30.929068 0.057491 udp 10.0.2.22 51868 <-> 88.186.212.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:31.930637 0.070054 udp 10.0.2.22 51868 <-> 81.56.244.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:32.932007 0.034469 udp 10.0.2.22 51868 <-> 92.244.2.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:33.933291 0.214133 udp 10.0.2.22 51868 <-> 24.7.146.40 16464 CON 0 0 2 668 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:34.935229 0.060085 udp 10.0.2.22 51868 <-> 95.169.211.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:35.926364 0.442524 udp 10.0.2.22 51868 <-> 1.23.91.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:36.927976 0.168414 udp 10.0.2.22 51868 <-> 108.183.69.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:37.928906 0.196322 udp 10.0.2.22 51868 <-> 180.151.248.220 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:38.930780 0.000000 udp 10.0.2.22 51868 -> 106.67.163.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:05:39.931954 0.184091 udp 10.0.2.22 51868 <-> 72.197.24.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:40.933781 0.000000 udp 10.0.2.22 51868 -> 92.250.178.152 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:05:41.935148 0.141436 udp 10.0.2.22 51868 <-> 95.74.187.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:42.926699 0.157910 udp 10.0.2.22 51868 <-> 68.62.2.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:43.927651 0.189052 udp 10.0.2.22 51868 <-> 124.125.22.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:44.929514 0.058169 udp 10.0.2.22 51868 <-> 178.168.9.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:45.930488 0.355247 udp 10.0.2.22 51868 <-> 61.223.208.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:46.848390 0.000000 udp 10.0.2.22 51868 <- 92.250.178.152 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:05:46.932356 0.047274 udp 10.0.2.22 51868 <-> 86.20.15.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:47.933496 0.200783 udp 10.0.2.22 51868 <-> 216.105.77.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:48.935003 0.246860 udp 10.0.2.22 51868 <-> 177.224.86.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:49.926655 0.000000 udp 10.0.2.22 51868 -> 178.48.110.137 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:05:50.928023 0.199022 udp 10.0.2.22 51868 <-> 67.215.24.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:51.929232 0.042438 udp 10.0.2.22 51868 <-> 81.104.29.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:52.930666 0.060162 udp 10.0.2.22 51868 <-> 90.229.232.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:53.932200 0.162773 udp 10.0.2.22 51868 <-> 65.34.172.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:54.933474 0.219336 udp 10.0.2.22 51868 <-> 180.151.248.220 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:55.935582 0.082304 udp 10.0.2.22 51868 <-> 83.249.8.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:56.806475 0.000124 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:05:56.926527 0.278232 udp 10.0.2.22 51868 <-> 93.63.109.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:57.928377 0.160926 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:58.929091 0.505353 udp 10.0.2.22 51868 <-> 190.189.156.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:05:59.932577 0.293944 udp 10.0.2.22 51868 <-> 186.68.6.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:00.936660 0.819848 udp 10.0.2.22 51868 <-> 117.254.126.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:01.935997 0.146105 udp 10.0.2.22 51868 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:02.926661 0.000000 udp 10.0.2.22 51868 -> 190.77.110.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:06:03.927228 0.000000 udp 10.0.2.22 51868 -> 115.244.238.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:06:04.928608 0.037134 udp 10.0.2.22 51868 <-> 151.237.11.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:05.929110 0.124328 udp 10.0.2.22 51868 <-> 74.196.59.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:06.931736 0.364866 udp 10.0.2.22 51868 <-> 114.37.121.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:07.932678 0.000000 udp 10.0.2.22 51868 -> 111.92.32.202 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:06:08.933651 0.334379 udp 10.0.2.22 51868 <-> 114.45.22.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:09.924890 0.179521 udp 10.0.2.22 51868 <-> 148.241.184.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:10.926656 2.053698 udp 10.0.2.22 51868 <-> 79.113.241.193 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:11.927906 0.208635 udp 10.0.2.22 51868 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:13.930785 0.208906 udp 10.0.2.22 51868 <-> 67.183.71.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:14.932400 0.141733 udp 10.0.2.22 51868 <-> 68.44.14.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:15.933751 0.150749 udp 10.0.2.22 51868 <-> 136.159.63.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:16.925201 0.135397 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:17.926996 0.047851 udp 10.0.2.22 51868 <-> 89.99.62.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:18.928111 0.135133 udp 10.0.2.22 51868 <-> 178.120.66.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:19.929921 0.162718 udp 10.0.2.22 51868 <-> 69.245.13.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:20.931011 0.000000 udp 10.0.2.22 51868 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:06:21.932075 0.361358 udp 10.0.2.22 51868 <-> 186.58.98.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:22.934316 0.000000 udp 10.0.2.22 51868 -> 87.198.109.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:06:23.804911 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:06:23.925173 1.001150 udp 10.0.2.22 51868 <-> 5.14.158.62 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:25.928055 0.122436 udp 10.0.2.22 51868 <-> 79.49.174.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:26.929739 0.000000 udp 10.0.2.22 51868 -> 8.26.253.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:06:27.930770 0.057872 udp 10.0.2.22 51868 <-> 89.78.202.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:28.932659 4.997606 udp 10.0.2.22 51868 -> 1.172.166.20 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:06:29.934058 0.043974 udp 10.0.2.22 51868 <-> 88.216.52.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:30.925303 0.342356 udp 10.0.2.22 51868 <-> 186.58.98.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:31.926694 0.083789 udp 10.0.2.22 51868 <-> 5.14.158.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:32.928601 0.000000 udp 10.0.2.22 51868 -> 79.49.174.31 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:06:34.930975 0.000000 udp 10.0.2.22 51868 -> 87.198.109.26 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:06:35.932555 0.057318 udp 10.0.2.22 51868 <-> 188.2.254.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:36.933914 0.054273 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:37.925306 0.148794 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:38.926702 0.312827 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:39.928195 0.000000 udp 10.0.2.22 51868 -> 180.215.208.220 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:06:40.929645 0.085310 udp 10.0.2.22 51868 <-> 151.28.125.176 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:41.930991 0.175481 udp 10.0.2.22 51868 <-> 68.114.226.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:42.932311 1.154619 udp 10.0.2.22 51868 <-> 68.3.172.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:43.934197 1.064433 udp 10.0.2.22 51868 <-> 77.239.28.111 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:45.926936 1.300516 udp 10.0.2.22 51868 <-> 200.84.71.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:46.928385 0.199614 udp 10.0.2.22 51868 <-> 177.229.250.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:47.930033 0.164516 udp 10.0.2.22 51868 <-> 173.165.66.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:48.931323 1.052393 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:50.804143 0.000108 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:06:50.933968 0.332268 udp 10.0.2.22 51868 <-> 210.232.17.223 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:51.925677 0.346713 udp 10.0.2.22 51868 <-> 61.223.150.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:52.926844 0.267749 udp 10.0.2.22 51868 <-> 111.125.227.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:53.928209 0.179073 udp 10.0.2.22 51868 <-> 68.2.34.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:54.929508 0.033855 udp 10.0.2.22 51868 <-> 178.79.32.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:55.930896 0.150150 udp 10.0.2.22 51868 <-> 78.9.29.136 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:56.932953 0.268728 udp 10.0.2.22 51868 <-> 66.131.206.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:57.934314 0.163638 udp 10.0.2.22 51868 <-> 71.74.77.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:06:58.926219 0.000000 udp 10.0.2.22 51868 -> 68.3.67.146 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:06:59.926779 0.062114 udp 10.0.2.22 51868 <-> 5.12.187.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:00.928391 0.000000 udp 10.0.2.22 51868 -> 202.78.234.118 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:07:01.930377 0.123677 udp 10.0.2.22 51868 <-> 24.235.158.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:02.931205 1.623548 udp 10.0.2.22 51868 <-> 58.152.190.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:03.932520 0.172069 udp 10.0.2.22 51868 <-> 74.196.176.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:04.934301 0.070699 udp 10.0.2.22 51868 <-> 85.219.21.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:05.926155 0.000000 udp 10.0.2.22 51868 -> 117.227.16.181 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:07:06.927143 1.039701 udp 10.0.2.22 51868 <-> 188.254.170.36 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:08.930010 0.128297 udp 10.0.2.22 51868 <-> 24.156.248.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:09.931340 0.182847 udp 10.0.2.22 51868 <-> 68.113.165.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:10.932658 0.649193 udp 10.0.2.22 51868 <-> 117.227.16.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:11.934269 0.059399 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:12.925891 0.000000 udp 10.0.2.22 51868 -> 86.124.224.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:07:13.927003 0.000000 udp 10.0.2.22 51868 -> 77.185.147.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:07:14.928752 0.376441 udp 10.0.2.22 51868 <-> 1.173.2.66 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:15.929947 0.124042 udp 10.0.2.22 51868 <-> 87.111.41.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:16.931276 0.184917 udp 10.0.2.22 51868 <-> 176.60.57.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:17.802758 0.000109 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:07:17.933137 0.105448 udp 10.0.2.22 51868 <-> 85.65.239.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:18.937155 0.321164 udp 10.0.2.22 51868 <-> 116.80.240.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:19.928215 0.304781 udp 10.0.2.22 51868 <-> 201.27.48.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:20.928724 0.169118 udp 10.0.2.22 51868 <-> 70.131.157.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:21.929558 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:07:22.930029 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:07:23.931389 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:07:24.932964 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:07:25.934489 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:07:26.926647 0.415843 udp 10.0.2.22 51868 <-> 186.11.18.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:27.927654 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:07:28.928656 0.163039 udp 10.0.2.22 51868 <-> 24.118.222.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:29.930261 0.299157 udp 10.0.2.22 51868 <-> 151.241.69.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:30.931318 0.056398 udp 10.0.2.22 51868 <-> 178.26.138.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:31.932899 0.080969 udp 10.0.2.22 51868 <-> 82.246.196.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:32.934634 0.066330 udp 10.0.2.22 51868 <-> 176.195.242.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:33.927063 0.160575 udp 10.0.2.22 51868 <-> 24.220.201.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:34.927672 0.131242 udp 10.0.2.22 51868 <-> 66.108.161.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:35.929061 0.047350 udp 10.0.2.22 51868 <-> 46.214.114.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:36.930035 0.000000 udp 10.0.2.22 51868 -> 98.198.8.53 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:07:37.931413 0.180220 udp 10.0.2.22 51868 <-> 68.3.145.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:38.933561 0.709301 udp 10.0.2.22 51868 <-> 14.98.150.189 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:39.934833 0.136319 udp 10.0.2.22 51868 <-> 62.43.7.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:40.265076 0.015824 udp 10.0.2.22 60056 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 09:07:40.281225 0.000000 udp 10.0.2.22 60057 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:07:40.926245 0.090938 udp 10.0.2.22 51868 <-> 188.234.246.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:41.927393 0.054216 udp 10.0.2.22 51868 <-> 212.75.2.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:42.929077 0.072913 udp 10.0.2.22 51868 <-> 93.72.46.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:43.930228 0.000000 udp 10.0.2.22 51868 -> 14.96.51.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:07:44.800884 0.000126 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:07:44.931227 0.146288 udp 10.0.2.22 51868 <-> 74.216.190.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:45.933409 4.997049 udp 10.0.2.22 51868 <-> 187.121.67.39 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:46.934901 0.000042 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:07:46.934943 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:07:47.926293 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:07:48.927520 1.001352 udp 10.0.2.22 51868 <-> 69.118.76.32 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:51.195195 0.000000 udp 10.0.2.22 51868 <- 187.121.67.39 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:07:51.931975 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:07:52.933035 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:07:53.934512 0.288620 udp 10.0.2.22 51868 <-> 126.60.25.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:54.926613 0.142425 udp 10.0.2.22 51868 <-> 68.49.199.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:55.927543 0.000000 udp 10.0.2.22 51868 -> 118.175.41.198 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:07:56.929418 0.166856 udp 10.0.2.22 51868 <-> 174.64.165.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:57.930181 0.000000 udp 10.0.2.22 51868 -> 181.28.105.210 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:07:58.931351 0.124939 udp 10.0.2.22 51868 <-> 199.192.212.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:07:59.933218 0.221675 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:00.935115 2.013902 udp 10.0.2.22 51868 <-> 72.199.138.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:01.926341 0.768982 udp 10.0.2.22 51868 <-> 76.87.27.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:02.927977 0.084162 udp 10.0.2.22 51868 <-> 188.77.37.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:03.929125 0.154680 udp 10.0.2.22 51868 <-> 71.197.28.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:04.930636 0.177206 udp 10.0.2.22 51868 <-> 184.49.10.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:05.931852 0.166564 udp 10.0.2.22 51868 <-> 74.67.107.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:06.933210 0.154806 udp 10.0.2.22 51868 <-> 96.42.34.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:07.934842 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:08:08.926278 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:08:09.927895 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:08:10.929221 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:08:11.800311 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:08:11.930608 0.047742 udp 10.0.2.22 51868 <-> 89.2.226.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:12.932110 0.153745 udp 10.0.2.22 51868 <-> 96.59.111.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:13.933217 1.048392 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:15.927011 0.000000 udp 10.0.2.22 51868 -> 83.43.74.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:08:16.928068 0.030541 udp 10.0.2.22 51868 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:17.929121 0.176002 udp 10.0.2.22 51868 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:18.930564 0.069246 udp 10.0.2.22 51868 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:19.932117 0.068355 udp 10.0.2.22 51868 <-> 94.155.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:20.933726 0.468840 udp 10.0.2.22 51868 <-> 183.179.52.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:21.934878 0.000000 udp 10.0.2.22 51868 -> 83.43.74.245 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:08:22.926819 0.043738 udp 10.0.2.22 51868 <-> 77.76.177.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:23.927672 0.050876 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:24.922369 3.001122 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 09:08:24.928988 0.047990 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:25.930947 0.078254 udp 10.0.2.22 51868 <-> 94.155.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:26.932219 0.000000 udp 10.0.2.22 51868 -> 174.59.159.254 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:08:27.933565 0.140165 udp 10.0.2.22 51868 <-> 111.91.58.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:28.935044 0.066817 udp 10.0.2.22 51868 <-> 90.229.139.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:29.927260 0.000000 udp 10.0.2.22 51868 -> 206.211.197.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:08:30.928637 0.000000 udp 10.0.2.22 51868 -> 178.127.106.40 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:08:31.929219 1.447835 udp 10.0.2.22 51868 <-> 186.176.98.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:31.929386 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:08:32.930757 0.048898 udp 10.0.2.22 51868 <-> 188.26.217.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:33.931943 0.260566 udp 10.0.2.22 51868 <-> 179.210.57.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:34.933633 0.315843 udp 10.0.2.22 51868 <-> 186.94.17.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:35.924719 0.424695 udp 10.0.2.22 51868 <-> 49.124.158.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:36.927161 0.000000 udp 10.0.2.22 51868 -> 151.29.245.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:08:37.928251 0.000000 udp 10.0.2.22 51868 -> 207.6.7.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:08:38.808841 0.000115 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:08:38.929445 0.367158 udp 10.0.2.22 51868 <-> 112.119.99.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:39.930797 2.307210 udp 10.0.2.22 51868 <-> 101.63.88.19 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:39.930967 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:08:40.932029 0.341915 udp 10.0.2.22 51868 <-> 186.58.98.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:42.925004 3.042738 udp 10.0.2.22 51868 <-> 89.137.126.33 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:43.926509 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:08:44.929715 0.034745 udp 10.0.2.22 51868 <-> 217.162.219.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:46.930857 0.042981 udp 10.0.2.22 51868 <-> 5.13.57.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:47.932425 0.442664 udp 10.0.2.22 51868 <-> 85.122.141.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:48.933952 4.112310 udp 10.0.2.22 51868 <-> 82.224.214.133 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:49.925087 0.024473 udp 10.0.2.22 51868 <-> 89.212.235.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:50.926390 0.122754 udp 10.0.2.22 51868 <-> 24.122.27.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:51.927991 0.160540 udp 10.0.2.22 51868 <-> 50.128.173.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:53.930963 0.110188 udp 10.0.2.22 51868 <-> 84.108.234.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:54.932401 0.150975 udp 10.0.2.22 51868 <-> 184.56.142.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:55.934273 1.028995 udp 10.0.2.22 51868 <-> 213.211.245.135 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:55.934427 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:08:57.926723 0.000000 udp 10.0.2.22 51868 -> 76.117.231.81 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:08:58.928464 0.222765 udp 10.0.2.22 51868 <-> 70.132.115.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:08:59.929268 0.075614 udp 10.0.2.22 51868 <-> 188.171.7.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:00.931009 1.128836 udp 10.0.2.22 51868 <-> 24.51.69.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:01.932725 0.000000 udp 10.0.2.22 51868 -> 114.45.22.188 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:09:02.934172 0.247381 udp 10.0.2.22 51868 <-> 63.147.47.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:03.925873 0.445815 udp 10.0.2.22 51868 <-> 75.197.131.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:04.926536 0.000000 udp 10.0.2.22 51868 -> 109.8.121.32 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:09:05.807818 0.000101 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:09:05.927984 0.231908 udp 10.0.2.22 51868 <-> 190.72.132.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:06.929950 0.113328 udp 10.0.2.22 51868 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:07.930892 0.037607 udp 10.0.2.22 51868 <-> 188.254.186.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:08.932556 0.000000 udp 10.0.2.22 51868 -> 86.121.77.25 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:09:09.933952 0.187563 udp 10.0.2.22 51868 <-> 24.49.203.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:10.925212 0.666128 udp 10.0.2.22 51868 <-> 117.224.37.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:11.926611 0.104452 udp 10.0.2.22 51868 <-> 77.40.71.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:12.928634 0.142521 udp 10.0.2.22 51868 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:13.929865 0.953797 udp 10.0.2.22 51868 <-> 178.239.112.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:14.930949 0.680559 udp 10.0.2.22 51868 <-> 202.29.179.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:15.932455 0.051304 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:16.934115 0.000000 udp 10.0.2.22 51868 -> 5.15.135.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:09:17.925840 0.000000 udp 10.0.2.22 51868 -> 177.104.237.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:09:18.926904 3.003910 udp 10.0.2.22 51868 -> 67.200.160.50 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:09:19.928381 0.085186 udp 10.0.2.22 51868 <-> 62.43.7.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:20.929600 2.003086 udp 10.0.2.22 51868 <-> 130.204.169.49 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:23.936681 0.276138 udp 10.0.2.22 51868 <-> 186.68.6.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:24.926943 0.000000 udp 10.0.2.22 51868 -> 78.174.145.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:09:25.927688 0.000000 udp 10.0.2.22 51868 -> 109.194.231.7 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:09:26.928439 0.117471 udp 10.0.2.22 51868 <-> 176.80.121.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:27.929882 0.646088 udp 10.0.2.22 51868 <-> 95.85.162.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:27.939892 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:09:28.931008 0.443082 udp 10.0.2.22 51868 <-> 187.106.245.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:29.932711 0.273936 udp 10.0.2.22 51868 <-> 190.19.95.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:30.934243 0.106390 udp 10.0.2.22 51868 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:31.925719 3.004371 udp 10.0.2.22 51868 -> 93.41.242.118 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:09:32.806640 0.000085 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:09:32.926650 0.071446 udp 10.0.2.22 51868 <-> 83.213.166.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:33.928197 0.000000 udp 10.0.2.22 51868 -> 189.93.77.176 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:09:35.931310 0.274581 udp 10.0.2.22 51868 <-> 190.19.95.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:36.933204 0.000000 udp 10.0.2.22 51868 -> 79.181.192.143 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:09:37.934957 0.043077 udp 10.0.2.22 51868 <-> 93.183.166.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:38.925973 0.155845 udp 10.0.2.22 51868 <-> 74.194.13.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:39.927165 0.000000 udp 10.0.2.22 51868 -> 178.207.65.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:09:40.928281 0.161148 udp 10.0.2.22 51868 <-> 71.94.98.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:41.929457 2.047608 udp 10.0.2.22 51868 <-> 5.13.57.253 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:42.931235 0.176169 udp 10.0.2.22 51868 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:44.934435 0.273560 udp 10.0.2.22 51868 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:45.930971 3.415061 udp 10.0.2.22 51868 <-> 186.210.21.146 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:46.930407 0.000000 udp 10.0.2.22 51868 -> 189.123.66.125 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:09:47.930618 0.236958 udp 10.0.2.22 51868 <-> 186.95.175.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:49.931148 0.347686 udp 10.0.2.22 51868 <-> 187.37.104.223 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:50.932926 0.403446 udp 10.0.2.22 51868 <-> 186.210.21.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:51.935299 0.146105 udp 10.0.2.22 51868 <-> 67.248.209.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:52.925921 1.152159 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:54.928501 0.716154 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:55.929981 0.348318 udp 10.0.2.22 51868 <-> 111.240.40.248 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:56.931607 1.751575 udp 10.0.2.22 51868 <-> 78.88.219.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:57.933513 0.033148 udp 10.0.2.22 51868 <-> 77.236.190.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:58.934716 0.138167 udp 10.0.2.22 51868 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:09:59.805934 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:09:59.925974 0.000000 udp 10.0.2.22 51868 -> 65.30.26.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:10:00.927194 2.164804 udp 10.0.2.22 51868 <-> 76.107.91.7 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:01.928445 3.072583 udp 10.0.2.22 51868 <-> 78.251.174.232 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:03.931325 0.117312 udp 10.0.2.22 51868 <-> 94.155.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:05.934499 0.156626 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:06.926072 0.000000 udp 10.0.2.22 51868 -> 111.240.40.248 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:10:07.927108 0.000000 udp 10.0.2.22 51868 -> 186.206.236.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:10:08.928897 1.683959 udp 10.0.2.22 51868 <-> 78.88.219.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:09.930054 0.150989 udp 10.0.2.22 51868 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:10.931342 0.147168 udp 10.0.2.22 51868 <-> 98.229.185.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:11.933577 0.154158 udp 10.0.2.22 51868 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:12.934405 0.370585 udp 10.0.2.22 51868 <-> 122.102.121.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:13.926178 0.138414 udp 10.0.2.22 51868 <-> 24.228.86.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:14.927298 0.000000 udp 10.0.2.22 51868 -> 24.75.190.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:10:15.928756 2.057729 udp 10.0.2.22 51868 <-> 95.168.240.36 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:16.929990 4.158414 udp 10.0.2.22 51868 <-> 74.193.135.44 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:18.933083 0.000000 udp 10.0.2.22 51868 -> 115.242.217.52 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:10:19.935110 1.167869 udp 10.0.2.22 51868 <-> 58.152.190.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:21.927816 0.171684 udp 10.0.2.22 51868 <-> 124.123.130.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:22.928948 0.312616 udp 10.0.2.22 51868 <-> 123.225.51.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:23.930004 0.054355 udp 10.0.2.22 51868 <-> 79.117.138.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:24.931440 0.059961 udp 10.0.2.22 51868 <-> 85.182.33.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:25.933323 0.168300 udp 10.0.2.22 51868 <-> 69.1.2.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:26.804099 0.000141 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:10:26.934512 0.172048 udp 10.0.2.22 51868 <-> 90.137.188.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:27.925930 0.000000 udp 10.0.2.22 51868 -> 79.117.151.112 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:10:28.927693 0.000000 udp 10.0.2.22 51868 -> 82.124.235.110 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:10:29.928862 0.891986 udp 10.0.2.22 51868 <-> 24.51.69.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:30.930510 0.096051 udp 10.0.2.22 51868 <-> 91.244.184.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:31.931656 0.162360 udp 10.0.2.22 51868 <-> 75.67.29.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:32.933528 0.000000 udp 10.0.2.22 51868 -> 77.76.177.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:10:33.934840 0.050059 udp 10.0.2.22 51868 <-> 95.76.49.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:34.933186 0.323185 udp 10.0.2.22 51868 <-> 219.114.23.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:35.930187 0.221176 udp 10.0.2.22 51868 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:36.928870 4.304024 udp 10.0.2.22 51868 <-> 190.79.50.14 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:37.930660 0.047578 udp 10.0.2.22 51868 <-> 77.78.246.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:38.931802 0.000000 udp 10.0.2.22 51868 -> 114.26.249.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:10:39.933928 0.137501 udp 10.0.2.22 51868 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:41.926059 0.980097 udp 10.0.2.22 51868 <-> 190.94.233.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:42.928025 0.000000 udp 10.0.2.22 51868 -> 188.25.55.101 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:10:43.928811 0.000000 udp 10.0.2.22 51868 -> 85.182.82.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:10:44.930498 2.002884 udp 10.0.2.22 51868 -> 172.243.148.76 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:10:45.931654 0.145952 udp 10.0.2.22 51868 <-> 98.229.185.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:47.934823 0.317960 udp 10.0.2.22 51868 <-> 190.79.50.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:48.926494 0.000000 udp 10.0.2.22 51868 -> 69.123.197.24 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:10:49.927637 0.000000 udp 10.0.2.22 51868 -> 85.182.82.249 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:10:50.929286 0.175331 udp 10.0.2.22 51868 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:51.930595 0.027605 udp 10.0.2.22 51868 <-> 178.48.110.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:52.932144 0.000000 udp 10.0.2.22 51868 -> 37.123.3.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:10:53.803205 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:10:53.933475 0.660384 udp 10.0.2.22 51868 <-> 178.148.154.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:10:54.935154 0.000000 udp 10.0.2.22 51868 -> 183.83.111.206 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:10:55.926087 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:10:56.927982 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:10:57.929210 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:10:58.931072 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:10:59.932240 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:11:00.933283 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:11:01.935139 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:11:02.926391 0.000000 udp 10.0.2.22 51868 -> 37.123.3.59 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:11:03.927879 3.004213 udp 10.0.2.22 51868 -> 77.47.75.54 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:11:04.929457 0.000000 udp 10.0.2.22 51868 -> 2.68.0.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:11:05.930860 2.051563 udp 10.0.2.22 51868 <-> 188.190.84.64 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:08.925040 0.000000 udp 10.0.2.22 51868 -> 178.24.44.198 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:11:09.926606 0.000000 udp 10.0.2.22 51868 -> 183.83.111.206 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:11:10.928084 0.189420 udp 10.0.2.22 51868 <-> 173.16.136.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:11.929086 0.184920 udp 10.0.2.22 51868 <-> 174.2.173.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:12.930686 0.148424 udp 10.0.2.22 51868 <-> 49.207.99.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:13.932082 0.032940 udp 10.0.2.22 51868 <-> 178.150.4.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:14.933774 0.308465 udp 10.0.2.22 51868 <-> 219.105.73.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:15.924997 0.065692 udp 10.0.2.22 51868 <-> 93.134.103.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:16.926303 0.000000 udp 10.0.2.22 51868 -> 89.141.65.240 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:11:17.929624 0.000000 udp 10.0.2.22 51868 -> 174.57.198.243 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:11:18.930021 0.285353 udp 10.0.2.22 51868 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:19.930989 0.110404 udp 10.0.2.22 51868 <-> 84.228.149.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:20.802079 0.000105 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:11:20.932426 0.176534 udp 10.0.2.22 51868 <-> 69.193.106.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:21.934131 0.000000 udp 10.0.2.22 51868 -> 2.178.116.55 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:11:22.925094 0.309311 udp 10.0.2.22 51868 <-> 219.105.73.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:23.927893 0.512809 udp 10.0.2.22 51868 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:24.928626 0.000000 udp 10.0.2.22 51868 -> 14.98.230.197 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:11:25.929826 0.124289 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:26.931039 0.155404 udp 10.0.2.22 51868 <-> 207.190.82.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:27.932251 3.042835 udp 10.0.2.22 51868 <-> 212.104.97.251 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:28.934129 0.482984 udp 10.0.2.22 51868 <-> 190.73.13.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:29.925161 0.000000 udp 10.0.2.22 51868 -> 79.35.110.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:11:31.928177 0.103852 udp 10.0.2.22 51868 <-> 77.40.71.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:32.929665 4.068716 udp 10.0.2.22 51868 <-> 2.68.0.64 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:33.930952 0.000000 udp 10.0.2.22 51868 -> 151.52.90.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:11:34.932183 0.000000 udp 10.0.2.22 51868 -> 178.148.154.56 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:11:35.934377 4.139092 udp 10.0.2.22 51868 <-> 108.183.176.48 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:37.926601 0.000000 udp 10.0.2.22 51868 -> 85.230.84.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:11:38.928226 0.000000 udp 10.0.2.22 51868 -> 207.161.36.243 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:11:40.930843 0.040703 udp 10.0.2.22 51868 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:41.932865 0.000000 udp 10.0.2.22 51868 -> 24.242.53.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:11:42.934878 0.163912 udp 10.0.2.22 51868 <-> 178.127.106.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:43.925214 0.068893 udp 10.0.2.22 51868 <-> 78.96.30.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:44.926653 0.125898 udp 10.0.2.22 51868 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:45.928478 1.285435 udp 10.0.2.22 51868 <-> 195.174.174.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:46.930044 0.000000 udp 10.0.2.22 51868 -> 79.13.223.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:11:47.801045 0.000093 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:11:47.931097 0.165495 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:48.932598 0.043813 udp 10.0.2.22 51868 <-> 5.13.91.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:49.934528 0.000000 udp 10.0.2.22 51868 -> 50.20.221.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:11:50.925611 0.125847 udp 10.0.2.22 51868 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:51.926830 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:11:52.928428 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:11:54.931068 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:11:55.932555 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:11:56.934540 0.000127 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:11:56.934667 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:11:57.926900 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:11:58.927339 1.410214 udp 10.0.2.22 51868 <-> 190.16.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:11:59.928135 0.000000 udp 10.0.2.22 51868 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:00.930093 0.197523 udp 10.0.2.22 51868 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:12:01.931194 0.038422 udp 10.0.2.22 51868 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:12:02.932818 0.000000 udp 10.0.2.22 51868 -> 109.67.249.137 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:03.934200 0.284271 udp 10.0.2.22 51868 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:12:04.925924 1.002479 udp 10.0.2.22 51868 <-> 201.21.179.155 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:12:06.928915 0.000000 udp 10.0.2.22 51868 -> 174.108.102.57 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:07.929831 0.380808 udp 10.0.2.22 51868 <-> 186.191.29.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:12:08.931069 0.000000 udp 10.0.2.22 51868 -> 108.221.48.130 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:09.932799 0.000000 udp 10.0.2.22 51868 -> 92.250.178.152 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:10.934434 3.995491 udp 10.0.2.22 51868 -> 181.168.168.150 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:11.926049 0.160275 udp 10.0.2.22 51868 <-> 24.201.162.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:12:13.928371 0.493216 udp 10.0.2.22 51868 <-> 124.247.137.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:12:14.799259 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:12:15.897824 0.000000 udp 10.0.2.22 51868 <- 92.250.178.152 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:15.931079 0.216912 udp 10.0.2.22 51868 <-> 189.193.106.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:12:16.932928 2.994264 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:17.934080 0.044042 udp 10.0.2.22 51868 <-> 188.246.74.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:12:18.926227 0.000131 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:18.926358 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:12:20.928760 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:21.930039 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:22.931353 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:23.932931 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:24.934999 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:25.926085 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:26.926934 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:27.928483 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:28.930082 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:29.931620 3.995491 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:30.932920 4.997353 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:31.934315 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:32.926092 0.027188 udp 10.0.2.22 51868 <-> 89.135.143.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:12:34.928576 0.000059 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:34.928635 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:12:36.931424 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:37.933260 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:38.934326 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:39.926466 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:40.927201 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:41.808454 0.000092 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:12:41.928656 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:42.930622 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:43.931673 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:44.932966 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:45.934602 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:46.926215 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:47.928149 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:48.928902 0.154055 udp 10.0.2.22 51868 <-> 50.165.123.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:12:49.930211 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:50.931559 0.000142 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:50.931701 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:12:51.933021 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:52.934948 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:53.925712 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:54.927285 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:55.928791 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:56.930362 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:57.931420 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:58.933158 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:12:59.935109 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:13:00.925891 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:13:01.927381 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:13:02.929025 4.005588 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:13:03.930540 0.030880 udp 10.0.2.22 51868 <-> 89.135.143.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:04.931322 0.975866 udp 10.0.2.22 51868 <-> 177.181.21.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:05.933450 0.037566 udp 10.0.2.22 51868 <-> 188.254.170.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:07.926096 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:13:08.807126 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:13:08.927780 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:13:09.928981 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:13:10.934495 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:13:11.934867 0.992113 udp 10.0.2.22 51868 <-> 201.235.95.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:12.935627 3.113310 udp 10.0.2.22 51868 <-> 82.229.226.245 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:13.935873 0.000000 udp 10.0.2.22 51868 -> 14.96.51.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:13:14.926191 0.000000 udp 10.0.2.22 51868 -> 95.85.162.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:13:16.929040 0.000000 udp 10.0.2.22 51868 -> 190.146.36.60 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:13:17.930505 0.000000 udp 10.0.2.22 51868 -> 216.121.192.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:13:18.932025 0.064750 udp 10.0.2.22 51868 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:19.933419 1.001594 udp 10.0.2.22 51868 <-> 190.105.68.61 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:21.926559 0.087555 udp 10.0.2.22 51868 <-> 2.92.89.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:22.927771 4.005921 udp 10.0.2.22 51868 -> 79.13.223.250 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:13:23.929004 0.037939 udp 10.0.2.22 51868 <-> 213.92.136.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:24.930709 0.000000 udp 10.0.2.22 51868 -> 94.197.247.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:13:25.932016 0.000000 udp 10.0.2.22 51868 -> 208.126.211.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:13:27.935033 0.157053 udp 10.0.2.22 51868 <-> 82.229.226.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:28.926137 0.000000 udp 10.0.2.22 51868 -> 216.121.192.14 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:13:29.927634 0.000000 udp 10.0.2.22 51868 -> 72.230.110.82 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:13:30.929146 0.000000 udp 10.0.2.22 51868 -> 85.204.248.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:13:31.241253 0.000000 udp 10.0.2.22 51868 <- 208.126.211.241 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:13:31.930719 0.162990 udp 10.0.2.22 51868 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:32.931987 0.628467 udp 10.0.2.22 51868 <-> 186.91.102.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:33.933319 0.037649 udp 10.0.2.22 51868 <-> 213.92.136.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:34.934965 0.473113 udp 10.0.2.22 51868 <-> 218.226.32.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:35.806175 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:13:35.926195 0.046139 udp 10.0.2.22 51868 <-> 5.13.91.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:36.928064 0.000000 udp 10.0.2.22 51868 -> 77.242.145.104 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:13:37.929650 2.468073 udp 10.0.2.22 51868 <-> 77.239.84.113 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:40.933640 0.117407 udp 10.0.2.22 51868 <-> 24.102.154.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:41.924837 0.000000 udp 10.0.2.22 51868 -> 14.97.53.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:13:42.926337 0.246722 udp 10.0.2.22 51868 <-> 186.92.164.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:43.927826 0.000000 udp 10.0.2.22 51868 -> 89.32.157.32 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:13:44.929445 0.654556 udp 10.0.2.22 51868 <-> 177.138.136.37 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:45.930658 0.026957 udp 10.0.2.22 51868 <-> 80.99.49.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:46.934618 0.000000 udp 10.0.2.22 51868 -> 46.208.124.228 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:13:47.933702 0.170602 udp 10.0.2.22 51868 <-> 76.125.64.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:48.925101 0.000000 udp 10.0.2.22 51868 -> 187.37.104.223 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:13:49.926294 0.023443 udp 10.0.2.22 51868 <-> 46.150.38.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:50.928061 0.159081 udp 10.0.2.22 51868 <-> 67.184.116.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:51.929528 0.310269 udp 10.0.2.22 51868 <-> 189.111.18.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:52.930947 0.250815 udp 10.0.2.22 51868 <-> 190.198.144.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:53.932399 0.274918 udp 10.0.2.22 51868 <-> 190.74.22.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:54.933485 0.305580 udp 10.0.2.22 51868 <-> 59.93.243.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:55.924942 0.163790 udp 10.0.2.22 51868 <-> 204.195.53.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:56.926402 0.345924 udp 10.0.2.22 51868 <-> 114.36.70.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:57.927756 0.130657 udp 10.0.2.22 51868 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:58.929376 0.346533 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:13:59.931029 0.000000 udp 10.0.2.22 51868 -> 92.86.68.100 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:14:00.931991 0.086584 udp 10.0.2.22 51868 <-> 176.194.179.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:01.934272 0.062363 udp 10.0.2.22 51868 <-> 93.80.67.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:02.805353 0.000114 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:14:02.925670 0.159140 udp 10.0.2.22 51868 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:03.926372 0.058767 udp 10.0.2.22 51868 <-> 79.118.203.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:04.928432 0.125370 udp 10.0.2.22 51868 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:05.929875 0.152570 udp 10.0.2.22 51868 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:06.930974 0.252066 udp 10.0.2.22 51868 <-> 177.227.173.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:07.932730 0.000000 udp 10.0.2.22 51868 -> 91.60.20.32 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:14:08.933978 4.252233 udp 10.0.2.22 51868 <-> 187.247.181.33 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:09.925083 0.207919 udp 10.0.2.22 51868 <-> 162.216.86.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:10.926459 0.211518 udp 10.0.2.22 51868 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:11.928472 0.000000 udp 10.0.2.22 51868 -> 69.249.42.35 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:14:13.931084 0.000000 udp 10.0.2.22 51868 -> 90.163.49.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:14:14.932231 0.126557 udp 10.0.2.22 51868 <-> 68.185.124.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:15.934412 0.162163 udp 10.0.2.22 51868 <-> 78.249.211.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:16.925070 0.153197 udp 10.0.2.22 51868 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:17.926579 0.000000 udp 10.0.2.22 51868 -> 200.84.71.48 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:14:18.928421 0.121575 udp 10.0.2.22 51868 <-> 173.238.152.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:19.929456 0.206576 udp 10.0.2.22 51868 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:20.930992 0.065340 udp 10.0.2.22 51868 <-> 188.2.216.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:21.932606 0.038956 udp 10.0.2.22 51868 <-> 46.10.187.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:22.934255 0.000000 udp 10.0.2.22 51868 -> 187.247.181.33 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:14:23.925316 0.330093 udp 10.0.2.22 51868 <-> 123.110.11.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:24.926661 0.058632 udp 10.0.2.22 51868 <-> 79.118.203.15 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:25.928234 0.120615 udp 10.0.2.22 51868 <-> 173.238.152.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:26.930146 0.143370 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:27.931068 0.242237 udp 10.0.2.22 51868 <-> 162.216.86.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:28.932813 0.155513 udp 10.0.2.22 51868 <-> 69.249.42.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:29.804146 0.000090 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:14:29.934373 0.207192 udp 10.0.2.22 51868 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:30.925128 0.000000 udp 10.0.2.22 51868 -> 187.247.181.33 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:14:31.926767 0.323304 udp 10.0.2.22 51868 <-> 123.110.11.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:32.928410 3.043090 udp 10.0.2.22 51868 <-> 46.10.187.32 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:33.929879 0.000000 udp 10.0.2.22 51868 -> 91.60.20.32 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:14:34.930922 1.424864 udp 10.0.2.22 51868 <-> 200.84.71.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:36.934471 0.000000 udp 10.0.2.22 51868 -> 162.216.86.229 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:14:37.925955 0.037462 udp 10.0.2.22 51868 <-> 87.96.140.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:38.928005 0.321979 udp 10.0.2.22 51868 <-> 123.110.11.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:39.929036 0.000000 udp 10.0.2.22 51868 -> 75.147.243.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:14:40.930065 0.145165 udp 10.0.2.22 51868 <-> 85.230.174.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:41.931044 0.406381 udp 10.0.2.22 51868 <-> 115.253.96.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:42.932780 0.214778 udp 10.0.2.22 51868 <-> 50.193.233.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:43.934388 0.280577 udp 10.0.2.22 51868 <-> 189.33.207.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:44.925962 2.103327 udp 10.0.2.22 51868 <-> 85.86.73.137 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:45.927062 0.048947 udp 10.0.2.22 51868 <-> 78.131.17.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:47.929878 0.000000 udp 10.0.2.22 51868 -> 92.86.42.111 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:14:48.931175 0.340701 udp 10.0.2.22 51868 <-> 114.43.208.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:49.932912 0.000000 udp 10.0.2.22 51868 -> 111.254.125.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:14:50.934592 0.077450 udp 10.0.2.22 51868 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:51.926228 0.096982 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:52.926947 0.581279 udp 10.0.2.22 51868 <-> 77.47.75.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:53.928950 0.000000 udp 10.0.2.22 51868 -> 37.44.66.147 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:14:54.930009 0.077766 udp 10.0.2.22 51868 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:55.931189 4.678766 udp 10.0.2.22 51868 <-> 181.165.132.237 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:56.802305 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:14:56.932909 0.000000 udp 10.0.2.22 51868 -> 95.74.171.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:14:57.935117 0.254984 udp 10.0.2.22 51868 <-> 64.250.220.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:14:58.925959 0.113170 udp 10.0.2.22 51868 <-> 87.53.130.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:00.928600 1.609124 udp 10.0.2.22 51868 <-> 50.80.122.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:01.929994 0.000000 udp 10.0.2.22 51868 -> 85.232.150.7 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:15:02.931639 0.181873 udp 10.0.2.22 51868 <-> 88.236.248.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:03.933180 0.000000 udp 10.0.2.22 51868 -> 179.44.1.228 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:15:04.934727 0.361364 udp 10.0.2.22 51868 <-> 184.167.18.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:05.925977 0.000000 udp 10.0.2.22 51868 -> 213.92.136.25 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:15:06.927020 0.042982 udp 10.0.2.22 51868 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:07.928940 0.134498 udp 10.0.2.22 51868 <-> 94.197.247.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:08.929882 0.387314 udp 10.0.2.22 51868 <-> 186.94.169.232 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:09.931544 0.000000 udp 10.0.2.22 51868 -> 206.223.195.232 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:15:10.933120 0.038137 udp 10.0.2.22 51868 <-> 86.121.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:11.934600 0.171562 udp 10.0.2.22 51868 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:12.926747 0.000000 udp 10.0.2.22 51868 -> 24.84.162.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:15:13.927092 0.027767 udp 10.0.2.22 51868 <-> 80.98.243.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:14.929096 0.183913 udp 10.0.2.22 51868 <-> 96.27.145.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:15.929999 0.085508 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:16.931927 0.292062 udp 10.0.2.22 51868 <-> 189.33.207.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:17.933204 2.176766 udp 10.0.2.22 51868 <-> 27.4.142.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:18.934541 0.178792 udp 10.0.2.22 51868 <-> 68.117.185.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:19.926038 0.000000 udp 10.0.2.22 51868 -> 187.2.136.153 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:15:20.927252 0.276161 udp 10.0.2.22 51868 <-> 178.173.226.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:21.928944 0.326046 udp 10.0.2.22 51868 <-> 70.132.115.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:22.930233 0.029679 udp 10.0.2.22 51868 <-> 89.134.236.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:23.801083 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:15:23.931528 0.957873 udp 10.0.2.22 51868 <-> 190.203.207.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:24.933479 0.000000 udp 10.0.2.22 51868 -> 79.35.110.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:15:25.934738 0.077374 udp 10.0.2.22 51868 <-> 94.153.61.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:26.925877 0.000000 udp 10.0.2.22 51868 -> 151.54.37.227 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:15:27.927106 0.113184 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:28.928877 0.000000 udp 10.0.2.22 51868 -> 24.102.154.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:15:29.930405 0.158177 udp 10.0.2.22 51868 <-> 74.129.39.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:30.931645 1.045638 udp 10.0.2.22 51868 <-> 188.24.16.174 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:31.945868 3.001360 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 09:15:32.934667 0.068929 udp 10.0.2.22 51868 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:33.927013 0.074045 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:34.927236 1.218850 udp 10.0.2.22 51868 <-> 82.245.78.248 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:36.930183 0.000000 udp 10.0.2.22 51868 -> 204.69.115.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:15:37.931652 0.000000 udp 10.0.2.22 51868 -> 118.236.118.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:15:38.933211 0.291626 udp 10.0.2.22 51868 <-> 190.75.56.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:38.953181 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:15:39.934918 0.412645 udp 10.0.2.22 51868 <-> 62.93.121.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:40.926239 0.175286 udp 10.0.2.22 51868 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:41.927642 0.353295 udp 10.0.2.22 51868 <-> 118.166.237.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:42.929011 0.000000 udp 10.0.2.22 51868 -> 71.43.109.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:15:43.930637 0.043679 udp 10.0.2.22 51868 <-> 5.15.195.36 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:44.931935 0.182911 udp 10.0.2.22 51868 <-> 75.115.165.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:45.933182 0.000000 udp 10.0.2.22 51868 -> 192.95.208.228 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:15:46.935000 0.060498 udp 10.0.2.22 51868 <-> 188.27.165.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:46.955077 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:15:47.926657 0.000000 udp 10.0.2.22 51868 -> 68.107.150.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:15:48.927561 0.165346 udp 10.0.2.22 51868 <-> 173.174.185.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:15:49.928965 0.000069 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:15:49.929034 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:15:50.804019 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:15:50.934313 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:15:51.934479 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:15:52.934733 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:15:53.936002 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:15:54.926258 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:15:55.927765 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:15:56.928974 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:15:57.930776 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:15:58.932160 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:15:59.934200 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:00.934987 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:01.926387 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:02.927848 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:02.957781 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:16:03.929498 1.366256 udp 10.0.2.22 51868 <-> 201.213.50.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:16:04.930537 0.000000 udp 10.0.2.22 51868 -> 89.142.152.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:05.932079 0.302468 udp 10.0.2.22 51868 <-> 201.214.63.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:16:06.933546 0.000000 udp 10.0.2.22 51868 -> 112.118.16.39 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:07.935226 0.164579 udp 10.0.2.22 51868 <-> 173.174.185.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:16:08.926503 0.120329 udp 10.0.2.22 51868 <-> 68.107.150.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:16:09.928063 0.000000 udp 10.0.2.22 51868 -> 14.97.53.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:10.929527 0.166286 udp 10.0.2.22 51868 <-> 24.242.53.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:16:11.930669 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:12.932183 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:13.933677 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:14.924752 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:15.926389 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:16.927696 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:17.809201 0.000093 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:16:17.929757 0.000046 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:17.929803 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:16:18.930769 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:19.932072 0.153393 udp 10.0.2.22 51868 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:16:20.933854 0.282526 udp 10.0.2.22 51868 <-> 126.60.25.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:16:21.925763 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:23.928314 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:24.929575 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:25.930842 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:26.932198 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:27.933469 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:28.925107 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:29.926437 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:30.928628 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:31.929303 0.000061 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:31.929364 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:16:32.930795 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:33.932212 1.325293 udp 10.0.2.22 51868 <-> 201.214.63.238 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:16:34.963987 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:16:35.925093 0.384845 udp 10.0.2.22 51868 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:16:36.926648 0.151708 udp 10.0.2.22 51868 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:16:37.927852 0.082348 udp 10.0.2.22 51868 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:16:38.929528 0.000000 udp 10.0.2.22 51868 -> 85.232.150.7 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:39.930942 0.000000 udp 10.0.2.22 51868 -> 14.97.53.251 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:40.932238 0.000000 udp 10.0.2.22 51868 -> 112.118.16.39 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:41.934158 0.000000 udp 10.0.2.22 51868 -> 181.74.134.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:42.925926 0.282947 udp 10.0.2.22 51868 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:16:43.926588 1.649681 udp 10.0.2.22 51868 <-> 201.235.95.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:16:44.807741 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:16:44.927975 0.033600 udp 10.0.2.22 51868 <-> 84.119.41.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:16:45.929193 0.176394 udp 10.0.2.22 51868 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:16:46.930999 2.003086 udp 10.0.2.22 51868 -> 91.187.95.9 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:47.932285 0.069471 udp 10.0.2.22 51868 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:16:49.925591 0.325571 udp 10.0.2.22 51868 <-> 183.87.71.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:16:50.926597 0.165473 udp 10.0.2.22 51868 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:16:51.928612 4.168598 udp 10.0.2.22 51868 <-> 98.193.134.246 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:16:52.929626 0.000000 udp 10.0.2.22 51868 -> 166.159.168.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:16:53.933011 3.022585 udp 10.0.2.22 51868 <-> 80.98.243.30 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:16:54.933718 0.329795 udp 10.0.2.22 51868 <-> 183.87.71.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:16:57.926772 0.310798 udp 10.0.2.22 51868 <-> 150.162.192.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:16:58.928164 0.307967 udp 10.0.2.22 51868 <-> 218.152.217.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:16:59.929578 0.032569 udp 10.0.2.22 51868 <-> 212.104.97.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:00.930818 0.369720 udp 10.0.2.22 51868 <-> 186.123.130.253 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:01.932292 0.176232 udp 10.0.2.22 51868 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:02.933815 0.130542 udp 10.0.2.22 51868 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:03.925846 0.061079 udp 10.0.2.22 51868 <-> 86.124.236.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:04.926626 0.028617 udp 10.0.2.22 51868 <-> 80.99.49.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:05.928269 0.080994 udp 10.0.2.22 51868 <-> 84.90.235.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:06.929877 0.000000 udp 10.0.2.22 51868 -> 2.120.184.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:17:07.931022 0.306415 udp 10.0.2.22 51868 -> 122.17.73.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:17:08.237437 0.000000 icmp 122.17.73.2 0x0303 -> 10.0.2.22 0x5040 URP 192 1 70 flow=Background 1970/01/01 09:17:08.932452 0.000000 udp 10.0.2.22 51868 -> 5.190.123.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:17:09.934029 0.161850 udp 10.0.2.22 51868 <-> 178.123.233.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:10.925629 0.410112 udp 10.0.2.22 51868 <-> 190.78.154.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:11.806414 0.000118 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:17:11.926713 0.000000 udp 10.0.2.22 51868 -> 62.163.10.209 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:17:12.928397 0.548153 udp 10.0.2.22 51868 <-> 201.208.23.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:13.929864 0.456865 udp 10.0.2.22 51868 <-> 177.83.18.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:14.931144 0.061422 udp 10.0.2.22 51868 <-> 78.240.64.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:15.932574 0.000000 udp 10.0.2.22 51868 -> 178.125.16.138 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:17:16.934881 0.040104 udp 10.0.2.22 51868 <-> 5.15.9.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:17.925385 0.000000 udp 10.0.2.22 51868 -> 37.8.223.128 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:17:18.926934 0.107494 udp 10.0.2.22 51868 <-> 109.54.162.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:19.928601 0.202309 udp 10.0.2.22 51868 <-> 71.192.132.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:20.930027 0.181816 udp 10.0.2.22 51868 <-> 207.34.248.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:21.931180 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:17:22.932885 0.000000 udp 10.0.2.22 51868 -> 82.135.201.132 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:17:23.934715 0.041302 udp 10.0.2.22 51868 <-> 5.15.9.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:24.925798 0.306534 udp 10.0.2.22 51868 <-> 110.134.54.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:25.927132 0.000000 udp 10.0.2.22 51868 -> 94.21.162.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:17:26.928741 0.248585 udp 10.0.2.22 51868 <-> 123.242.183.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:27.930005 0.918704 udp 10.0.2.22 51868 <-> 181.165.163.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:28.931045 0.333045 udp 10.0.2.22 51868 <-> 187.35.225.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:29.933022 0.170429 udp 10.0.2.22 51868 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:30.934374 0.000000 udp 10.0.2.22 51868 -> 85.94.113.54 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:17:31.925935 0.900584 udp 10.0.2.22 51868 <-> 203.192.241.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:32.926988 0.000000 udp 10.0.2.22 51868 -> 80.216.234.47 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:17:33.928538 0.061325 udp 10.0.2.22 51868 <-> 62.43.7.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:34.929699 4.997272 udp 10.0.2.22 51868 <-> 188.167.119.51 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:35.931262 0.172375 udp 10.0.2.22 51868 <-> 178.78.186.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:36.933286 1.479249 udp 10.0.2.22 51868 <-> 186.176.98.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:37.935131 4.996407 udp 10.0.2.22 51868 -> 186.136.206.139 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:17:38.805745 0.000109 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:17:38.925850 0.000000 udp 10.0.2.22 51868 -> 76.92.224.52 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:17:40.021691 0.000000 udp 10.0.2.22 51868 <- 188.167.119.51 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:17:40.928628 1.130330 udp 10.0.2.22 51868 <-> 62.43.7.49 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:43.864937 0.000000 udp 10.0.2.22 51868 <- 186.136.206.139 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:17:43.933030 0.613713 udp 10.0.2.22 51868 <-> 116.75.22.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:44.934604 0.625951 udp 10.0.2.22 51868 <-> 188.167.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:45.926261 0.000000 udp 10.0.2.22 51868 -> 192.95.211.101 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:17:46.927225 1.322500 udp 10.0.2.22 51868 <-> 190.204.102.101 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:48.929994 0.050831 udp 10.0.2.22 51868 <-> 88.222.156.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:49.931370 0.050869 udp 10.0.2.22 51868 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:50.934282 0.277023 udp 10.0.2.22 51868 <-> 75.193.62.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:51.935973 0.151153 udp 10.0.2.22 51868 <-> 174.99.98.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:52.925867 0.153579 udp 10.0.2.22 51868 <-> 50.165.123.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:53.927030 0.008771 udp 10.0.2.22 51868 <-> 152.66.219.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:54.928920 0.028118 udp 10.0.2.22 51868 <-> 78.42.232.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:55.930152 0.300535 udp 10.0.2.22 51868 <-> 186.9.15.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:56.931772 0.336438 udp 10.0.2.22 51868 <-> 114.40.221.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:57.933671 0.000000 udp 10.0.2.22 51868 -> 84.236.106.206 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:17:58.934573 0.166762 udp 10.0.2.22 51868 <-> 173.30.6.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:17:59.925979 0.034690 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:00.927124 0.084864 udp 10.0.2.22 51868 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:01.928774 0.008361 udp 10.0.2.22 51868 <-> 152.66.219.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:02.930567 0.217960 udp 10.0.2.22 51868 <-> 189.193.82.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:03.931909 4.996922 udp 10.0.2.22 51868 <-> 95.87.201.73 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:04.933404 0.345231 udp 10.0.2.22 51868 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:05.804526 0.000097 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:18:05.934728 0.150715 udp 10.0.2.22 51868 <-> 75.149.216.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:06.926342 0.285792 udp 10.0.2.22 51868 <-> 201.214.63.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:07.927227 0.000000 udp 10.0.2.22 51868 -> 24.89.222.123 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:18:08.975614 0.000000 udp 10.0.2.22 51868 <- 95.87.201.73 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:18:09.930584 0.008262 udp 10.0.2.22 51868 <-> 152.66.219.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:10.931814 0.152752 udp 10.0.2.22 51868 <-> 50.165.123.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:11.933063 0.287052 udp 10.0.2.22 51868 <-> 201.214.63.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:12.934259 0.041471 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:13.926304 0.150883 udp 10.0.2.22 51868 <-> 75.149.216.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:14.927445 0.226598 udp 10.0.2.22 51868 <-> 180.148.54.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:15.928980 0.098831 udp 10.0.2.22 51868 <-> 176.212.42.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:16.930483 0.000000 udp 10.0.2.22 51868 -> 178.221.175.243 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:18:17.931250 0.053298 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:18.933505 0.065212 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:19.935060 0.086472 udp 10.0.2.22 51868 <-> 77.239.28.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:20.926071 0.000000 udp 10.0.2.22 51868 -> 188.192.188.124 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:18:21.927769 0.000000 udp 10.0.2.22 51868 -> 186.92.24.70 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:18:22.929190 0.821689 udp 10.0.2.22 51868 <-> 188.167.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:23.930320 0.145322 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:24.931734 0.209996 udp 10.0.2.22 51868 <-> 98.234.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:25.936211 0.373230 udp 10.0.2.22 51868 <-> 201.211.111.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:26.936262 0.051528 udp 10.0.2.22 51868 <-> 78.61.221.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:27.926736 0.137630 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:28.928030 0.087419 udp 10.0.2.22 51868 <-> 78.177.216.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:29.929115 0.000000 udp 10.0.2.22 51868 -> 187.25.181.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:18:30.930718 0.240339 udp 10.0.2.22 51868 <-> 50.113.56.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:31.931945 0.086754 udp 10.0.2.22 51868 <-> 82.250.208.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:32.803197 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:18:32.933172 0.062978 udp 10.0.2.22 51868 <-> 82.79.212.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:33.935244 0.241944 udp 10.0.2.22 51868 <-> 177.227.173.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:34.926501 0.066977 udp 10.0.2.22 51868 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:35.927594 0.176487 udp 10.0.2.22 51868 <-> 184.49.10.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:36.928942 0.152109 udp 10.0.2.22 51868 <-> 96.28.143.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:37.930812 0.000000 udp 10.0.2.22 51868 -> 14.97.198.159 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:18:38.932043 0.000000 udp 10.0.2.22 51868 -> 70.119.17.154 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:18:39.933946 0.304306 udp 10.0.2.22 51868 <-> 211.51.37.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:40.935666 0.000000 udp 10.0.2.22 51868 -> 217.18.251.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:18:41.926147 0.000000 udp 10.0.2.22 51868 -> 91.116.202.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:18:42.928343 0.000000 udp 10.0.2.22 51868 -> 37.214.222.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:18:43.929199 0.354175 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:44.930580 0.060052 udp 10.0.2.22 51868 <-> 188.2.254.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:45.932316 0.032187 udp 10.0.2.22 51868 <-> 89.253.133.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:46.934154 0.270221 udp 10.0.2.22 51868 <-> 177.80.55.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:47.924830 0.000000 udp 10.0.2.22 51868 -> 95.244.159.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:18:48.926456 0.000000 udp 10.0.2.22 51868 -> 5.14.170.91 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:18:49.927868 0.000000 udp 10.0.2.22 51868 -> 174.108.49.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:18:50.929577 0.179776 udp 10.0.2.22 51868 <-> 74.62.164.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:51.930711 0.079200 udp 10.0.2.22 51868 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:52.932227 0.127026 udp 10.0.2.22 51868 <-> 75.110.81.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:53.934089 0.115576 udp 10.0.2.22 51868 <-> 70.184.172.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:54.925177 0.000000 udp 10.0.2.22 51868 -> 190.204.12.77 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:18:55.926651 0.588246 udp 10.0.2.22 51868 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:56.927932 0.153984 udp 10.0.2.22 51868 <-> 74.65.45.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:57.929198 0.171675 udp 10.0.2.22 51868 <-> 24.202.102.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:58.930941 0.134363 udp 10.0.2.22 51868 <-> 71.195.64.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:18:59.801863 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:18:59.932036 0.165109 udp 10.0.2.22 51868 <-> 98.240.160.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:00.933719 0.952558 udp 10.0.2.22 51868 <-> 31.185.115.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:01.927040 0.065285 udp 10.0.2.22 51868 <-> 79.119.248.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:02.928563 0.242155 udp 10.0.2.22 51868 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:03.928935 0.000000 udp 10.0.2.22 51868 -> 187.69.61.47 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:19:04.929157 0.337422 udp 10.0.2.22 51868 <-> 14.53.244.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:05.930737 0.000000 udp 10.0.2.22 51868 -> 67.86.61.233 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:19:06.932218 0.059564 udp 10.0.2.22 51868 <-> 5.43.104.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:07.933992 0.000000 udp 10.0.2.22 51868 -> 178.166.124.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:19:08.924980 0.150429 udp 10.0.2.22 51868 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:09.927100 4.040638 udp 10.0.2.22 51868 <-> 77.23.138.235 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:10.928362 4.147636 udp 10.0.2.22 51868 <-> 68.49.199.235 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:11.929285 1.157473 udp 10.0.2.22 51868 <-> 74.132.164.239 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:15.925851 0.355602 udp 10.0.2.22 51868 <-> 177.230.92.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:16.926484 0.175227 udp 10.0.2.22 51868 <-> 116.73.207.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:17.928141 0.000000 udp 10.0.2.22 51868 -> 67.21.98.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:19:18.929972 0.000000 udp 10.0.2.22 51868 -> 115.240.20.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:19:19.931145 0.190609 udp 10.0.2.22 51868 <-> 66.115.90.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:20.932307 0.214957 udp 10.0.2.22 51868 <-> 99.155.215.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:21.933761 0.000000 udp 10.0.2.22 51868 -> 50.70.157.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:19:22.925665 0.154383 udp 10.0.2.22 51868 <-> 67.184.116.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:23.926609 0.214917 udp 10.0.2.22 51868 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:24.928200 0.142721 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:25.929686 0.000000 udp 10.0.2.22 51868 -> 98.242.83.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:19:26.800798 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:19:26.931037 4.135557 udp 10.0.2.22 51868 <-> 173.80.197.248 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:27.932485 0.039220 udp 10.0.2.22 51868 <-> 178.165.27.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:28.934085 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:19:29.925120 0.208981 udp 10.0.2.22 51868 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:31.928113 0.000000 udp 10.0.2.22 51868 -> 190.203.207.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:19:32.929625 0.229705 udp 10.0.2.22 51868 <-> 184.162.187.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:33.931179 0.147769 udp 10.0.2.22 51868 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:34.932432 0.138461 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:35.934083 0.302444 udp 10.0.2.22 51868 <-> 201.1.80.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:36.926205 0.157045 udp 10.0.2.22 51868 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:37.927039 0.000000 udp 10.0.2.22 51868 -> 94.168.110.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:19:38.928503 0.356119 udp 10.0.2.22 51868 <-> 114.47.197.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:39.930669 0.027099 udp 10.0.2.22 51868 <-> 158.58.240.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:40.930946 0.045077 udp 10.0.2.22 51868 <-> 109.128.200.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:41.932536 0.503470 udp 10.0.2.22 51868 <-> 186.91.102.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:42.934563 0.055548 udp 10.0.2.22 51868 <-> 86.125.174.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:43.926218 0.059905 udp 10.0.2.22 51868 <-> 77.122.228.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:44.926664 0.184752 udp 10.0.2.22 51868 <-> 208.104.198.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:45.928856 4.005415 udp 10.0.2.22 51868 -> 75.84.97.247 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:19:46.930222 0.165044 udp 10.0.2.22 51868 <-> 78.249.211.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:47.931247 0.151718 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:48.932513 0.192640 udp 10.0.2.22 51868 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:50.926076 0.295892 udp 10.0.2.22 51868 <-> 219.115.10.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:51.926897 0.160048 udp 10.0.2.22 51868 <-> 184.91.17.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:52.928437 0.310165 udp 10.0.2.22 51868 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:53.799672 0.000090 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:19:53.929988 0.724034 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:54.931040 0.191230 udp 10.0.2.22 51868 <-> 204.195.53.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:55.932828 0.000000 udp 10.0.2.22 51868 -> 88.6.152.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:19:56.934586 0.515930 udp 10.0.2.22 51868 <-> 188.167.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:57.926084 0.356924 udp 10.0.2.22 51868 <-> 221.151.31.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:19:58.930069 1.145625 udp 10.0.2.22 51868 <-> 24.183.237.18 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:20:00.929997 0.297085 udp 10.0.2.22 51868 <-> 183.87.73.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:20:01.931261 0.017739 udp 10.0.2.22 51868 <-> 77.175.74.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:20:02.933008 0.903958 udp 10.0.2.22 51868 <-> 116.73.71.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:20:04.925926 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:05.927145 0.000085 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:05.927230 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:20:06.928332 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:07.929736 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:08.931288 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:09.933312 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:10.934535 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:11.925787 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:12.926861 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:13.928397 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:14.930171 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:15.931372 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:16.932952 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:17.934572 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:18.928842 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:19.929109 0.275648 udp 10.0.2.22 51868 <-> 201.46.169.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:20:20.809819 0.000120 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:20:20.929992 0.000071 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:20.930063 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:20:21.929981 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:22.931458 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:23.932796 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:24.934254 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:25.926180 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:26.926883 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:27.928670 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:28.929870 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:29.931968 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:30.933293 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:31.934860 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:32.926424 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:33.928218 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:35.930368 0.291428 udp 10.0.2.22 51868 <-> 27.98.56.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:20:36.931539 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:37.932937 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:38.934856 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:39.926106 0.000064 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:39.926170 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:20:40.927292 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:42.930162 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:43.931995 0.081717 udp 10.0.2.22 51868 <-> 88.82.203.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:20:44.933605 0.177126 udp 10.0.2.22 51868 <-> 24.217.52.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:20:45.935678 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:46.926388 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:47.807116 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:20:47.927282 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:48.929600 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:49.930295 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:50.931862 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:20:51.933018 0.342718 udp 10.0.2.22 51868 <-> 62.83.45.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:20:52.934735 0.206931 udp 10.0.2.22 51868 <-> 70.45.158.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:20:53.926035 0.514622 udp 10.0.2.22 51868 <-> 180.215.39.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:20:54.927690 0.880906 udp 10.0.2.22 51868 <-> 95.238.36.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:20:55.929008 0.156680 udp 10.0.2.22 51868 <-> 98.253.230.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:20:56.930169 2.015576 udp 10.0.2.22 51868 <-> 178.24.48.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:20:57.932127 0.338465 udp 10.0.2.22 51868 <-> 186.58.136.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:20:58.933112 0.034818 udp 10.0.2.22 51868 <-> 78.137.60.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:20:59.934801 0.181821 udp 10.0.2.22 51868 <-> 97.85.182.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:00.926130 0.070310 udp 10.0.2.22 51868 <-> 78.72.59.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:01.927491 0.260699 udp 10.0.2.22 51868 <-> 200.136.9.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:02.928926 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:21:03.930609 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:21:04.931821 0.318416 udp 10.0.2.22 51868 <-> 58.140.164.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:05.934398 0.356332 udp 10.0.2.22 51868 <-> 86.56.0.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:06.935834 0.000000 udp 10.0.2.22 51868 -> 95.74.171.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:21:07.926825 0.062385 udp 10.0.2.22 51868 <-> 84.55.21.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:08.927292 0.329424 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:09.929263 0.153970 udp 10.0.2.22 51868 <-> 24.179.39.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:10.930622 0.324901 udp 10.0.2.22 51868 <-> 190.198.217.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:11.931913 0.000000 udp 10.0.2.22 51868 -> 113.193.96.149 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:21:12.933197 0.000000 udp 10.0.2.22 51868 -> 24.77.20.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:21:13.935156 0.444793 udp 10.0.2.22 51868 <-> 200.127.30.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:14.806017 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:21:14.926291 0.074365 udp 10.0.2.22 51868 <-> 5.12.11.55 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:15.928032 0.045795 udp 10.0.2.22 51868 <-> 80.3.188.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:16.929284 0.345703 udp 10.0.2.22 51868 <-> 112.170.227.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:16.999298 0.000000 udp 10.0.2.22 51868 <- 113.193.96.149 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:21:17.930890 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:21:18.932177 0.059717 udp 10.0.2.22 51868 <-> 79.118.203.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:19.935109 0.032988 udp 10.0.2.22 51868 <-> 77.236.190.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:20.926024 0.054793 udp 10.0.2.22 51868 <-> 94.231.172.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:21.927180 0.616950 udp 10.0.2.22 51868 <-> 174.2.173.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:22.928576 0.423993 udp 10.0.2.22 51868 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:23.929007 3.004627 udp 10.0.2.22 51868 -> 24.86.244.19 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:21:24.930628 0.000000 udp 10.0.2.22 51868 -> 37.213.106.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:21:25.932187 0.183270 udp 10.0.2.22 51868 <-> 188.127.96.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:27.924740 3.995202 udp 10.0.2.22 51868 <-> 200.91.50.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:28.926707 0.040052 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:29.928223 0.000000 udp 10.0.2.22 51868 -> 24.86.244.19 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:21:30.929211 0.000000 udp 10.0.2.22 51868 -> 71.80.71.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:21:31.930873 0.176221 udp 10.0.2.22 51868 <-> 173.23.208.52 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:32.932037 0.144951 udp 10.0.2.22 51868 <-> 108.183.176.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:33.933433 4.997646 udp 10.0.2.22 51868 <-> 79.113.180.199 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:34.925011 0.138971 udp 10.0.2.22 51868 <-> 79.2.136.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:35.926550 0.000000 udp 10.0.2.22 51868 -> 92.239.31.95 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:21:36.927910 1.313545 udp 10.0.2.22 51868 <-> 202.95.61.104 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:39.932203 0.177609 udp 10.0.2.22 51868 <-> 74.216.190.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:40.933768 0.156421 udp 10.0.2.22 51868 <-> 79.2.136.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:41.807985 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:21:41.928385 0.347761 udp 10.0.2.22 51868 <-> 58.64.63.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:42.929271 0.313187 udp 10.0.2.22 51868 <-> 202.95.61.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:43.930299 0.171377 udp 10.0.2.22 51868 <-> 71.63.13.85 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:44.933445 0.138800 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:45.932593 0.297908 udp 10.0.2.22 51868 <-> 190.36.188.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:46.932310 0.048124 udp 10.0.2.22 51868 <-> 82.22.216.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:47.934105 0.537686 udp 10.0.2.22 51868 <-> 88.156.7.146 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:48.925207 0.000000 udp 10.0.2.22 51868 -> 85.230.84.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:21:49.926606 0.297651 udp 10.0.2.22 51868 <-> 72.239.246.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:50.928145 0.110841 udp 10.0.2.22 51868 <-> 193.68.211.45 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:51.929676 0.206198 udp 10.0.2.22 51868 <-> 66.237.94.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:52.931106 0.136884 udp 10.0.2.22 51868 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:53.932338 0.365694 udp 10.0.2.22 51868 <-> 186.123.130.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:54.934035 0.044519 udp 10.0.2.22 51868 <-> 89.136.139.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:55.925146 0.181875 udp 10.0.2.22 51868 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:56.926809 0.000000 udp 10.0.2.22 51868 -> 190.51.21.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:21:57.928374 0.208343 udp 10.0.2.22 51868 <-> 66.237.94.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:21:58.929510 0.000000 udp 10.0.2.22 51868 -> 80.54.213.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:21:59.931060 3.076477 udp 10.0.2.22 51868 <-> 78.251.143.19 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:00.932431 0.034721 udp 10.0.2.22 51868 <-> 213.92.136.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:03.926518 0.054825 udp 10.0.2.22 51868 <-> 86.123.120.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:04.928234 0.000000 udp 10.0.2.22 51868 -> 176.18.251.86 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:22:05.929591 0.141048 udp 10.0.2.22 51868 <-> 184.56.26.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:06.931055 0.194996 udp 10.0.2.22 51868 <-> 69.68.146.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:07.932639 0.000000 udp 10.0.2.22 51868 -> 188.25.105.195 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:22:08.803915 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:22:08.933989 0.013728 udp 10.0.2.22 51868 <-> 188.230.151.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:09.926099 0.415836 udp 10.0.2.22 51868 <-> 181.225.32.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:10.926518 0.127146 udp 10.0.2.22 51868 <-> 50.70.177.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:11.928296 4.997657 udp 10.0.2.22 51868 -> 80.97.242.19 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:22:12.929608 0.000000 udp 10.0.2.22 51868 -> 188.24.16.174 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:22:13.931096 0.052158 udp 10.0.2.22 51868 <-> 78.73.215.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:14.932439 0.000000 udp 10.0.2.22 51868 -> 50.55.237.122 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:22:15.933803 0.000000 udp 10.0.2.22 51868 -> 190.39.122.165 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:22:17.927347 0.159942 udp 10.0.2.22 51868 <-> 72.231.172.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:18.928123 0.000000 udp 10.0.2.22 51868 -> 69.176.180.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:22:19.929903 0.000000 udp 10.0.2.22 51868 -> 80.97.242.19 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:22:20.931134 0.069198 udp 10.0.2.22 51868 <-> 95.86.47.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:21.932501 0.000000 udp 10.0.2.22 51868 -> 41.211.70.44 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:22:22.934800 2.014981 udp 10.0.2.22 51868 <-> 46.35.110.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:23.927003 0.206446 udp 10.0.2.22 51868 <-> 66.237.94.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:24.927338 0.294013 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:25.928300 0.173610 udp 10.0.2.22 51868 <-> 24.202.102.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:26.930055 0.161457 udp 10.0.2.22 51868 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:27.931144 0.038572 udp 10.0.2.22 51868 <-> 86.121.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:28.932799 0.175326 udp 10.0.2.22 51868 <-> 183.83.74.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:29.934227 0.316690 udp 10.0.2.22 51868 <-> 125.192.40.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:30.926217 0.153915 udp 10.0.2.22 51868 <-> 71.234.18.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:31.932650 0.050265 udp 10.0.2.22 51868 <-> 176.103.18.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:32.932350 0.000000 udp 10.0.2.22 51868 -> 201.211.130.87 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:22:33.933175 0.240108 udp 10.0.2.22 51868 <-> 50.113.56.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:34.934543 0.266123 udp 10.0.2.22 51868 <-> 201.213.14.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:35.805511 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:22:35.935762 0.000000 udp 10.0.2.22 51868 -> 77.77.42.207 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:22:36.936195 0.000000 udp 10.0.2.22 51868 -> 186.66.206.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:22:37.926481 0.346238 udp 10.0.2.22 51868 <-> 223.187.112.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:38.927236 0.052314 udp 10.0.2.22 51868 <-> 93.155.184.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:38.969783 3.001746 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 09:22:39.928922 0.150535 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:40.259397 0.012339 udp 10.0.2.22 60058 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 09:22:40.272047 0.000000 udp 10.0.2.22 60059 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:22:40.930066 0.060773 udp 10.0.2.22 51868 <-> 95.169.211.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:41.931665 0.159814 udp 10.0.2.22 51868 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:42.932652 0.041183 udp 10.0.2.22 51868 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:43.934993 2.136349 udp 10.0.2.22 51868 <-> 24.241.36.250 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:44.926063 0.310009 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:45.977881 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:22:46.928533 0.165127 udp 10.0.2.22 51868 <-> 76.107.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:47.929968 0.177104 udp 10.0.2.22 51868 <-> 184.49.10.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:48.931759 0.074766 udp 10.0.2.22 51868 <-> 79.112.143.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:49.933101 0.398983 udp 10.0.2.22 51868 <-> 201.46.149.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:50.934153 0.000000 udp 10.0.2.22 51868 -> 177.182.77.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:22:51.926297 0.312573 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:52.927167 0.085141 udp 10.0.2.22 51868 <-> 80.86.237.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:53.928743 0.142200 udp 10.0.2.22 51868 <-> 24.210.69.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:53.978621 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:22:54.929969 0.000000 udp 10.0.2.22 51868 -> 187.61.206.157 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:22:55.931303 0.178475 udp 10.0.2.22 51868 <-> 24.202.102.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:56.933132 0.067013 udp 10.0.2.22 51868 <-> 79.118.241.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:57.935201 0.000000 udp 10.0.2.22 51868 -> 223.223.134.133 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:22:58.926278 0.206493 udp 10.0.2.22 51868 <-> 97.71.86.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:22:59.927199 0.060494 udp 10.0.2.22 51868 <-> 176.223.35.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:00.928901 0.048709 udp 10.0.2.22 51868 <-> 5.14.71.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:01.929909 0.062803 udp 10.0.2.22 51868 <-> 78.54.96.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:02.801571 0.000142 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:23:02.932012 0.153674 udp 10.0.2.22 51868 <-> 69.138.248.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:03.932990 0.048706 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:04.934789 0.197759 udp 10.0.2.22 51868 <-> 64.183.30.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:05.926427 0.184052 udp 10.0.2.22 51868 <-> 70.234.170.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:06.927243 0.044858 udp 10.0.2.22 51868 <-> 5.20.37.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:07.928590 0.029127 udp 10.0.2.22 51868 <-> 95.76.74.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:08.930032 0.000000 udp 10.0.2.22 51868 -> 82.245.78.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:23:09.931493 0.359552 udp 10.0.2.22 51868 <-> 111.254.125.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:09.981429 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:23:10.933374 0.174927 udp 10.0.2.22 51868 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:11.935043 0.043306 udp 10.0.2.22 51868 <-> 81.180.18.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:12.926248 0.000000 udp 10.0.2.22 51868 -> 108.176.74.5 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:23:13.927303 0.000000 udp 10.0.2.22 51868 -> 5.15.99.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:23:14.929367 0.208209 udp 10.0.2.22 51868 <-> 190.252.196.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:15.930120 0.000000 udp 10.0.2.22 51868 -> 109.89.168.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:23:16.931475 0.181957 udp 10.0.2.22 51868 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:17.933177 0.124477 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:18.934392 0.729809 udp 10.0.2.22 51868 <-> 78.136.101.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:19.926348 0.000000 udp 10.0.2.22 51868 -> 202.29.179.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:23:20.927330 0.030573 udp 10.0.2.22 51868 <-> 78.90.170.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:21.929089 0.000000 udp 10.0.2.22 51868 -> 201.46.181.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:23:22.930738 0.406364 udp 10.0.2.22 51868 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:23.931653 0.152071 udp 10.0.2.22 51868 <-> 24.61.172.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:24.933509 0.401818 udp 10.0.2.22 51868 <-> 70.184.95.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:25.934606 0.162567 udp 10.0.2.22 51868 <-> 71.8.5.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:26.926305 0.206192 udp 10.0.2.22 51868 <-> 67.183.71.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:27.927632 4.373379 udp 10.0.2.22 51868 <-> 50.70.132.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:28.929350 0.217700 udp 10.0.2.22 51868 <-> 24.10.7.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:29.800722 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:23:29.930809 0.067592 udp 10.0.2.22 51868 <-> 85.84.46.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:30.931638 0.203592 udp 10.0.2.22 51868 <-> 123.238.15.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:31.933802 0.166253 udp 10.0.2.22 51868 <-> 68.207.245.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:32.934721 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:23:33.925823 0.147041 udp 10.0.2.22 51868 <-> 182.237.185.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:34.927485 0.006569 udp 10.0.2.22 51868 <-> 85.92.39.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:35.929784 0.000000 udp 10.0.2.22 51868 -> 37.15.34.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:23:36.930602 0.484404 udp 10.0.2.22 51868 <-> 107.32.4.239 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:37.931865 0.045320 udp 10.0.2.22 51868 <-> 84.2.254.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:38.933646 0.000000 udp 10.0.2.22 51868 -> 46.27.229.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:23:39.934931 0.158440 udp 10.0.2.22 51868 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:40.926295 0.048214 udp 10.0.2.22 51868 <-> 87.247.96.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:41.927810 0.026037 udp 10.0.2.22 51868 <-> 77.56.229.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:41.987969 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:23:42.930039 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:23:43.930714 3.005234 udp 10.0.2.22 51868 -> 83.31.100.52 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:23:44.933999 0.000000 udp 10.0.2.22 51868 -> 173.23.208.52 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:23:45.935054 0.048297 udp 10.0.2.22 51868 <-> 87.247.96.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:47.926319 0.120514 udp 10.0.2.22 51868 <-> 24.75.190.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:48.927667 0.324860 udp 10.0.2.22 51868 <-> 178.79.11.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:49.929380 0.279670 udp 10.0.2.22 51868 <-> 126.60.25.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:50.930880 0.000000 udp 10.0.2.22 51868 -> 190.36.123.115 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:23:51.931925 0.000000 udp 10.0.2.22 51868 -> 135.19.220.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:23:52.933908 0.153001 udp 10.0.2.22 51868 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:53.929108 0.077820 udp 10.0.2.22 51868 <-> 82.249.156.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:54.930033 0.074199 udp 10.0.2.22 51868 <-> 85.87.80.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:55.930054 1.166617 udp 10.0.2.22 51868 <-> 67.177.97.215 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:56.812459 0.000108 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:23:57.932567 0.238172 udp 10.0.2.22 51868 <-> 95.239.240.144 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:58.932933 0.357592 udp 10.0.2.22 51868 <-> 112.119.98.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:23:59.934190 0.995359 udp 10.0.2.22 51868 <-> 190.124.133.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:00.926692 1.221679 udp 10.0.2.22 51868 <-> 201.242.70.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:01.926806 0.476441 udp 10.0.2.22 51868 <-> 210.119.21.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:02.927967 0.153943 udp 10.0.2.22 51868 <-> 97.102.123.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:03.929846 0.155710 udp 10.0.2.22 51868 <-> 70.189.26.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:04.930955 1.174950 udp 10.0.2.22 51868 <-> 70.115.72.200 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:06.933016 0.139725 udp 10.0.2.22 51868 <-> 71.7.230.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:07.924685 0.204823 udp 10.0.2.22 51868 <-> 201.211.194.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:08.926590 0.000000 udp 10.0.2.22 51868 -> 27.104.128.219 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:09.927961 0.353341 udp 10.0.2.22 51868 <-> 111.242.31.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:10.929790 0.000000 udp 10.0.2.22 51868 -> 177.138.136.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:11.930651 0.077848 udp 10.0.2.22 51868 <-> 85.84.46.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:12.932115 0.377252 udp 10.0.2.22 51868 <-> 111.246.34.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:13.934151 0.246873 udp 10.0.2.22 51868 <-> 105.226.121.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:14.925359 0.294985 udp 10.0.2.22 51868 <-> 181.31.92.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:15.926403 0.000000 udp 10.0.2.22 51868 -> 112.118.16.39 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:16.928145 0.000000 udp 10.0.2.22 51868 -> 79.11.55.39 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:17.929672 0.000000 udp 10.0.2.22 51868 -> 187.146.63.40 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:18.931183 0.000000 udp 10.0.2.22 51868 -> 76.173.112.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:19.932265 0.229633 udp 10.0.2.22 51868 <-> 203.193.142.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:20.934039 0.219599 udp 10.0.2.22 51868 <-> 77.210.91.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:21.925379 0.000000 udp 10.0.2.22 51868 -> 217.217.179.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:22.926464 0.215111 udp 10.0.2.22 51868 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:23.808497 0.000146 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:24:23.928717 0.228887 udp 10.0.2.22 51868 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:24.929994 0.400329 udp 10.0.2.22 51868 <-> 186.94.84.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:25.930950 0.164352 udp 10.0.2.22 51868 <-> 71.72.193.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:26.932488 0.008650 udp 10.0.2.22 51868 <-> 152.66.15.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:27.933745 0.226728 udp 10.0.2.22 51868 <-> 76.94.105.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:28.924994 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:29.926982 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:30.928316 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:31.929820 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:32.931209 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:33.932470 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:34.934191 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:35.931004 0.159786 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:36.930510 0.117971 udp 10.0.2.22 51868 <-> 84.228.222.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:37.930515 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:38.930603 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:39.931071 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:41.934406 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:42.925803 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:43.926651 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:44.928539 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:45.929662 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:46.931177 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:47.932639 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:48.933837 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:49.925785 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:50.806567 0.000098 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:24:50.926880 0.000052 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:50.926932 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:24:51.928501 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:24:52.929787 0.050776 udp 10.0.2.22 51868 <-> 86.123.208.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:53.930970 0.156969 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:54.935834 0.213619 udp 10.0.2.22 51868 <-> 76.94.105.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:55.936748 0.165577 udp 10.0.2.22 51868 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:56.928287 0.041221 udp 10.0.2.22 51868 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:57.929022 0.052027 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:58.929451 0.267685 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:24:59.930031 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:25:00.931080 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:25:01.932597 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:25:02.934280 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:25:03.925951 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:25:04.926797 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:25:05.928418 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:25:06.930001 0.165508 udp 10.0.2.22 51868 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:07.931284 0.000000 udp 10.0.2.22 51868 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:25:08.932571 0.053961 udp 10.0.2.22 51868 <-> 78.96.30.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:09.934876 0.052399 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:10.925927 0.238611 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:11.927110 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:25:12.928471 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:25:13.929883 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:25:14.931151 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:25:15.932651 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:25:16.933886 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:25:17.805898 0.000112 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:25:17.926213 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:25:18.926925 0.000129 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:25:18.927054 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:25:19.928408 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:25:20.936357 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:25:21.936922 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:25:22.936320 3.158538 udp 10.0.2.22 51868 <-> 173.188.107.246 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:23.936950 0.024823 udp 10.0.2.22 51868 <-> 84.119.41.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:24.928489 0.000000 udp 10.0.2.22 51868 -> 90.52.94.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:25:26.930056 0.000000 udp 10.0.2.22 51868 -> 190.38.101.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:25:27.929988 1.039749 udp 10.0.2.22 51868 <-> 115.241.3.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:28.931253 0.051970 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:29.932892 0.000000 udp 10.0.2.22 51868 -> 122.121.6.112 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:25:30.934265 0.020394 udp 10.0.2.22 51868 <-> 213.47.69.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:31.926069 0.043076 udp 10.0.2.22 51868 <-> 147.156.153.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:32.926944 0.278946 udp 10.0.2.22 51868 <-> 60.56.154.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:33.928670 0.055427 udp 10.0.2.22 51868 <-> 93.105.99.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:34.930002 2.046980 udp 10.0.2.22 51868 <-> 89.65.83.245 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:35.931584 0.130965 udp 10.0.2.22 51868 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:37.938437 0.159879 udp 10.0.2.22 51868 <-> 69.1.2.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:38.928769 0.149865 udp 10.0.2.22 51868 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:39.933511 0.000000 udp 10.0.2.22 51868 -> 79.183.172.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:25:40.931339 0.000000 udp 10.0.2.22 51868 -> 86.124.224.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:25:41.929970 0.142395 udp 10.0.2.22 51868 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:42.931627 4.996919 udp 10.0.2.22 51868 <-> 118.160.130.247 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:43.933503 0.048758 udp 10.0.2.22 51868 <-> 89.65.83.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:44.804630 0.000113 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:25:44.934759 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:25:45.925875 0.030157 udp 10.0.2.22 51868 <-> 95.76.74.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:46.927182 0.136572 udp 10.0.2.22 51868 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:48.930203 0.043564 udp 10.0.2.22 51868 <-> 5.15.167.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:49.932045 0.209671 udp 10.0.2.22 51868 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:50.933607 0.349159 udp 10.0.2.22 51868 <-> 122.121.6.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:51.935041 0.278341 udp 10.0.2.22 51868 <-> 60.56.154.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:52.925903 3.210635 udp 10.0.2.22 51868 <-> 190.252.196.242 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:53.927396 0.000000 udp 10.0.2.22 51868 -> 151.52.90.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:25:54.929845 0.139452 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:56.931976 0.135187 udp 10.0.2.22 51868 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:57.933256 4.997634 udp 10.0.2.22 51868 <-> 85.84.235.254 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:25:58.934805 4.997134 udp 10.0.2.22 51868 -> 67.189.32.245 16464 REQ 0 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:25:59.926055 0.000000 udp 10.0.2.22 51868 -> 118.160.130.247 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:26:00.928269 0.124369 udp 10.0.2.22 51868 <-> 79.183.172.249 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:01.928976 0.073509 udp 10.0.2.22 51868 <-> 85.230.174.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:04.137677 3.080550 udp 10.0.2.22 51868 <-> 67.189.32.245 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:04.933826 0.129719 udp 10.0.2.22 51868 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:05.935374 0.033350 udp 10.0.2.22 51868 <-> 95.76.74.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:07.928120 0.000000 udp 10.0.2.22 51868 -> 79.183.172.249 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:26:08.929100 0.264879 udp 10.0.2.22 51868 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:09.930573 0.042029 udp 10.0.2.22 51868 <-> 147.156.153.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:10.931792 0.330609 udp 10.0.2.22 51868 <-> 37.201.29.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:11.803256 0.000156 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:26:11.933696 0.057785 udp 10.0.2.22 51868 <-> 91.189.244.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:12.935538 0.000000 udp 10.0.2.22 51868 -> 79.183.172.249 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:26:13.925923 0.000000 udp 10.0.2.22 51868 -> 67.189.32.245 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:26:14.930025 0.033489 udp 10.0.2.22 51868 <-> 95.76.74.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:15.929879 0.159376 udp 10.0.2.22 51868 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:16.930824 1.001195 udp 10.0.2.22 51868 <-> 46.35.110.2 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:18.933862 0.385916 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:19.934928 0.104565 udp 10.0.2.22 51868 <-> 88.169.29.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:20.926513 0.048911 udp 10.0.2.22 51868 <-> 86.121.142.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:21.928054 0.286094 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:22.929166 0.058851 udp 10.0.2.22 51868 <-> 5.43.104.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:23.930530 0.339573 udp 10.0.2.22 51868 <-> 27.105.20.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:24.931874 0.153359 udp 10.0.2.22 51868 <-> 98.239.205.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:25.933673 0.000000 udp 10.0.2.22 51868 -> 109.74.44.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:26:26.925131 0.000000 udp 10.0.2.22 51868 -> 192.168.1.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:26:27.926782 0.681239 udp 10.0.2.22 51868 <-> 177.83.18.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:28.928090 0.137533 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:29.929041 0.353665 udp 10.0.2.22 51868 <-> 201.46.149.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:30.930919 1.419496 udp 10.0.2.22 51868 <-> 189.110.82.197 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:32.933579 0.146625 udp 10.0.2.22 51868 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:33.925072 3.048275 udp 10.0.2.22 51868 <-> 89.65.83.245 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:34.926860 0.043346 udp 10.0.2.22 51868 <-> 5.13.57.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:35.928302 0.000000 udp 10.0.2.22 51868 -> 82.229.226.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:26:37.931034 0.000000 udp 10.0.2.22 51868 -> 86.124.224.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:26:38.802051 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:26:38.932191 0.000000 udp 10.0.2.22 51868 -> 79.13.223.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:26:39.933987 0.059143 udp 10.0.2.22 51868 <-> 78.236.112.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:40.925290 0.000000 udp 10.0.2.22 51868 -> 5.15.135.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:26:41.926204 0.000000 udp 10.0.2.22 51868 -> 2.68.0.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:26:42.928603 0.186324 udp 10.0.2.22 51868 <-> 98.140.253.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:43.929890 0.039046 udp 10.0.2.22 51868 <-> 217.197.141.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:44.930957 0.000000 udp 10.0.2.22 51868 -> 166.140.134.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:26:45.932254 0.043860 udp 10.0.2.22 51868 <-> 89.65.83.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:46.934101 0.087489 udp 10.0.2.22 51868 <-> 82.229.226.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:47.925147 2.046288 udp 10.0.2.22 51868 <-> 5.13.57.253 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:48.926676 4.150908 udp 10.0.2.22 51868 <-> 24.241.36.250 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:50.929891 0.057017 udp 10.0.2.22 51868 <-> 86.124.224.253 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:51.930947 0.055900 udp 10.0.2.22 51868 <-> 78.236.112.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:53.933742 2.135732 udp 10.0.2.22 51868 <-> 24.241.36.250 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:54.924840 0.066694 udp 10.0.2.22 51868 <-> 82.229.226.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:56.927964 1.030495 udp 10.0.2.22 51868 <-> 80.218.193.122 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:26:58.930859 0.000000 udp 10.0.2.22 51868 -> 5.15.135.33 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:26:59.932232 0.309556 udp 10.0.2.22 51868 <-> 98.140.253.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:00.933717 0.000000 udp 10.0.2.22 51868 -> 166.140.134.58 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:27:01.924870 0.000000 udp 10.0.2.22 51868 -> 80.97.242.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:27:02.927070 0.172213 udp 10.0.2.22 51868 <-> 24.154.191.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:03.928372 2.178835 udp 10.0.2.22 51868 <-> 173.23.12.75 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:04.929351 4.998481 udp 10.0.2.22 51868 <-> 89.65.83.245 16464 CON 0 0 5 1954 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:05.800811 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:27:07.934411 0.458880 udp 10.0.2.22 51868 <-> 98.140.253.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:08.926096 0.152617 udp 10.0.2.22 51868 <-> 66.31.49.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:09.972761 0.000000 udp 10.0.2.22 51868 <- 89.65.83.245 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:27:10.928711 4.005403 udp 10.0.2.22 51868 -> 201.223.159.250 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:27:11.930031 4.997644 udp 10.0.2.22 51868 <-> 82.229.226.245 16464 CON 0 0 5 1954 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:13.932758 0.000000 udp 10.0.2.22 51868 -> 98.140.253.64 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:27:15.925708 3.004264 udp 10.0.2.22 51868 <-> 89.65.83.245 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:17.929100 4.067584 udp 10.0.2.22 51868 <-> 78.236.112.132 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:19.932088 0.074153 udp 10.0.2.22 51868 <-> 82.229.226.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:20.932541 0.184637 udp 10.0.2.22 51868 <-> 66.115.88.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:22.925773 0.257696 udp 10.0.2.22 51868 <-> 98.140.253.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:23.926825 0.059444 udp 10.0.2.22 51868 <-> 5.15.135.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:24.928155 0.172759 udp 10.0.2.22 51868 <-> 173.23.12.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:25.929976 2.304981 udp 10.0.2.22 51868 -> 201.223.159.250 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:27:28.234957 0.000000 icmp 201.223.159.250 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 09:27:26.930949 0.165331 udp 10.0.2.22 51868 <-> 82.229.226.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:28.934521 1.230907 udp 10.0.2.22 51868 <-> 66.115.88.130 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:30.926983 0.000000 udp 10.0.2.22 51868 -> 69.122.169.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:27:31.928601 0.169816 udp 10.0.2.22 51868 <-> 24.178.45.245 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:32.799622 0.000129 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:27:32.929814 1.184486 udp 10.0.2.22 51868 <-> 82.229.226.245 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:34.932596 1.208915 udp 10.0.2.22 51868 <-> 66.115.88.130 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:36.925929 0.065774 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:37.927266 1.684894 udp 10.0.2.22 51868 <-> 80.97.242.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:38.928321 0.154686 udp 10.0.2.22 51868 <-> 66.31.49.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:39.930154 0.171012 udp 10.0.2.22 51868 <-> 173.23.12.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:40.931135 0.000000 udp 10.0.2.22 51868 -> 5.15.135.33 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:27:41.932724 0.332665 udp 10.0.2.22 51868 <-> 105.229.138.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:42.934719 1.255669 udp 10.0.2.22 51868 <-> 50.80.122.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:43.925809 0.173720 udp 10.0.2.22 51868 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:44.927866 0.000000 udp 10.0.2.22 51868 -> 174.108.49.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:27:45.928667 0.425374 udp 10.0.2.22 51868 <-> 190.79.50.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:46.929912 0.813159 udp 10.0.2.22 51868 <-> 172.242.177.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:47.931110 0.296600 udp 10.0.2.22 51868 <-> 211.7.6.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:48.932598 0.298419 udp 10.0.2.22 51868 <-> 190.185.220.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:49.935023 0.049185 udp 10.0.2.22 51868 <-> 87.187.4.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:50.925868 1.213312 udp 10.0.2.22 51868 <-> 142.136.98.87 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:52.928368 3.690663 udp 10.0.2.22 51868 <-> 186.88.170.4 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:53.930261 0.297279 udp 10.0.2.22 51868 <-> 60.56.154.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:54.931338 0.065686 udp 10.0.2.22 51868 <-> 94.190.190.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:56.934699 0.041915 udp 10.0.2.22 51868 <-> 147.156.153.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:57.926609 0.069358 udp 10.0.2.22 51868 <-> 90.231.116.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:58.928024 0.124412 udp 10.0.2.22 51868 <-> 78.251.143.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:27:59.808430 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:27:59.928633 0.330980 udp 10.0.2.22 51868 <-> 111.253.127.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:00.930155 0.296635 udp 10.0.2.22 51868 <-> 60.56.154.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:01.931466 0.039315 udp 10.0.2.22 51868 <-> 89.215.36.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:02.932960 0.210697 udp 10.0.2.22 51868 <-> 142.136.98.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:03.934650 0.073053 udp 10.0.2.22 51868 <-> 85.225.6.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:04.925889 2.066249 udp 10.0.2.22 51868 <-> 155.158.53.115 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:05.926936 1.330882 udp 10.0.2.22 51868 <-> 201.81.27.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:07.930469 0.000000 udp 10.0.2.22 51868 -> 187.143.41.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:28:08.931447 0.039960 udp 10.0.2.22 51868 <-> 5.15.99.5 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:09.933439 0.000000 udp 10.0.2.22 51868 -> 2.193.245.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:28:10.935377 1.992706 udp 10.0.2.22 51868 <-> 212.104.97.251 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:11.926702 0.000000 udp 10.0.2.22 51868 -> 186.136.183.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:28:13.928930 0.093967 udp 10.0.2.22 51868 <-> 62.83.219.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:14.930129 0.047700 udp 10.0.2.22 51868 <-> 91.187.95.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:15.931463 1.176549 udp 10.0.2.22 51868 <-> 103.250.145.20 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:17.934683 0.000000 udp 10.0.2.22 51868 -> 36.232.204.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:28:18.926191 2.180911 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:19.927348 4.006367 udp 10.0.2.22 51868 <-> 152.66.219.240 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:21.930011 0.109136 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:22.931463 2.181648 udp 10.0.2.22 51868 <-> 186.136.183.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:24.934905 0.000000 udp 10.0.2.22 51868 -> 187.143.41.22 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:28:25.926005 4.151238 udp 10.0.2.22 51868 <-> 24.241.36.250 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:26.806954 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:28:26.927426 0.000000 udp 10.0.2.22 51868 -> 2.193.245.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:28:27.929038 1.033877 udp 10.0.2.22 51868 <-> 212.104.97.251 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:30.932933 0.264897 udp 10.0.2.22 51868 <-> 190.199.66.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:31.934472 0.123243 udp 10.0.2.22 51868 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:32.925954 0.000000 udp 10.0.2.22 51868 -> 208.102.254.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:28:33.927740 0.000000 udp 10.0.2.22 51868 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:28:34.928827 0.043602 udp 10.0.2.22 51868 <-> 77.76.177.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:35.934766 4.934352 udp 10.0.2.22 51868 <-> 62.68.106.27 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:36.935248 0.000000 udp 10.0.2.22 51868 -> 79.183.172.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:28:37.936127 0.322761 udp 10.0.2.22 51868 <-> 190.142.118.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:39.926963 0.034986 udp 10.0.2.22 51868 <-> 90.156.12.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:40.927687 1.062559 udp 10.0.2.22 51868 <-> 81.203.204.14 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:42.930363 0.060322 udp 10.0.2.22 51868 <-> 82.229.226.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:43.932201 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:28:44.933509 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:28:45.934861 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:28:46.926233 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:28:47.928096 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:28:48.928888 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:28:49.930524 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:28:50.931832 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:28:51.934178 0.134645 udp 10.0.2.22 51868 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:52.935034 0.042682 udp 10.0.2.22 51868 <-> 80.78.224.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:53.806291 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:28:53.926276 0.609450 udp 10.0.2.22 51868 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:28:55.930026 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:28:56.930485 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:28:57.931986 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:28:58.933258 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:28:59.924922 0.000066 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:28:59.924988 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:29:00.926228 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:01.928066 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:02.929233 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:03.930796 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:04.932246 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:05.933580 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:06.924964 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:07.926406 0.153412 udp 10.0.2.22 51868 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:29:08.928116 1.126582 udp 10.0.2.22 51868 <-> 68.185.124.13 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:29:10.930826 0.299920 udp 10.0.2.22 51868 <-> 201.231.44.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:29:11.932180 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:12.933888 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:13.924792 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:14.926633 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:15.927852 0.151099 udp 10.0.2.22 51868 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:29:16.929162 0.060450 udp 10.0.2.22 51868 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:29:17.930938 0.000000 udp 10.0.2.22 51868 -> 5.190.123.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:18.932149 0.066767 udp 10.0.2.22 51868 <-> 81.203.204.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:29:19.933181 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:20.804684 0.000121 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:29:20.924734 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:21.926606 0.170590 udp 10.0.2.22 51868 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:29:22.928183 0.061569 udp 10.0.2.22 51868 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:29:23.929250 0.091059 udp 10.0.2.22 51868 <-> 82.229.226.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:29:24.930734 0.000000 udp 10.0.2.22 51868 -> 5.190.123.252 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:25.932342 0.392981 udp 10.0.2.22 51868 <-> 187.106.245.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:29:26.933750 0.156470 udp 10.0.2.22 51868 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:29:27.925270 0.133964 udp 10.0.2.22 51868 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:29:28.926466 0.294564 udp 10.0.2.22 51868 <-> 201.231.44.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:29:29.928081 0.564831 udp 10.0.2.22 51868 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:29:30.930174 0.041467 udp 10.0.2.22 51868 <-> 80.78.224.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:29:31.930797 0.000000 udp 10.0.2.22 51868 -> 201.231.197.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:32.932247 0.000000 udp 10.0.2.22 51868 -> 5.190.123.252 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:33.934025 0.158646 udp 10.0.2.22 51868 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:29:34.925755 0.046086 udp 10.0.2.22 51868 <-> 89.46.84.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:29:35.926338 0.000000 udp 10.0.2.22 51868 -> 5.15.167.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:36.928004 4.997148 udp 10.0.2.22 51868 -> 178.121.187.72 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:37.929890 0.298603 udp 10.0.2.22 51868 <-> 119.231.181.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:29:38.930725 0.040209 udp 10.0.2.22 51868 <-> 80.99.49.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:29:39.932418 0.337496 udp 10.0.2.22 51868 <-> 190.172.75.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:29:40.933648 0.340624 udp 10.0.2.22 51868 <-> 123.110.11.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:29:42.051701 0.000000 udp 10.0.2.22 51868 <- 178.121.187.72 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:42.926593 0.176622 udp 10.0.2.22 51868 <-> 69.137.7.210 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:29:43.928295 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:44.929591 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:45.930805 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:45.993539 3.002656 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 09:29:46.932262 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:47.803721 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:29:47.933752 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:48.925834 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:49.926613 2.003739 udp 10.0.2.22 51868 -> 69.125.204.10 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:50.928386 4.005728 udp 10.0.2.22 51868 <-> 186.68.6.11 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:29:52.931172 0.000000 udp 10.0.2.22 51868 -> 70.89.250.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:29:53.001137 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:29:53.932302 0.065721 udp 10.0.2.22 51868 <-> 81.203.204.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:29:55.925476 3.076691 udp 10.0.2.22 51868 <-> 88.80.117.113 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:29:56.926583 0.037857 udp 10.0.2.22 51868 <-> 82.192.44.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:29:57.928115 0.135987 udp 10.0.2.22 51868 <-> 96.56.110.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:29:59.931193 0.030787 udp 10.0.2.22 51868 <-> 5.53.200.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:00.932697 0.000000 udp 10.0.2.22 51868 -> 88.80.117.113 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:30:01.002826 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:30:01.933779 0.318806 udp 10.0.2.22 51868 <-> 119.241.12.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:02.925154 0.000000 udp 10.0.2.22 51868 -> 77.76.177.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:30:03.926812 0.330568 udp 10.0.2.22 51868 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:04.928527 0.000000 udp 10.0.2.22 51868 -> 78.8.65.60 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:30:05.930013 2.179786 udp 10.0.2.22 51868 <-> 184.49.10.50 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:06.931156 0.039353 udp 10.0.2.22 51868 <-> 212.117.58.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:08.934172 0.000000 udp 10.0.2.22 51868 -> 88.67.80.72 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:30:09.926154 0.000000 udp 10.0.2.22 51868 -> 181.43.67.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:30:10.926851 0.000000 udp 10.0.2.22 51868 -> 24.242.53.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:30:11.929024 1.646605 udp 10.0.2.22 51868 <-> 36.227.0.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:12.929895 0.046499 udp 10.0.2.22 51868 <-> 193.151.100.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:13.931011 0.147488 udp 10.0.2.22 51868 <-> 74.69.201.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:14.802337 0.000114 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:30:14.932700 0.162367 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:15.934446 0.000000 udp 10.0.2.22 51868 -> 85.84.235.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:30:16.925716 0.358433 udp 10.0.2.22 51868 <-> 190.51.48.30 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:17.005858 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:30:17.926954 0.445167 udp 10.0.2.22 51868 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:18.928456 0.000000 udp 10.0.2.22 51868 -> 93.105.1.212 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:30:19.930441 0.327439 udp 10.0.2.22 51868 <-> 36.224.194.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:20.931351 0.536280 udp 10.0.2.22 51868 <-> 107.32.4.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:21.932567 0.051288 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:22.934340 0.232235 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:23.925940 0.010635 udp 10.0.2.22 51868 <-> 178.21.51.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:24.926971 0.000000 udp 10.0.2.22 51868 -> 14.198.30.245 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:30:25.928419 0.097931 udp 10.0.2.22 51868 <-> 82.229.226.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:26.930059 0.415073 udp 10.0.2.22 51868 <-> 117.229.142.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:27.931354 0.029372 udp 10.0.2.22 51868 <-> 89.215.134.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:28.932626 0.088623 udp 10.0.2.22 51868 <-> 85.179.246.62 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:29.934280 0.283651 udp 10.0.2.22 51868 <-> 190.79.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:30.925609 0.166689 udp 10.0.2.22 51868 <-> 173.18.114.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:31.927244 0.313040 udp 10.0.2.22 51868 <-> 153.135.189.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:32.928511 0.034933 udp 10.0.2.22 51868 <-> 90.156.12.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:33.929962 0.327236 udp 10.0.2.22 51868 <-> 36.224.194.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:34.931596 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:30:35.932829 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:30:36.934591 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:30:37.925990 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:30:38.926965 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:30:39.928619 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:30:40.930033 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:30:41.801099 0.000150 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:30:41.931242 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:30:42.932651 0.177929 udp 10.0.2.22 51868 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:43.934345 0.051208 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:44.925956 1.001173 udp 10.0.2.22 51868 <-> 77.76.177.251 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:46.928421 0.132524 udp 10.0.2.22 51868 <-> 173.80.7.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:47.930020 0.161649 udp 10.0.2.22 51868 <-> 68.13.37.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:48.931159 0.000000 udp 10.0.2.22 51868 -> 85.224.201.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:30:49.011625 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:30:49.933182 0.463980 udp 10.0.2.22 51868 <-> 180.215.90.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:50.934499 0.344048 udp 10.0.2.22 51868 <-> 114.36.82.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:51.926528 0.074947 udp 10.0.2.22 51868 <-> 95.86.47.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:52.927184 0.157283 udp 10.0.2.22 51868 <-> 76.24.95.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:53.928924 0.000000 udp 10.0.2.22 51868 -> 111.252.37.144 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:30:54.930354 0.170587 udp 10.0.2.22 51868 <-> 142.217.96.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:55.931532 0.155180 udp 10.0.2.22 51868 <-> 74.129.39.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:56.933868 0.125031 udp 10.0.2.22 51868 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:57.934438 0.000000 udp 10.0.2.22 51868 -> 68.170.73.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:30:58.926163 0.225656 udp 10.0.2.22 51868 <-> 118.97.174.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:30:59.927776 0.354826 udp 10.0.2.22 51868 <-> 187.25.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:00.928829 1.110539 udp 10.0.2.22 51868 <-> 208.101.72.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:01.930020 0.067002 udp 10.0.2.22 51868 <-> 86.126.0.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:02.931733 0.052355 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:03.932940 0.157308 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:04.934712 0.208453 udp 10.0.2.22 51868 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:05.926078 0.158463 udp 10.0.2.22 51868 <-> 75.139.7.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:06.927860 0.171008 udp 10.0.2.22 51868 <-> 173.177.41.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:07.929122 0.137848 udp 10.0.2.22 51868 <-> 76.116.43.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:08.799833 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:31:08.930344 0.027383 udp 10.0.2.22 51868 <-> 83.84.66.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:09.932148 0.298039 udp 10.0.2.22 51868 <-> 177.193.132.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:10.933430 0.333915 udp 10.0.2.22 51868 <-> 61.231.10.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:11.934613 0.000000 udp 10.0.2.22 51868 -> 47.55.115.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:31:12.926162 0.000000 udp 10.0.2.22 51868 -> 76.24.62.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:31:13.927398 0.144155 udp 10.0.2.22 51868 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:14.929355 0.707926 udp 10.0.2.22 51868 <-> 186.88.170.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:15.930615 0.293727 udp 10.0.2.22 51868 <-> 202.62.87.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:16.931585 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:31:17.933840 0.345547 udp 10.0.2.22 51868 <-> 186.92.209.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:18.934660 0.000000 udp 10.0.2.22 51868 -> 79.100.54.203 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:31:19.926093 0.000000 udp 10.0.2.22 51868 -> 95.77.135.212 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:31:20.927708 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:31:21.929100 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:31:22.930510 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:31:23.931899 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:31:24.933529 0.177816 udp 10.0.2.22 51868 <-> 49.205.220.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:25.934876 0.000000 udp 10.0.2.22 51868 -> 187.247.181.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:31:26.926110 0.142806 udp 10.0.2.22 51868 <-> 75.180.55.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:27.927529 0.151372 udp 10.0.2.22 51868 <-> 37.45.182.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:28.929243 0.163453 udp 10.0.2.22 51868 <-> 124.123.124.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:29.930492 0.000000 udp 10.0.2.22 51868 -> 83.166.27.110 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:31:30.931988 0.146770 udp 10.0.2.22 51868 <-> 174.102.8.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:31.933387 1.359670 udp 10.0.2.22 51868 <-> 181.74.134.234 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:33.926349 0.428177 udp 10.0.2.22 51868 <-> 114.48.139.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:34.928053 0.229624 udp 10.0.2.22 51868 <-> 111.91.58.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:35.808890 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:31:35.929026 0.339447 udp 10.0.2.22 51868 <-> 1.175.43.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:36.930951 0.138514 udp 10.0.2.22 51868 <-> 111.91.106.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:37.931921 0.207130 udp 10.0.2.22 51868 <-> 208.99.142.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:38.933630 0.342155 udp 10.0.2.22 51868 <-> 81.226.243.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:39.925110 0.026250 udp 10.0.2.22 51868 <-> 83.84.66.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:40.926175 0.044240 udp 10.0.2.22 51868 <-> 77.20.104.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:41.927874 0.169886 udp 10.0.2.22 51868 <-> 70.81.218.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:42.929207 0.039213 udp 10.0.2.22 51868 <-> 92.244.2.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:43.930774 0.062710 udp 10.0.2.22 51868 <-> 81.203.204.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:44.932348 0.217123 udp 10.0.2.22 51868 <-> 65.60.105.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:45.933625 0.000000 udp 10.0.2.22 51868 -> 181.43.67.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:31:46.925085 0.029739 udp 10.0.2.22 51868 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:47.926473 0.748066 udp 10.0.2.22 51868 <-> 186.88.170.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:48.928331 0.030649 udp 10.0.2.22 51868 <-> 77.56.229.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:49.929079 0.103983 udp 10.0.2.22 51868 <-> 81.225.87.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:50.930808 0.337263 udp 10.0.2.22 51868 <-> 119.14.241.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:51.932088 0.000000 udp 10.0.2.22 51868 -> 186.91.145.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:31:52.933759 0.116383 udp 10.0.2.22 51868 <-> 72.38.7.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:53.925260 0.000000 udp 10.0.2.22 51868 -> 108.181.202.185 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:31:54.926316 0.171394 udp 10.0.2.22 51868 <-> 49.207.111.86 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:55.927952 0.164375 udp 10.0.2.22 51868 <-> 70.80.64.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:56.929164 0.684539 udp 10.0.2.22 51868 <-> 71.178.136.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:57.930998 0.145878 udp 10.0.2.22 51868 <-> 98.24.73.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:31:58.932227 0.000000 udp 10.0.2.22 51868 -> 95.220.247.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:31:59.933329 3.069582 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:00.924977 0.000000 udp 10.0.2.22 51868 -> 178.42.68.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:32:01.926601 0.000000 udp 10.0.2.22 51868 -> 78.116.125.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:32:02.807671 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:32:03.929699 0.345161 udp 10.0.2.22 51868 <-> 114.37.121.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:04.930886 0.032740 udp 10.0.2.22 51868 <-> 212.104.97.251 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:05.932181 0.069150 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:06.934043 0.163111 udp 10.0.2.22 51868 <-> 204.195.53.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:07.925582 0.195436 udp 10.0.2.22 51868 <-> 46.48.216.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:08.926525 0.149429 udp 10.0.2.22 51868 <-> 69.115.88.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:09.928150 1.215378 udp 10.0.2.22 51868 <-> 190.73.186.63 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:11.930747 1.044751 udp 10.0.2.22 51868 <-> 5.13.57.253 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:13.933795 0.277365 udp 10.0.2.22 51868 <-> 111.125.227.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:14.925171 0.162520 udp 10.0.2.22 51868 <-> 74.79.65.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:15.926331 0.114848 udp 10.0.2.22 51868 <-> 24.230.249.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:16.928225 0.331244 udp 10.0.2.22 51868 <-> 59.93.245.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:17.929374 0.000000 udp 10.0.2.22 51868 -> 2.86.242.233 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:32:18.930937 0.241919 udp 10.0.2.22 51868 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:19.932199 0.244316 udp 10.0.2.22 51868 <-> 46.241.228.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:20.934255 0.779275 udp 10.0.2.22 51868 <-> 36.244.233.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:21.925177 0.000000 udp 10.0.2.22 51868 -> 79.32.116.88 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:32:22.926802 0.156182 udp 10.0.2.22 51868 <-> 50.158.209.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:23.928185 0.000000 udp 10.0.2.22 51868 -> 176.92.108.99 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:32:24.929692 2.129669 udp 10.0.2.22 51868 <-> 78.228.60.22 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:25.930884 0.000000 udp 10.0.2.22 51868 -> 79.179.19.105 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:32:27.934312 0.213903 udp 10.0.2.22 51868 <-> 75.84.105.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:28.925507 0.039856 udp 10.0.2.22 51868 <-> 87.97.201.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:29.806604 0.000111 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:32:29.926644 0.145563 udp 10.0.2.22 51868 <-> 79.50.19.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:30.927963 1.704266 udp 10.0.2.22 51868 <-> 202.140.211.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:31.929830 0.140330 udp 10.0.2.22 51868 <-> 198.47.54.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:32.930902 0.178894 udp 10.0.2.22 51868 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:33.932404 0.145592 udp 10.0.2.22 51868 <-> 98.235.43.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:34.934189 0.257522 udp 10.0.2.22 51868 <-> 177.227.173.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:35.925379 0.018421 udp 10.0.2.22 51868 <-> 77.175.74.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:36.926625 0.235369 udp 10.0.2.22 51868 <-> 68.107.150.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:37.928235 0.000000 udp 10.0.2.22 51868 -> 98.164.214.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:32:38.929871 4.049206 udp 10.0.2.22 51868 <-> 188.241.10.7 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:39.931151 0.040122 udp 10.0.2.22 51868 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:40.932889 0.000000 udp 10.0.2.22 51868 -> 84.111.251.186 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:32:41.934573 0.039656 udp 10.0.2.22 51868 <-> 46.10.187.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:43.926841 0.160957 udp 10.0.2.22 51868 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:44.928324 0.000000 udp 10.0.2.22 51868 -> 116.68.242.201 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:32:45.929716 0.101250 udp 10.0.2.22 51868 <-> 79.50.28.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:46.931274 0.166191 udp 10.0.2.22 51868 <-> 24.224.21.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:47.932573 0.062183 udp 10.0.2.22 51868 <-> 80.80.40.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:48.934014 0.333257 udp 10.0.2.22 51868 <-> 85.179.124.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:49.925847 1.858365 udp 10.0.2.22 51868 <-> 27.4.142.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:50.926510 0.612275 udp 10.0.2.22 51868 <-> 186.36.244.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:51.928387 0.164983 udp 10.0.2.22 51868 <-> 76.180.211.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:52.929739 0.277982 udp 10.0.2.22 51868 <-> 109.67.249.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:53.931115 0.190128 udp 10.0.2.22 51868 <-> 76.14.200.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:32:54.932884 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:32:55.934082 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:32:56.805297 0.000128 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:32:56.925747 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:32:57.926953 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:32:58.928439 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:32:59.930017 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:00.931307 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:01.932656 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:02.934172 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:03.925769 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:04.926989 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:05.928521 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:06.929969 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:07.931371 0.192021 udp 10.0.2.22 51868 <-> 76.14.200.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:33:08.932841 0.000000 udp 10.0.2.22 51868 -> 78.22.205.68 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:09.934325 0.000000 udp 10.0.2.22 51868 -> 5.43.104.39 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:10.925791 0.045407 udp 10.0.2.22 51868 <-> 178.117.252.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:33:11.927173 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:12.928488 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:14.931133 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:15.932774 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:16.934166 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:17.926119 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:18.927214 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:19.928855 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:20.930002 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:21.931371 0.000083 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:21.931454 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:33:22.932999 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:23.804138 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:33:23.934424 0.052274 udp 10.0.2.22 51868 <-> 5.43.104.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:33:24.925847 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:25.927270 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:26.928649 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:27.929947 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:28.931651 0.000073 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:28.931724 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:33:29.933436 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:30.935020 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:31.926106 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:32.927020 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:33.928796 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:34.930195 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:35.931790 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:36.933191 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:37.934499 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:38.926379 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:39.927112 2.051242 udp 10.0.2.22 51868 <-> 78.22.205.68 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:33:40.928718 0.169911 udp 10.0.2.22 51868 <-> 68.116.158.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:33:42.931837 0.000000 udp 10.0.2.22 51868 -> 82.66.113.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:43.933125 0.040462 udp 10.0.2.22 51868 <-> 217.197.141.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:33:44.934562 0.282936 udp 10.0.2.22 51868 <-> 190.37.3.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:33:45.926170 0.193831 udp 10.0.2.22 51868 <-> 76.14.200.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:33:46.927908 1.120460 udp 10.0.2.22 51868 <-> 178.79.11.31 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:33:48.930243 0.169430 udp 10.0.2.22 51868 <-> 68.116.158.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:33:49.931682 0.037427 udp 10.0.2.22 51868 <-> 217.197.141.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:33:50.803566 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:33:50.933940 0.171359 udp 10.0.2.22 51868 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:33:51.934925 2.994120 udp 10.0.2.22 51868 -> 192.168.102.1 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:52.926207 0.060284 udp 10.0.2.22 51868 <-> 89.32.157.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:33:53.927607 0.000000 udp 10.0.2.22 51868 -> 95.239.167.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:55.930358 0.149941 udp 10.0.2.22 51868 <-> 64.233.158.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:33:56.931785 0.000000 udp 10.0.2.22 51868 -> 50.82.72.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:57.933503 0.000000 udp 10.0.2.22 51868 -> 79.18.104.54 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:33:58.934761 0.325079 udp 10.0.2.22 51868 <-> 202.95.61.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:33:59.926188 0.349430 udp 10.0.2.22 51868 <-> 122.121.6.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:00.927982 0.281801 udp 10.0.2.22 51868 <-> 49.205.62.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:01.928607 0.336161 udp 10.0.2.22 51868 <-> 187.101.238.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:02.930623 0.198342 udp 10.0.2.22 51868 <-> 82.229.226.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:03.931875 0.000000 udp 10.0.2.22 51868 -> 186.123.130.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:34:04.933703 0.000000 udp 10.0.2.22 51868 -> 75.84.97.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:34:05.925094 0.000000 udp 10.0.2.22 51868 -> 70.189.114.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:34:06.926069 0.000000 udp 10.0.2.22 51868 -> 82.245.78.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:34:07.927837 4.996919 udp 10.0.2.22 51868 <-> 37.213.106.248 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:08.928999 0.000000 udp 10.0.2.22 51868 -> 69.29.19.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:34:09.930464 0.011318 udp 10.0.2.22 51868 <-> 178.21.51.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:10.931785 0.059587 udp 10.0.2.22 51868 <-> 78.96.30.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:11.933627 0.000000 udp 10.0.2.22 51868 -> 82.245.78.248 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:34:13.103989 0.000000 udp 10.0.2.22 51868 <- 37.213.106.248 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:34:13.926251 0.345087 udp 10.0.2.22 51868 <-> 182.221.14.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:14.927918 0.045032 udp 10.0.2.22 51868 <-> 5.15.167.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:15.929165 0.000000 udp 10.0.2.22 51868 -> 80.140.179.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:34:16.930652 0.000000 udp 10.0.2.22 51868 -> 31.147.134.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:34:17.801835 0.000124 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:34:17.932052 1.001044 udp 10.0.2.22 51868 <-> 212.92.251.134 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:19.925045 0.000000 udp 10.0.2.22 51868 -> 67.201.190.185 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:34:20.926559 0.064866 udp 10.0.2.22 51868 <-> 109.60.54.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:21.928010 0.142706 udp 10.0.2.22 51868 <-> 74.194.197.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:22.929144 0.052824 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:23.930655 0.000000 udp 10.0.2.22 51868 -> 130.204.23.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:34:24.932312 0.404591 udp 10.0.2.22 51868 <-> 190.79.50.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:25.933720 0.000000 udp 10.0.2.22 51868 -> 12.7.43.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:34:26.924720 0.085719 udp 10.0.2.22 51868 <-> 46.191.148.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:27.926751 3.093793 udp 10.0.2.22 51868 <-> 77.78.227.24 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:28.927706 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:34:29.929548 0.506712 udp 10.0.2.22 51868 <-> 190.194.201.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:31.932249 0.058065 udp 10.0.2.22 51868 <-> 5.12.11.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:32.933866 0.212161 udp 10.0.2.22 51868 <-> 177.230.92.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:33.925786 0.306571 udp 10.0.2.22 51868 <-> 121.152.144.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:34.926270 0.054745 udp 10.0.2.22 51868 <-> 88.222.156.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:35.928336 1.001268 udp 10.0.2.22 51868 <-> 83.230.230.166 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:37.930923 0.224341 udp 10.0.2.22 51868 <-> 190.207.61.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:38.932292 0.283891 udp 10.0.2.22 51868 <-> 75.48.12.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:39.934008 0.000000 udp 10.0.2.22 51868 -> 123.201.207.144 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:34:40.925724 2.247220 udp 10.0.2.22 51868 <-> 87.4.183.151 16464 CON 0 0 6 3676 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:41.926418 2.277775 udp 10.0.2.22 51868 <-> 179.223.104.235 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:44.800667 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:34:44.930976 0.304803 udp 10.0.2.22 51868 <-> 190.188.145.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:45.932579 0.189219 udp 10.0.2.22 51868 <-> 71.91.32.198 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:46.934548 4.996361 udp 10.0.2.22 51868 <-> 49.203.247.5 16464 CON 0 0 7 3734 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:47.925320 0.035142 udp 10.0.2.22 51868 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:49.928094 0.164330 udp 10.0.2.22 51868 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:50.928920 0.000000 udp 10.0.2.22 51868 -> 85.230.84.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:34:52.932331 0.028690 udp 10.0.2.22 51868 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:53.357692 2.808708 udp 10.0.2.22 51868 <-> 49.203.247.5 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:53.934003 0.000000 udp 10.0.2.22 51868 -> 89.252.55.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:34:55.926609 1.528332 udp 10.0.2.22 51868 <-> 186.91.102.2 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:57.929695 0.207501 udp 10.0.2.22 51868 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:58.931085 0.667487 udp 10.0.2.22 51868 <-> 188.167.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:34:59.932501 0.037516 udp 10.0.2.22 51868 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:00.934022 0.441369 udp 10.0.2.22 51868 <-> 179.209.194.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:01.925532 0.212643 udp 10.0.2.22 51868 <-> 190.198.209.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:02.926511 0.280776 udp 10.0.2.22 51868 <-> 190.202.218.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:03.928277 0.134972 udp 10.0.2.22 51868 <-> 50.95.150.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:04.929429 0.049440 udp 10.0.2.22 51868 <-> 87.247.96.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:05.930859 0.191685 udp 10.0.2.22 51868 <-> 72.199.65.248 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:06.932561 0.000000 udp 10.0.2.22 51868 -> 79.26.223.229 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:35:07.933989 0.049434 udp 10.0.2.22 51868 -> 178.188.137.114 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:35:07.983423 0.000000 icmp 178.188.137.114 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 09:35:08.925210 0.272889 udp 10.0.2.22 51868 <-> 189.61.212.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:09.926660 0.194903 udp 10.0.2.22 51868 <-> 111.125.203.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:10.928194 0.262537 udp 10.0.2.22 51868 <-> 187.121.67.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:11.799110 0.000105 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:35:11.929736 0.065659 udp 10.0.2.22 51868 <-> 79.119.248.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:12.930994 0.976832 udp 10.0.2.22 51868 <-> 201.242.70.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:13.932643 0.267798 udp 10.0.2.22 51868 <-> 186.89.8.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:14.934284 0.110110 udp 10.0.2.22 51868 <-> 46.42.57.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:15.925895 0.143971 udp 10.0.2.22 51868 <-> 70.44.250.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:16.926857 0.000000 udp 10.0.2.22 51868 -> 74.56.6.140 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:35:17.928370 3.004518 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:35:18.929734 0.125422 udp 10.0.2.22 51868 <-> 178.79.27.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:19.931158 0.000000 udp 10.0.2.22 51868 -> 85.211.140.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:35:21.934521 0.000000 udp 10.0.2.22 51868 -> 186.210.21.146 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:35:22.925610 0.000000 udp 10.0.2.22 51868 -> 86.121.43.152 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:35:23.926880 0.315069 udp 10.0.2.22 51868 <-> 60.37.183.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:24.928200 0.000000 udp 10.0.2.22 51868 -> 81.34.11.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:35:25.930001 3.123575 udp 10.0.2.22 51868 <-> 98.166.225.145 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:26.930990 0.000000 udp 10.0.2.22 51868 -> 82.59.113.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:35:27.932858 0.000000 udp 10.0.2.22 51868 -> 106.195.128.104 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:35:29.925705 0.000000 udp 10.0.2.22 51868 -> 91.4.124.104 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:35:30.926847 0.239570 udp 10.0.2.22 51868 <-> 71.92.217.0 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:31.928449 0.119458 udp 10.0.2.22 51868 <-> 98.166.225.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:32.929991 1.366608 udp 10.0.2.22 51868 <-> 186.182.96.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:33.931106 0.000000 udp 10.0.2.22 51868 -> 178.79.27.248 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:35:34.932867 0.000000 udp 10.0.2.22 51868 -> 190.185.220.95 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:35:35.934413 0.000000 udp 10.0.2.22 51868 -> 81.231.105.164 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:35:36.925839 0.171797 udp 10.0.2.22 51868 <-> 70.44.250.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:37.927198 0.240297 udp 10.0.2.22 51868 <-> 201.208.196.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:38.808385 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:35:38.928548 1.910161 udp 10.0.2.22 51868 <-> 189.35.224.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:39.930050 0.172681 udp 10.0.2.22 51868 <-> 98.140.199.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:40.931154 0.209271 udp 10.0.2.22 51868 <-> 98.234.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:41.933183 1.421957 udp 10.0.2.22 51868 <-> 186.176.98.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:42.934604 0.143038 udp 10.0.2.22 51868 <-> 95.250.176.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:43.925665 0.000000 udp 10.0.2.22 51868 -> 62.117.133.119 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:35:44.927226 0.082008 udp 10.0.2.22 51868 <-> 88.82.203.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:45.928541 0.108116 udp 10.0.2.22 51868 <-> 79.33.228.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:46.930060 0.000000 udp 10.0.2.22 51868 -> 184.146.146.134 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:35:47.931630 1.061946 udp 10.0.2.22 51868 <-> 82.247.43.133 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:49.934354 0.165641 udp 10.0.2.22 51868 <-> 173.18.197.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:50.925739 0.160020 udp 10.0.2.22 51868 <-> 12.39.137.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:51.926937 0.126284 udp 10.0.2.22 51868 <-> 158.181.242.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:52.928403 0.000000 udp 10.0.2.22 51868 -> 79.144.180.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:35:53.929965 2.278919 udp 10.0.2.22 51868 <-> 95.57.180.55 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:54.931547 0.039513 udp 10.0.2.22 51868 <-> 89.65.83.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:56.934227 0.032356 udp 10.0.2.22 51868 <-> 91.146.249.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:57.925969 0.111500 udp 10.0.2.22 51868 <-> 81.61.64.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:58.926975 0.333308 udp 10.0.2.22 51868 <-> 190.206.217.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:35:59.928602 0.156258 udp 10.0.2.22 51868 <-> 96.59.111.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:00.930076 0.043726 udp 10.0.2.22 51868 <-> 5.13.57.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:01.931649 0.359145 udp 10.0.2.22 51868 <-> 114.39.150.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:02.933057 0.076712 udp 10.0.2.22 51868 <-> 151.74.151.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:03.934310 0.238424 udp 10.0.2.22 51868 <-> 201.164.233.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:04.925839 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:36:05.807001 0.000098 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:36:05.927117 2.146357 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:06.928551 0.000000 udp 10.0.2.22 51868 -> 24.102.154.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:36:08.931765 0.000000 udp 10.0.2.22 51868 -> 108.181.202.185 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:36:09.932992 0.301697 udp 10.0.2.22 51868 <-> 126.60.25.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:10.934615 0.025731 udp 10.0.2.22 51868 <-> 86.101.244.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:11.925977 0.079753 udp 10.0.2.22 51868 <-> 176.194.179.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:12.927526 0.101613 udp 10.0.2.22 51868 <-> 78.35.80.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:13.929051 0.140393 udp 10.0.2.22 51868 <-> 47.23.94.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:14.930509 0.000000 udp 10.0.2.22 51868 -> 93.118.202.229 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:36:15.931689 1.168318 udp 10.0.2.22 51868 <-> 76.107.91.7 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:17.934282 0.132246 udp 10.0.2.22 51868 <-> 75.109.236.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:18.925962 0.179339 udp 10.0.2.22 51868 <-> 69.1.2.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:19.927604 0.312193 udp 10.0.2.22 51868 <-> 186.53.206.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:20.928878 0.135922 udp 10.0.2.22 51868 <-> 72.241.245.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:21.930426 0.281682 udp 10.0.2.22 51868 <-> 186.94.231.224 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:22.931710 0.156908 udp 10.0.2.22 51868 <-> 68.62.2.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:23.933576 1.031875 udp 10.0.2.22 51868 <-> 201.210.215.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:24.934702 0.044456 udp 10.0.2.22 51868 <-> 78.97.130.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:25.933164 0.000000 udp 10.0.2.22 51868 -> 87.198.109.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:36:26.933135 0.000000 udp 10.0.2.22 51868 -> 94.190.190.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:36:27.933811 0.032617 udp 10.0.2.22 51868 <-> 91.146.249.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:28.937712 1.083959 udp 10.0.2.22 51868 <-> 95.74.171.8 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:30.941798 0.363892 udp 10.0.2.22 51868 <-> 111.242.5.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:31.942942 0.395381 udp 10.0.2.22 51868 <-> 183.87.71.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:32.814275 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:36:32.934150 0.151617 udp 10.0.2.22 51868 <-> 173.178.10.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:33.934997 1.139779 udp 10.0.2.22 51868 <-> 71.77.141.55 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:35.930410 0.000000 udp 10.0.2.22 51868 -> 95.85.162.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:36:36.935589 1.410250 udp 10.0.2.22 51868 <-> 186.36.70.90 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:38.935656 3.067509 udp 10.0.2.22 51868 <-> 14.99.56.113 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:39.941847 0.345893 udp 10.0.2.22 51868 <-> 114.36.213.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:40.941507 0.363342 udp 10.0.2.22 51868 <-> 111.242.5.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:42.941573 0.048698 udp 10.0.2.22 51868 <-> 178.85.91.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:43.938235 0.445431 udp 10.0.2.22 51868 <-> 201.211.184.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:44.935068 0.282982 udp 10.0.2.22 51868 <-> 60.56.88.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:45.928319 0.000000 udp 10.0.2.22 51868 -> 187.2.67.88 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:36:46.926051 2.052078 udp 10.0.2.22 51868 <-> 188.26.217.37 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:47.927876 0.000000 udp 10.0.2.22 51868 -> 188.27.217.109 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:36:49.930606 0.041429 udp 10.0.2.22 51868 <-> 78.90.253.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:50.932028 0.310497 udp 10.0.2.22 51868 <-> 187.2.67.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:51.933678 0.090003 udp 10.0.2.22 51868 <-> 46.33.208.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:52.925015 2.290962 udp 10.0.2.22 51868 <-> 14.97.186.104 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:53.017881 3.003992 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 09:36:53.926045 0.049976 udp 10.0.2.22 51868 <-> 188.26.217.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:55.931967 0.064253 udp 10.0.2.22 51868 <-> 46.35.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:56.930618 0.030141 udp 10.0.2.22 51868 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:57.932038 0.000000 udp 10.0.2.22 51868 -> 173.50.82.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:36:58.933816 0.085353 udp 10.0.2.22 51868 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:36:59.806563 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:36:59.926475 0.228600 udp 10.0.2.22 51868 <-> 190.75.56.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:37:00.026381 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:37:00.927072 0.299249 udp 10.0.2.22 51868 <-> 201.212.133.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:37:01.927219 0.275878 udp 10.0.2.22 51868 <-> 190.193.86.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:37:02.931720 0.155724 udp 10.0.2.22 51868 <-> 203.192.244.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:37:03.932118 0.034682 udp 10.0.2.22 51868 <-> 77.236.190.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:37:04.935358 0.000000 udp 10.0.2.22 51868 -> 58.108.171.233 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:05.934710 0.029492 udp 10.0.2.22 51868 <-> 77.23.138.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:37:06.925027 1.449413 udp 10.0.2.22 51868 <-> 190.130.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:37:08.026354 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:37:08.927779 0.166612 udp 10.0.2.22 51868 <-> 71.45.74.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:37:09.929453 0.333979 udp 10.0.2.22 51868 <-> 1.34.204.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:37:10.930839 0.154265 udp 10.0.2.22 51868 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:37:11.932389 0.160663 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:37:12.933567 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:13.925017 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:14.926800 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:15.927975 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:16.929240 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:17.930792 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:18.932071 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:19.933956 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:20.926365 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:21.926774 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:22.927996 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:23.929005 0.000000 udp 10.0.2.22 51868 -> 85.152.244.7 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:24.029495 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:37:24.931003 0.263313 udp 10.0.2.22 51868 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:37:25.932237 0.156104 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:37:26.803800 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:37:26.934026 0.000000 udp 10.0.2.22 51868 -> 181.16.7.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:27.925197 0.218966 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:37:28.926496 0.305138 udp 10.0.2.22 51868 <-> 186.94.17.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:37:29.928343 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:30.929641 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:31.931079 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:32.932633 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:33.934601 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:34.925545 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:35.926697 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:36.928555 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:37.929493 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:39.932704 3.249998 udp 10.0.2.22 51868 <-> 177.227.216.250 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:37:40.263026 0.013121 udp 10.0.2.22 60060 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 09:37:40.276455 0.000000 udp 10.0.2.22 60061 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:40.934058 0.187101 udp 10.0.2.22 51868 <-> 97.79.31.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:37:41.925611 0.000000 udp 10.0.2.22 51868 -> 109.53.221.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:43.928398 0.177732 udp 10.0.2.22 51868 <-> 85.230.174.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:37:44.929953 0.029270 udp 10.0.2.22 51868 <-> 91.89.202.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:37:45.930893 0.000000 udp 10.0.2.22 51868 -> 66.192.11.110 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:46.932734 1.684941 udp 10.0.2.22 51868 <-> 190.38.7.14 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:37:47.934379 0.172904 udp 10.0.2.22 51868 <-> 174.103.239.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:37:48.925165 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:49.926707 0.323263 udp 10.0.2.22 51868 <-> 186.94.17.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:37:50.928352 4.997157 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:51.929755 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:52.931210 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:53.802333 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:37:53.932702 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:54.934100 0.040312 udp 10.0.2.22 51868 <-> 89.215.36.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:37:56.035924 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:37:56.926697 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:57.931797 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:37:58.932155 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:00.932650 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:01.934563 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:02.925555 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:03.926899 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:04.928627 0.065358 udp 10.0.2.22 51868 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:38:05.929801 3.789924 udp 10.0.2.22 51868 <-> 186.22.32.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:38:06.931329 0.000000 udp 10.0.2.22 51868 -> 216.121.192.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:07.933258 1.560384 udp 10.0.2.22 51868 <-> 190.38.7.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:38:08.934376 0.059486 udp 10.0.2.22 51868 <-> 94.156.49.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:38:09.925753 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:10.927470 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:11.928451 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:12.930039 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:13.931311 3.995674 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:14.932893 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:15.934141 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:16.925913 3.043262 udp 10.0.2.22 51868 <-> 89.215.36.131 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:38:18.928843 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:20.800637 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:38:20.931176 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:21.932797 4.997143 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:21.932926 4.997014 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 2 172 flow=Background 1970/01/01 09:38:22.934393 0.090107 udp 10.0.2.22 51868 <-> 95.86.74.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:38:23.926139 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:24.927124 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:25.928555 0.039189 udp 10.0.2.22 51868 <-> 89.215.36.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:38:27.931520 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:28.933103 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:29.934349 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:30.925953 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:31.927347 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:32.928506 0.038943 udp 10.0.2.22 51868 <-> 89.215.36.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:38:33.934644 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:34.935285 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:35.935124 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:36.935450 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:37.926041 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:38.927112 0.000000 udp 10.0.2.22 51868 -> 216.121.192.14 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:39.928593 1.681484 udp 10.0.2.22 51868 <-> 190.38.7.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:38:40.931899 0.129876 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:38:41.932027 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:42.936756 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:43.937265 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:44.927439 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:45.930556 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:46.930471 0.504654 udp 10.0.2.22 51868 <-> 177.29.103.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:38:47.800334 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:38:47.930625 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:48.931653 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:49.932995 3.995946 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:50.934498 4.999863 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:51.928186 0.416783 udp 10.0.2.22 51868 <-> 1.163.82.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:38:52.928137 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:54.933637 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:56.933967 0.039219 udp 10.0.2.22 51868 <-> 89.215.36.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:38:57.936703 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:58.926635 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:38:59.928689 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:39:00.928694 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:39:01.930464 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:39:02.939355 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:39:03.941091 0.510503 udp 10.0.2.22 51868 <-> 177.29.103.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:04.943566 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:39:05.931732 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:39:06.930025 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:39:07.928765 0.039381 udp 10.0.2.22 51868 <-> 89.215.36.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:08.930554 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:39:09.963511 4.966380 udp 10.0.2.22 51868 <-> 190.38.7.14 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:10.956967 0.054535 udp 10.0.2.22 51868 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:11.943907 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:39:12.939612 0.500726 udp 10.0.2.22 51868 <-> 177.29.103.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:13.934420 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:39:14.810317 0.000110 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:39:15.930924 4.996680 udp 10.0.2.22 51868 -> 24.94.123.9 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:39:16.560372 0.000000 udp 10.0.2.22 51868 <- 190.38.7.14 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:39:16.934095 0.157277 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:17.934064 0.170323 udp 10.0.2.22 51868 <-> 174.103.239.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:18.924804 0.085798 udp 10.0.2.22 51868 <-> 46.191.148.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:19.926315 0.000000 udp 10.0.2.22 51868 -> 216.121.192.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:39:21.089748 0.000000 udp 10.0.2.22 51868 <- 24.94.123.9 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:39:21.929023 0.077655 udp 10.0.2.22 51868 <-> 217.129.118.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:22.930702 0.098671 udp 10.0.2.22 51868 <-> 78.84.18.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:23.932007 0.202629 udp 10.0.2.22 51868 <-> 178.127.188.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:24.969742 0.146150 udp 10.0.2.22 51868 <-> 184.57.62.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:25.955708 0.000000 udp 10.0.2.22 51868 -> 186.218.80.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:39:26.952692 0.141000 udp 10.0.2.22 51868 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:27.951037 0.000000 udp 10.0.2.22 51868 -> 12.154.171.42 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:39:28.945939 1.989427 udp 10.0.2.22 51868 -> 85.11.182.239 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:39:29.941060 0.354227 udp 10.0.2.22 51868 <-> 61.223.208.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:31.932983 0.426667 udp 10.0.2.22 51868 <-> 186.94.17.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:32.924794 0.037467 udp 10.0.2.22 51868 <-> 188.254.170.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:33.926095 1.349851 udp 10.0.2.22 51868 <-> 190.130.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:34.927720 0.000000 udp 10.0.2.22 51868 -> 41.70.147.171 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:39:35.929137 0.427420 udp 10.0.2.22 51868 <-> 186.92.177.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:36.930824 0.198096 udp 10.0.2.22 51868 <-> 75.85.120.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:37.931990 0.342814 udp 10.0.2.22 51868 <-> 190.173.2.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:38.933675 0.311011 udp 10.0.2.22 51868 <-> 190.206.94.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:39.924857 0.145464 udp 10.0.2.22 51868 <-> 27.106.2.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:40.926078 0.139301 udp 10.0.2.22 51868 <-> 24.45.223.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:41.807633 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:39:41.927636 0.284487 udp 10.0.2.22 51868 <-> 75.48.12.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:42.929598 0.077372 udp 10.0.2.22 51868 <-> 217.129.118.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:43.930755 0.364211 udp 10.0.2.22 51868 <-> 5.190.123.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:44.932281 0.000000 udp 10.0.2.22 51868 -> 76.24.62.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:39:45.934661 0.317284 udp 10.0.2.22 51868 <-> 81.226.243.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:46.924991 0.149443 udp 10.0.2.22 51868 <-> 74.12.109.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:47.926390 0.365973 udp 10.0.2.22 51868 <-> 118.161.150.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:48.927796 0.972035 udp 10.0.2.22 51868 <-> 181.165.163.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:49.929730 0.000000 udp 10.0.2.22 51868 -> 92.250.178.152 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:39:50.930628 0.000000 udp 10.0.2.22 51868 -> 216.114.33.171 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:39:51.935931 0.186662 udp 10.0.2.22 51868 <-> 199.117.183.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:52.936382 0.000000 udp 10.0.2.22 51868 -> 186.88.174.68 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:39:53.926143 0.000000 udp 10.0.2.22 51868 -> 83.21.64.131 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:39:54.926259 0.127597 udp 10.0.2.22 51868 <-> 24.230.249.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:55.927918 0.376576 udp 10.0.2.22 51868 <-> 59.95.147.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:56.929735 0.051127 udp 10.0.2.22 51868 <-> 37.203.120.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:57.931103 0.489048 udp 10.0.2.22 51868 <-> 200.127.30.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:58.932162 0.178130 udp 10.0.2.22 51868 <-> 68.179.181.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:39:59.933852 0.000000 udp 10.0.2.22 51868 -> 92.86.42.111 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:40:00.925305 0.285667 udp 10.0.2.22 51868 <-> 190.188.235.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:01.926910 0.553222 udp 10.0.2.22 51868 <-> 186.88.170.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:02.928067 1.137638 udp 10.0.2.22 51868 <-> 24.51.69.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:03.931896 0.070180 udp 10.0.2.22 51868 <-> 212.92.251.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:04.932082 0.100168 udp 10.0.2.22 51868 <-> 79.182.1.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:05.935901 0.276405 udp 10.0.2.22 51868 <-> 87.4.183.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:06.936435 1.082583 udp 10.0.2.22 51868 <-> 78.9.29.136 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:08.806517 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:40:08.926640 0.000000 udp 10.0.2.22 51868 -> 10.1.1.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:40:09.928214 0.000000 udp 10.0.2.22 51868 -> 109.199.236.29 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:40:10.929770 0.096969 udp 10.0.2.22 51868 <-> 217.114.188.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:11.931010 0.915417 udp 10.0.2.22 51868 <-> 24.229.141.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:12.932395 0.347516 udp 10.0.2.22 51868 <-> 186.94.66.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:13.934847 0.000000 udp 10.0.2.22 51868 -> 173.210.217.104 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:40:14.925506 0.000000 udp 10.0.2.22 51868 -> 190.252.196.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:40:15.926642 0.067187 udp 10.0.2.22 51868 <-> 79.108.227.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:16.928882 0.072991 udp 10.0.2.22 51868 <-> 85.152.63.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:17.930029 0.040269 udp 10.0.2.22 51868 <-> 89.77.207.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:18.931084 0.072717 udp 10.0.2.22 51868 <-> 80.183.28.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:19.932753 0.036959 udp 10.0.2.22 51868 <-> 89.69.52.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:20.933989 0.056150 udp 10.0.2.22 51868 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:21.925613 3.085217 udp 10.0.2.22 51868 <-> 188.167.119.51 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:22.927031 0.186598 udp 10.0.2.22 51868 <-> 75.180.55.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:23.928309 4.452108 udp 10.0.2.22 51868 <-> 187.23.35.120 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:25.931131 0.048778 udp 10.0.2.22 51868 <-> 87.247.96.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:26.932690 0.000000 udp 10.0.2.22 51868 -> 37.250.94.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:40:28.926106 0.157650 udp 10.0.2.22 51868 <-> 178.127.106.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:29.926938 0.169294 udp 10.0.2.22 51868 <-> 68.116.158.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:30.928432 0.160765 udp 10.0.2.22 51868 <-> 173.165.66.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:31.929928 4.034315 udp 10.0.2.22 51868 <-> 89.73.207.4 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:32.931212 0.083258 udp 10.0.2.22 51868 <-> 95.86.47.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:33.932796 0.148647 udp 10.0.2.22 51868 <-> 71.194.150.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:34.934387 0.040931 udp 10.0.2.22 51868 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:35.805699 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:40:36.926902 0.191872 udp 10.0.2.22 51868 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:37.928254 0.156103 udp 10.0.2.22 51868 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:38.930307 0.040841 udp 10.0.2.22 51868 <-> 89.65.83.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:39.931338 0.154195 udp 10.0.2.22 51868 <-> 74.58.30.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:40.932789 0.069522 udp 10.0.2.22 51868 <-> 85.87.224.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:41.934280 0.067552 udp 10.0.2.22 51868 <-> 95.107.216.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:42.925931 0.000000 udp 10.0.2.22 51868 -> 87.97.201.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:40:43.927074 3.049323 udp 10.0.2.22 51868 <-> 213.46.47.81 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:44.928572 4.230386 udp 10.0.2.22 51868 <-> 190.146.36.60 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:45.930202 0.057206 udp 10.0.2.22 51868 <-> 78.8.65.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:47.932721 0.000000 udp 10.0.2.22 51868 -> 176.32.17.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:40:49.925870 0.000000 udp 10.0.2.22 51868 -> 2.187.231.48 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:40:50.927053 0.000000 udp 10.0.2.22 51868 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:40:51.928626 0.000000 udp 10.0.2.22 51868 -> 89.76.109.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:40:52.930058 0.076250 udp 10.0.2.22 51868 <-> 134.249.0.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:53.931751 0.175717 udp 10.0.2.22 51868 <-> 2.194.52.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:54.932771 0.000000 udp 10.0.2.22 51868 -> 95.107.216.55 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:40:55.934096 0.049563 udp 10.0.2.22 51868 <-> 5.12.11.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:56.925781 2.039779 udp 10.0.2.22 51868 <-> 213.114.157.66 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:40:57.927037 0.000000 udp 10.0.2.22 51868 -> 2.187.231.48 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:40:59.929876 0.000000 udp 10.0.2.22 51868 -> 188.183.127.137 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:41:00.931181 0.140243 udp 10.0.2.22 51868 <-> 24.182.94.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:01.932625 1.009310 udp 10.0.2.22 51868 <-> 24.51.69.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:02.803974 0.000085 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:41:02.934366 0.178354 udp 10.0.2.22 51868 <-> 75.133.46.80 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:03.926132 1.273388 udp 10.0.2.22 51868 <-> 201.235.95.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:04.927267 0.141514 udp 10.0.2.22 51868 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:05.929067 0.059411 udp 10.0.2.22 51868 <-> 78.228.60.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:06.929981 3.996305 udp 10.0.2.22 51868 -> 171.101.222.14 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:41:07.931809 0.000000 udp 10.0.2.22 51868 -> 190.51.16.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:41:08.932813 1.398733 udp 10.0.2.22 51868 <-> 208.101.72.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:09.934370 0.000000 udp 10.0.2.22 51868 -> 77.23.138.235 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:41:11.927356 3.572495 udp 10.0.2.22 51868 <-> 218.103.165.228 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:12.928786 0.000000 udp 10.0.2.22 51868 -> 79.49.174.31 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:41:13.930150 0.000000 udp 10.0.2.22 51868 -> 186.88.170.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:41:15.933096 0.000000 udp 10.0.2.22 51868 -> 1.172.59.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:41:16.935359 0.559027 udp 10.0.2.22 51868 <-> 75.197.131.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:17.926258 0.185148 udp 10.0.2.22 51868 <-> 2.192.21.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:18.927317 4.052248 udp 10.0.2.22 51868 <-> 89.46.84.98 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:19.928735 0.077313 udp 10.0.2.22 51868 <-> 46.35.173.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:20.930403 4.052730 udp 10.0.2.22 51868 <-> 79.119.95.120 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:21.931636 0.313566 udp 10.0.2.22 51868 <-> 190.202.252.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:23.934935 0.245631 udp 10.0.2.22 51868 <-> 190.207.46.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:25.927215 0.066423 udp 10.0.2.22 51868 <-> 92.32.95.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:26.928781 0.363658 udp 10.0.2.22 51868 <-> 112.133.130.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:27.930372 0.059752 udp 10.0.2.22 51868 <-> 109.87.252.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:28.931063 0.185091 udp 10.0.2.22 51868 <-> 24.139.142.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:29.802862 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:41:29.933190 0.289460 udp 10.0.2.22 51868 <-> 85.224.201.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:30.934626 0.145621 udp 10.0.2.22 51868 <-> 74.199.89.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:31.926194 0.135578 udp 10.0.2.22 51868 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:32.927058 0.047933 udp 10.0.2.22 51868 <-> 78.22.205.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:33.928824 0.000000 udp 10.0.2.22 51868 -> 86.124.224.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:41:34.930553 0.364958 udp 10.0.2.22 51868 <-> 111.240.40.248 16464 CON 0 0 5 3618 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:35.932153 0.065840 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:36.933087 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:41:37.935138 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:41:38.926345 0.758034 udp 10.0.2.22 51868 <-> 201.248.248.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:39.927907 0.335845 udp 10.0.2.22 51868 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:40.928838 0.072015 udp 10.0.2.22 51868 <-> 188.27.119.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:41.930435 0.094246 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:42.931902 0.000000 udp 10.0.2.22 51868 -> 58.108.171.233 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:41:43.933348 0.054946 udp 10.0.2.22 51868 <-> 82.242.39.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:44.924787 0.146454 udp 10.0.2.22 51868 <-> 67.85.178.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:45.926682 0.042158 udp 10.0.2.22 51868 <-> 78.90.253.110 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:46.927590 0.145513 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:47.928837 0.000000 udp 10.0.2.22 51868 -> 200.109.62.99 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:41:48.930592 0.065693 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:49.931183 0.000000 udp 10.0.2.22 51868 -> 201.248.248.253 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:41:50.933693 0.000000 udp 10.0.2.22 51868 -> 95.220.247.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:41:51.924741 0.000000 udp 10.0.2.22 51868 -> 46.150.79.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:41:52.926262 0.074586 udp 10.0.2.22 51868 <-> 188.27.119.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:53.927838 0.043002 udp 10.0.2.22 51868 <-> 5.13.57.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:54.929463 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:41:55.930665 0.000000 udp 10.0.2.22 51868 -> 58.108.171.233 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:41:56.802035 0.000107 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:41:56.932228 0.156557 udp 10.0.2.22 51868 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:57.933623 0.399918 udp 10.0.2.22 51868 <-> 200.109.62.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:58.925084 0.052398 udp 10.0.2.22 51868 <-> 86.124.224.253 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:41:59.926169 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:42:00.928104 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:42:01.930469 0.000168 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:42:01.930637 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:42:02.936743 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:42:03.935848 0.248313 udp 10.0.2.22 51868 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:04.935863 0.141175 udp 10.0.2.22 51868 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:05.925790 2.066065 udp 10.0.2.22 51868 <-> 86.124.224.253 16464 CON 0 0 6 3676 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:06.926365 0.000000 udp 10.0.2.22 51868 -> 184.163.55.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:42:08.932091 0.000000 udp 10.0.2.22 51868 -> 217.18.251.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:42:09.931863 0.042288 udp 10.0.2.22 51868 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:10.931983 0.159849 udp 10.0.2.22 51868 <-> 24.252.126.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:11.933665 0.249854 udp 10.0.2.22 51868 <-> 82.229.113.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:12.924808 0.038119 udp 10.0.2.22 51868 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:13.926710 0.000000 udp 10.0.2.22 51868 -> 68.114.151.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:42:14.927902 0.000000 udp 10.0.2.22 51868 -> 95.223.45.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:42:15.929189 0.578235 udp 10.0.2.22 51868 <-> 79.51.146.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:16.930842 4.684006 udp 10.0.2.22 51868 <-> 187.25.181.5 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:17.932167 0.226988 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:18.933318 0.000000 udp 10.0.2.22 51868 -> 93.79.133.55 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:42:21.927994 0.166849 udp 10.0.2.22 51868 <-> 69.204.114.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:22.929696 0.063030 udp 10.0.2.22 51868 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:23.800577 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:42:23.930776 0.188083 udp 10.0.2.22 51868 <-> 74.115.215.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:24.932095 0.054246 udp 10.0.2.22 51868 <-> 188.241.10.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:25.933892 0.050249 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:26.925097 0.142749 udp 10.0.2.22 51868 <-> 37.213.106.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:27.926619 0.206356 udp 10.0.2.22 51868 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:28.927870 0.734660 udp 10.0.2.22 51868 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:29.930155 0.148912 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:30.930800 0.000000 udp 10.0.2.22 51868 -> 68.196.49.223 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:42:31.932648 0.036395 udp 10.0.2.22 51868 <-> 79.117.54.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:32.933997 0.174107 udp 10.0.2.22 51868 <-> 69.244.18.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:33.925154 0.045235 udp 10.0.2.22 51868 <-> 89.137.97.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:34.926616 0.000000 udp 10.0.2.22 51868 -> 107.32.4.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:42:35.927989 0.000000 udp 10.0.2.22 51868 -> 179.85.246.240 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:42:36.929905 0.000000 udp 10.0.2.22 51868 -> 80.216.65.229 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:42:37.930876 0.983900 udp 10.0.2.22 51868 <-> 181.118.86.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:38.932230 0.000000 udp 10.0.2.22 51868 -> 1.34.204.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:42:39.934173 0.144530 udp 10.0.2.22 51868 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:40.925036 1.181461 udp 10.0.2.22 51868 <-> 67.242.138.72 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:42.927988 0.000000 udp 10.0.2.22 51868 -> 190.110.186.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:42:43.929831 0.057647 udp 10.0.2.22 51868 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:44.931167 0.052444 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:45.932459 0.000000 udp 10.0.2.22 51868 -> 85.230.174.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:42:46.933834 0.174754 udp 10.0.2.22 51868 <-> 72.181.16.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:47.925420 0.294155 udp 10.0.2.22 51868 <-> 179.235.133.223 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:48.926891 0.162732 udp 10.0.2.22 51868 <-> 71.89.115.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:49.928136 0.030248 udp 10.0.2.22 51868 <-> 95.111.26.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:50.799875 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:42:50.930185 0.156939 udp 10.0.2.22 51868 <-> 174.102.183.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:51.932028 2.183288 udp 10.0.2.22 51868 <-> 84.232.108.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:52.932446 0.000000 udp 10.0.2.22 51868 -> 190.94.222.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:42:53.934118 0.000000 udp 10.0.2.22 51868 -> 181.118.86.242 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:42:54.925435 0.917578 udp 10.0.2.22 51868 <-> 223.225.51.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:55.926895 0.027032 udp 10.0.2.22 51868 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:56.928139 0.168458 udp 10.0.2.22 51868 <-> 174.103.239.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:42:57.930180 0.000000 udp 10.0.2.22 51868 -> 190.203.136.32 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:42:58.869165 0.000000 udp 10.0.2.22 51868 <- 190.94.222.17 16464 RSP 0 0 1 750 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:42:58.930999 0.000000 udp 10.0.2.22 51868 -> 187.247.181.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:42:59.932388 0.170873 udp 10.0.2.22 51868 <-> 75.67.160.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:00.934274 1.877513 udp 10.0.2.22 51868 <-> 113.19.2.30 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:01.925824 0.330611 udp 10.0.2.22 51868 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:02.926842 0.163348 udp 10.0.2.22 51868 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:03.928501 0.283711 udp 10.0.2.22 51868 <-> 60.62.152.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:04.929967 0.273349 udp 10.0.2.22 51868 <-> 108.176.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:05.931279 0.165819 udp 10.0.2.22 51868 <-> 174.63.38.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:06.932408 0.386048 udp 10.0.2.22 51868 <-> 2.194.11.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:07.934189 0.319949 udp 10.0.2.22 51868 <-> 117.203.235.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:08.925681 0.060075 udp 10.0.2.22 51868 <-> 89.190.97.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:09.926985 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:43:10.928238 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:43:11.930097 0.119406 udp 10.0.2.22 51868 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:12.931185 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:43:13.932615 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:43:14.936450 0.147678 udp 10.0.2.22 51868 <-> 136.159.63.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:15.927929 0.147267 udp 10.0.2.22 51868 <-> 96.22.178.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:16.933851 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:43:17.815814 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:43:17.935644 0.220669 udp 10.0.2.22 51868 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:18.933608 1.438926 udp 10.0.2.22 51868 <-> 190.174.242.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:19.933607 0.146943 udp 10.0.2.22 51868 <-> 192.226.149.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:20.932563 0.147913 udp 10.0.2.22 51868 <-> 50.167.134.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:21.934258 0.051130 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:22.925187 0.078850 udp 10.0.2.22 51868 <-> 46.161.110.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:23.926983 0.187445 udp 10.0.2.22 51868 <-> 98.176.21.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:24.928367 0.046000 udp 10.0.2.22 51868 <-> 77.87.8.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:25.929947 0.100532 udp 10.0.2.22 51868 <-> 77.45.49.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:26.931234 0.045524 udp 10.0.2.22 51868 <-> 80.3.182.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:27.932817 0.207334 udp 10.0.2.22 51868 <-> 98.237.181.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:28.934280 0.737394 udp 10.0.2.22 51868 <-> 115.187.56.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:29.926012 0.170588 udp 10.0.2.22 51868 <-> 174.63.38.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:31.928525 0.000000 udp 10.0.2.22 51868 -> 109.53.229.237 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:43:32.930194 0.294293 udp 10.0.2.22 51868 <-> 60.56.154.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:33.931213 0.000000 udp 10.0.2.22 51868 -> 85.130.19.80 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:43:34.933028 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:43:35.934729 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:43:36.926082 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:43:37.927401 0.000000 udp 10.0.2.22 51868 -> 85.114.172.160 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:43:38.928770 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:43:39.930527 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:43:40.931853 0.362031 udp 10.0.2.22 51868 -> 114.39.57.164 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:43:41.293884 0.000000 icmp 114.39.57.164 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 09:43:41.932697 0.000054 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:43:41.932751 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:43:42.934430 0.158978 udp 10.0.2.22 51868 -> 71.63.18.166 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:43:43.093408 0.000000 icmp 71.63.18.166 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 09:43:43.926723 0.000000 udp 10.0.2.22 51868 -> 190.174.242.41 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:43:44.806883 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:43:44.927118 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:43:46.930222 4.996936 udp 10.0.2.22 51868 -> 186.70.25.14 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:43:47.935956 4.992866 udp 10.0.2.22 51868 -> 109.53.229.237 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:43:48.936093 4.994160 udp 10.0.2.22 51868 <-> 107.10.164.51 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:49.936140 0.000000 udp 10.0.2.22 51868 -> 190.174.242.41 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:43:50.925906 0.000000 udp 10.0.2.22 51868 -> 177.139.119.82 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:43:52.287609 0.000000 udp 10.0.2.22 51868 <- 186.70.25.14 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:43:54.083002 1.035208 udp 10.0.2.22 51868 <-> 107.10.164.51 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:55.933440 0.333713 udp 10.0.2.22 51868 <-> 114.40.221.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:56.934843 0.056682 udp 10.0.2.22 51868 <-> 86.122.97.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:57.926138 0.478602 udp 10.0.2.22 51868 <-> 190.192.195.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:43:58.927284 0.000000 udp 10.0.2.22 51868 -> 208.90.8.187 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:43:59.928639 0.404395 udp 10.0.2.22 51868 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:00.041601 3.011974 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 09:44:00.941076 0.182441 udp 10.0.2.22 51868 <-> 97.79.31.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:01.937471 0.428198 udp 10.0.2.22 51868 <-> 5.22.116.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:02.933688 0.389508 udp 10.0.2.22 51868 <-> 36.228.69.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:03.936073 0.329152 udp 10.0.2.22 51868 <-> 123.110.11.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:04.926075 0.000000 udp 10.0.2.22 51868 -> 49.203.247.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:44:05.927165 1.048230 udp 10.0.2.22 51868 <-> 193.151.100.29 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:07.059013 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:44:07.930245 0.050719 udp 10.0.2.22 51868 <-> 89.46.217.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:08.931911 0.000000 udp 10.0.2.22 51868 -> 49.107.6.226 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:44:09.932922 0.000000 udp 10.0.2.22 51868 -> 178.131.43.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:44:10.934515 0.391204 udp 10.0.2.22 51868 <-> 190.189.156.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:11.805180 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:44:11.925722 0.455506 udp 10.0.2.22 51868 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:12.927691 0.000000 udp 10.0.2.22 51868 -> 109.199.236.29 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:44:13.928801 0.355850 udp 10.0.2.22 51868 <-> 111.254.125.242 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:14.930576 0.157800 udp 10.0.2.22 51868 <-> 192.253.210.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:15.060454 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:44:15.931920 0.143191 udp 10.0.2.22 51868 <-> 66.168.86.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:16.933413 0.000000 udp 10.0.2.22 51868 -> 49.205.236.83 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:44:17.924653 0.000000 udp 10.0.2.22 51868 -> 83.54.166.111 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:44:18.926138 0.327967 udp 10.0.2.22 51868 <-> 119.14.241.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:19.927344 2.058473 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:20.929061 2.042489 udp 10.0.2.22 51868 <-> 89.73.207.4 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:23.933236 0.069057 udp 10.0.2.22 51868 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:24.925137 0.000000 udp 10.0.2.22 51868 -> 87.120.215.67 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:44:25.926155 0.000000 udp 10.0.2.22 51868 -> 190.79.12.78 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:44:26.927691 0.291486 udp 10.0.2.22 51868 <-> 186.92.81.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:27.929641 0.555478 udp 10.0.2.22 51868 <-> 71.155.230.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:28.930395 0.260236 udp 10.0.2.22 51868 <-> 70.239.90.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:29.931645 2.026687 udp 10.0.2.22 51868 <-> 78.90.64.228 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:30.933236 0.215077 udp 10.0.2.22 51868 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:31.063490 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:44:32.926271 0.203392 udp 10.0.2.22 51868 <-> 111.119.245.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:33.927700 0.093702 udp 10.0.2.22 51868 <-> 217.114.188.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:34.929085 0.415679 udp 10.0.2.22 51868 <-> 14.96.115.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:35.936927 0.000000 udp 10.0.2.22 51868 -> 49.128.34.54 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:44:36.936170 0.053348 udp 10.0.2.22 51868 <-> 82.38.151.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:37.935236 0.000000 udp 10.0.2.22 51868 -> 188.254.207.73 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:44:38.805059 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:44:38.925188 0.057476 udp 10.0.2.22 51868 <-> 212.233.133.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:39.926342 0.918136 udp 10.0.2.22 51868 <-> 84.1.20.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:40.927793 0.059016 udp 10.0.2.22 51868 <-> 94.253.231.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:41.929092 0.159792 udp 10.0.2.22 51868 <-> 70.36.60.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:42.930611 0.000000 udp 10.0.2.22 51868 -> 79.117.151.112 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:44:43.932227 0.529244 udp 10.0.2.22 51868 <-> 187.11.102.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:44.933778 1.730493 udp 10.0.2.22 51868 <-> 186.19.71.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:45.925082 0.000000 udp 10.0.2.22 51868 -> 201.213.14.123 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:44:46.926552 0.118313 udp 10.0.2.22 51868 <-> 46.42.57.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:47.927888 0.000000 udp 10.0.2.22 51868 -> 2.193.245.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:44:48.929500 0.310510 udp 10.0.2.22 51868 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:49.930816 0.625684 udp 10.0.2.22 51868 <-> 201.248.248.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:50.932295 0.183059 udp 10.0.2.22 51868 <-> 207.34.248.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:51.933391 0.045942 udp 10.0.2.22 51868 <-> 5.15.167.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:52.925215 0.356210 udp 10.0.2.22 51868 <-> 90.129.90.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:53.926366 0.174079 udp 10.0.2.22 51868 <-> 66.68.188.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:54.928061 0.000000 udp 10.0.2.22 51868 -> 216.121.192.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:44:55.929796 0.349744 udp 10.0.2.22 51868 <-> 190.193.222.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:56.930849 0.045044 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:57.932148 0.048750 udp 10.0.2.22 51868 <-> 89.136.139.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:58.933576 0.254013 udp 10.0.2.22 51868 <-> 97.79.31.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:44:59.925301 0.263252 udp 10.0.2.22 51868 <-> 50.113.56.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:00.926901 0.125393 udp 10.0.2.22 51868 <-> 5.143.174.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:01.927865 0.080876 udp 10.0.2.22 51868 <-> 151.33.100.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:02.929495 0.000000 udp 10.0.2.22 51868 -> 94.108.174.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:45:03.069963 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:45:03.930865 0.141997 udp 10.0.2.22 51868 <-> 71.7.230.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:04.932225 0.161808 udp 10.0.2.22 51868 <-> 72.200.3.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:05.803337 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:45:05.933625 0.000000 udp 10.0.2.22 51868 -> 188.58.233.106 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:45:06.925112 1.151610 udp 10.0.2.22 51868 <-> 70.44.250.109 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:08.928134 0.012942 udp 10.0.2.22 51868 <-> 131.246.84.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:09.929685 0.000000 udp 10.0.2.22 51868 -> 79.116.107.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:45:10.930773 3.325292 udp 10.0.2.22 51868 <-> 61.70.94.250 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:11.932076 0.000000 udp 10.0.2.22 51868 -> 174.59.159.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:45:12.432315 0.000000 udp 10.0.2.22 51868 <- 188.58.233.106 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:45:12.934016 0.000000 udp 10.0.2.22 51868 -> 85.230.84.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:45:14.926491 1.094906 udp 10.0.2.22 51868 <-> 89.151.151.1 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:16.930695 0.172719 udp 10.0.2.22 51868 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:17.931978 0.293703 udp 10.0.2.22 51868 <-> 72.172.107.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:18.932386 0.504790 udp 10.0.2.22 51868 <-> 187.81.14.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:19.934007 0.000000 udp 10.0.2.22 51868 -> 2.68.0.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:45:20.925006 3.084390 udp 10.0.2.22 51868 <-> 85.152.63.41 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:21.926703 0.160743 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:22.932136 0.172352 udp 10.0.2.22 51868 <-> 120.138.104.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:24.932661 0.157734 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:25.932372 0.292119 udp 10.0.2.22 51868 <-> 190.37.221.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:26.935817 0.321646 udp 10.0.2.22 51868 <-> 61.208.224.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:27.930739 0.136163 udp 10.0.2.22 51868 <-> 24.75.177.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:28.934340 0.346393 udp 10.0.2.22 51868 <-> 36.232.204.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:29.931927 0.310362 udp 10.0.2.22 51868 <-> 125.192.40.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:30.929795 0.271137 udp 10.0.2.22 51868 <-> 176.13.185.220 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:31.930851 0.349580 udp 10.0.2.22 51868 <-> 90.129.90.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:32.802305 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:45:32.932653 0.000000 udp 10.0.2.22 51868 -> 114.25.138.159 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:45:33.933975 0.000000 udp 10.0.2.22 51868 -> 190.79.104.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:45:34.925624 0.176023 udp 10.0.2.22 51868 <-> 184.49.10.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:35.927006 2.066459 udp 10.0.2.22 51868 <-> 46.35.110.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:36.931167 0.317731 udp 10.0.2.22 51868 <-> 201.241.75.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:37.930726 0.482930 udp 10.0.2.22 51868 <-> 70.239.90.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:38.934802 1.869149 udp 10.0.2.22 51868 <-> 189.55.190.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:39.935921 0.042609 udp 10.0.2.22 51868 <-> 176.10.236.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:40.936432 0.091699 udp 10.0.2.22 51868 <-> 78.84.18.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:41.926199 0.000067 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:45:41.926266 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:45:42.926553 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:45:43.928291 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:45:44.930409 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:45:45.936035 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:45:46.938108 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:45:47.947447 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:45:48.941677 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:45:49.939959 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:45:50.940990 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:45:51.937672 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:45:52.935828 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:45:53.934583 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:45:54.939989 0.047613 udp 10.0.2.22 51868 <-> 78.22.205.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:55.930612 0.042853 udp 10.0.2.22 51868 <-> 188.27.165.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:56.937470 0.000000 udp 10.0.2.22 51868 -> 190.78.151.216 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:45:57.938430 0.042503 udp 10.0.2.22 51868 <-> 176.10.236.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:58.935908 0.173244 udp 10.0.2.22 51868 <-> 65.24.129.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:45:59.804246 0.000103 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:45:59.934186 0.038309 udp 10.0.2.22 51868 <-> 78.128.125.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:46:00.932769 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:01.941238 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:02.931921 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:03.932740 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:04.931955 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:05.932141 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:06.931362 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:07.932687 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:08.934239 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:09.925121 0.000067 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:09.925188 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:46:10.927423 0.000000 udp 10.0.2.22 51868 -> 183.87.71.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:11.928435 0.250422 udp 10.0.2.22 51868 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:46:12.932979 0.000000 udp 10.0.2.22 51868 -> 200.93.59.214 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:13.932234 0.392368 udp 10.0.2.22 51868 <-> 177.180.205.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:46:14.933064 0.166891 udp 10.0.2.22 51868 <-> 24.171.57.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:46:15.934412 0.359339 udp 10.0.2.22 51868 <-> 183.87.71.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:46:16.925496 0.046131 udp 10.0.2.22 51868 <-> 89.77.207.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:46:17.929886 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:18.929886 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:19.930283 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:20.931244 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:21.932575 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:22.934178 0.000064 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:22.934242 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:46:23.925931 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:24.933247 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:25.932752 4.001790 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:26.801946 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:46:26.932125 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:27.931791 0.366350 udp 10.0.2.22 51868 <-> 209.236.94.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:46:28.933056 0.000051 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:28.933107 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:46:31.927302 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:32.928916 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:33.930221 0.043907 udp 10.0.2.22 51868 <-> 82.192.44.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:46:34.931391 0.160548 udp 10.0.2.22 51868 <-> 70.83.116.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:46:35.933419 0.488015 udp 10.0.2.22 51868 <-> 186.88.174.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:46:36.934674 0.238274 udp 10.0.2.22 51868 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:46:37.925497 0.310608 udp 10.0.2.22 51868 <-> 150.162.192.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:46:38.927612 2.004925 udp 10.0.2.22 51868 -> 74.56.6.140 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:39.932217 0.239977 udp 10.0.2.22 51868 <-> 173.180.203.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:46:41.932109 0.000000 udp 10.0.2.22 51868 -> 186.182.96.146 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:42.933025 0.046980 udp 10.0.2.22 51868 <-> 5.14.225.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:46:43.924453 0.000000 udp 10.0.2.22 51868 -> 181.28.119.192 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:44.926117 0.288287 udp 10.0.2.22 51868 <-> 190.217.162.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:46:45.927546 0.000000 udp 10.0.2.22 51868 -> 186.95.79.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:46.928821 4.997430 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:46:47.930311 0.167132 udp 10.0.2.22 51868 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:46:48.931667 3.995776 udp 10.0.2.22 51868 <-> 31.147.115.164 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:46:49.933200 0.000000 udp 10.0.2.22 51868 -> 74.56.6.140 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:50.924618 0.280700 udp 10.0.2.22 51868 <-> 201.187.117.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:46:51.967176 0.000000 udp 10.0.2.22 51868 <- 83.221.86.2 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:53.808724 0.000109 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:46:53.928832 0.233604 udp 10.0.2.22 51868 <-> 200.109.206.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:46:54.930589 0.000000 udp 10.0.2.22 51868 -> 109.133.35.57 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:46:55.931877 0.057583 udp 10.0.2.22 51868 <-> 141.136.14.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:46:56.933189 0.043421 udp 10.0.2.22 51868 <-> 46.35.173.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:46:57.924683 0.122895 udp 10.0.2.22 51868 <-> 24.75.190.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:46:58.926171 0.038443 udp 10.0.2.22 51868 <-> 212.117.58.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:46:59.927614 0.218905 udp 10.0.2.22 51868 <-> 67.187.191.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:00.928860 4.997352 udp 10.0.2.22 51868 <-> 193.108.229.8 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:01.930598 0.369900 udp 10.0.2.22 51868 <-> 183.87.71.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:02.931940 4.997990 udp 10.0.2.22 51868 <-> 186.123.130.253 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:03.933412 1.242533 udp 10.0.2.22 51868 <-> 177.227.216.250 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:06.927881 2.904261 udp 10.0.2.22 51868 <-> 197.7.196.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:08.930555 0.037027 udp 10.0.2.22 51868 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:09.931952 0.175727 udp 10.0.2.22 51868 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:10.933678 2.052277 udp 10.0.2.22 51868 <-> 94.156.49.12 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:11.924976 0.000000 udp 10.0.2.22 51868 -> 186.123.130.253 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:47:13.927725 0.051280 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:14.929926 0.161157 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:15.930557 0.000000 udp 10.0.2.22 51868 -> 178.127.247.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:47:16.933387 0.000000 udp 10.0.2.22 51868 -> 197.7.196.4 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:47:17.933961 0.000000 udp 10.0.2.22 51868 -> 72.199.138.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:47:18.924821 0.000000 udp 10.0.2.22 51868 -> 186.123.130.253 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:47:19.926192 0.051095 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:20.807741 0.000112 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:47:20.927979 4.274768 udp 10.0.2.22 51868 <-> 177.227.216.250 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:21.929632 0.140896 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:22.930891 0.000000 udp 10.0.2.22 51868 -> 109.133.35.57 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:47:23.932126 0.125566 udp 10.0.2.22 51868 <-> 173.81.172.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:25.924994 0.055125 udp 10.0.2.22 51868 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:26.926314 0.262958 udp 10.0.2.22 51868 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:27.927924 0.000000 udp 10.0.2.22 51868 -> 216.121.192.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:47:28.929476 4.308322 udp 10.0.2.22 51868 <-> 190.38.132.3 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:29.930896 0.138843 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:30.932018 0.060326 udp 10.0.2.22 51868 <-> 94.156.49.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:31.933061 0.306396 udp 10.0.2.22 51868 <-> 183.87.71.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:33.926397 0.000000 udp 10.0.2.22 51868 -> 173.218.218.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:47:34.928123 0.297139 udp 10.0.2.22 51868 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:35.929095 0.130080 udp 10.0.2.22 51868 <-> 77.78.219.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:36.930747 0.253329 udp 10.0.2.22 51868 <-> 178.79.11.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:37.932283 4.997388 udp 10.0.2.22 51868 <-> 76.183.28.26 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:38.933942 0.058008 udp 10.0.2.22 51868 <-> 86.121.77.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:39.925050 1.210933 udp 10.0.2.22 51868 <-> 190.203.238.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:40.926407 0.338271 udp 10.0.2.22 51868 <-> 1.172.166.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:41.927905 0.756696 udp 10.0.2.22 51868 <-> 201.187.0.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:43.095969 0.000000 udp 10.0.2.22 51868 <- 76.183.28.26 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:47:43.930990 0.060502 udp 10.0.2.22 51868 <-> 77.78.219.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:44.932484 4.997305 udp 10.0.2.22 51868 <-> 190.203.238.39 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:45.933908 0.065166 udp 10.0.2.22 51868 <-> 178.79.11.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:46.925054 0.000000 udp 10.0.2.22 51868 -> 177.225.129.22 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:47:47.806186 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:47:47.926561 0.344409 udp 10.0.2.22 51868 <-> 1.172.166.20 16464 CON 0 0 6 4508 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:48.927972 0.162201 udp 10.0.2.22 51868 <-> 78.251.143.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:50.930852 0.000000 udp 10.0.2.22 51868 -> 173.75.149.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:47:51.932278 0.000000 udp 10.0.2.22 51868 -> 173.218.218.19 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:47:52.934451 4.040590 udp 10.0.2.22 51868 <-> 86.121.77.25 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:53.924888 0.142057 udp 10.0.2.22 51868 <-> 178.79.11.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:54.926709 0.079577 udp 10.0.2.22 51868 <-> 77.78.219.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:55.928182 0.218415 udp 10.0.2.22 51868 <-> 177.225.129.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:47:57.930912 0.000000 udp 10.0.2.22 51868 -> 173.218.218.19 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:47:58.932308 0.000000 udp 10.0.2.22 51868 -> 78.251.143.19 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:47:59.934088 0.000000 udp 10.0.2.22 51868 -> 46.27.129.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:48:00.925257 0.000000 udp 10.0.2.22 51868 -> 200.175.127.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:48:01.926663 1.552804 udp 10.0.2.22 51868 <-> 98.94.57.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:02.927996 0.051879 udp 10.0.2.22 51868 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:03.930514 0.092754 udp 10.0.2.22 51868 <-> 217.203.71.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:04.930927 0.315658 udp 10.0.2.22 51868 <-> 200.104.248.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:05.932624 0.000000 udp 10.0.2.22 51868 -> 82.53.170.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:48:06.934356 0.166069 udp 10.0.2.22 51868 <-> 74.58.240.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:07.925922 0.210773 udp 10.0.2.22 51868 <-> 71.92.249.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:08.926830 0.000000 udp 10.0.2.22 51868 -> 80.171.95.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:48:09.928319 0.045563 udp 10.0.2.22 51868 <-> 89.136.139.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:10.929956 0.033374 udp 10.0.2.22 51868 <-> 79.117.54.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:11.931141 2.060787 udp 10.0.2.22 51868 <-> 46.102.57.14 16464 CON 0 0 6 3676 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:12.932543 0.555588 udp 10.0.2.22 51868 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:14.805032 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:48:14.925122 0.144051 udp 10.0.2.22 51868 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:15.926657 2.066184 udp 10.0.2.22 51868 <-> 91.82.39.244 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:16.928225 0.000000 udp 10.0.2.22 51868 -> 64.92.18.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:48:18.931226 0.115060 udp 10.0.2.22 51868 <-> 62.113.14.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:19.932642 4.997212 udp 10.0.2.22 51868 -> 79.47.174.20 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:48:20.934198 0.082095 udp 10.0.2.22 51868 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:21.926004 2.002355 udp 10.0.2.22 51868 <-> 98.250.1.250 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:22.927174 0.000000 udp 10.0.2.22 51868 -> 79.35.110.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:48:25.931080 0.298906 udp 10.0.2.22 51868 <-> 124.121.185.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:26.932657 0.136558 udp 10.0.2.22 51868 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:27.934023 0.000000 udp 10.0.2.22 51868 -> 75.243.16.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:48:28.925753 0.172648 udp 10.0.2.22 51868 <-> 98.250.1.250 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:29.926852 0.075813 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:30.928432 0.000000 udp 10.0.2.22 51868 -> 115.242.250.165 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:48:31.929973 0.105532 udp 10.0.2.22 51868 <-> 84.224.226.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:32.931328 0.301664 udp 10.0.2.22 51868 <-> 190.199.213.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:33.933051 0.000000 udp 10.0.2.22 51868 -> 41.107.144.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:48:34.934065 0.000000 udp 10.0.2.22 51868 -> 89.142.152.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:48:35.925688 0.041783 udp 10.0.2.22 51868 <-> 80.99.49.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:36.927140 0.000000 udp 10.0.2.22 51868 -> 24.102.154.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:48:37.928594 0.306372 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:38.930203 0.000000 udp 10.0.2.22 51868 -> 187.118.142.175 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:48:39.931136 0.358929 udp 10.0.2.22 51868 <-> 186.94.66.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:40.932867 0.045820 udp 10.0.2.22 51868 <-> 5.20.66.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:41.804196 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:48:41.934218 0.000000 udp 10.0.2.22 51868 -> 84.224.226.92 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:48:42.925832 3.004478 udp 10.0.2.22 51868 -> 115.242.250.165 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:48:43.927124 3.147371 udp 10.0.2.22 51868 <-> 96.56.91.162 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:44.928421 0.225472 udp 10.0.2.22 51868 <-> 77.210.91.28 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:47.932870 0.264251 udp 10.0.2.22 51868 <-> 190.199.213.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:48.934443 0.130627 udp 10.0.2.22 51868 <-> 24.102.154.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:49.926345 0.000000 udp 10.0.2.22 51868 -> 192.168.200.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:48:50.927090 0.348733 udp 10.0.2.22 51868 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:51.928814 0.000000 udp 10.0.2.22 51868 -> 78.70.192.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:48:52.929913 0.585803 udp 10.0.2.22 51868 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:53.932190 0.026696 udp 10.0.2.22 51868 <-> 158.58.240.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:54.932978 0.172224 udp 10.0.2.22 51868 <-> 65.24.129.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:55.934274 0.000000 udp 10.0.2.22 51868 -> 86.124.224.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:48:56.926078 0.174669 udp 10.0.2.22 51868 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:57.927175 0.119027 udp 10.0.2.22 51868 <-> 173.238.152.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:58.928822 0.081694 udp 10.0.2.22 51868 <-> 109.74.171.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:48:59.930586 0.158903 udp 10.0.2.22 51868 <-> 66.176.196.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:00.931201 0.318521 udp 10.0.2.22 51868 <-> 187.35.107.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:01.932741 0.000000 udp 10.0.2.22 51868 -> 96.127.193.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:49:02.934365 0.057666 udp 10.0.2.22 51868 <-> 5.15.195.36 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:03.926275 0.000000 udp 10.0.2.22 51868 -> 87.6.66.35 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:49:04.927348 0.210482 udp 10.0.2.22 51868 <-> 50.168.13.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:05.928552 0.325609 udp 10.0.2.22 51868 <-> 153.135.189.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:06.930150 0.000000 udp 10.0.2.22 51868 -> 14.96.115.90 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:49:07.931193 0.179418 udp 10.0.2.22 51868 <-> 97.79.31.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:08.802714 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:49:08.933085 0.047353 udp 10.0.2.22 51868 <-> 95.87.201.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:09.934403 0.000000 udp 10.0.2.22 51868 -> 92.76.248.57 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:49:10.926319 0.342636 udp 10.0.2.22 51868 <-> 179.57.31.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:11.927315 1.229436 udp 10.0.2.22 51868 <-> 84.228.222.43 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:13.930703 0.000000 udp 10.0.2.22 51868 -> 79.119.35.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:49:14.931920 0.347382 udp 10.0.2.22 51868 <-> 123.110.11.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:15.933460 0.305072 udp 10.0.2.22 51868 <-> 190.193.89.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:16.924737 0.414668 udp 10.0.2.22 51868 <-> 118.179.243.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:17.926026 0.335741 udp 10.0.2.22 51868 <-> 71.203.5.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:18.927738 0.061963 udp 10.0.2.22 51868 <-> 94.156.49.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:19.928886 0.130049 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:20.930703 0.051376 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:21.931782 0.000000 udp 10.0.2.22 51868 -> 74.68.63.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:49:22.933795 0.201758 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:23.924562 0.160463 udp 10.0.2.22 51868 <-> 71.203.5.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:24.926395 0.434646 udp 10.0.2.22 51868 <-> 190.51.16.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:25.927530 0.144209 udp 10.0.2.22 51868 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:26.929322 0.000000 udp 10.0.2.22 51868 -> 78.8.65.60 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:49:27.930326 0.102889 udp 10.0.2.22 51868 <-> 37.122.1.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:28.931890 0.000000 udp 10.0.2.22 51868 -> 5.12.11.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:49:29.932766 0.179991 udp 10.0.2.22 51868 <-> 98.165.26.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:30.924741 0.020003 udp 10.0.2.22 51868 <-> 89.173.235.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:31.926278 0.152884 udp 10.0.2.22 51868 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:32.928447 0.000000 udp 10.0.2.22 51868 -> 70.94.206.5 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:49:33.929003 0.000000 udp 10.0.2.22 51868 -> 186.206.236.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:49:34.930272 0.229761 udp 10.0.2.22 51868 <-> 71.203.5.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:35.801573 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:49:35.931997 0.000000 udp 10.0.2.22 51868 -> 190.51.16.8 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:49:36.933069 0.054502 udp 10.0.2.22 51868 <-> 94.253.231.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:37.924684 0.000000 udp 10.0.2.22 51868 -> 89.173.235.151 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:49:38.926236 0.000000 udp 10.0.2.22 51868 -> 50.102.39.127 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:49:39.927675 0.492978 udp 10.0.2.22 51868 <-> 177.180.205.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:40.929147 0.102639 udp 10.0.2.22 51868 <-> 37.122.1.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:41.930458 0.347939 udp 10.0.2.22 51868 <-> 190.172.75.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:42.932080 0.000000 udp 10.0.2.22 51868 -> 79.103.41.137 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:49:43.933218 0.030878 udp 10.0.2.22 51868 <-> 5.53.200.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:44.924718 0.122705 udp 10.0.2.22 51868 <-> 24.235.158.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:45.926275 0.145065 udp 10.0.2.22 51868 <-> 71.77.141.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:46.927771 0.308267 udp 10.0.2.22 51868 <-> 124.121.185.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:47.929156 0.070273 udp 10.0.2.22 51868 <-> 77.244.39.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:48.930541 0.068769 udp 10.0.2.22 51868 <-> 87.59.123.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:49.931855 0.146662 udp 10.0.2.22 51868 <-> 108.202.146.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:50.933607 0.039525 udp 10.0.2.22 51868 <-> 178.150.156.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:51.925055 0.300770 udp 10.0.2.22 51868 <-> 186.92.177.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:52.926688 0.000000 udp 10.0.2.22 51868 -> 173.206.5.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:49:53.927861 0.056209 udp 10.0.2.22 51868 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:54.929227 0.190240 udp 10.0.2.22 51868 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:55.930675 0.000000 udp 10.0.2.22 51868 -> 24.94.123.9 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:49:56.932245 0.148651 udp 10.0.2.22 51868 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:57.933942 0.157165 udp 10.0.2.22 51868 <-> 78.159.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:58.924921 0.033330 udp 10.0.2.22 51868 <-> 158.58.245.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:49:59.926339 0.154617 udp 10.0.2.22 51868 <-> 68.62.2.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:50:00.927912 0.354299 udp 10.0.2.22 51868 <-> 122.121.244.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:50:01.929094 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:02.800212 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:50:02.930890 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:03.932305 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:04.933231 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:05.924872 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:06.926393 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:07.927778 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:08.929787 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:09.930665 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:10.932239 3.995942 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:11.933689 0.000000 udp 10.0.2.22 51868 -> 68.62.2.28 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:12.925059 0.036270 udp 10.0.2.22 51868 <-> 84.194.58.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:50:13.926374 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:15.930137 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:16.931120 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:17.932113 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:19.925113 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:20.926874 0.000086 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:20.926960 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:50:21.928212 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:22.929758 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:23.930967 0.077803 udp 10.0.2.22 51868 <-> 217.129.118.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:50:24.932492 0.140375 udp 10.0.2.22 51868 <-> 65.184.243.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:50:25.933782 0.160897 udp 10.0.2.22 51868 <-> 183.87.237.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:50:26.925274 3.004518 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:27.927094 0.144284 udp 10.0.2.22 51868 <-> 173.238.180.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:50:28.928238 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:29.799735 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:50:30.930890 0.000000 udp 10.0.2.22 51868 -> 95.232.69.167 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:31.932669 0.133778 udp 10.0.2.22 51868 <-> 24.131.248.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:50:32.934581 0.153514 udp 10.0.2.22 51868 <-> 24.231.243.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:50:33.925672 0.280515 udp 10.0.2.22 51868 <-> 70.132.115.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:50:34.926782 0.058266 udp 10.0.2.22 51868 <-> 46.251.57.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:50:35.928395 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:36.929618 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:37.931067 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:38.932267 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:39.934223 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:40.925835 0.000126 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:40.925961 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:50:41.926905 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:42.928105 2.002967 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:43.929668 0.082181 udp 10.0.2.22 51868 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:50:45.932617 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:46.934307 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:47.925452 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:48.926869 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:49.928108 0.143890 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:50:50.929808 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:51.931022 0.031802 udp 10.0.2.22 51868 <-> 85.230.84.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:50:52.932645 0.043266 udp 10.0.2.22 51868 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:50:53.934129 0.152316 udp 10.0.2.22 51868 <-> 74.195.167.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:50:54.926075 0.367406 udp 10.0.2.22 51868 <-> 61.227.76.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:50:55.926869 0.282705 udp 10.0.2.22 51868 <-> 189.61.212.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:50:56.807936 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:50:56.928478 0.293645 udp 10.0.2.22 51868 <-> 119.246.150.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:50:57.929881 0.086655 udp 10.0.2.22 51868 <-> 93.74.103.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:50:58.931205 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:50:59.932567 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:51:00.933936 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:51:01.925834 0.574228 udp 10.0.2.22 51868 <-> 75.15.193.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:02.926819 0.139854 udp 10.0.2.22 51868 <-> 111.91.58.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:03.928479 0.142514 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:04.930049 0.064395 udp 10.0.2.22 51868 <-> 78.240.64.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:05.931621 0.184743 udp 10.0.2.22 51868 <-> 68.7.239.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:06.932811 0.353723 udp 10.0.2.22 51868 <-> 146.83.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:07.075534 3.001513 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 09:51:07.934395 0.033791 udp 10.0.2.22 51868 <-> 89.41.36.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:08.925962 0.000000 udp 10.0.2.22 51868 -> 98.217.103.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:51:09.926973 0.000000 udp 10.0.2.22 51868 -> 50.200.149.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:51:10.928444 0.330545 udp 10.0.2.22 51868 <-> 98.158.126.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:11.931736 0.158155 udp 10.0.2.22 51868 <-> 68.46.230.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:12.931537 4.996994 udp 10.0.2.22 51868 <-> 67.184.116.232 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:13.933036 0.000000 udp 10.0.2.22 51868 -> 186.89.152.147 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:51:14.082935 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:51:14.934298 0.057696 udp 10.0.2.22 51868 <-> 79.118.212.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:15.926209 0.000000 udp 10.0.2.22 51868 -> 94.196.140.223 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:51:16.927024 4.005855 udp 10.0.2.22 51868 -> 72.192.3.224 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:51:18.085500 0.000000 udp 10.0.2.22 51868 <- 67.184.116.232 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:51:18.929925 0.000129 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:51:18.930054 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:51:19.931520 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:51:21.934250 1.372847 udp 10.0.2.22 51868 <-> 94.196.140.223 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:22.084405 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:51:22.925756 0.000000 udp 10.0.2.22 51868 -> 201.210.242.222 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:51:23.927156 0.069261 udp 10.0.2.22 51868 <-> 84.113.37.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:24.808454 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:51:24.928520 0.000000 udp 10.0.2.22 51868 -> 189.29.98.75 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:51:25.929890 3.225772 udp 10.0.2.22 51868 <-> 92.228.51.72 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:26.931310 0.000000 udp 10.0.2.22 51868 -> 24.137.128.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:51:27.932694 0.090269 udp 10.0.2.22 51868 <-> 178.254.205.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:29.926331 0.000000 udp 10.0.2.22 51868 -> 71.114.124.161 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:51:30.927253 0.041263 udp 10.0.2.22 51868 <-> 188.127.27.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:31.928859 0.035842 udp 10.0.2.22 51868 <-> 84.113.37.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:32.930391 0.106183 udp 10.0.2.22 51868 <-> 92.228.51.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:33.931970 0.226760 udp 10.0.2.22 51868 <-> 71.92.217.0 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:34.933171 0.319025 udp 10.0.2.22 51868 <-> 220.142.70.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:35.934591 0.137890 udp 10.0.2.22 51868 <-> 67.162.240.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:36.926216 0.048591 udp 10.0.2.22 51868 <-> 5.20.66.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:37.927232 0.299987 udp 10.0.2.22 51868 <-> 190.209.212.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:38.087699 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:51:38.931021 0.141270 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:39.930990 0.146054 udp 10.0.2.22 51868 <-> 24.74.188.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:40.931857 0.167750 udp 10.0.2.22 51868 <-> 74.194.166.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:41.932983 0.161711 udp 10.0.2.22 51868 <-> 70.80.99.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:42.934380 0.064257 udp 10.0.2.22 51868 <-> 94.190.190.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:43.925950 1.236329 udp 10.0.2.22 51868 <-> 182.188.192.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:44.927393 0.000000 udp 10.0.2.22 51868 -> 80.54.213.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:51:45.928979 0.000000 udp 10.0.2.22 51868 -> 173.206.5.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:51:46.930171 0.038748 udp 10.0.2.22 51868 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:47.931694 0.145913 udp 10.0.2.22 51868 <-> 70.60.4.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:48.933135 0.052074 udp 10.0.2.22 51868 <-> 178.148.77.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:49.924605 0.335723 udp 10.0.2.22 51868 <-> 190.203.136.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:50.925694 0.213577 udp 10.0.2.22 51868 <-> 76.178.38.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:51.807063 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:51:51.927656 1.105072 udp 10.0.2.22 51868 <-> 201.19.246.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:52.929322 0.104754 udp 10.0.2.22 51868 <-> 88.0.186.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:53.930393 0.142156 udp 10.0.2.22 51868 <-> 65.185.76.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:54.931777 0.607827 udp 10.0.2.22 51868 <-> 14.98.230.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:51:55.933203 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:51:56.924508 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:51:57.926072 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:51:58.927641 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:51:59.928778 0.149234 udp 10.0.2.22 51868 <-> 24.210.69.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:00.930294 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:52:01.931981 0.142433 udp 10.0.2.22 51868 <-> 24.74.188.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:02.933187 0.368656 udp 10.0.2.22 51868 <-> 77.239.79.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:03.925212 0.129097 udp 10.0.2.22 51868 <-> 216.21.193.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:04.926342 0.177522 udp 10.0.2.22 51868 <-> 98.196.143.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:05.927585 0.322032 udp 10.0.2.22 51868 <-> 190.160.244.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:06.928864 0.358353 udp 10.0.2.22 51868 <-> 166.159.178.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:07.930630 0.241133 udp 10.0.2.22 51868 <-> 27.251.231.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:08.932243 0.129504 udp 10.0.2.22 51868 <-> 66.108.161.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:09.933329 2.369512 udp 10.0.2.22 51868 <-> 190.207.196.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:10.093957 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:52:10.925177 0.039078 udp 10.0.2.22 51868 <-> 85.229.221.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:11.926357 0.000000 udp 10.0.2.22 51868 -> 106.194.144.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:52:12.927918 0.117810 udp 10.0.2.22 51868 <-> 94.196.140.223 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:13.929047 1.055114 udp 10.0.2.22 51868 <-> 62.21.109.216 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:15.931769 0.000000 udp 10.0.2.22 51868 -> 89.137.133.243 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:52:16.934205 0.558657 udp 10.0.2.22 51868 <-> 5.22.116.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:17.924575 2.157121 udp 10.0.2.22 51868 <-> 70.119.17.154 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:18.805872 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:52:18.926243 0.176013 udp 10.0.2.22 51868 <-> 183.83.111.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:20.928834 3.183983 udp 10.0.2.22 51868 <-> 24.242.53.41 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:21.930413 0.058015 udp 10.0.2.22 51868 <-> 81.226.52.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:22.932092 0.174837 udp 10.0.2.22 51868 <-> 173.18.114.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:24.924973 0.078752 udp 10.0.2.22 51868 <-> 85.152.63.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:25.926435 0.590173 udp 10.0.2.22 51868 <-> 5.22.116.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:26.927981 0.351794 udp 10.0.2.22 51868 <-> 114.43.74.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:27.929186 0.000000 udp 10.0.2.22 51868 -> 5.200.214.159 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:52:28.930730 0.293285 udp 10.0.2.22 51868 <-> 61.46.123.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:29.932201 2.164129 udp 10.0.2.22 51868 <-> 68.116.158.67 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:30.933514 0.047650 udp 10.0.2.22 51868 <-> 88.216.52.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:32.926189 1.055132 udp 10.0.2.22 51868 <-> 122.106.43.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:33.928006 0.026487 udp 10.0.2.22 51868 <-> 78.42.232.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:34.929867 0.145171 udp 10.0.2.22 51868 <-> 37.150.85.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:35.930635 0.078583 udp 10.0.2.22 51868 <-> 78.52.41.20 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:36.932340 0.046160 udp 10.0.2.22 51868 <-> 212.104.97.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:37.933869 0.323253 udp 10.0.2.22 51868 <-> 221.115.144.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:38.925007 0.407117 udp 10.0.2.22 51868 <-> 59.94.220.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:39.926387 0.197571 udp 10.0.2.22 51868 <-> 46.48.216.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:40.257141 0.010845 udp 10.0.2.22 60062 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 09:52:40.268302 0.000000 udp 10.0.2.22 60063 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:52:40.928051 0.024994 udp 10.0.2.22 51868 <-> 78.42.45.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:41.929727 0.055625 udp 10.0.2.22 51868 <-> 82.235.193.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:42.930846 3.134733 udp 10.0.2.22 51868 <-> 24.146.229.31 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:43.932148 0.164875 udp 10.0.2.22 51868 <-> 76.183.28.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:44.933789 1.524474 udp 10.0.2.22 51868 <-> 92.228.45.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:45.804951 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:52:46.926374 0.152949 udp 10.0.2.22 51868 <-> 68.42.82.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:47.927849 0.165044 udp 10.0.2.22 51868 <-> 216.168.86.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:48.928927 0.300037 udp 10.0.2.22 51868 <-> 180.198.167.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:49.931004 0.059716 udp 10.0.2.22 51868 <-> 151.15.58.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:50.932596 0.000000 udp 10.0.2.22 51868 -> 14.96.169.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:52:51.933632 0.142475 udp 10.0.2.22 51868 <-> 178.79.27.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:52.926324 0.161096 udp 10.0.2.22 51868 <-> 75.108.181.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:53.926247 0.077137 udp 10.0.2.22 51868 <-> 62.99.117.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:54.928326 0.000000 udp 10.0.2.22 51868 -> 115.241.124.170 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:52:55.928992 0.636216 udp 10.0.2.22 51868 <-> 186.88.132.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:56.930832 0.209976 udp 10.0.2.22 51868 <-> 76.28.167.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:57.932164 1.992806 udp 10.0.2.22 51868 <-> 190.193.86.78 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:52:58.934182 0.000000 udp 10.0.2.22 51868 -> 1.36.118.97 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:53:00.926806 0.355168 udp 10.0.2.22 51868 <-> 180.218.89.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:01.928010 0.060254 udp 10.0.2.22 51868 <-> 84.55.12.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:02.929771 0.061494 udp 10.0.2.22 51868 <-> 5.12.98.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:03.930881 0.052490 udp 10.0.2.22 51868 <-> 83.250.76.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:04.932399 0.127367 udp 10.0.2.22 51868 <-> 216.246.254.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:05.934005 1.178343 udp 10.0.2.22 51868 <-> 107.10.164.51 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:07.926481 0.000000 udp 10.0.2.22 51868 -> 79.115.60.77 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:53:08.928369 0.356676 udp 10.0.2.22 51868 <-> 180.218.89.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:09.929845 0.000000 udp 10.0.2.22 51868 -> 95.169.196.132 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:53:10.932161 0.166125 udp 10.0.2.22 51868 <-> 67.242.138.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:11.932466 2.146783 udp 10.0.2.22 51868 <-> 75.149.216.69 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:12.806690 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:53:12.936771 0.000000 udp 10.0.2.22 51868 -> 70.82.91.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:53:14.926950 0.070478 udp 10.0.2.22 51868 <-> 85.84.33.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:15.928138 0.166776 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:16.932172 0.000000 udp 10.0.2.22 51868 -> 95.14.126.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:53:17.932289 0.066901 udp 10.0.2.22 51868 <-> 90.236.11.230 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:18.932425 0.055818 udp 10.0.2.22 51868 <-> 88.216.52.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:19.940319 0.034964 udp 10.0.2.22 51868 <-> 151.100.72.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:20.927769 0.033792 udp 10.0.2.22 51868 <-> 89.41.36.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:21.926816 0.052142 udp 10.0.2.22 51868 <-> 81.253.5.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:22.931181 0.078940 udp 10.0.2.22 51868 <-> 62.99.12.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:23.935962 0.195160 udp 10.0.2.22 51868 <-> 203.171.243.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:24.935210 0.161574 udp 10.0.2.22 51868 <-> 75.139.7.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:25.938301 0.122679 udp 10.0.2.22 51868 <-> 178.120.38.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:26.938601 0.339515 udp 10.0.2.22 51868 <-> 116.202.138.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:27.932892 0.000000 udp 10.0.2.22 51868 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:53:28.935892 0.726555 udp 10.0.2.22 51868 <-> 201.248.248.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:29.933711 0.174019 udp 10.0.2.22 51868 <-> 96.2.4.84 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:30.936027 0.592978 udp 10.0.2.22 51868 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:31.933586 0.214706 udp 10.0.2.22 51868 <-> 24.10.7.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:32.932831 3.173973 udp 10.0.2.22 51868 <-> 24.55.45.218 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:33.940427 0.123672 udp 10.0.2.22 51868 <-> 151.52.90.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:34.936855 4.130490 udp 10.0.2.22 51868 <-> 68.83.113.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:36.933786 0.161508 udp 10.0.2.22 51868 <-> 76.107.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:37.931598 0.000000 udp 10.0.2.22 51868 -> 79.50.44.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:53:39.802731 0.000098 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:53:39.933021 0.307328 udp 10.0.2.22 51868 <-> 201.214.63.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:40.934187 0.146981 udp 10.0.2.22 51868 <-> 203.187.213.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:41.926015 0.000000 udp 10.0.2.22 51868 -> 192.95.208.228 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:53:42.927148 0.000000 udp 10.0.2.22 51868 -> 88.100.142.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:53:43.928514 0.163774 udp 10.0.2.22 51868 <-> 69.1.2.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:44.930284 0.061510 udp 10.0.2.22 51868 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:45.931772 0.140956 udp 10.0.2.22 51868 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:46.933129 0.000000 udp 10.0.2.22 51868 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:53:47.934392 0.337294 udp 10.0.2.22 51868 <-> 190.110.186.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:48.926062 0.000000 udp 10.0.2.22 51868 -> 142.136.206.4 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:53:49.927044 0.000000 udp 10.0.2.22 51868 -> 174.59.159.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:53:50.928382 0.285163 udp 10.0.2.22 51868 <-> 1.22.174.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:51.929914 0.159147 udp 10.0.2.22 51868 <-> 69.1.2.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:52.931207 0.164490 udp 10.0.2.22 51868 <-> 98.208.189.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:53.933064 0.065207 udp 10.0.2.22 51868 <-> 151.64.32.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:54.934372 0.000000 udp 10.0.2.22 51868 -> 89.73.207.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:53:55.926342 0.137198 udp 10.0.2.22 51868 <-> 24.188.69.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:56.927067 0.043721 udp 10.0.2.22 51868 <-> 89.137.97.227 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:57.928671 0.032879 udp 10.0.2.22 51868 <-> 151.100.72.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:58.930008 0.392762 udp 10.0.2.22 51868 <-> 186.89.100.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:53:59.931848 0.432924 udp 10.0.2.22 51868 <-> 177.191.144.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:54:00.932899 0.133054 udp 10.0.2.22 51868 <-> 98.124.111.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:54:01.934426 0.191308 udp 10.0.2.22 51868 <-> 68.231.114.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:54:02.926971 0.505251 udp 10.0.2.22 51868 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:54:03.927121 0.030456 udp 10.0.2.22 51868 <-> 79.136.87.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:54:04.928599 0.223634 udp 10.0.2.22 51868 <-> 71.84.132.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:54:05.930477 0.039001 udp 10.0.2.22 51868 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:54:06.801089 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:54:06.931610 0.040609 udp 10.0.2.22 51868 <-> 84.196.249.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:54:07.933044 0.000000 udp 10.0.2.22 51868 -> 124.125.254.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:08.934418 0.189991 udp 10.0.2.22 51868 <-> 68.6.74.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:54:09.925850 0.772392 udp 10.0.2.22 51868 <-> 216.249.94.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:54:10.927241 0.140429 udp 10.0.2.22 51868 <-> 24.184.114.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:54:11.928700 0.207237 udp 10.0.2.22 51868 <-> 66.237.94.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:54:12.936976 0.070700 udp 10.0.2.22 51868 <-> 95.180.191.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:54:13.935936 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:14.935312 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:15.935108 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:16.925881 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:17.927234 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:18.928834 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:19.930422 0.000000 udp 10.0.2.22 51868 -> 190.48.129.25 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:20.931881 0.000000 udp 10.0.2.22 51868 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:21.933314 0.041103 udp 10.0.2.22 51868 <-> 94.73.1.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:54:22.924823 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:23.926278 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:24.927203 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:25.928864 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:26.930331 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:27.931911 0.158888 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:54:28.933102 0.000000 udp 10.0.2.22 51868 -> 1.172.166.20 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:29.924653 0.000000 udp 10.0.2.22 51868 -> 94.73.1.16 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:30.925974 0.000000 udp 10.0.2.22 51868 -> 190.48.129.25 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:31.927686 0.000000 udp 10.0.2.22 51868 -> 109.52.164.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:32.928889 0.000000 udp 10.0.2.22 51868 -> 78.136.101.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:33.800124 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:54:33.930240 0.356675 udp 10.0.2.22 51868 <-> 183.87.71.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:54:34.931629 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:35.933683 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:36.924545 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:37.926031 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:38.927701 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:39.928746 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:40.930570 0.000064 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:40.930634 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:54:41.931912 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:43.924856 1.638732 udp 10.0.2.22 51868 <-> 78.136.101.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:54:44.926284 0.337206 udp 10.0.2.22 51868 <-> 183.87.71.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:54:45.927762 0.118435 udp 10.0.2.22 51868 <-> 109.52.164.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:54:46.928843 0.123874 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:54:47.931740 0.157053 udp 10.0.2.22 51868 <-> 79.101.3.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:54:48.931965 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:49.933652 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:50.925037 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:51.926154 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:52.927677 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:53.928822 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:54.930551 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:55.932236 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:57.924771 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:58.926361 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:54:59.927884 0.137136 udp 10.0.2.22 51868 <-> 67.81.193.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:55:00.809176 0.000242 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:55:00.929766 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:01.930690 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:02.932196 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:03.933351 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:04.924827 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:05.926410 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:06.927891 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:07.930728 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:08.930912 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:09.931914 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:10.933921 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:11.924964 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:12.926501 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:13.927942 0.000067 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:13.928009 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:55:15.935348 0.023554 udp 10.0.2.22 51868 <-> 89.133.44.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:55:17.935184 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:18.925733 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:19.926455 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:20.927855 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:21.929557 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:22.930994 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:23.935942 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:24.936388 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:25.926280 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:26.926264 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:27.807661 0.000147 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:55:27.927976 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:28.932164 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:29.936854 0.000047 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:29.936901 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:55:30.936388 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:31.939727 0.300039 udp 10.0.2.22 51868 <-> 153.130.52.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:55:32.929573 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:33.927635 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:34.927912 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:35.930017 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:36.930892 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:37.932301 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:38.934085 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:39.925342 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:40.926887 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:41.928132 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:42.929611 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:43.930857 0.000068 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:43.930925 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:55:45.940964 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:46.927805 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:47.926858 0.180931 udp 10.0.2.22 51868 <-> 68.110.51.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:55:48.928197 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:49.929745 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:50.936062 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:51.934776 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:52.934762 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:53.936407 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:54.815070 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:55:54.934926 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:55.932440 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:56.929619 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:57.931018 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:58.932431 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:55:59.933931 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:56:00.926236 0.000102 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:56:00.926338 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:56:02.928621 4.005317 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:56:03.929913 0.362658 udp 10.0.2.22 51868 <-> 121.124.80.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:04.931619 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:56:05.932562 0.000074 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:56:05.932636 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:56:07.925851 1.093812 udp 10.0.2.22 51868 <-> 186.4.7.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:08.927049 0.180680 udp 10.0.2.22 51868 <-> 68.110.51.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:09.928471 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:56:10.929771 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:56:11.931330 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:56:12.933075 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:56:14.950505 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:56:15.945605 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:56:16.940413 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:56:17.934835 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:56:18.931593 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:56:19.932894 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:56:20.934255 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:56:21.805893 0.000125 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:56:21.926229 0.000062 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:56:21.926291 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:56:22.927032 4.005965 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:56:23.928477 0.091931 udp 10.0.2.22 51868 <-> 178.155.94.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:24.930153 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:56:25.931687 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:56:27.934232 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:56:28.926562 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:56:29.927304 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:56:30.928596 0.152202 udp 10.0.2.22 51868 <-> 69.183.230.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:31.929822 0.159668 udp 10.0.2.22 51868 <-> 70.36.60.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:32.931165 0.340026 udp 10.0.2.22 51868 <-> 122.145.189.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:33.932889 0.065499 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:34.934287 0.050729 udp 10.0.2.22 51868 <-> 79.113.56.46 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:35.926284 0.343699 udp 10.0.2.22 51868 <-> 114.36.82.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:36.927307 1.042515 udp 10.0.2.22 51868 <-> 46.237.76.18 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:38.930232 1.692916 udp 10.0.2.22 51868 <-> 201.213.50.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:39.931859 0.201327 udp 10.0.2.22 51868 <-> 72.175.42.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:40.932947 0.064768 udp 10.0.2.22 51868 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:41.934239 0.111646 udp 10.0.2.22 51868 <-> 89.126.93.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:42.926132 0.208778 udp 10.0.2.22 51868 <-> 98.232.131.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:43.927219 0.000000 udp 10.0.2.22 51868 -> 98.89.87.178 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:56:44.928783 0.141935 udp 10.0.2.22 51868 <-> 70.63.221.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:45.930213 0.008364 udp 10.0.2.22 51868 <-> 82.209.26.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:46.931874 2.043124 udp 10.0.2.22 51868 <-> 92.244.2.36 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:47.933039 0.000000 udp 10.0.2.22 51868 -> 5.15.99.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:56:48.805749 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:56:49.925776 0.160085 udp 10.0.2.22 51868 <-> 75.139.7.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:50.254504 0.000000 udp 10.0.2.22 51868 <- 98.89.87.178 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:56:50.927366 0.000000 udp 10.0.2.22 51868 -> 77.78.227.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:56:51.928554 0.031457 udp 10.0.2.22 51868 <-> 82.176.19.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:52.930132 0.357170 udp 10.0.2.22 51868 <-> 189.68.131.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:53.931707 0.182987 udp 10.0.2.22 51868 <-> 70.170.60.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:54.932698 0.173073 udp 10.0.2.22 51868 <-> 77.91.22.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:55.924556 0.035453 udp 10.0.2.22 51868 <-> 109.227.119.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:56.925763 0.107024 udp 10.0.2.22 51868 <-> 77.208.79.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:57.927228 0.212008 udp 10.0.2.22 51868 <-> 76.115.145.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:58.928774 0.049854 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:56:59.930351 0.168093 udp 10.0.2.22 51868 <-> 71.192.132.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:00.931682 0.276652 udp 10.0.2.22 51868 <-> 59.90.194.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:01.933364 0.170929 udp 10.0.2.22 51868 <-> 63.131.196.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:02.925588 0.204097 udp 10.0.2.22 51868 <-> 98.232.131.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:03.926210 0.059777 udp 10.0.2.22 51868 <-> 87.207.149.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:04.927385 0.083985 udp 10.0.2.22 51868 <-> 194.118.199.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:05.928818 0.159047 udp 10.0.2.22 51868 <-> 71.226.145.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:06.930285 0.037252 udp 10.0.2.22 51868 <-> 188.254.203.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:07.932019 0.271944 udp 10.0.2.22 51868 <-> 201.209.173.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:08.933268 3.053944 udp 10.0.2.22 51868 <-> 31.222.103.14 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:09.924869 1.039621 udp 10.0.2.22 51868 <-> 94.73.1.16 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:12.928863 0.125202 udp 10.0.2.22 51868 <-> 24.122.115.6 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:13.931908 0.352850 udp 10.0.2.22 51868 <-> 186.88.42.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:14.932049 0.198695 udp 10.0.2.22 51868 <-> 183.83.111.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:15.802941 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:57:15.933418 0.024846 udp 10.0.2.22 51868 <-> 213.47.69.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:16.924682 0.061415 udp 10.0.2.22 51868 <-> 85.217.233.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:17.933829 0.000000 udp 10.0.2.22 51868 -> 76.167.29.50 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:57:18.931306 1.036669 udp 10.0.2.22 51868 <-> 190.74.80.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:19.928834 0.281576 udp 10.0.2.22 51868 <-> 122.210.119.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:20.930664 0.666205 udp 10.0.2.22 51868 <-> 117.205.162.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:21.931659 0.190945 udp 10.0.2.22 51868 <-> 74.211.92.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:22.933466 0.077969 udp 10.0.2.22 51868 <-> 85.152.63.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:23.924572 0.357688 udp 10.0.2.22 51868 <-> 125.63.83.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:24.926109 0.012120 udp 10.0.2.22 51868 <-> 212.59.229.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:25.927886 0.144834 udp 10.0.2.22 51868 <-> 65.185.76.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:26.929015 0.000000 udp 10.0.2.22 51868 -> 92.60.233.237 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:57:27.930435 0.779426 udp 10.0.2.22 51868 <-> 187.21.207.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:28.932295 0.065914 udp 10.0.2.22 51868 <-> 92.114.76.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:29.933573 0.057947 udp 10.0.2.22 51868 <-> 178.168.9.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:30.925089 0.333032 udp 10.0.2.22 51868 <-> 123.110.11.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:31.926526 0.320193 udp 10.0.2.22 51868 <-> 123.225.51.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:32.927922 0.000000 udp 10.0.2.22 51868 -> 27.106.26.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:57:33.929061 0.000000 udp 10.0.2.22 51868 -> 117.97.147.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:57:34.930642 0.073537 udp 10.0.2.22 51868 <-> 94.153.61.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:35.940919 0.618134 udp 10.0.2.22 51868 <-> 201.21.179.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:36.936575 1.228510 udp 10.0.2.22 51868 <-> 177.54.140.9 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:38.926208 0.000000 udp 10.0.2.22 51868 -> 78.251.171.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:57:39.928099 0.268119 udp 10.0.2.22 51868 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:40.930731 0.262008 udp 10.0.2.22 51868 <-> 89.237.61.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:41.930837 0.261345 udp 10.0.2.22 51868 <-> 99.141.253.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:42.802107 0.000100 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:57:42.932427 3.144903 udp 10.0.2.22 51868 <-> 87.53.130.152 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:43.933606 0.060215 udp 10.0.2.22 51868 <-> 77.81.10.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:44.925206 0.000000 udp 10.0.2.22 51868 -> 186.51.223.154 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:57:46.928021 4.997024 udp 10.0.2.22 51868 <-> 67.240.151.164 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:47.929162 0.000000 udp 10.0.2.22 51868 -> 84.54.171.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:57:48.930661 0.214503 udp 10.0.2.22 51868 <-> 50.193.233.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:49.932157 4.996979 udp 10.0.2.22 51868 <-> 24.10.7.19 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:50.933912 2.192703 udp 10.0.2.22 51868 <-> 186.19.134.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:52.076898 0.000000 udp 10.0.2.22 51868 <- 67.240.151.164 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:57:52.926517 0.504256 udp 10.0.2.22 51868 <-> 190.78.142.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:53.928188 0.000000 udp 10.0.2.22 51868 -> 183.87.73.38 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:57:55.147050 0.000000 udp 10.0.2.22 51868 <- 24.10.7.19 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:57:55.930867 0.000000 udp 10.0.2.22 51868 -> 84.54.171.18 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:57:56.932371 0.000000 udp 10.0.2.22 51868 -> 186.51.223.154 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:57:57.933670 0.039643 udp 10.0.2.22 51868 <-> 109.87.128.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:58.925155 0.065078 udp 10.0.2.22 51868 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:57:59.926615 0.009943 udp 10.0.2.22 51868 <-> 188.175.96.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:00.928058 0.211559 udp 10.0.2.22 51868 <-> 125.63.83.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:01.929476 0.000000 udp 10.0.2.22 51868 -> 70.102.225.70 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:58:02.930709 0.000000 udp 10.0.2.22 51868 -> 114.36.213.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:58:03.931786 0.089313 udp 10.0.2.22 51868 <-> 85.86.108.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:04.934156 0.128900 udp 10.0.2.22 51868 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:05.925435 0.160150 udp 10.0.2.22 51868 <-> 50.142.78.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:06.926651 0.000000 udp 10.0.2.22 51868 -> 2.180.93.228 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:58:07.928341 0.207976 udp 10.0.2.22 51868 <-> 75.71.68.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:08.932543 0.244301 udp 10.0.2.22 51868 <-> 186.93.233.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:09.802713 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:58:09.932707 0.238847 udp 10.0.2.22 51868 <-> 91.67.73.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:10.933077 0.298751 udp 10.0.2.22 51868 <-> 201.27.48.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:11.933672 0.054237 udp 10.0.2.22 51868 <-> 83.177.28.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:12.925381 0.154457 udp 10.0.2.22 51868 <-> 71.72.193.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:13.926558 0.152418 udp 10.0.2.22 51868 <-> 50.202.4.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:14.099673 3.001335 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 09:58:14.928106 0.195458 udp 10.0.2.22 51868 <-> 66.75.62.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:15.929623 0.306762 udp 10.0.2.22 51868 <-> 37.237.51.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:16.930745 0.000104 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:58:16.930849 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:58:17.932347 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:58:18.934255 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:58:19.925104 0.568224 udp 10.0.2.22 51868 <-> 187.106.245.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:20.926642 0.000000 udp 10.0.2.22 51868 -> 116.203.251.87 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:58:21.106794 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:58:21.927979 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:58:22.929415 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:58:23.931168 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:58:24.932505 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:58:25.933946 4.997030 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:58:26.925281 2.003088 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:58:26.925414 2.002955 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 2 172 flow=Background 1970/01/01 09:58:27.927094 0.267707 udp 10.0.2.22 51868 <-> 187.121.44.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:29.108538 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:58:29.929212 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:58:31.932810 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:58:32.934064 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:58:33.925645 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:58:34.926843 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:58:35.928087 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:58:36.090413 0.000000 udp 10.0.2.22 51868 <- 116.203.251.87 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:58:36.799496 0.000085 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:58:36.929839 0.076705 udp 10.0.2.22 51868 <-> 188.2.248.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:37.931073 0.062481 udp 10.0.2.22 51868 <-> 2.3.129.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:38.932654 0.115180 udp 10.0.2.22 51868 <-> 24.122.208.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:39.933820 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:58:40.925808 0.000000 udp 10.0.2.22 51868 -> 99.196.156.159 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:58:41.926761 0.212759 udp 10.0.2.22 51868 <-> 69.247.73.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:42.928324 0.034076 udp 10.0.2.22 51868 <-> 78.42.45.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:43.929880 0.136606 udp 10.0.2.22 51868 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:44.931204 0.134433 udp 10.0.2.22 51868 <-> 69.119.241.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:45.111834 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:58:45.932718 0.000000 udp 10.0.2.22 51868 -> 84.2.124.118 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:58:46.934718 2.993875 udp 10.0.2.22 51868 <-> 187.18.249.249 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:47.926070 1.662854 udp 10.0.2.22 51868 <-> 181.166.200.3 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:50.929875 0.392953 udp 10.0.2.22 51868 <-> 101.63.136.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:51.931135 0.168588 udp 10.0.2.22 51868 <-> 70.112.106.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:52.768371 0.000000 udp 10.0.2.22 51868 <- 99.196.156.159 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:58:52.932743 0.201660 udp 10.0.2.22 51868 <-> 24.19.85.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:53.934167 0.263603 udp 10.0.2.22 51868 <-> 187.121.67.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:54.926044 0.177831 udp 10.0.2.22 51868 <-> 71.8.5.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:55.927253 0.218188 udp 10.0.2.22 51868 <-> 64.183.30.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:56.928487 0.031489 udp 10.0.2.22 51868 <-> 80.218.193.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:57.929891 0.047740 udp 10.0.2.22 51868 <-> 95.87.232.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:58.931105 0.525834 udp 10.0.2.22 51868 <-> 93.184.85.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:58:59.932981 0.184127 udp 10.0.2.22 51868 <-> 124.123.124.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:59:00.934331 0.062034 udp 10.0.2.22 51868 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:59:01.926003 0.165275 udp 10.0.2.22 51868 <-> 67.242.138.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:59:02.927715 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:03.808463 0.000082 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:59:03.928663 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:04.930010 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:05.931611 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:06.932907 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:07.934556 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:08.925903 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:09.927949 0.000070 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:09.928019 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:59:10.928654 0.183353 udp 10.0.2.22 51868 <-> 95.57.52.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:59:11.929874 0.239254 udp 10.0.2.22 51868 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:59:12.931642 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:13.933072 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:14.934859 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:15.925739 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:16.927221 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:17.117620 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 09:59:17.928559 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:18.930412 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:19.931676 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:20.932913 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:21.934561 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:22.926149 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:23.927276 1.346077 udp 10.0.2.22 51868 <-> 24.244.127.249 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:59:25.930055 0.055826 udp 10.0.2.22 51868 <-> 79.115.87.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:59:26.931949 0.000000 udp 10.0.2.22 51868 -> 111.254.125.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:27.933451 0.000000 udp 10.0.2.22 51868 -> 80.171.95.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:28.924918 4.244399 udp 10.0.2.22 51868 <-> 95.76.48.240 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:59:29.926033 2.002763 udp 10.0.2.22 51868 <-> 107.32.4.239 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:59:30.807550 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:59:30.927617 0.155419 udp 10.0.2.22 51868 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:59:33.931937 0.355437 udp 10.0.2.22 51868 <-> 111.254.125.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:59:34.933295 0.000101 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:34.933396 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 09:59:35.925067 0.353564 udp 10.0.2.22 51868 <-> 1.172.59.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:59:36.926041 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:37.927535 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:38.928669 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:39.930429 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:40.931977 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:41.933501 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:42.924455 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:43.926121 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:44.927148 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:45.928689 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:46.930261 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:47.936589 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:48.936982 0.212393 udp 10.0.2.22 51868 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:59:49.926657 0.128057 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:59:50.930137 0.000000 udp 10.0.2.22 51868 -> 79.115.87.246 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:51.930138 0.346670 udp 10.0.2.22 51868 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:59:52.929989 0.073980 udp 10.0.2.22 51868 <-> 46.35.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:59:53.932787 0.154109 udp 10.0.2.22 51868 <-> 98.235.73.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:59:54.937241 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:55.937718 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:56.928384 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:57.810110 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 09:59:57.930008 2.022928 udp 10.0.2.22 51868 <-> 72.199.138.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 09:59:58.930737 0.000000 udp 10.0.2.22 51868 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 09:59:59.928846 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:00.933843 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:01.934131 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:02.933949 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:03.924628 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:04.926182 0.237882 udp 10.0.2.22 51868 <-> 186.92.22.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:00:05.933028 0.060837 udp 10.0.2.22 51868 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:00:06.933506 0.177071 udp 10.0.2.22 51868 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:00:07.933940 0.958316 udp 10.0.2.22 51868 <-> 187.83.142.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:00:08.933884 0.352166 udp 10.0.2.22 51868 <-> 1.172.59.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:00:09.933717 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:10.924993 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:11.926307 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:12.930518 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:13.932992 0.229923 udp 10.0.2.22 51868 <-> 186.92.22.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:00:14.934727 0.346733 udp 10.0.2.22 51868 <-> 201.27.50.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:00:15.934366 0.108063 udp 10.0.2.22 51868 <-> 109.67.249.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:00:16.934312 0.355389 udp 10.0.2.22 51868 <-> 111.254.125.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:00:18.926456 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:19.928141 0.000060 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:19.928201 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:00:20.929204 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:21.930592 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:22.932261 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:23.933871 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:24.924816 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:25.806157 0.000092 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:00:25.926342 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:26.928215 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:27.929090 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:28.930721 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:29.932207 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:30.933851 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:31.925196 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:32.932012 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:33.932190 0.261369 udp 10.0.2.22 51868 <-> 72.241.245.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:00:34.932026 0.370270 udp 10.0.2.22 51868 <-> 190.194.201.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:00:35.932173 0.000000 udp 10.0.2.22 51868 -> 177.224.86.78 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:36.932301 0.360295 udp 10.0.2.22 51868 <-> 187.83.142.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:00:37.933963 0.271587 udp 10.0.2.22 51868 <-> 179.235.4.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:00:38.925129 0.069758 udp 10.0.2.22 51868 <-> 87.247.96.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:00:39.926661 0.000000 udp 10.0.2.22 51868 -> 83.42.29.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:40.928115 0.000000 udp 10.0.2.22 51868 -> 78.90.64.228 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:41.929281 0.000000 udp 10.0.2.22 51868 -> 177.188.30.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:42.930958 0.581471 udp 10.0.2.22 51868 <-> 218.103.165.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:00:43.932502 0.358923 udp 10.0.2.22 51868 <-> 118.161.173.147 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:00:44.933894 0.319483 udp 10.0.2.22 51868 <-> 201.29.81.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:00:45.925297 0.068779 udp 10.0.2.22 51868 <-> 79.23.243.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:00:46.926767 0.049445 udp 10.0.2.22 51868 <-> 31.41.137.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:00:47.928538 0.064384 udp 10.0.2.22 51868 <-> 89.28.101.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:00:48.929619 0.057050 udp 10.0.2.22 51868 <-> 79.117.59.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:00:49.931268 0.041528 udp 10.0.2.22 51868 <-> 46.10.187.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:00:50.932419 0.202535 udp 10.0.2.22 51868 <-> 190.219.0.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:00:51.933998 4.997021 udp 10.0.2.22 51868 <-> 24.135.86.77 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:00:52.805071 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:00:52.924998 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:53.926627 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:54.928057 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:00:55.929607 0.030833 udp 10.0.2.22 51868 <-> 89.134.236.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:00:57.932496 0.053215 udp 10.0.2.22 51868 <-> 79.117.59.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:00:58.934198 0.058942 udp 10.0.2.22 51868 <-> 89.28.101.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:00:59.925181 0.098297 udp 10.0.2.22 51868 <-> 88.166.247.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:00.926944 0.061403 udp 10.0.2.22 51868 <-> 95.42.254.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:01.928097 1.120673 udp 10.0.2.22 51868 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:02.929876 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:01:03.931349 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:01:04.932944 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:01:05.934254 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:01:06.925463 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:01:07.926617 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:01:08.928062 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:01:09.929640 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:01:10.931057 0.661305 udp 10.0.2.22 51868 <-> 24.135.86.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:11.932425 0.157764 udp 10.0.2.22 51868 <-> 50.148.31.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:12.934200 0.278374 udp 10.0.2.22 51868 <-> 117.206.241.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:13.925661 0.094133 udp 10.0.2.22 51868 <-> 176.200.97.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:14.926779 0.262974 udp 10.0.2.22 51868 <-> 186.144.251.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:15.928411 0.072636 udp 10.0.2.22 51868 <-> 79.117.151.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:16.929713 0.304499 udp 10.0.2.22 51868 <-> 14.99.90.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:17.931868 0.000000 udp 10.0.2.22 51868 -> 82.229.226.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:01:18.932510 3.038316 udp 10.0.2.22 51868 <-> 77.76.177.251 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:19.803937 0.000106 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:01:19.934130 0.679262 udp 10.0.2.22 51868 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:20.925884 0.000000 udp 10.0.2.22 51868 -> 84.2.254.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:01:22.928487 0.040840 udp 10.0.2.22 51868 <-> 86.56.97.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:23.929936 0.000000 udp 10.0.2.22 51868 -> 76.226.213.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:01:24.931680 0.361788 udp 10.0.2.22 51868 <-> 75.211.149.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:25.932592 0.090536 udp 10.0.2.22 51868 <-> 82.249.175.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:26.934175 1.170548 udp 10.0.2.22 51868 <-> 103.245.69.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:27.925966 0.050517 udp 10.0.2.22 51868 <-> 109.241.49.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:28.927126 0.038665 udp 10.0.2.22 51868 <-> 46.10.187.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:29.928431 0.197272 udp 10.0.2.22 51868 <-> 24.228.86.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:30.930190 0.000000 udp 10.0.2.22 51868 -> 88.132.62.75 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:01:31.931434 0.000000 udp 10.0.2.22 51868 -> 85.84.235.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:01:32.932964 0.294179 udp 10.0.2.22 51868 <-> 201.239.103.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:33.934259 0.216638 udp 10.0.2.22 51868 <-> 190.157.239.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:34.925823 0.750900 udp 10.0.2.22 51868 <-> 119.157.170.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:35.926998 0.000000 udp 10.0.2.22 51868 -> 84.2.124.118 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:01:36.928764 0.099926 udp 10.0.2.22 51868 <-> 5.43.104.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:37.930035 0.151978 udp 10.0.2.22 51868 <-> 74.129.39.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:38.931354 0.177627 udp 10.0.2.22 51868 <-> 1.22.232.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:39.932675 1.148077 udp 10.0.2.22 51868 <-> 67.163.219.191 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:41.926270 0.354386 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:42.927171 0.179482 udp 10.0.2.22 51868 <-> 93.105.1.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:43.928491 0.040902 udp 10.0.2.22 51868 <-> 213.231.163.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:44.929626 1.387751 udp 10.0.2.22 51868 <-> 190.150.187.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:45.931223 0.711663 udp 10.0.2.22 51868 <-> 190.36.123.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:46.802569 0.000118 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:01:46.932945 0.215261 udp 10.0.2.22 51868 <-> 67.160.81.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:47.934609 0.170682 udp 10.0.2.22 51868 <-> 92.229.38.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:48.930225 0.324293 udp 10.0.2.22 51868 <-> 134.3.252.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:49.935965 0.076659 udp 10.0.2.22 51868 <-> 5.248.35.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:50.941761 0.193232 udp 10.0.2.22 51868 <-> 68.231.114.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:51.945485 3.085792 udp 10.0.2.22 51868 <-> 94.41.58.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:52.941865 0.136346 udp 10.0.2.22 51868 <-> 66.212.208.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:53.938638 0.000000 udp 10.0.2.22 51868 -> 88.25.205.167 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:01:55.928343 0.840368 udp 10.0.2.22 51868 <-> 81.190.155.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:56.927212 0.155291 udp 10.0.2.22 51868 <-> 174.100.202.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:57.928632 0.363032 udp 10.0.2.22 51868 <-> 49.159.145.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:58.930198 0.066674 udp 10.0.2.22 51868 <-> 128.71.112.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:01:59.932631 0.095869 udp 10.0.2.22 51868 <-> 88.165.151.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:00.932850 0.147647 udp 10.0.2.22 51868 <-> 68.199.153.224 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:01.926790 0.005332 udp 10.0.2.22 51868 <-> 92.240.171.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:02.927253 1.396815 udp 10.0.2.22 51868 <-> 208.101.72.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:03.935732 0.000000 udp 10.0.2.22 51868 -> 80.24.231.229 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:02:04.937713 0.284682 udp 10.0.2.22 51868 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:05.997411 0.436950 udp 10.0.2.22 51868 <-> 117.204.72.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:06.991201 0.255836 udp 10.0.2.22 51868 <-> 85.224.201.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:07.988285 0.021249 udp 10.0.2.22 51868 <-> 176.199.74.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:08.975415 0.052769 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:09.971235 0.306642 udp 10.0.2.22 51868 <-> 186.92.177.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:10.972419 0.153484 udp 10.0.2.22 51868 <-> 76.16.28.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:11.968525 2.156895 udp 10.0.2.22 51868 <-> 199.188.251.64 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:12.962387 0.164286 udp 10.0.2.22 51868 <-> 71.61.103.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:13.826659 0.000134 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:02:14.949616 3.185660 udp 10.0.2.22 51868 <-> 197.7.54.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:15.940216 0.009159 udp 10.0.2.22 51868 <-> 82.209.26.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:16.936266 0.000000 udp 10.0.2.22 51868 -> 190.203.238.39 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:02:17.931665 0.158605 udp 10.0.2.22 51868 <-> 66.229.239.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:18.928794 1.148490 udp 10.0.2.22 51868 <-> 72.141.22.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:19.930393 0.193565 udp 10.0.2.22 51868 <-> 75.111.219.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:20.931956 0.143563 udp 10.0.2.22 51868 <-> 75.131.180.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:21.933082 0.076814 udp 10.0.2.22 51868 <-> 134.249.0.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:22.924569 0.284052 udp 10.0.2.22 51868 <-> 187.63.102.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:23.926104 0.139369 udp 10.0.2.22 51868 <-> 159.205.199.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:24.927736 0.048561 udp 10.0.2.22 51868 <-> 194.110.116.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:25.929871 0.165454 udp 10.0.2.22 51868 <-> 68.59.89.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:26.930715 0.056533 udp 10.0.2.22 51868 <-> 5.15.151.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:27.931622 0.080385 udp 10.0.2.22 51868 <-> 62.99.108.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:28.933136 0.178941 udp 10.0.2.22 51868 <-> 74.77.226.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:29.924482 0.137046 udp 10.0.2.22 51868 <-> 88.167.73.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:30.926742 0.079502 udp 10.0.2.22 51868 <-> 212.122.101.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:31.927407 0.199697 udp 10.0.2.22 51868 <-> 148.204.134.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:32.928999 0.052016 udp 10.0.2.22 51868 <-> 176.103.18.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:33.930607 4.220831 udp 10.0.2.22 51868 <-> 82.244.99.47 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:34.932045 0.065902 udp 10.0.2.22 51868 <-> 86.125.234.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:35.933232 1.066354 udp 10.0.2.22 51868 <-> 79.117.163.102 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:38.928028 0.297040 udp 10.0.2.22 51868 <-> 126.36.45.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:39.929112 0.291620 udp 10.0.2.22 51868 <-> 126.60.25.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:40.800153 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:02:40.930632 0.070512 udp 10.0.2.22 51868 <-> 85.86.103.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:41.931826 0.000000 udp 10.0.2.22 51868 -> 107.28.19.92 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:02:42.933508 0.156737 udp 10.0.2.22 51868 <-> 173.23.113.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:43.924777 0.000097 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:02:43.924874 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:02:45.927916 0.175374 udp 10.0.2.22 51868 <-> 72.230.110.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:46.929378 0.048226 udp 10.0.2.22 51868 <-> 62.195.179.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:47.930549 0.643552 udp 10.0.2.22 51868 <-> 190.193.89.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:48.931859 0.067715 udp 10.0.2.22 51868 <-> 79.114.24.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:49.933111 0.522664 udp 10.0.2.22 51868 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:02:50.924831 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:02:51.926213 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:02:52.927798 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:02:53.929422 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:02:54.930868 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:02:55.932231 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:02:56.933592 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:02:57.924932 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:02:58.926456 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:02:59.928092 0.139499 udp 10.0.2.22 51868 <-> 71.88.102.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:00.929534 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:03:01.930942 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:03:02.932052 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:03:03.933449 0.000097 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:03:03.933546 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:03:04.925002 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:03:06.928054 0.000000 udp 10.0.2.22 51868 -> 86.124.224.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:03:07.798975 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:03:07.929443 1.177646 udp 10.0.2.22 51868 <-> 186.206.236.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:08.930964 0.000000 udp 10.0.2.22 51868 -> 60.215.31.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:03:09.932043 0.427964 udp 10.0.2.22 51868 <-> 177.149.100.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:10.933078 0.066961 udp 10.0.2.22 51868 <-> 79.114.24.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:11.924944 0.516368 udp 10.0.2.22 51868 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:12.926732 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:03:13.927856 1.464045 udp 10.0.2.22 51868 <-> 186.206.236.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:14.929324 0.000000 udp 10.0.2.22 51868 -> 60.215.31.6 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:03:15.931059 0.137182 udp 10.0.2.22 51868 <-> 71.88.102.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:16.932362 0.000000 udp 10.0.2.22 51868 -> 1.36.118.97 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:03:17.933952 0.746450 udp 10.0.2.22 51868 <-> 177.149.100.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:18.925293 0.000000 udp 10.0.2.22 51868 -> 50.55.237.122 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:03:19.926654 4.125933 udp 10.0.2.22 51868 <-> 70.184.172.70 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:20.928005 0.046368 udp 10.0.2.22 51868 <-> 95.90.184.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:21.929322 0.588531 udp 10.0.2.22 51868 <-> 201.74.112.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:22.930872 1.108518 udp 10.0.2.22 51868 <-> 186.206.236.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:24.933858 0.000000 udp 10.0.2.22 51868 -> 60.215.31.6 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:03:25.925021 0.662635 udp 10.0.2.22 51868 <-> 190.193.89.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:26.926446 0.369687 udp 10.0.2.22 51868 <-> 190.51.16.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:28.929547 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:03:29.931374 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:03:30.932436 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:03:31.933875 3.996134 udp 10.0.2.22 51868 <-> 85.179.124.254 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:32.925309 0.010570 udp 10.0.2.22 51868 <-> 178.21.51.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:33.926739 0.065088 udp 10.0.2.22 51868 <-> 86.124.224.253 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:34.807896 0.000201 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:03:34.928195 0.000000 udp 10.0.2.22 51868 -> 113.193.139.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:03:36.930894 3.996029 udp 10.0.2.22 51868 -> 94.253.205.252 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:03:37.932309 0.050935 udp 10.0.2.22 51868 <-> 79.113.236.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:38.934057 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:03:39.925188 0.382844 udp 10.0.2.22 51868 <-> 85.179.124.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:41.927936 0.028240 udp 10.0.2.22 51868 <-> 84.119.41.2 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:42.929220 0.010316 udp 10.0.2.22 51868 <-> 178.21.51.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:43.930948 0.000000 udp 10.0.2.22 51868 -> 79.113.236.251 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:03:44.932664 1.602193 udp 10.0.2.22 51868 <-> 113.193.139.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:45.934313 0.000000 udp 10.0.2.22 51868 -> 86.124.224.253 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:03:46.925168 0.650458 udp 10.0.2.22 51868 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:47.926678 0.061758 udp 10.0.2.22 51868 <-> 79.113.56.46 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:48.928475 0.049450 udp 10.0.2.22 51868 <-> 92.108.115.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:49.929348 0.064100 udp 10.0.2.22 51868 <-> 85.204.248.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:50.931152 0.061380 udp 10.0.2.22 51868 <-> 5.20.145.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:51.932879 0.211485 udp 10.0.2.22 51868 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:52.933962 4.997315 udp 10.0.2.22 51868 <-> 1.172.59.34 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:53.925178 0.000000 udp 10.0.2.22 51868 -> 79.117.151.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:03:54.926764 0.000000 udp 10.0.2.22 51868 -> 95.108.60.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:03:55.928347 0.092190 udp 10.0.2.22 51868 <-> 109.182.87.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:56.929790 0.743503 udp 10.0.2.22 51868 <-> 181.72.146.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:58.281824 0.000000 udp 10.0.2.22 51868 <- 1.172.59.34 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:03:58.932712 0.138201 udp 10.0.2.22 51868 <-> 24.147.80.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:03:59.933959 0.045739 udp 10.0.2.22 51868 <-> 95.108.60.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:00.925643 0.310593 udp 10.0.2.22 51868 <-> 117.242.108.14 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:01.806614 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:04:01.927174 0.000000 udp 10.0.2.22 51868 -> 5.14.158.62 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:04:02.928516 0.071266 udp 10.0.2.22 51868 <-> 212.231.254.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:03.929838 0.344777 udp 10.0.2.22 51868 <-> 111.240.96.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:04.931170 0.000000 udp 10.0.2.22 51868 -> 82.247.203.115 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:04:05.933002 0.181478 udp 10.0.2.22 51868 <-> 188.159.204.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:06.934173 0.177806 udp 10.0.2.22 51868 <-> 65.25.78.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:07.925770 0.000000 udp 10.0.2.22 51868 -> 93.102.156.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:04:08.927033 0.000000 udp 10.0.2.22 51868 -> 179.109.142.90 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:04:09.928690 0.000000 udp 10.0.2.22 51868 -> 200.109.62.99 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:04:10.930132 0.056427 udp 10.0.2.22 51868 <-> 79.113.56.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:11.931816 0.154880 udp 10.0.2.22 51868 <-> 50.158.209.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:12.932898 0.286623 udp 10.0.2.22 51868 <-> 201.209.10.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:13.934404 0.162375 udp 10.0.2.22 51868 <-> 69.127.160.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:14.925723 0.177077 udp 10.0.2.22 51868 <-> 72.152.208.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:15.926891 0.000000 udp 10.0.2.22 51868 -> 69.47.17.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:04:16.928611 0.153206 udp 10.0.2.22 51868 <-> 98.214.215.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:17.930601 0.183479 udp 10.0.2.22 51868 <-> 188.159.204.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:18.931560 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:04:19.933149 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:04:20.934479 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:04:21.926213 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:04:22.927127 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:04:23.928862 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:04:24.930372 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:04:25.931684 0.077190 udp 10.0.2.22 51868 <-> 87.120.186.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:26.933103 0.310471 udp 10.0.2.22 51868 <-> 218.152.217.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:27.937774 0.000000 udp 10.0.2.22 51868 -> 79.51.215.42 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:04:28.807924 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:04:28.927985 0.000000 udp 10.0.2.22 51868 -> 69.47.17.58 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:04:29.929089 0.150913 udp 10.0.2.22 51868 <-> 98.214.215.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:30.928938 0.182401 udp 10.0.2.22 51868 <-> 188.159.204.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:31.930694 0.000000 udp 10.0.2.22 51868 -> 79.113.237.29 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:04:32.932218 0.058751 udp 10.0.2.22 51868 <-> 94.156.74.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:33.933147 0.184837 udp 10.0.2.22 51868 <-> 190.141.88.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:34.924469 0.166369 udp 10.0.2.22 51868 <-> 97.81.50.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:35.926169 0.000000 udp 10.0.2.22 51868 -> 92.3.107.244 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:04:36.927256 2.078013 udp 10.0.2.22 51868 <-> 95.220.247.249 16464 CON 0 0 6 3676 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:37.929087 0.136440 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:39.931676 0.156547 udp 10.0.2.22 51868 <-> 68.11.163.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:40.933016 0.000000 udp 10.0.2.22 51868 -> 76.24.62.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:04:41.924395 1.071800 udp 10.0.2.22 51868 <-> 46.162.107.20 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:43.927296 0.364978 udp 10.0.2.22 51868 <-> 61.224.15.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:44.928626 0.321786 udp 10.0.2.22 51868 <-> 118.161.58.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:45.930623 0.107969 udp 10.0.2.22 51868 <-> 82.254.207.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:46.931362 0.724497 udp 10.0.2.22 51868 <-> 188.167.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:47.933217 0.453150 udp 10.0.2.22 51868 <-> 177.182.184.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:48.924479 0.000000 udp 10.0.2.22 51868 -> 2.146.104.186 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:04:49.925889 0.421967 udp 10.0.2.22 51868 <-> 64.110.249.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:50.927447 0.039880 udp 10.0.2.22 51868 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:51.928778 0.304995 udp 10.0.2.22 51868 <-> 61.22.141.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:52.930649 0.000000 udp 10.0.2.22 51868 -> 190.78.142.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:04:53.932111 3.995574 udp 10.0.2.22 51868 -> 80.54.213.23 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:04:54.933187 0.000000 udp 10.0.2.22 51868 -> 79.113.187.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:04:55.804586 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:04:55.924729 0.000000 udp 10.0.2.22 51868 -> 80.140.179.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:04:56.926168 0.109440 udp 10.0.2.22 51868 <-> 72.209.205.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:58.930826 0.092473 udp 10.0.2.22 51868 <-> 178.79.11.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:04:59.930984 0.000000 udp 10.0.2.22 51868 -> 86.124.224.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:05:00.931834 0.050225 udp 10.0.2.22 51868 <-> 94.45.80.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:01.933072 0.352004 udp 10.0.2.22 51868 <-> 122.121.39.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:02.924630 0.153617 udp 10.0.2.22 51868 <-> 67.149.214.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:03.926853 0.221968 udp 10.0.2.22 51868 <-> 97.71.86.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:04.928331 0.152565 udp 10.0.2.22 51868 <-> 98.27.18.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:05.929253 0.070529 udp 10.0.2.22 51868 <-> 79.118.114.37 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:06.933866 0.000000 udp 10.0.2.22 51868 -> 181.18.186.121 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:05:07.933611 0.254765 udp 10.0.2.22 51868 <-> 79.2.78.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:08.933965 0.576049 udp 10.0.2.22 51868 <-> 77.221.8.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:09.924597 0.055035 udp 10.0.2.22 51868 <-> 77.85.204.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:10.926513 0.208047 udp 10.0.2.22 51868 <-> 75.80.119.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:11.928090 0.061751 udp 10.0.2.22 51868 <-> 79.132.25.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:12.929030 0.014872 udp 10.0.2.22 51868 <-> 188.230.247.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:13.930768 0.085512 udp 10.0.2.22 51868 <-> 188.25.221.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:14.932060 0.074775 udp 10.0.2.22 51868 <-> 79.117.157.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:15.933798 0.142200 udp 10.0.2.22 51868 <-> 24.187.85.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:16.924565 3.163767 udp 10.0.2.22 51868 <-> 70.80.21.145 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:17.926888 0.029870 udp 10.0.2.22 51868 <-> 94.176.147.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:18.928070 0.346517 udp 10.0.2.22 51868 <-> 118.171.226.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:20.930645 0.000000 udp 10.0.2.22 51868 -> 84.236.106.206 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:05:21.123704 3.001533 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 10:05:21.932100 0.051294 udp 10.0.2.22 51868 <-> 85.230.84.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:22.803100 0.000108 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:05:22.933385 0.049740 udp 10.0.2.22 51868 <-> 178.150.91.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:23.924908 0.128620 udp 10.0.2.22 51868 <-> 173.81.42.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:24.926815 0.167116 udp 10.0.2.22 51868 <-> 66.72.190.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:25.927803 2.147267 udp 10.0.2.22 51868 <-> 71.77.141.55 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:26.929134 0.317369 udp 10.0.2.22 51868 <-> 179.210.224.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:28.131594 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:05:28.932431 0.075013 udp 10.0.2.22 51868 <-> 195.3.228.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:29.933748 0.000000 udp 10.0.2.22 51868 -> 186.88.42.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:05:30.924985 0.152566 udp 10.0.2.22 51868 <-> 66.190.218.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:31.926785 0.060768 udp 10.0.2.22 51868 <-> 77.81.10.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:32.928625 0.000000 udp 10.0.2.22 51868 -> 47.16.108.125 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:05:33.930023 0.150959 udp 10.0.2.22 51868 <-> 72.23.159.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:34.930820 0.000000 udp 10.0.2.22 51868 -> 190.203.238.39 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:05:35.932265 0.338148 udp 10.0.2.22 51868 <-> 219.107.166.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:36.132386 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:05:36.933716 0.129459 udp 10.0.2.22 51868 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:37.924750 0.329128 udp 10.0.2.22 51868 <-> 14.99.14.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:38.926192 1.334869 udp 10.0.2.22 51868 <-> 1.161.56.107 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:40.930107 0.233089 udp 10.0.2.22 51868 <-> 190.77.102.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:41.930640 0.029547 udp 10.0.2.22 51868 <-> 78.97.175.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:42.932464 0.000000 udp 10.0.2.22 51868 -> 93.145.162.140 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:05:43.934031 0.172497 udp 10.0.2.22 51868 <-> 72.177.63.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:44.925108 0.094083 udp 10.0.2.22 51868 <-> 79.18.126.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:45.927255 0.000000 udp 10.0.2.22 51868 -> 88.181.134.70 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:05:46.928641 0.069938 udp 10.0.2.22 51868 <-> 83.147.167.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:47.929956 0.346517 udp 10.0.2.22 51868 <-> 114.40.221.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:48.930975 0.385960 udp 10.0.2.22 51868 <-> 186.52.130.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:49.802263 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:05:49.932655 0.151116 udp 10.0.2.22 51868 <-> 74.58.115.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:50.934216 0.173567 udp 10.0.2.22 51868 <-> 68.113.207.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:51.925186 0.209212 udp 10.0.2.22 51868 <-> 67.160.130.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:52.135396 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:05:52.926818 0.376881 udp 10.0.2.22 51868 <-> 181.18.186.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:53.928307 2.932739 udp 10.0.2.22 51868 <-> 186.19.134.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:54.930213 0.155230 udp 10.0.2.22 51868 <-> 50.171.133.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:55.930941 0.151745 udp 10.0.2.22 51868 <-> 173.28.68.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:56.932387 0.055856 udp 10.0.2.22 51868 <-> 188.121.16.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:57.933916 0.094431 udp 10.0.2.22 51868 <-> 82.242.39.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:58.925174 0.051614 udp 10.0.2.22 51868 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:05:59.927050 0.000000 udp 10.0.2.22 51868 -> 72.192.3.224 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:06:00.928314 0.089366 udp 10.0.2.22 51868 <-> 85.204.248.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:01.930120 0.000000 udp 10.0.2.22 51868 -> 173.28.68.119 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:06:02.931032 0.000000 udp 10.0.2.22 51868 -> 98.183.15.44 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:06:03.932582 0.367345 udp 10.0.2.22 51868 <-> 61.227.72.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:04.934150 0.314543 udp 10.0.2.22 51868 <-> 115.241.173.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:05.925447 0.082718 udp 10.0.2.22 51868 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:06.927891 3.003174 udp 10.0.2.22 51868 <-> 24.244.127.249 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:07.928349 0.342550 udp 10.0.2.22 51868 <-> 190.51.16.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:08.929641 3.004786 udp 10.0.2.22 51868 -> 190.52.58.252 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:06:10.932680 0.323217 udp 10.0.2.22 51868 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:12.925375 0.173709 udp 10.0.2.22 51868 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:13.927522 0.346080 udp 10.0.2.22 51868 <-> 190.51.16.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:14.928598 0.183035 udp 10.0.2.22 51868 <-> 184.189.232.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:15.930201 0.134314 udp 10.0.2.22 51868 <-> 79.50.19.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:16.800914 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:06:16.931275 0.134703 udp 10.0.2.22 51868 <-> 67.242.78.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:17.932841 0.000000 udp 10.0.2.22 51868 -> 189.6.136.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:06:18.934031 0.013431 udp 10.0.2.22 51868 <-> 89.103.132.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:19.925587 4.359577 udp 10.0.2.22 51868 <-> 187.37.104.223 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:20.926901 0.000000 udp 10.0.2.22 51868 -> 190.52.44.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:06:21.928550 0.387161 udp 10.0.2.22 51868 <-> 186.122.65.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:22.930258 0.000000 udp 10.0.2.22 51868 -> 89.142.152.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:06:24.141876 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:06:24.933051 0.150799 udp 10.0.2.22 51868 <-> 66.187.121.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:25.934017 0.333457 udp 10.0.2.22 51868 <-> 200.122.103.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:26.926018 0.075266 udp 10.0.2.22 51868 <-> 77.23.110.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:27.927030 0.013578 udp 10.0.2.22 51868 <-> 89.176.244.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:28.928832 0.335737 udp 10.0.2.22 51868 <-> 180.215.90.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:29.930053 0.156951 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:30.930807 0.031237 udp 10.0.2.22 51868 <-> 77.236.190.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:31.932626 0.329374 udp 10.0.2.22 51868 <-> 36.224.194.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:32.934144 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:06:33.926016 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:06:34.927200 0.177563 udp 10.0.2.22 51868 <-> 68.117.244.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:35.928938 0.285028 udp 10.0.2.22 51868 <-> 186.93.233.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:36.930071 0.108256 udp 10.0.2.22 51868 <-> 78.239.110.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:37.931305 0.119148 udp 10.0.2.22 51868 <-> 80.86.237.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:38.932596 0.073165 udp 10.0.2.22 51868 <-> 85.87.224.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:39.934396 0.085312 udp 10.0.2.22 51868 -> 78.168.126.219 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:06:40.019708 0.000000 icmp 78.168.126.219 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 10:06:40.925686 0.209278 udp 10.0.2.22 51868 <-> 77.239.84.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:41.926793 0.000000 udp 10.0.2.22 51868 -> 84.124.235.123 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:06:42.928625 0.154836 udp 10.0.2.22 51868 <-> 96.59.111.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:43.799786 0.000122 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:06:43.930213 0.294595 udp 10.0.2.22 51868 <-> 60.37.183.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:44.932051 0.168557 udp 10.0.2.22 51868 <-> 87.20.254.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:45.933033 0.045176 udp 10.0.2.22 51868 <-> 89.103.132.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:46.934267 0.133898 udp 10.0.2.22 51868 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:47.926393 0.259303 udp 10.0.2.22 51868 <-> 98.127.49.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:48.927279 0.168661 udp 10.0.2.22 51868 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:49.928624 0.150408 udp 10.0.2.22 51868 <-> 108.183.176.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:50.930188 0.173273 udp 10.0.2.22 51868 <-> 90.137.158.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:51.931444 0.000000 udp 10.0.2.22 51868 -> 46.241.150.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:06:52.933109 1.992502 udp 10.0.2.22 51868 -> 187.172.189.2 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:06:53.934536 0.133244 udp 10.0.2.22 51868 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:55.927703 0.462855 udp 10.0.2.22 51868 <-> 178.239.112.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:56.928937 0.258402 udp 10.0.2.22 51868 <-> 98.127.49.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:57.929966 0.300558 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:06:58.931905 0.045980 udp 10.0.2.22 51868 <-> 78.62.159.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:07:00.934412 0.000082 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:00.934494 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:07:01.925778 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:02.927008 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:03.928917 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:04.930067 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:05.931727 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:06.933181 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:07.924236 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:08.925964 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:09.927762 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:10.808458 0.000107 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:07:10.928688 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:11.930165 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:12.931700 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:13.933070 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:14.924604 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:15.926047 0.089717 udp 10.0.2.22 51868 <-> 95.74.208.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:07:16.927449 0.140049 udp 10.0.2.22 51868 <-> 71.225.111.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:07:17.928687 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:18.930709 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:19.931523 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:21.924404 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:22.926443 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:23.927728 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:24.928961 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:25.930363 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:26.932555 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:27.933121 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:28.924653 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:29.926047 0.000125 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:29.926172 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:07:30.927682 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:31.929232 1.301012 udp 10.0.2.22 51868 <-> 187.18.151.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:07:32.930665 0.468588 udp 10.0.2.22 51868 <-> 68.59.72.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:07:33.931757 0.060327 udp 10.0.2.22 51868 <-> 86.121.77.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:07:34.933726 0.000000 udp 10.0.2.22 51868 -> 216.6.184.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:35.924430 0.170544 udp 10.0.2.22 51868 <-> 97.106.251.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:07:36.926602 0.000000 udp 10.0.2.22 51868 -> 195.5.68.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:37.807965 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:07:37.928485 0.108672 udp 10.0.2.22 51868 <-> 78.159.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:07:38.929208 0.036061 udp 10.0.2.22 51868 <-> 62.221.143.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:07:39.930928 0.053806 udp 10.0.2.22 51868 <-> 95.27.8.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:07:40.261363 0.014519 udp 10.0.2.22 60064 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 10:07:40.276214 0.000000 udp 10.0.2.22 60065 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:40.931954 0.206308 udp 10.0.2.22 51868 <-> 97.106.251.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:07:41.933216 4.058491 udp 10.0.2.22 51868 <-> 86.121.77.25 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:07:42.924669 0.000000 udp 10.0.2.22 51868 -> 216.6.184.21 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:43.926492 0.051282 udp 10.0.2.22 51868 <-> 87.97.201.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:07:44.927733 0.000000 udp 10.0.2.22 51868 -> 95.87.232.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:46.933235 1.375284 udp 10.0.2.22 51868 <-> 187.18.151.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:07:47.933175 0.319060 udp 10.0.2.22 51868 <-> 190.208.117.38 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:07:48.933815 0.000000 udp 10.0.2.22 51868 -> 47.16.247.243 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:49.924670 0.162059 udp 10.0.2.22 51868 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:07:50.926210 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:51.927878 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:52.932138 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:53.936421 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:54.938731 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:55.938729 0.000000 udp 10.0.2.22 51868 -> 95.142.190.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:56.929468 0.000000 udp 10.0.2.22 51868 -> 76.11.24.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:07:57.930364 0.129608 udp 10.0.2.22 51868 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:07:58.930867 0.321195 udp 10.0.2.22 51868 <-> 181.72.237.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:07:59.932447 0.000000 udp 10.0.2.22 51868 -> 113.193.96.149 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:08:00.933155 0.484079 udp 10.0.2.22 51868 <-> 182.188.190.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:01.933398 0.190284 udp 10.0.2.22 51868 <-> 71.43.117.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:02.946648 0.291519 udp 10.0.2.22 51868 <-> 180.147.116.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:03.934411 0.165939 udp 10.0.2.22 51868 <-> 173.199.217.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:04.812918 0.000115 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:08:04.932589 0.159444 udp 10.0.2.22 51868 <-> 173.212.89.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:05.930557 0.150325 udp 10.0.2.22 51868 <-> 79.40.236.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:06.458152 0.000000 udp 10.0.2.22 51868 <- 113.193.96.149 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:08:06.929618 0.351272 udp 10.0.2.22 51868 <-> 1.172.59.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:07.931002 0.067581 udp 10.0.2.22 51868 <-> 86.126.97.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:08.932459 0.000000 udp 10.0.2.22 51868 -> 82.53.170.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:08:09.933634 0.166018 udp 10.0.2.22 51868 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:10.925106 0.343931 udp 10.0.2.22 51868 <-> 85.179.124.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:11.926290 0.161046 udp 10.0.2.22 51868 <-> 98.253.7.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:12.928209 0.000000 udp 10.0.2.22 51868 -> 173.180.203.114 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:08:13.929149 0.000000 udp 10.0.2.22 51868 -> 195.174.174.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:08:14.930738 0.377826 udp 10.0.2.22 51868 <-> 186.191.29.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:15.932153 4.997303 udp 10.0.2.22 51868 <-> 84.236.102.29 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:16.933074 0.346120 udp 10.0.2.22 51868 <-> 181.26.51.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:17.925099 0.122179 udp 10.0.2.22 51868 <-> 84.224.192.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:18.926619 0.000000 udp 10.0.2.22 51868 -> 78.159.43.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:08:19.928064 0.074927 udp 10.0.2.22 51868 <-> 86.122.233.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:21.000062 0.000043 udp 10.0.2.22 51868 <- 84.236.102.29 16464 RSP 0 0 2 1780 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:08:21.930938 0.246761 udp 10.0.2.22 51868 <-> 173.180.203.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:22.932276 0.073678 udp 10.0.2.22 51868 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:23.933911 0.319908 udp 10.0.2.22 51868 <-> 117.207.90.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:24.925020 0.158018 udp 10.0.2.22 51868 <-> 75.143.148.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:25.926568 0.207779 udp 10.0.2.22 51868 <-> 50.168.18.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:26.928207 0.000000 udp 10.0.2.22 51868 -> 64.46.3.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:08:27.929211 0.076264 udp 10.0.2.22 51868 <-> 5.12.237.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:28.930718 0.147523 udp 10.0.2.22 51868 <-> 69.118.76.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:29.932460 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:08:30.933853 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:08:31.806187 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:08:31.926131 1.000397 udp 10.0.2.22 51868 <-> 24.167.187.133 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:33.928133 0.188762 udp 10.0.2.22 51868 <-> 70.189.149.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:34.929631 0.344991 udp 10.0.2.22 51868 <-> 189.92.130.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:35.931121 0.000000 udp 10.0.2.22 51868 -> 192.168.1.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:08:36.932217 0.000000 udp 10.0.2.22 51868 -> 86.122.233.25 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:08:37.933960 0.103462 udp 10.0.2.22 51868 <-> 92.115.249.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:38.925071 0.101092 udp 10.0.2.22 51868 <-> 78.78.38.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:39.926821 0.000000 udp 10.0.2.22 51868 -> 178.26.123.117 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:08:40.928537 0.206295 udp 10.0.2.22 51868 <-> 76.121.242.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:41.930815 0.158093 udp 10.0.2.22 51868 <-> 50.158.209.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:42.932040 4.782550 udp 10.0.2.22 51868 <-> 70.66.227.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:43.932852 0.071442 udp 10.0.2.22 51868 <-> 87.0.238.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:44.934245 0.295943 udp 10.0.2.22 51868 <-> 186.88.42.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:45.925260 0.317001 udp 10.0.2.22 51868 <-> 153.167.182.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:46.926591 0.032326 udp 10.0.2.22 51868 <-> 85.130.12.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:47.928652 0.098289 udp 10.0.2.22 51868 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:48.932640 0.000000 udp 10.0.2.22 51868 -> 174.59.159.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:08:49.933057 0.120357 udp 10.0.2.22 51868 <-> 70.181.57.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:50.932417 0.176027 udp 10.0.2.22 51868 <-> 174.48.245.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:51.933935 0.071519 udp 10.0.2.22 51868 <-> 86.124.196.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:52.925248 0.159936 udp 10.0.2.22 51868 <-> 71.40.150.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:53.927011 0.336244 udp 10.0.2.22 51868 <-> 109.54.68.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:54.928956 0.438016 udp 10.0.2.22 51868 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:55.930205 0.056234 udp 10.0.2.22 51868 <-> 46.251.57.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:56.931140 0.120935 udp 10.0.2.22 51868 <-> 178.120.38.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:57.932789 0.000000 udp 10.0.2.22 51868 -> 78.228.60.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:08:58.804052 0.000137 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:08:58.934021 0.143173 udp 10.0.2.22 51868 <-> 79.9.188.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:08:59.925423 0.045173 udp 10.0.2.22 51868 <-> 87.187.4.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:00.927055 0.292846 udp 10.0.2.22 51868 <-> 31.47.27.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:01.928729 0.131586 udp 10.0.2.22 51868 <-> 65.182.49.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:02.930059 0.243856 udp 10.0.2.22 51868 <-> 177.226.26.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:03.931082 0.171606 udp 10.0.2.22 51868 <-> 72.177.63.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:04.932426 0.159833 udp 10.0.2.22 51868 <-> 209.182.117.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:05.934629 2.746811 udp 10.0.2.22 51868 <-> 75.197.131.153 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:06.925639 1.353577 udp 10.0.2.22 51868 <-> 87.3.116.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:08.928567 0.160081 udp 10.0.2.22 51868 <-> 50.83.18.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:09.930007 0.077079 udp 10.0.2.22 51868 <-> 31.11.215.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:10.931409 0.159164 udp 10.0.2.22 51868 <-> 76.179.185.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:11.932738 0.093732 udp 10.0.2.22 51868 <-> 82.240.144.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:12.934112 0.082662 udp 10.0.2.22 51868 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:13.926255 0.167755 udp 10.0.2.22 51868 <-> 24.102.154.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:14.927098 0.035228 udp 10.0.2.22 51868 <-> 81.237.99.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:15.928892 0.339138 udp 10.0.2.22 51868 <-> 113.61.156.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:16.929910 0.054152 udp 10.0.2.22 51868 <-> 212.75.9.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:17.931781 0.176708 udp 10.0.2.22 51868 <-> 64.130.190.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:18.932734 0.138243 udp 10.0.2.22 51868 <-> 24.185.176.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:19.934028 0.168110 udp 10.0.2.22 51868 <-> 70.81.218.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:20.926249 0.457001 udp 10.0.2.22 51868 <-> 115.241.3.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:21.927165 0.056433 udp 10.0.2.22 51868 <-> 93.77.102.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:22.928918 0.060940 udp 10.0.2.22 51868 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:23.930369 0.354909 udp 10.0.2.22 51868 <-> 114.47.209.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:24.931536 0.127547 udp 10.0.2.22 51868 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:25.802757 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:09:25.932788 0.169702 udp 10.0.2.22 51868 <-> 70.82.157.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:26.934434 0.035822 udp 10.0.2.22 51868 <-> 82.176.19.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:27.925958 0.198387 udp 10.0.2.22 51868 <-> 68.98.42.220 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:28.927237 0.182583 udp 10.0.2.22 51868 <-> 68.185.195.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:29.928840 0.025510 udp 10.0.2.22 51868 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:30.929915 0.138139 udp 10.0.2.22 51868 <-> 76.100.52.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:31.931407 2.208104 udp 10.0.2.22 51868 <-> 82.227.89.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:32.933133 0.149484 udp 10.0.2.22 51868 <-> 24.34.66.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:33.934127 0.167728 udp 10.0.2.22 51868 <-> 65.162.46.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:34.926393 0.204163 udp 10.0.2.22 51868 <-> 24.209.250.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:35.927149 0.244222 udp 10.0.2.22 51868 <-> 24.207.212.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:36.928595 0.038528 udp 10.0.2.22 51868 <-> 46.40.104.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:37.930080 0.168235 udp 10.0.2.22 51868 <-> 98.194.123.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:38.931636 0.000000 udp 10.0.2.22 51868 -> 109.122.73.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:09:39.933154 0.179894 udp 10.0.2.22 51868 <-> 183.83.152.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:40.924334 0.367391 udp 10.0.2.22 51868 <-> 180.215.208.220 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:41.926390 0.000000 udp 10.0.2.22 51868 -> 79.42.30.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:09:42.928349 0.215713 udp 10.0.2.22 51868 <-> 190.144.82.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:43.928768 0.138388 udp 10.0.2.22 51868 <-> 111.91.106.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:44.930350 0.297159 udp 10.0.2.22 51868 <-> 190.193.89.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:45.931934 0.000000 udp 10.0.2.22 51868 -> 98.198.65.0 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:09:46.933029 0.000000 udp 10.0.2.22 51868 -> 161.200.173.68 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:09:47.924758 0.000000 udp 10.0.2.22 51868 -> 81.190.155.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:09:48.926346 0.000000 udp 10.0.2.22 51868 -> 115.240.61.141 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:09:49.927137 0.000000 udp 10.0.2.22 51868 -> 75.48.12.42 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:09:50.928534 3.428308 udp 10.0.2.22 51868 <-> 190.193.89.54 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:51.930121 0.120412 udp 10.0.2.22 51868 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:52.801230 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:09:52.931490 0.000000 udp 10.0.2.22 51868 -> 98.198.65.0 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:09:54.924784 0.075301 udp 10.0.2.22 51868 <-> 93.72.70.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:55.926793 0.000000 udp 10.0.2.22 51868 -> 99.116.42.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:09:56.927584 0.000000 udp 10.0.2.22 51868 -> 76.110.62.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:09:57.929737 0.075038 udp 10.0.2.22 51868 <-> 85.152.0.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:58.930166 1.364376 udp 10.0.2.22 51868 <-> 78.136.101.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:09:59.931870 0.000000 udp 10.0.2.22 51868 -> 78.159.43.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:10:00.932973 0.352923 udp 10.0.2.22 51868 <-> 111.250.95.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:01.924561 0.000000 udp 10.0.2.22 51868 -> 76.189.34.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:10:02.926534 0.173018 udp 10.0.2.22 51868 <-> 70.81.218.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:03.927582 0.000000 udp 10.0.2.22 51868 -> 174.108.74.72 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:10:04.929039 0.000000 udp 10.0.2.22 51868 -> 74.61.123.120 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:10:05.930736 0.082195 udp 10.0.2.22 51868 <-> 80.164.97.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:06.931984 0.000000 udp 10.0.2.22 51868 -> 216.218.62.55 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:10:07.933370 0.047921 udp 10.0.2.22 51868 <-> 89.99.62.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:08.924677 0.051102 udp 10.0.2.22 51868 <-> 88.156.89.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:09.926920 0.339302 udp 10.0.2.22 51868 <-> 113.61.156.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:10.928376 0.000000 udp 10.0.2.22 51868 -> 177.80.15.87 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:10:11.929647 0.062539 udp 10.0.2.22 51868 <-> 89.28.101.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:12.931043 0.043365 udp 10.0.2.22 51868 <-> 178.148.145.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:13.931751 0.814616 udp 10.0.2.22 51868 <-> 187.85.15.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:14.933450 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:10:15.924483 0.262284 udp 10.0.2.22 51868 <-> 88.187.104.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:16.926497 0.000000 udp 10.0.2.22 51868 -> 95.88.209.7 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:10:17.927534 0.000000 udp 10.0.2.22 51868 -> 77.38.98.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:10:18.929152 4.329407 udp 10.0.2.22 51868 <-> 190.130.151.5 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:19.800800 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:10:19.931235 0.061193 udp 10.0.2.22 51868 <-> 95.42.253.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:20.932142 0.270616 udp 10.0.2.22 51868 <-> 88.187.104.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:22.924775 0.290941 udp 10.0.2.22 51868 <-> 219.114.23.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:23.926414 0.162607 udp 10.0.2.22 51868 <-> 72.230.110.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:24.928146 0.059672 udp 10.0.2.22 51868 <-> 87.121.12.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:25.929313 0.070200 udp 10.0.2.22 51868 <-> 93.72.70.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:26.930630 0.234107 udp 10.0.2.22 51868 <-> 82.229.113.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:27.931916 0.070753 udp 10.0.2.22 51868 <-> 79.116.163.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:28.933288 0.059026 udp 10.0.2.22 51868 <-> 95.43.88.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:29.924782 0.183672 udp 10.0.2.22 51868 <-> 72.199.65.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:30.926325 0.134909 udp 10.0.2.22 51868 <-> 204.93.96.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:31.928269 0.148457 udp 10.0.2.22 51868 <-> 176.237.213.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:32.930708 0.152209 udp 10.0.2.22 51868 <-> 173.197.148.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:33.930978 0.030921 udp 10.0.2.22 51868 <-> 89.64.246.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:34.932267 0.062670 udp 10.0.2.22 51868 <-> 86.122.21.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:35.933736 0.149095 udp 10.0.2.22 51868 <-> 66.171.56.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:36.924977 0.196676 udp 10.0.2.22 51868 <-> 71.92.82.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:37.926721 0.000000 udp 10.0.2.22 51868 -> 61.46.208.135 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:10:38.928701 0.000000 udp 10.0.2.22 51868 -> 188.158.228.130 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:10:39.929300 0.180874 udp 10.0.2.22 51868 <-> 66.115.88.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:40.931064 0.851803 udp 10.0.2.22 51868 <-> 202.142.110.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:41.932179 0.164220 udp 10.0.2.22 51868 <-> 50.73.12.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:42.936770 0.356489 udp 10.0.2.22 51868 <-> 187.83.142.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:43.927814 1.282769 udp 10.0.2.22 51868 <-> 190.39.82.79 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:44.928646 0.000000 udp 10.0.2.22 51868 -> 178.25.74.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:10:45.929870 0.176267 udp 10.0.2.22 51868 <-> 24.72.12.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:46.800116 0.000150 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:10:46.930357 0.135714 udp 10.0.2.22 51868 <-> 69.123.17.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:47.931147 0.166296 udp 10.0.2.22 51868 <-> 184.170.169.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:48.932399 0.000000 udp 10.0.2.22 51868 -> 175.140.88.97 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:10:49.933634 0.294082 udp 10.0.2.22 51868 <-> 189.103.153.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:50.924964 0.099466 udp 10.0.2.22 51868 <-> 88.166.247.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:51.927706 1.421202 udp 10.0.2.22 51868 <-> 177.80.15.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:52.928292 0.069731 udp 10.0.2.22 51868 <-> 188.171.6.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:53.929427 0.312863 udp 10.0.2.22 51868 <-> 58.3.144.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:54.930869 0.000000 udp 10.0.2.22 51868 -> 186.89.156.52 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:10:55.932425 0.655290 udp 10.0.2.22 51868 <-> 93.102.156.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:56.934490 0.147875 udp 10.0.2.22 51868 <-> 24.210.69.132 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:10:57.924937 0.000000 udp 10.0.2.22 51868 -> 186.88.170.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:10:58.926900 0.000000 udp 10.0.2.22 51868 -> 36.232.204.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:10:59.930700 0.047466 udp 10.0.2.22 51868 <-> 213.109.121.19 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:00.930106 3.093985 udp 10.0.2.22 51868 <-> 78.203.12.138 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:01.930975 0.096955 udp 10.0.2.22 51868 <-> 85.178.130.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:02.932309 0.329555 udp 10.0.2.22 51868 <-> 99.121.92.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:04.925137 1.094331 udp 10.0.2.22 51868 <-> 201.210.215.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:05.926791 0.314679 udp 10.0.2.22 51868 <-> 92.250.7.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:06.928932 0.147811 udp 10.0.2.22 51868 <-> 123.201.185.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:07.928936 0.000000 udp 10.0.2.22 51868 -> 177.225.129.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:11:08.930947 1.055807 udp 10.0.2.22 51868 <-> 50.80.122.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:09.932602 0.154589 udp 10.0.2.22 51868 <-> 74.58.30.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:10.934091 3.300375 udp 10.0.2.22 51868 <-> 186.206.236.5 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:11.925573 2.230908 udp 10.0.2.22 51868 <-> 200.93.94.100 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:13.807686 0.000036 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:11:14.929471 0.246540 udp 10.0.2.22 51868 <-> 117.207.154.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:15.931161 0.307828 udp 10.0.2.22 51868 <-> 201.95.139.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:16.932606 2.349262 udp 10.0.2.22 51868 <-> 111.241.157.68 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:17.934176 0.158269 udp 10.0.2.22 51868 <-> 66.130.116.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:19.926924 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:11:20.928292 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:11:21.929927 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:11:22.930958 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:11:23.932982 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:11:24.934377 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:11:25.925491 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:11:26.926936 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:11:27.928482 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:11:28.929744 0.358825 udp 10.0.2.22 51868 <-> 111.241.157.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:29.931731 0.207164 udp 10.0.2.22 51868 <-> 98.237.222.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:30.932653 0.110318 udp 10.0.2.22 51868 <-> 130.204.146.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:31.934193 0.372793 udp 10.0.2.22 51868 <-> 112.158.196.191 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:32.925661 0.200996 udp 10.0.2.22 51868 <-> 123.238.15.21 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:33.926869 0.138112 udp 10.0.2.22 51868 <-> 24.152.221.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:34.928401 0.227227 udp 10.0.2.22 51868 <-> 71.94.164.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:36.931644 0.000046 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:11:36.931690 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:11:37.932909 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:11:38.934135 0.176444 udp 10.0.2.22 51868 <-> 68.3.157.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:39.925919 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:11:40.926708 0.052915 udp 10.0.2.22 51868 <-> 89.137.78.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:41.928628 0.042963 udp 10.0.2.22 51868 <-> 94.210.21.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:42.799951 0.000099 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:11:42.930415 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:11:43.931244 0.153122 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:44.932631 0.181098 udp 10.0.2.22 51868 <-> 174.56.140.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:45.934071 0.056769 udp 10.0.2.22 51868 <-> 194.94.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:46.925856 0.000000 udp 10.0.2.22 51868 -> 111.240.96.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:11:47.926895 0.043055 udp 10.0.2.22 51868 <-> 94.210.21.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:48.928775 0.072761 udp 10.0.2.22 51868 <-> 212.3.13.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:49.930307 0.121973 udp 10.0.2.22 51868 <-> 95.67.190.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:50.931959 0.356613 udp 10.0.2.22 51868 <-> 111.241.157.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:51.932816 0.215007 udp 10.0.2.22 51868 <-> 113.193.32.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:52.934026 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:11:53.925843 0.053740 udp 10.0.2.22 51868 <-> 85.231.171.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:54.927096 1.093113 udp 10.0.2.22 51868 <-> 69.55.205.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:55.928511 0.163728 udp 10.0.2.22 51868 <-> 75.133.28.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:56.929893 0.631104 udp 10.0.2.22 51868 <-> 59.93.240.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:57.931564 0.364183 udp 10.0.2.22 51868 <-> 114.37.121.140 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:58.932873 0.013504 udp 10.0.2.22 51868 <-> 188.230.151.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:11:59.934523 0.137561 udp 10.0.2.22 51868 <-> 68.187.182.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:00.925433 0.155461 udp 10.0.2.22 51868 <-> 71.194.150.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:01.927084 0.000000 udp 10.0.2.22 51868 -> 72.181.221.51 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:12:02.928620 0.334272 udp 10.0.2.22 51868 <-> 61.58.184.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:03.930244 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:12:04.931851 0.043496 udp 10.0.2.22 51868 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:05.933084 0.063377 udp 10.0.2.22 51868 <-> 5.14.225.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:06.934499 0.349266 udp 10.0.2.22 51868 <-> 114.47.13.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:07.925995 0.041443 udp 10.0.2.22 51868 <-> 78.70.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:08.927144 0.161893 udp 10.0.2.22 51868 <-> 70.44.250.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:09.810749 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:12:09.931001 0.038451 udp 10.0.2.22 51868 <-> 46.10.187.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:10.931795 0.523125 udp 10.0.2.22 51868 <-> 190.192.195.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:11.932456 0.144587 udp 10.0.2.22 51868 <-> 72.11.176.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:12.933038 0.192758 udp 10.0.2.22 51868 <-> 172.219.86.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:13.924293 0.189722 udp 10.0.2.22 51868 <-> 78.51.115.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:14.926298 0.242704 udp 10.0.2.22 51868 <-> 190.75.66.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:15.927186 0.147663 udp 10.0.2.22 51868 <-> 24.239.220.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:16.928740 0.028198 udp 10.0.2.22 51868 <-> 149.172.200.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:17.932364 0.721125 udp 10.0.2.22 51868 <-> 217.72.209.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:18.933040 0.172237 udp 10.0.2.22 51868 <-> 173.198.147.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:19.932856 0.140474 udp 10.0.2.22 51868 <-> 87.4.161.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:20.924510 0.000000 udp 10.0.2.22 51868 -> 76.123.129.230 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:12:21.926078 0.141650 udp 10.0.2.22 51868 <-> 74.89.59.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:22.927672 0.077286 udp 10.0.2.22 51868 <-> 85.136.51.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:23.929013 0.159695 udp 10.0.2.22 51868 <-> 108.170.53.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:24.930593 0.280976 udp 10.0.2.22 51868 <-> 189.37.0.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:25.932290 0.273309 udp 10.0.2.22 51868 <-> 177.80.161.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:26.933557 0.073740 udp 10.0.2.22 51868 <-> 93.156.61.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:27.924544 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:12:28.926243 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:12:29.928346 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:12:30.928925 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:12:31.930256 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:12:32.931324 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:12:33.933269 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:12:34.924664 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:12:35.926388 4.005495 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:12:36.807593 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:12:36.927340 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:12:37.929129 0.000117 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:12:37.929246 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:12:38.153644 3.000419 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 10:12:38.930359 0.210821 udp 10.0.2.22 51868 <-> 49.205.73.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:40.933106 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:12:41.924573 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:12:42.926624 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:12:43.927674 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:12:44.928873 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:12:45.159174 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:12:45.930378 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:12:46.931767 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:12:47.933054 0.255753 udp 10.0.2.22 51868 <-> 189.38.156.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:48.924766 0.329343 udp 10.0.2.22 51868 <-> 78.42.36.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:49.926148 0.000000 udp 10.0.2.22 51868 -> 188.2.220.89 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:12:50.927960 0.344639 udp 10.0.2.22 51868 <-> 187.49.27.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:51.929293 0.391512 udp 10.0.2.22 51868 <-> 61.64.24.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:52.931051 0.352739 udp 10.0.2.22 51868 <-> 115.241.36.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:53.161308 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:12:53.932002 0.202629 udp 10.0.2.22 51868 <-> 128.95.174.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:54.933125 0.153661 udp 10.0.2.22 51868 <-> 98.181.49.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:55.924750 0.000000 udp 10.0.2.22 51868 -> 177.147.22.38 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:12:56.926404 0.585692 udp 10.0.2.22 51868 <-> 151.238.233.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:57.927722 0.327589 udp 10.0.2.22 51868 <-> 111.252.28.181 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:12:58.929332 0.000000 udp 10.0.2.22 51868 -> 2.68.0.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:12:59.930619 0.046777 udp 10.0.2.22 51868 <-> 212.83.78.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:00.932289 0.039165 udp 10.0.2.22 51868 <-> 46.10.187.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:01.933160 0.286828 udp 10.0.2.22 51868 <-> 190.36.188.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:02.924729 0.146954 udp 10.0.2.22 51868 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:03.806075 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:13:03.926476 0.318819 udp 10.0.2.22 51868 <-> 201.93.44.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:04.927508 0.318047 udp 10.0.2.22 51868 <-> 110.11.203.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:05.929301 0.074310 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:06.930734 0.412715 udp 10.0.2.22 51868 <-> 5.200.230.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:07.931623 0.304370 udp 10.0.2.22 51868 <-> 118.157.11.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:08.933751 0.069870 udp 10.0.2.22 51868 <-> 79.116.163.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:09.164007 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:13:09.924961 0.000000 udp 10.0.2.22 51868 -> 79.119.165.110 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:13:10.926492 0.133569 udp 10.0.2.22 51868 <-> 50.157.214.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:11.928514 4.996372 udp 10.0.2.22 51868 -> 190.75.56.2 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:13:12.930194 0.257529 udp 10.0.2.22 51868 <-> 201.164.238.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:13.931041 0.042570 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:14.932125 0.558287 udp 10.0.2.22 51868 <-> 66.115.88.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:15.934080 0.181962 udp 10.0.2.22 51868 <-> 156.26.82.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:17.145606 0.015932 udp 10.0.2.22 51868 <- 190.75.56.2 16464 RSP 0 0 2 1780 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:13:17.926253 0.225249 udp 10.0.2.22 51868 <-> 184.167.226.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:18.927877 0.315142 udp 10.0.2.22 51868 <-> 118.47.164.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:19.929811 0.066778 udp 10.0.2.22 51868 <-> 213.254.68.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:20.930645 0.348395 udp 10.0.2.22 51868 <-> 183.102.244.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:21.932684 0.000000 udp 10.0.2.22 51868 -> 81.201.145.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:13:22.933748 0.411706 udp 10.0.2.22 51868 <-> 111.119.245.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:23.930683 0.384818 udp 10.0.2.22 51868 <-> 68.59.72.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:24.931072 0.000000 udp 10.0.2.22 51868 -> 85.219.46.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:13:25.932359 0.000000 udp 10.0.2.22 51868 -> 173.199.217.72 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:13:26.933694 4.992859 udp 10.0.2.22 51868 -> 190.193.222.68 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:13:27.933914 0.146373 udp 10.0.2.22 51868 <-> 71.197.28.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:28.933866 0.208615 udp 10.0.2.22 51868 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:29.933916 1.447502 udp 10.0.2.22 51868 <-> 98.100.21.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:30.804765 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:13:30.925072 0.296388 udp 10.0.2.22 51868 <-> 201.215.98.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:32.927802 0.052523 udp 10.0.2.22 51868 <-> 31.19.152.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:33.929575 0.000000 udp 10.0.2.22 51868 -> 24.242.53.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:13:34.931001 0.204811 udp 10.0.2.22 51868 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:35.932199 0.033927 udp 10.0.2.22 51868 <-> 84.252.22.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:36.933789 0.034730 udp 10.0.2.22 51868 <-> 78.90.230.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:37.925091 0.000000 udp 10.0.2.22 51868 -> 84.123.105.67 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:13:38.926639 0.000000 udp 10.0.2.22 51868 -> 84.224.226.92 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:13:39.928239 0.079970 udp 10.0.2.22 51868 <-> 87.120.215.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:40.929845 0.167971 udp 10.0.2.22 51868 <-> 24.242.53.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:41.170090 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:13:41.930993 0.000000 udp 10.0.2.22 51868 -> 190.193.222.68 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:13:42.932481 0.048849 udp 10.0.2.22 51868 <-> 5.43.104.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:43.933881 0.032826 udp 10.0.2.22 51868 <-> 78.90.230.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:44.924978 0.292510 udp 10.0.2.22 51868 <-> 189.68.137.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:45.926620 3.004577 udp 10.0.2.22 51868 -> 84.100.70.102 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:13:46.928368 0.167578 udp 10.0.2.22 51868 <-> 24.242.53.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:47.929901 3.996035 udp 10.0.2.22 51868 <-> 68.59.72.41 16464 CON 0 0 6 3676 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:49.932365 0.000000 udp 10.0.2.22 51868 -> 81.201.145.41 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:13:50.933987 0.000000 udp 10.0.2.22 51868 -> 88.19.20.61 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:13:52.926639 0.000000 udp 10.0.2.22 51868 -> 173.199.217.72 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:13:53.928592 0.151319 udp 10.0.2.22 51868 <-> 71.197.28.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:54.930325 0.000000 udp 10.0.2.22 51868 -> 95.59.21.62 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:13:55.930970 0.165751 udp 10.0.2.22 51868 <-> 24.242.53.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:56.932669 0.045715 udp 10.0.2.22 51868 <-> 31.17.92.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:57.803777 0.000117 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:13:57.934235 0.168901 udp 10.0.2.22 51868 <-> 46.210.195.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:58.925229 0.291519 udp 10.0.2.22 51868 <-> 190.163.230.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:13:59.926867 0.401286 udp 10.0.2.22 51868 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:00.928568 0.029257 udp 10.0.2.22 51868 <-> 78.90.230.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:01.929629 0.000000 udp 10.0.2.22 51868 -> 190.193.222.68 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:14:02.931702 0.083989 udp 10.0.2.22 51868 <-> 87.120.215.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:03.932523 0.000000 udp 10.0.2.22 51868 -> 84.123.105.67 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:14:04.933839 0.045559 udp 10.0.2.22 51868 <-> 31.17.92.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:05.925308 0.034164 udp 10.0.2.22 51868 <-> 84.252.22.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:06.926981 0.103400 udp 10.0.2.22 51868 <-> 5.43.104.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:07.928475 4.039113 udp 10.0.2.22 51868 <-> 78.90.230.28 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:08.929817 0.246169 udp 10.0.2.22 51868 <-> 76.189.34.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:09.931399 0.102481 udp 10.0.2.22 51868 <-> 78.8.236.98 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:10.932912 0.118799 udp 10.0.2.22 51868 <-> 207.237.112.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:12.925423 0.078225 udp 10.0.2.22 51868 <-> 79.116.163.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:13.926859 0.055241 udp 10.0.2.22 51868 <-> 213.64.220.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:14.928700 0.000000 udp 10.0.2.22 51868 -> 82.192.233.62 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:14:15.929938 0.000000 udp 10.0.2.22 51868 -> 130.204.23.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:14:16.931296 0.059657 udp 10.0.2.22 51868 <-> 188.173.128.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:17.932885 0.167549 udp 10.0.2.22 51868 <-> 66.68.188.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:18.934040 0.487615 udp 10.0.2.22 51868 <-> 77.238.195.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:19.925934 0.000000 udp 10.0.2.22 51868 -> 188.214.34.53 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:14:20.926865 0.145656 udp 10.0.2.22 51868 <-> 24.45.223.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:21.928724 0.109957 udp 10.0.2.22 51868 <-> 78.159.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:22.930382 0.072291 udp 10.0.2.22 51868 <-> 79.117.163.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:23.931278 0.316396 udp 10.0.2.22 51868 -> 177.103.8.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:14:24.247674 0.000000 icmp 177.103.8.43 0x0303 -> 10.0.2.22 0x5040 URP 192 1 70 flow=Background 1970/01/01 10:14:24.802463 0.000098 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:14:24.932631 0.040505 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:25.934482 0.000000 udp 10.0.2.22 51868 -> 86.107.40.90 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:14:26.925985 0.150527 udp 10.0.2.22 51868 <-> 124.123.124.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:27.927049 4.005615 udp 10.0.2.22 51868 -> 188.214.34.53 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:14:28.928489 4.997283 udp 10.0.2.22 51868 <-> 78.8.236.98 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:29.930253 0.000000 udp 10.0.2.22 51868 -> 177.103.8.43 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:14:30.931380 0.000000 udp 10.0.2.22 51868 -> 79.117.163.102 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:14:32.934234 0.032977 udp 10.0.2.22 51868 <-> 77.238.195.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:33.998377 0.000000 udp 10.0.2.22 51868 <- 78.8.236.98 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:14:34.927069 0.215122 udp 10.0.2.22 51868 <-> 124.123.124.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:35.929126 0.139991 udp 10.0.2.22 51868 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:36.930801 0.118169 udp 10.0.2.22 51868 <-> 137.118.142.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:37.931836 0.296079 udp 10.0.2.22 51868 <-> 122.102.232.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:38.932904 0.000000 udp 10.0.2.22 51868 -> 200.84.155.123 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:14:39.934385 0.158618 udp 10.0.2.22 51868 <-> 82.56.162.25 16464 CON 0 0 5 3618 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:40.925566 0.096038 udp 10.0.2.22 51868 <-> 89.137.78.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:41.927002 0.000000 udp 10.0.2.22 51868 -> 69.207.13.122 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:14:42.928632 0.185696 udp 10.0.2.22 51868 <-> 49.205.220.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:43.930100 0.145604 udp 10.0.2.22 51868 <-> 74.78.52.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:44.931756 0.000000 udp 10.0.2.22 51868 -> 184.170.169.50 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:14:45.933051 0.064261 udp 10.0.2.22 51868 <-> 5.14.158.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:46.924253 0.157971 udp 10.0.2.22 51868 <-> 69.125.160.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:47.926028 0.098294 udp 10.0.2.22 51868 <-> 88.166.247.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:48.927414 0.278280 udp 10.0.2.22 51868 <-> 186.92.209.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:49.928566 0.190697 udp 10.0.2.22 51868 <-> 85.179.124.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:50.930399 0.158061 udp 10.0.2.22 51868 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:51.801318 0.000106 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:14:51.931786 1.154074 udp 10.0.2.22 51868 <-> 24.59.225.47 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:53.924570 0.502573 udp 10.0.2.22 51868 <-> 190.177.244.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:54.926266 0.000000 udp 10.0.2.22 51868 -> 216.197.224.39 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:14:55.927064 0.217319 udp 10.0.2.22 51868 <-> 24.23.11.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:56.928737 0.000000 udp 10.0.2.22 51868 -> 5.15.135.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:14:57.930112 0.000000 udp 10.0.2.22 51868 -> 188.24.64.155 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:14:58.931118 0.228000 udp 10.0.2.22 51868 <-> 187.247.105.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:14:59.932920 0.000000 udp 10.0.2.22 51868 -> 75.152.62.163 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:00.924366 0.461464 udp 10.0.2.22 51868 <-> 179.232.142.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:15:01.926130 0.126036 udp 10.0.2.22 51868 <-> 158.181.242.169 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:15:02.927671 0.000000 udp 10.0.2.22 51868 -> 99.234.108.171 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:03.928758 0.000000 udp 10.0.2.22 51868 -> 94.97.9.182 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:04.930472 0.000000 udp 10.0.2.22 51868 -> 216.197.224.39 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:05.932061 0.175832 udp 10.0.2.22 51868 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:15:06.933118 0.322004 udp 10.0.2.22 51868 <-> 190.112.98.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:15:07.924592 0.000000 udp 10.0.2.22 51868 -> 86.126.0.125 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:08.926380 4.312596 udp 10.0.2.22 51868 <-> 217.203.70.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:15:09.927858 0.050025 udp 10.0.2.22 51868 <-> 77.77.42.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:15:10.928942 0.280258 udp 10.0.2.22 51868 <-> 190.75.56.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:15:11.931343 3.210409 udp 10.0.2.22 51868 <-> 24.10.7.19 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:15:12.932300 1.171166 udp 10.0.2.22 51868 <-> 192.136.201.165 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:15:15.926494 0.659917 udp 10.0.2.22 51868 <-> 181.53.224.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:15:16.927642 0.076941 udp 10.0.2.22 51868 <-> 212.122.101.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:15:17.929036 0.000000 udp 10.0.2.22 51868 -> 50.10.109.132 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:18.800433 0.000113 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:15:18.930795 0.084489 udp 10.0.2.22 51868 <-> 84.212.44.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:15:19.931773 0.043826 udp 10.0.2.22 51868 <-> 88.216.52.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:15:20.933182 0.569179 udp 10.0.2.22 51868 <-> 117.227.222.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:15:21.924663 0.162843 udp 10.0.2.22 51868 <-> 75.67.160.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:15:22.926382 0.000000 udp 10.0.2.22 51868 -> 84.58.30.92 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:23.927861 0.059629 udp 10.0.2.22 51868 <-> 109.245.61.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:15:24.929804 0.138343 udp 10.0.2.22 51868 <-> 68.193.113.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:15:25.930440 0.000000 udp 10.0.2.22 51868 -> 80.183.28.57 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:26.932400 0.185762 udp 10.0.2.22 51868 <-> 184.189.232.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:15:27.933094 3.037204 udp 10.0.2.22 51868 <-> 93.114.171.120 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:15:28.924698 0.230488 udp 10.0.2.22 51868 <-> 72.42.160.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:15:31.929484 0.058130 udp 10.0.2.22 51868 <-> 89.229.232.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:15:32.930494 0.094271 udp 10.0.2.22 51868 <-> 87.121.26.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:15:33.932230 0.000000 udp 10.0.2.22 51868 -> 78.33.159.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:34.933262 0.211398 udp 10.0.2.22 51868 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:15:35.924720 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:36.926334 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:37.927908 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:38.929415 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:39.930682 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:40.932299 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:41.933634 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:42.924746 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:43.931838 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:44.931992 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:45.802231 0.000099 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:15:45.932659 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:46.933204 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:47.933445 0.055463 udp 10.0.2.22 51868 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:15:48.934092 0.046458 udp 10.0.2.22 51868 <-> 213.109.121.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:15:49.924721 0.000000 udp 10.0.2.22 51868 -> 50.90.102.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:50.926804 0.000000 udp 10.0.2.22 51868 -> 84.54.171.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:51.927848 0.000000 udp 10.0.2.22 51868 -> 158.58.245.38 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:52.929473 0.201268 udp 10.0.2.22 51868 <-> 81.201.145.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:15:53.930811 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:54.932741 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:56.924747 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:57.926338 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:58.928244 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:15:59.929104 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:00.930925 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:01.932464 0.000116 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:01.932580 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:16:02.933198 3.996707 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:03.924829 0.225748 udp 10.0.2.22 51868 <-> 71.203.5.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:16:04.926773 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:05.928359 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:07.930811 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:08.932021 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:09.934217 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:10.925061 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:11.926810 0.052330 udp 10.0.2.22 51868 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:16:12.808000 0.000132 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:16:12.927940 0.165853 udp 10.0.2.22 51868 <-> 50.90.102.28 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:16:13.929978 0.156620 udp 10.0.2.22 51868 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:16:14.931112 0.386621 udp 10.0.2.22 51868 <-> 186.91.145.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:16:15.932914 1.363690 udp 10.0.2.22 51868 <-> 201.235.95.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:16:16.934180 0.247862 udp 10.0.2.22 51868 <-> 78.228.89.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:16:17.925166 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:18.927145 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:19.928565 4.005635 udp 10.0.2.22 51868 <-> 94.253.205.252 16464 CON 0 0 4 1064 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:16:20.930162 0.304891 udp 10.0.2.22 51868 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:16:21.931309 0.160163 udp 10.0.2.22 51868 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:16:24.925221 0.099114 udp 10.0.2.22 51868 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:16:25.927028 0.137026 udp 10.0.2.22 51868 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:16:26.928439 0.143078 udp 10.0.2.22 51868 <-> 109.72.59.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:16:27.930113 0.000000 udp 10.0.2.22 51868 -> 188.246.92.212 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:28.931219 0.028109 udp 10.0.2.22 51868 <-> 95.76.68.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:16:29.932704 0.039454 udp 10.0.2.22 51868 <-> 62.221.143.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:16:30.933758 0.037390 udp 10.0.2.22 51868 <-> 188.254.170.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:16:31.925601 0.076994 udp 10.0.2.22 51868 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:16:32.926504 0.156604 udp 10.0.2.22 51868 <-> 65.60.153.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:16:34.929899 0.000000 udp 10.0.2.22 51868 -> 70.30.90.88 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:35.930987 0.125712 udp 10.0.2.22 51868 <-> 79.46.64.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:16:36.932463 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:37.933847 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:38.925129 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:39.806671 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:16:39.927265 0.000071 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:39.927336 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:16:40.928626 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:41.929852 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:43.932632 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:44.934540 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:45.925723 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:46.927436 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:47.931194 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:48.932497 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:49.933866 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:50.932599 0.000000 udp 10.0.2.22 51868 -> 77.123.28.116 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:51.934370 0.020331 udp 10.0.2.22 51868 <-> 176.199.23.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:16:52.925513 0.000000 udp 10.0.2.22 51868 -> 70.30.90.88 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:53.927023 0.125425 udp 10.0.2.22 51868 <-> 79.46.64.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:16:54.928609 4.997351 udp 10.0.2.22 51868 <-> 211.76.60.16 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:16:55.929974 0.160258 udp 10.0.2.22 51868 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:16:56.931805 0.000000 udp 10.0.2.22 51868 -> 189.6.137.102 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:16:57.932810 0.378980 udp 10.0.2.22 51868 <-> 186.122.172.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:16:58.934120 0.392708 udp 10.0.2.22 51868 <-> 190.204.102.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:00.320017 0.000000 udp 10.0.2.22 51868 <- 211.76.60.16 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:17:00.926919 0.142703 udp 10.0.2.22 51868 <-> 67.82.5.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:01.928526 0.105470 udp 10.0.2.22 51868 <-> 78.220.84.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:02.930037 0.000000 udp 10.0.2.22 51868 -> 135.19.220.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:17:03.931834 0.000000 udp 10.0.2.22 51868 -> 199.120.95.133 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:17:04.932964 0.162977 udp 10.0.2.22 51868 <-> 75.67.160.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:05.934760 0.096762 udp 10.0.2.22 51868 <-> 78.240.64.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:06.805370 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:17:06.925775 2.079458 udp 10.0.2.22 51868 <-> 188.27.165.194 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:07.926913 0.186375 udp 10.0.2.22 51868 <-> 74.77.183.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:09.930080 0.000000 udp 10.0.2.22 51868 -> 27.3.107.225 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:17:10.931497 0.217855 udp 10.0.2.22 51868 <-> 31.44.140.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:11.932939 0.000000 udp 10.0.2.22 51868 -> 68.113.165.98 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:17:12.934426 0.443321 udp 10.0.2.22 51868 <-> 186.122.172.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:13.925853 0.409058 udp 10.0.2.22 51868 <-> 186.191.29.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:14.927179 3.179857 udp 10.0.2.22 51868 <-> 74.77.183.91 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:15.928752 0.164567 udp 10.0.2.22 51868 <-> 75.67.160.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:16.929912 3.068457 udp 10.0.2.22 51868 <-> 188.27.165.194 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:18.933088 0.000000 udp 10.0.2.22 51868 -> 135.19.220.28 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:17:20.927763 0.407658 udp 10.0.2.22 51868 <-> 115.165.236.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:21.929426 0.048761 udp 10.0.2.22 51868 <-> 88.80.117.113 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:22.930485 4.995213 udp 10.0.2.22 51868 -> 83.221.86.2 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:17:23.932050 4.995430 udp 10.0.2.22 51868 -> 5.173.67.119 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:17:24.932607 0.156651 udp 10.0.2.22 51868 <-> 71.226.15.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:25.933125 0.000000 udp 10.0.2.22 51868 -> 75.80.119.97 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:17:26.924370 0.160270 udp 10.0.2.22 51868 <-> 12.39.137.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:27.964777 0.004360 udp 10.0.2.22 51868 <- 83.221.86.2 16464 RSP 0 0 2 1780 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:17:29.929044 0.000000 udp 10.0.2.22 51868 -> 117.222.43.118 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:17:30.930511 1.031030 udp 10.0.2.22 51868 <-> 79.36.252.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:31.931561 0.000000 udp 10.0.2.22 51868 -> 105.235.31.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:17:32.933011 0.306995 udp 10.0.2.22 51868 <-> 189.1.24.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:33.804142 0.000120 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:17:33.924215 0.151324 udp 10.0.2.22 51868 <-> 72.23.159.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:34.925860 0.000000 udp 10.0.2.22 51868 -> 88.149.170.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:17:35.927845 0.094699 udp 10.0.2.22 51868 <-> 79.49.174.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:36.928739 0.141560 udp 10.0.2.22 51868 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:37.936699 1.432095 udp 10.0.2.22 51868 <-> 186.95.43.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:38.936477 0.051969 udp 10.0.2.22 51868 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:39.936928 0.144065 udp 10.0.2.22 51868 <-> 192.226.149.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:40.926986 0.164010 udp 10.0.2.22 51868 <-> 71.89.115.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:41.928024 0.000000 udp 10.0.2.22 51868 -> 95.85.176.167 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:17:42.934467 0.169731 udp 10.0.2.22 51868 <-> 120.138.104.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:43.931782 0.256601 udp 10.0.2.22 51868 <-> 186.144.196.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:44.930420 0.064766 udp 10.0.2.22 51868 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:45.931587 0.000000 udp 10.0.2.22 51868 -> 109.121.207.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:17:46.933297 0.326910 udp 10.0.2.22 51868 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:47.924628 0.810711 udp 10.0.2.22 51868 <-> 190.17.37.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:48.926568 0.306065 udp 10.0.2.22 51868 <-> 46.223.177.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:49.927338 0.050236 udp 10.0.2.22 51868 <-> 95.108.60.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:50.928808 0.302748 udp 10.0.2.22 51868 <-> 37.190.195.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:51.930433 0.191229 udp 10.0.2.22 51868 <-> 190.79.214.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:52.932185 0.000000 udp 10.0.2.22 51868 -> 82.243.94.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:17:53.933131 0.000000 udp 10.0.2.22 51868 -> 142.136.206.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:17:54.924514 0.148544 udp 10.0.2.22 51868 <-> 98.229.185.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:55.926432 0.057872 udp 10.0.2.22 51868 <-> 79.115.87.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:56.927584 0.144104 udp 10.0.2.22 51868 <-> 68.196.251.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:17:57.929518 0.000000 udp 10.0.2.22 51868 -> 190.177.182.77 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:17:58.930848 0.000000 udp 10.0.2.22 51868 -> 188.26.217.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:17:59.931986 4.046346 udp 10.0.2.22 51868 <-> 82.192.233.62 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:00.803136 0.000098 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:18:00.933354 0.158374 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:01.924663 0.268564 udp 10.0.2.22 51868 <-> 201.235.247.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:02.926463 0.154298 udp 10.0.2.22 51868 <-> 75.149.216.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:04.929294 1.065855 udp 10.0.2.22 51868 <-> 81.203.204.14 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:06.932046 0.133120 udp 10.0.2.22 51868 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:07.933085 2.316299 udp 10.0.2.22 51868 <-> 187.10.24.232 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:08.924974 0.000000 udp 10.0.2.22 51868 -> 183.178.135.118 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:18:10.928229 0.361954 udp 10.0.2.22 51868 <-> 77.210.91.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:11.929145 0.172780 udp 10.0.2.22 51868 <-> 69.244.18.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:12.930664 0.167095 udp 10.0.2.22 51868 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:13.932124 0.161857 udp 10.0.2.22 51868 <-> 173.214.226.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:14.933189 0.513873 udp 10.0.2.22 51868 <-> 182.188.192.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:15.924784 0.000000 udp 10.0.2.22 51868 -> 80.54.213.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:18:16.926312 0.052140 udp 10.0.2.22 51868 <-> 94.21.162.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:17.928390 0.000000 udp 10.0.2.22 51868 -> 79.29.27.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:18:18.929497 0.341431 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:19.930830 0.111347 udp 10.0.2.22 51868 <-> 98.169.133.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:20.932211 0.354859 udp 10.0.2.22 51868 <-> 186.58.98.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:21.933581 0.029999 udp 10.0.2.22 51868 <-> 77.81.147.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:22.925004 0.999860 udp 10.0.2.22 51868 <-> 182.188.216.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:23.926643 0.000000 udp 10.0.2.22 51868 -> 94.21.66.159 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:18:24.928166 4.996639 udp 10.0.2.22 51868 <-> 186.89.100.162 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:25.929930 0.184693 udp 10.0.2.22 51868 <-> 24.203.105.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:26.930805 0.775661 udp 10.0.2.22 51868 <-> 24.51.69.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:27.803736 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:18:27.933746 0.199050 udp 10.0.2.22 51868 <-> 75.143.122.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:28.933657 0.000000 udp 10.0.2.22 51868 -> 24.126.203.114 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:18:30.323269 0.000000 udp 10.0.2.22 51868 <- 186.89.100.162 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:18:30.927884 0.234437 udp 10.0.2.22 51868 <-> 24.96.16.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:31.932527 3.138628 udp 10.0.2.22 51868 <-> 68.44.131.21 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:32.933151 0.223530 udp 10.0.2.22 51868 <-> 177.225.129.22 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:33.933350 2.625957 udp 10.0.2.22 51868 <-> 201.187.0.43 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:36.924939 0.161045 udp 10.0.2.22 51868 <-> 72.230.110.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:37.926562 0.000000 udp 10.0.2.22 51868 -> 95.244.159.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:18:38.928187 0.609214 udp 10.0.2.22 51868 <-> 124.247.137.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:39.929934 4.633827 udp 10.0.2.22 51868 <-> 186.88.174.68 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:40.930887 0.000000 udp 10.0.2.22 51868 -> 70.72.76.92 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:18:41.932248 0.357146 udp 10.0.2.22 51868 <-> 201.242.45.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:42.933862 0.355092 udp 10.0.2.22 51868 <-> 61.223.208.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:44.926589 0.035807 udp 10.0.2.22 51868 <-> 89.73.207.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:45.928096 4.006016 udp 10.0.2.22 51868 -> 2.176.171.119 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:18:46.929912 0.180948 udp 10.0.2.22 51868 <-> 67.240.151.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:47.931028 0.242845 udp 10.0.2.22 51868 <-> 50.68.33.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:48.932761 0.434434 udp 10.0.2.22 51868 <-> 204.16.10.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:50.925305 0.660950 udp 10.0.2.22 51868 <-> 186.122.172.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:51.926845 0.446056 udp 10.0.2.22 51868 <-> 190.107.109.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:52.928398 0.000000 udp 10.0.2.22 51868 -> 2.176.171.119 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:18:53.929859 0.000000 udp 10.0.2.22 51868 -> 68.48.58.156 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:18:54.800727 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:18:54.931058 0.102743 udp 10.0.2.22 51868 <-> 78.204.132.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:55.932435 0.000000 udp 10.0.2.22 51868 -> 5.14.158.62 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:18:56.934255 0.151812 udp 10.0.2.22 51868 <-> 66.187.121.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:18:57.925021 0.000000 udp 10.0.2.22 51868 -> 78.61.221.102 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:18:58.926617 0.000000 udp 10.0.2.22 51868 -> 2.176.171.119 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:18:59.928334 0.208652 udp 10.0.2.22 51868 <-> 50.68.33.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:00.929776 0.000000 udp 10.0.2.22 51868 -> 190.107.109.178 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:19:01.931160 0.170069 udp 10.0.2.22 51868 <-> 174.103.239.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:02.932495 0.763213 udp 10.0.2.22 51868 <-> 80.171.95.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:03.933711 0.033514 udp 10.0.2.22 51868 <-> 89.73.207.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:04.925522 0.151084 udp 10.0.2.22 51868 <-> 66.187.121.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:05.926809 0.996314 udp 10.0.2.22 51868 <-> 184.147.80.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:06.928626 0.241417 udp 10.0.2.22 51868 <-> 190.39.135.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:07.929760 0.195721 udp 10.0.2.22 51868 <-> 82.244.99.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:08.931090 0.000000 udp 10.0.2.22 51868 -> 109.52.154.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:19:09.932937 0.152008 udp 10.0.2.22 51868 <-> 76.11.100.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:10.933905 0.149430 udp 10.0.2.22 51868 <-> 174.108.49.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:11.925132 0.070739 udp 10.0.2.22 51868 <-> 79.117.163.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:12.926847 0.029819 udp 10.0.2.22 51868 <-> 77.81.147.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:13.928063 0.612633 udp 10.0.2.22 51868 <-> 70.243.123.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:14.929770 0.178755 udp 10.0.2.22 51868 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:15.930961 0.049679 udp 10.0.2.22 51868 <-> 79.113.236.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:16.932710 0.437685 udp 10.0.2.22 51868 <-> 186.92.177.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:17.934202 0.183184 udp 10.0.2.22 51868 <-> 24.113.162.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:18.925388 0.174725 udp 10.0.2.22 51868 <-> 76.125.64.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:19.926913 0.063074 udp 10.0.2.22 51868 <-> 93.135.170.243 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:20.928790 0.470423 udp 10.0.2.22 51868 <-> 190.188.124.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:21.800354 0.000146 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:19:21.930600 0.051827 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:22.930981 0.307609 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:23.933009 0.000000 udp 10.0.2.22 51868 -> 95.22.134.240 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:19:24.934073 0.000000 udp 10.0.2.22 51868 -> 109.53.229.237 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:19:25.925499 1.316652 udp 10.0.2.22 51868 <-> 201.231.197.241 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:27.928512 0.215750 udp 10.0.2.22 51868 <-> 68.189.72.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:28.930023 0.000000 udp 10.0.2.22 51868 -> 80.99.71.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:19:29.931039 0.185212 udp 10.0.2.22 51868 <-> 82.243.94.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:30.932929 0.174475 udp 10.0.2.22 51868 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:31.934405 0.053681 udp 10.0.2.22 51868 <-> 188.241.10.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:32.925597 0.023034 udp 10.0.2.22 51868 <-> 89.142.152.236 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:33.927272 0.048431 udp 10.0.2.22 51868 <-> 79.117.54.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:34.928730 3.222371 udp 10.0.2.22 51868 <-> 67.189.32.245 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:35.936754 0.068238 udp 10.0.2.22 51868 <-> 93.135.170.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:36.935978 2.989929 udp 10.0.2.22 51868 -> 109.53.229.237 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:19:38.935897 0.280830 udp 10.0.2.22 51868 <-> 201.231.197.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:40.926902 3.178796 udp 10.0.2.22 51868 <-> 76.125.64.235 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:41.928833 0.290908 udp 10.0.2.22 51868 <-> 82.243.94.4 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:42.930116 0.000000 udp 10.0.2.22 51868 -> 89.142.152.236 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:19:44.932841 2.041557 udp 10.0.2.22 51868 <-> 79.117.54.247 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:45.177131 3.000397 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 10:19:45.934569 0.175861 udp 10.0.2.22 51868 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:47.927060 0.178813 udp 10.0.2.22 51868 <-> 74.77.183.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:48.808563 0.000130 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:19:48.928518 0.067023 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:19:49.930570 0.000086 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:19:49.930656 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:19:50.931281 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:19:51.933175 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:19:52.183846 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:19:52.924272 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:19:53.926207 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:19:54.927177 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:19:55.928767 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:19:56.930388 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:19:57.931622 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:19:58.932995 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:19:59.924249 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:00.184630 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:20:00.926320 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:01.927446 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:02.928817 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:03.930616 0.000000 udp 10.0.2.22 51868 -> 80.99.71.252 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:04.931433 0.000000 udp 10.0.2.22 51868 -> 190.120.66.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:05.933162 4.996931 udp 10.0.2.22 51868 -> 85.230.174.252 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:06.925955 3.305088 udp 10.0.2.22 51868 <-> 61.70.234.252 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:20:07.925804 0.000000 udp 10.0.2.22 51868 -> 178.91.70.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:08.927359 0.011351 udp 10.0.2.22 51868 <-> 178.21.51.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:20:11.931619 0.000000 udp 10.0.2.22 51868 -> 2.68.0.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:12.932875 0.133631 udp 10.0.2.22 51868 <-> 24.147.80.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:20:13.924708 0.000000 udp 10.0.2.22 51868 -> 84.124.183.72 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:14.926323 0.000000 udp 10.0.2.22 51868 -> 74.77.183.91 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:15.807154 0.000100 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:20:15.927327 0.144068 udp 10.0.2.22 51868 <-> 174.106.129.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:20:16.187876 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:20:16.928829 2.003495 udp 10.0.2.22 51868 -> 103.3.204.196 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:17.930673 0.095915 udp 10.0.2.22 51868 <-> 2.68.0.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:20:19.933165 2.125073 udp 10.0.2.22 51868 <-> 68.185.124.13 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:20:20.924542 0.265069 udp 10.0.2.22 51868 <-> 76.11.169.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:20:22.927425 0.000000 udp 10.0.2.22 51868 -> 178.91.70.253 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:23.929040 0.000000 udp 10.0.2.22 51868 -> 190.120.66.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:24.930121 0.065295 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:20:25.932184 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:26.933171 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:27.924457 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:28.930814 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:29.932246 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:30.932973 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:31.933155 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:32.932570 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:34.924565 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:35.926251 1.028898 udp 10.0.2.22 51868 <-> 80.99.71.252 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:20:37.928918 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:38.930571 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:39.932425 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:40.933247 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:41.924799 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:42.806065 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:20:42.926458 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:43.927780 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:44.929660 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:45.930709 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:46.931903 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:47.933179 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:48.193729 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:20:48.924804 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:49.927035 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:51.928958 0.027856 udp 10.0.2.22 51868 <-> 80.99.71.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:20:52.930511 0.383160 udp 10.0.2.22 51868 <-> 85.230.174.252 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:20:53.932390 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:54.933713 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:56.926758 0.000000 udp 10.0.2.22 51868 -> 190.120.66.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:20:57.928653 0.065336 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:20:58.930005 0.166681 udp 10.0.2.22 51868 <-> 174.103.239.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:20:59.930535 0.000000 udp 10.0.2.22 51868 -> 187.1.104.125 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:21:00.932031 0.195195 udp 10.0.2.22 51868 <-> 98.247.242.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:01.933777 0.146895 udp 10.0.2.22 51868 <-> 69.119.31.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:02.924900 0.000000 udp 10.0.2.22 51868 -> 79.118.114.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:21:03.926740 0.045246 udp 10.0.2.22 51868 <-> 89.136.139.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:04.928171 0.134250 udp 10.0.2.22 51868 <-> 37.122.1.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:05.929225 0.000000 udp 10.0.2.22 51868 -> 95.65.118.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:21:06.930955 0.000000 udp 10.0.2.22 51868 -> 186.57.202.173 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:21:07.932816 0.037668 udp 10.0.2.22 51868 <-> 46.40.104.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:08.936353 0.822019 udp 10.0.2.22 51868 <-> 217.203.70.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:09.806712 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:21:09.926984 0.197551 udp 10.0.2.22 51868 <-> 98.247.242.179 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:10.928879 3.055675 udp 10.0.2.22 51868 <-> 89.136.139.4 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:11.930222 0.000000 udp 10.0.2.22 51868 -> 173.238.131.81 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:21:12.931102 0.000000 udp 10.0.2.22 51868 -> 190.51.16.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:21:14.933011 0.000000 udp 10.0.2.22 51868 -> 69.119.31.104 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:21:15.933890 0.170435 udp 10.0.2.22 51868 <-> 82.244.99.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:16.925208 0.161755 udp 10.0.2.22 51868 <-> 98.253.7.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:17.926962 0.037828 udp 10.0.2.22 51868 <-> 78.128.125.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:18.928759 4.225672 udp 10.0.2.22 51868 <-> 79.109.4.230 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:19.929642 0.000000 udp 10.0.2.22 51868 -> 79.51.215.42 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:21:20.930748 0.043340 udp 10.0.2.22 51868 <-> 93.183.191.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:21.932794 0.000000 udp 10.0.2.22 51868 -> 122.169.84.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:21:23.926119 1.104985 udp 10.0.2.22 51868 <-> 181.166.124.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:24.927057 1.163347 udp 10.0.2.22 51868 <-> 69.127.160.38 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:26.929680 0.000000 udp 10.0.2.22 51868 -> 24.122.27.96 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:21:27.930932 1.100921 udp 10.0.2.22 51868 <-> 178.137.200.129 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:29.934233 0.000000 udp 10.0.2.22 51868 -> 46.241.150.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:21:30.925166 0.072664 udp 10.0.2.22 51868 <-> 85.86.73.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:31.926863 0.000000 udp 10.0.2.22 51868 -> 190.120.66.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:21:32.928240 0.213945 udp 10.0.2.22 51868 <-> 69.1.2.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:33.929982 0.255182 udp 10.0.2.22 51868 <-> 2.187.192.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:34.930908 0.000000 udp 10.0.2.22 51868 -> 78.251.143.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:21:35.932818 0.066576 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:36.803656 0.000102 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:21:36.934091 0.527454 udp 10.0.2.22 51868 <-> 117.195.229.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:37.925448 0.038738 udp 10.0.2.22 51868 <-> 89.215.31.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:38.927271 0.061207 udp 10.0.2.22 51868 <-> 188.26.225.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:39.928519 0.000000 udp 10.0.2.22 51868 -> 190.38.7.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:21:40.929837 0.053540 udp 10.0.2.22 51868 <-> 95.168.240.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:41.931152 0.143851 udp 10.0.2.22 51868 <-> 24.228.86.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:42.932595 0.352345 udp 10.0.2.22 51868 <-> 1.172.59.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:43.934087 0.075156 udp 10.0.2.22 51868 <-> 84.236.102.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:44.925258 0.206092 udp 10.0.2.22 51868 <-> 190.37.37.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:45.927159 0.072076 udp 10.0.2.22 51868 <-> 134.249.0.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:46.928561 0.311667 udp 10.0.2.22 51868 <-> 58.3.144.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:47.929927 0.000000 udp 10.0.2.22 51868 -> 173.81.129.131 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:21:48.931224 0.172560 udp 10.0.2.22 51868 <-> 71.199.218.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:49.932637 3.298424 udp 10.0.2.22 51868 <-> 189.25.78.71 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:50.934238 0.157270 udp 10.0.2.22 51868 <-> 71.80.71.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:51.925459 4.124072 udp 10.0.2.22 51868 <-> 193.30.248.176 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:53.928916 0.000000 udp 10.0.2.22 51868 -> 190.198.250.184 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:21:54.929541 0.144400 udp 10.0.2.22 51868 <-> 50.177.222.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:56.932792 0.000000 udp 10.0.2.22 51868 -> 209.102.248.150 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:21:57.934464 0.210203 udp 10.0.2.22 51868 <-> 76.178.38.26 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:58.925698 0.154944 udp 10.0.2.22 51868 <-> 71.80.71.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:21:59.927104 0.152136 udp 10.0.2.22 51868 <-> 66.31.49.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:00.928990 0.057001 udp 10.0.2.22 51868 <-> 213.67.59.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:01.930553 4.060053 udp 10.0.2.22 51868 <-> 188.27.92.248 16464 CON 0 0 6 3676 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:02.931170 0.326392 udp 10.0.2.22 51868 <-> 81.226.243.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:03.802324 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:22:03.932775 2.993992 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:22:04.934144 0.246466 udp 10.0.2.22 51868 <-> 190.36.162.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:07.928385 0.291140 udp 10.0.2.22 51868 <-> 124.123.209.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:08.929741 0.150893 udp 10.0.2.22 51868 <-> 98.239.205.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:09.931440 0.034063 udp 10.0.2.22 51868 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:10.933162 0.097645 udp 10.0.2.22 51868 <-> 82.240.144.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:11.934241 0.884389 udp 10.0.2.22 51868 <-> 70.243.123.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:12.926009 0.159772 udp 10.0.2.22 51868 <-> 208.107.49.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:13.927148 3.007346 udp 10.0.2.22 51868 <-> 201.242.70.68 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:14.928632 0.227936 udp 10.0.2.22 51868 <-> 75.85.212.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:16.931798 4.996840 udp 10.0.2.22 51868 -> 216.45.40.102 16464 INT 0 3 174 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:22:17.933147 0.042900 udp 10.0.2.22 51868 <-> 78.90.253.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:19.925914 0.320013 udp 10.0.2.22 51868 <-> 110.233.68.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:20.927306 0.000000 udp 10.0.2.22 51868 -> 1.36.118.97 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:22:22.832925 0.000000 udp 10.0.2.22 51868 <- 216.45.40.102 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:22:22.930358 0.058485 udp 10.0.2.22 51868 <-> 213.188.237.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:23.931305 1.403981 udp 10.0.2.22 51868 <-> 201.242.70.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:24.933199 0.227764 udp 10.0.2.22 51868 <-> 75.85.212.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:25.924462 0.064118 udp 10.0.2.22 51868 <-> 5.14.158.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:26.926057 0.164986 udp 10.0.2.22 51868 <-> 78.206.76.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:27.928102 0.062004 udp 10.0.2.22 51868 <-> 81.61.202.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:28.929257 0.000000 udp 10.0.2.22 51868 -> 188.254.158.154 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:22:29.930172 1.420295 udp 10.0.2.22 51868 <-> 201.242.70.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:30.801088 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:22:30.931283 0.200260 udp 10.0.2.22 51868 <-> 190.218.244.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:31.932956 0.055425 udp 10.0.2.22 51868 <-> 95.43.88.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:32.924428 0.000000 udp 10.0.2.22 51868 -> 76.11.169.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:22:33.925823 0.204965 udp 10.0.2.22 51868 <-> 71.197.165.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:34.927832 1.500858 udp 10.0.2.22 51868 <-> 200.115.248.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:35.928498 0.297801 udp 10.0.2.22 51868 <-> 181.226.107.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:36.930323 0.311600 udp 10.0.2.22 51868 <-> 219.116.87.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:37.931732 0.225251 udp 10.0.2.22 51868 <-> 213.89.49.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:38.933031 0.157445 udp 10.0.2.22 51868 <-> 24.94.249.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:39.924540 0.000000 udp 10.0.2.22 51868 -> 190.142.240.88 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:22:40.255118 0.012902 udp 10.0.2.22 60066 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 10:22:40.268347 0.000000 udp 10.0.2.22 60067 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:22:40.926137 0.201344 udp 10.0.2.22 51868 <-> 128.95.174.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:41.927002 0.318657 udp 10.0.2.22 51868 <-> 75.187.154.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:42.929125 0.000000 udp 10.0.2.22 51868 -> 69.1.2.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:22:43.930558 0.046197 udp 10.0.2.22 51868 <-> 5.20.145.20 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:44.931904 0.163670 udp 10.0.2.22 51868 <-> 173.217.91.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:45.933159 0.263456 udp 10.0.2.22 51868 <-> 190.151.62.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:46.924577 0.347393 udp 10.0.2.22 51868 <-> 118.169.130.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:47.925878 0.607191 udp 10.0.2.22 51868 <-> 186.88.174.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:48.927911 0.368309 udp 10.0.2.22 51868 <-> 177.182.77.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:49.928634 2.003557 udp 10.0.2.22 51868 <-> 187.25.181.5 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:50.930767 0.000000 udp 10.0.2.22 51868 -> 90.25.79.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:22:52.937158 0.140829 udp 10.0.2.22 51868 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:53.928609 0.145093 udp 10.0.2.22 51868 <-> 69.123.197.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:54.930288 0.000000 udp 10.0.2.22 51868 -> 78.8.65.60 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:22:55.931300 0.170083 udp 10.0.2.22 51868 <-> 98.194.123.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:56.932334 0.113647 udp 10.0.2.22 51868 <-> 79.49.174.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:57.802803 0.000082 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:22:57.933110 0.162502 udp 10.0.2.22 51868 <-> 50.171.133.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:58.933145 0.178103 udp 10.0.2.22 51868 <-> 75.65.20.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:22:59.933182 0.464964 udp 10.0.2.22 51868 <-> 187.106.245.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:00.924629 1.623766 udp 10.0.2.22 51868 <-> 181.55.154.252 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:01.926420 0.300217 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:02.927861 0.156423 udp 10.0.2.22 51868 <-> 74.132.159.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:03.930612 3.078530 udp 10.0.2.22 51868 <-> 46.162.107.20 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:04.932270 0.000000 udp 10.0.2.22 51868 -> 175.140.244.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:23:05.932987 0.000000 udp 10.0.2.22 51868 -> 36.232.204.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:23:07.924596 0.410794 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:08.926387 0.176983 udp 10.0.2.22 51868 <-> 68.5.80.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:09.927399 2.034658 udp 10.0.2.22 51868 <-> 77.70.120.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:10.929086 0.000000 udp 10.0.2.22 51868 -> 213.89.49.7 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:23:12.936708 0.357544 udp 10.0.2.22 51868 <-> 75.15.193.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:13.936363 0.211487 udp 10.0.2.22 51868 <-> 76.166.193.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:14.927823 3.166556 udp 10.0.2.22 51868 <-> 66.229.239.151 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:15.928376 3.182040 udp 10.0.2.22 51868 <-> 76.30.230.168 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:16.928732 0.000000 udp 10.0.2.22 51868 -> 82.130.178.166 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:23:19.932191 0.000000 udp 10.0.2.22 51868 -> 117.204.52.240 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:23:20.933821 0.039654 udp 10.0.2.22 51868 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:21.924597 0.000000 udp 10.0.2.22 51868 -> 94.253.205.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:23:22.926200 0.047708 udp 10.0.2.22 51868 <-> 62.20.193.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:23.927574 0.159391 udp 10.0.2.22 51868 <-> 66.229.239.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:24.799014 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:23:24.929118 0.146620 udp 10.0.2.22 51868 <-> 66.168.86.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:25.930888 0.158827 udp 10.0.2.22 51868 <-> 49.206.175.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:26.932447 0.000000 udp 10.0.2.22 51868 -> 71.83.16.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:23:27.933658 2.601916 udp 10.0.2.22 51868 <-> 186.19.203.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:28.924786 0.000000 udp 10.0.2.22 51868 -> 95.59.21.62 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:23:29.926229 0.484691 udp 10.0.2.22 51868 <-> 76.169.87.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:30.927974 0.166710 udp 10.0.2.22 51868 <-> 76.108.104.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:31.929529 0.000000 udp 10.0.2.22 51868 -> 24.141.20.148 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:23:32.930873 0.142747 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:33.932259 0.045527 udp 10.0.2.22 51868 <-> 77.77.58.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:34.933144 0.136035 udp 10.0.2.22 51868 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:35.924829 0.023352 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:36.926302 0.032238 udp 10.0.2.22 51868 <-> 89.215.228.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:37.931234 0.000000 udp 10.0.2.22 51868 -> 177.29.103.149 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:23:38.932229 0.208110 udp 10.0.2.22 51868 <-> 66.237.94.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:39.932584 0.289168 udp 10.0.2.22 51868 <-> 126.36.45.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:40.933162 1.290290 udp 10.0.2.22 51868 <-> 187.78.4.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:42.924762 0.158681 udp 10.0.2.22 51868 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:43.926420 1.835789 udp 10.0.2.22 51868 <-> 187.18.249.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:44.927837 0.000000 udp 10.0.2.22 51868 -> 74.243.9.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:23:45.929607 0.308253 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:46.931131 1.001651 udp 10.0.2.22 51868 <-> 222.167.239.37 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:48.933663 0.991584 udp 10.0.2.22 51868 <-> 79.113.236.251 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:50.926426 0.000000 udp 10.0.2.22 51868 -> 187.25.181.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:23:51.807732 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:23:51.927945 0.058063 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:52.929674 0.269683 udp 10.0.2.22 51868 <-> 200.7.146.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:53.930698 0.275667 udp 10.0.2.22 51868 <-> 177.227.173.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:54.932276 0.166237 udp 10.0.2.22 51868 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:55.933958 0.199655 udp 10.0.2.22 51868 <-> 71.237.245.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:56.925171 1.425954 udp 10.0.2.22 51868 <-> 87.3.116.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:57.926956 0.162577 udp 10.0.2.22 51868 <-> 71.13.218.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:58.929063 0.046755 udp 10.0.2.22 51868 <-> 31.17.92.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:23:59.929988 0.279897 udp 10.0.2.22 51868 <-> 24.140.176.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:24:00.931206 0.000000 udp 10.0.2.22 51868 -> 81.201.145.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:01.932689 0.155618 udp 10.0.2.22 51868 <-> 67.83.216.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:24:02.934152 0.053322 udp 10.0.2.22 51868 <-> 188.241.10.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:24:03.925140 1.176792 udp 10.0.2.22 51868 <-> 174.48.245.201 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:24:05.928026 0.000081 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:05.928107 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:24:06.929693 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:07.931044 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:08.932730 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:09.933921 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:10.925049 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:11.926563 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:12.928161 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:13.929954 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:14.932001 0.178144 udp 10.0.2.22 51868 <-> 174.48.245.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:24:15.932586 0.289378 udp 10.0.2.22 51868 <-> 99.235.131.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:24:16.934362 0.000000 udp 10.0.2.22 51868 -> 85.230.174.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:17.925379 0.168541 udp 10.0.2.22 51868 <-> 173.198.147.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:24:18.806646 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:24:18.926802 4.006254 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:19.928168 0.099166 udp 10.0.2.22 51868 <-> 188.29.29.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:24:20.930098 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:21.931728 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:23.934192 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:24.925587 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:25.926745 0.166464 udp 10.0.2.22 51868 <-> 27.106.49.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:24:26.928680 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:27.929807 0.476831 udp 10.0.2.22 51868 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:24:28.931802 3.995038 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:29.932446 0.356533 udp 10.0.2.22 51868 <-> 88.236.248.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:24:30.934419 0.112266 udp 10.0.2.22 51868 <-> 95.249.41.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:24:31.925752 0.061110 udp 10.0.2.22 51868 <-> 94.45.80.127 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:24:33.928614 3.004313 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:33.928656 3.004271 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 2 172 flow=Background 1970/01/01 10:24:34.930016 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:35.931259 0.307581 udp 10.0.2.22 51868 <-> 99.235.131.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:24:37.933865 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:38.925920 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:39.927123 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:40.928334 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:41.929934 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:42.931668 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:43.932586 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:44.934396 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:45.805512 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:24:45.925830 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:46.926878 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:48.930456 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:49.931702 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:50.932980 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:51.934190 0.326860 udp 10.0.2.22 51868 <-> 14.98.93.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:24:52.925998 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:53.926965 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:54.930587 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:55.930881 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:56.931333 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:57.933024 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:58.924376 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:24:59.926016 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:00.927344 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:01.928870 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:02.930118 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:03.931696 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:04.933201 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:05.924673 3.004422 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:05.924769 3.004326 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 2 172 flow=Background 1970/01/01 10:25:06.926306 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:07.927168 0.341318 udp 10.0.2.22 51868 <-> 180.215.39.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:25:09.930525 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:10.932063 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:11.932838 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:12.804335 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:25:12.924482 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:13.926026 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:14.927092 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:15.928872 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:16.929945 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:17.932061 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:18.933084 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:19.924660 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:20.925792 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:21.927300 4.005890 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:22.929294 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:23.930217 0.145448 udp 10.0.2.22 51868 <-> 67.242.78.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:25:24.931969 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:26.924519 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:27.926273 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:28.927271 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:29.928864 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:30.931134 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:31.931409 0.219933 udp 10.0.2.22 51868 <-> 72.172.193.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:25:32.933070 0.452537 udp 10.0.2.22 51868 <-> 200.127.30.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:25:33.924497 0.205915 udp 10.0.2.22 51868 <-> 1.22.190.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:25:34.926063 0.099459 udp 10.0.2.22 51868 <-> 93.156.11.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:25:35.927385 0.207086 udp 10.0.2.22 51868 <-> 76.87.9.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:25:36.929085 0.231139 udp 10.0.2.22 51868 <-> 184.155.114.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:25:37.930554 0.173046 udp 10.0.2.22 51868 <-> 68.59.245.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:25:38.932064 0.078984 udp 10.0.2.22 51868 <-> 46.118.15.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:25:39.802750 0.000106 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:25:39.933159 0.048361 udp 10.0.2.22 51868 <-> 62.194.156.220 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:25:40.924426 0.224688 udp 10.0.2.22 51868 <-> 75.86.159.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:25:41.926065 0.238015 udp 10.0.2.22 51868 <-> 1.22.190.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:25:42.927738 0.155639 udp 10.0.2.22 51868 <-> 69.249.42.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:25:43.928829 0.000000 udp 10.0.2.22 51868 -> 117.196.129.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:44.930945 0.167548 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:25:45.932632 0.170391 udp 10.0.2.22 51868 <-> 24.222.144.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:25:46.933887 0.015650 udp 10.0.2.22 51868 <-> 164.8.108.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:25:47.924804 0.072866 udp 10.0.2.22 51868 <-> 91.90.2.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:25:48.926241 0.054521 udp 10.0.2.22 51868 <-> 31.129.21.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:25:49.927825 0.143386 udp 10.0.2.22 51868 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:25:50.929137 0.000000 udp 10.0.2.22 51868 -> 87.111.149.81 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:51.930486 0.000000 udp 10.0.2.22 51868 -> 79.50.19.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:52.932230 0.169038 udp 10.0.2.22 51868 <-> 68.59.245.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:25:53.933181 0.035600 udp 10.0.2.22 51868 <-> 84.197.3.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:25:54.924550 0.054718 udp 10.0.2.22 51868 <-> 84.54.171.18 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:25:55.926387 0.588555 udp 10.0.2.22 51868 <-> 69.151.57.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:25:56.927777 0.464124 udp 10.0.2.22 51868 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:25:57.932474 0.000000 udp 10.0.2.22 51868 -> 87.111.149.81 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:58.933167 0.000000 udp 10.0.2.22 51868 -> 78.70.192.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:25:59.933709 0.054859 udp 10.0.2.22 51868 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:00.933521 0.061369 udp 10.0.2.22 51868 <-> 86.125.184.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:01.924984 0.078873 udp 10.0.2.22 51868 <-> 46.118.15.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:02.926634 0.051289 udp 10.0.2.22 51868 <-> 109.60.82.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:03.927921 0.311930 udp 10.0.2.22 51868 <-> 119.200.155.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:04.929002 0.205481 udp 10.0.2.22 51868 <-> 31.44.140.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:05.930603 0.135544 udp 10.0.2.22 51868 <-> 74.88.126.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:06.801432 0.000113 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:26:06.932390 1.031664 udp 10.0.2.22 51868 <-> 82.192.233.62 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:08.925003 0.309337 udp 10.0.2.22 51868 <-> 187.11.102.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:09.926980 0.000000 udp 10.0.2.22 51868 -> 208.93.244.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:26:10.928698 0.466890 udp 10.0.2.22 51868 <-> 177.227.216.250 16464 CON 0 0 5 3618 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:11.929622 0.407370 udp 10.0.2.22 51868 <-> 5.190.123.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:12.931089 4.044261 udp 10.0.2.22 51868 <-> 89.136.139.4 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:13.932217 0.000000 udp 10.0.2.22 51868 -> 190.38.132.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:26:14.933247 0.000000 udp 10.0.2.22 51868 -> 14.97.96.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:26:15.924987 0.124947 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:17.928030 0.000000 udp 10.0.2.22 51868 -> 208.93.244.4 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:26:18.929137 1.184848 udp 10.0.2.22 51868 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:19.931126 0.209573 udp 10.0.2.22 51868 <-> 98.235.73.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:20.932128 0.170455 udp 10.0.2.22 51868 <-> 68.59.245.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:21.933733 0.049800 udp 10.0.2.22 51868 <-> 77.244.194.198 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:22.925095 0.224588 udp 10.0.2.22 51868 <-> 200.84.7.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:23.926661 0.302183 udp 10.0.2.22 51868 <-> 153.132.3.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:24.930364 0.054495 udp 10.0.2.22 51868 <-> 62.31.245.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:25.930878 0.244518 udp 10.0.2.22 51868 <-> 161.200.26.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:26.931417 0.354022 udp 10.0.2.22 51868 <-> 114.38.164.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:27.932324 3.996211 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:26:28.933476 0.104352 udp 10.0.2.22 51868 <-> 78.246.128.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:29.924958 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:26:30.926621 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:26:32.929716 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:26:33.800524 0.000082 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:26:33.930810 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:26:34.932327 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:26:35.933864 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:26:36.925045 0.095235 udp 10.0.2.22 51868 <-> 78.246.128.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:37.926525 0.222821 udp 10.0.2.22 51868 <-> 37.19.197.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:38.928737 2.110964 udp 10.0.2.22 51868 <-> 78.242.194.110 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:39.929618 0.000000 udp 10.0.2.22 51868 -> 190.37.143.111 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:26:41.932517 0.048489 udp 10.0.2.22 51868 <-> 93.79.47.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:42.933815 0.063400 udp 10.0.2.22 51868 <-> 88.216.4.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:43.925248 0.304842 udp 10.0.2.22 51868 <-> 200.84.227.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:44.926589 0.087937 udp 10.0.2.22 51868 <-> 85.231.171.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:45.928409 0.315707 udp 10.0.2.22 51868 <-> 190.203.120.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:46.930085 0.142260 udp 10.0.2.22 51868 <-> 184.56.45.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:47.930836 0.332821 udp 10.0.2.22 51868 <-> 220.143.152.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:48.932521 0.000000 udp 10.0.2.22 51868 -> 111.254.125.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:26:49.934129 0.137306 udp 10.0.2.22 51868 <-> 76.114.222.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:50.925079 0.000000 udp 10.0.2.22 51868 -> 66.222.165.153 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:26:51.926818 0.071552 udp 10.0.2.22 51868 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:52.199210 3.002717 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 10:26:52.928695 2.072967 udp 10.0.2.22 51868 <-> 81.190.243.149 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:53.930405 0.153364 udp 10.0.2.22 51868 <-> 174.100.202.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:55.932786 0.045890 udp 10.0.2.22 51868 <-> 94.208.41.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:56.933961 0.141236 udp 10.0.2.22 51868 <-> 68.191.68.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:57.925487 0.219250 udp 10.0.2.22 51868 <-> 71.199.58.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:58.926908 0.359890 udp 10.0.2.22 51868 <-> 14.98.10.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:26:59.207251 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:26:59.928300 0.190967 udp 10.0.2.22 51868 <-> 75.111.95.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:00.799656 0.000107 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:27:00.929839 0.029913 udp 10.0.2.22 51868 <-> 78.90.230.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:01.931019 0.174734 udp 10.0.2.22 51868 <-> 24.28.147.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:02.932660 0.327875 udp 10.0.2.22 51868 <-> 117.204.174.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:03.933846 0.162726 udp 10.0.2.22 51868 <-> 75.67.160.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:04.925736 0.572601 udp 10.0.2.22 51868 <-> 177.82.176.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:05.926973 0.136948 udp 10.0.2.22 51868 <-> 69.121.34.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:06.928706 0.108957 udp 10.0.2.22 51868 <-> 46.147.142.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:07.209252 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:27:07.931263 0.169828 udp 10.0.2.22 51868 <-> 66.130.254.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:08.931905 0.155828 udp 10.0.2.22 51868 <-> 199.116.197.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:09.933182 0.155174 udp 10.0.2.22 51868 <-> 67.242.95.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:10.933943 0.367801 udp 10.0.2.22 51868 <-> 1.170.158.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:11.925744 0.171149 udp 10.0.2.22 51868 <-> 146.163.172.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:12.926930 0.158081 udp 10.0.2.22 51868 <-> 113.193.86.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:13.928838 0.506894 udp 10.0.2.22 51868 <-> 190.189.156.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:14.930389 0.126574 udp 10.0.2.22 51868 <-> 93.171.110.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:15.931396 0.284094 udp 10.0.2.22 51868 <-> 190.183.18.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:16.932964 0.171669 udp 10.0.2.22 51868 <-> 67.61.177.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:17.934354 1.410010 udp 10.0.2.22 51868 <-> 95.88.209.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:18.925077 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:27:19.926830 0.000000 udp 10.0.2.22 51868 -> 183.87.71.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:27:20.932434 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:27:21.933035 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:27:22.935711 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:27:23.215786 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:27:23.935658 0.058863 udp 10.0.2.22 51868 <-> 37.146.145.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:24.935896 0.042296 udp 10.0.2.22 51868 <-> 37.143.247.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:25.925724 0.000000 udp 10.0.2.22 51868 -> 115.69.241.155 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:27:26.926931 0.044041 udp 10.0.2.22 51868 <-> 91.187.86.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:27.815045 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:27:27.935321 0.266489 udp 10.0.2.22 51868 <-> 190.203.248.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:28.935748 0.294989 udp 10.0.2.22 51868 <-> 176.225.99.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:29.935828 0.171911 udp 10.0.2.22 51868 <-> 66.190.71.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:30.935888 0.049346 udp 10.0.2.22 51868 <-> 95.76.49.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:31.925959 0.656784 udp 10.0.2.22 51868 <-> 80.91.213.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:32.925716 0.072821 udp 10.0.2.22 51868 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:33.926954 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:27:34.928863 0.051257 udp 10.0.2.22 51868 <-> 83.177.28.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:35.930247 0.366555 udp 10.0.2.22 51868 <-> 1.170.158.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:36.931566 0.124280 udp 10.0.2.22 51868 <-> 24.57.20.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:37.933280 0.000000 udp 10.0.2.22 51868 -> 190.252.196.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:27:38.924708 0.149571 udp 10.0.2.22 51868 <-> 24.74.220.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:39.925994 0.000000 udp 10.0.2.22 51868 -> 78.96.104.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:27:40.927179 0.155748 udp 10.0.2.22 51868 <-> 75.69.111.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:41.928893 0.152610 udp 10.0.2.22 51868 <-> 71.43.117.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:42.930360 0.333541 udp 10.0.2.22 51868 <-> 1.172.84.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:43.931884 0.344329 udp 10.0.2.22 51868 <-> 114.43.74.180 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:44.932899 0.339082 udp 10.0.2.22 51868 <-> 201.46.181.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:45.924137 0.076318 udp 10.0.2.22 51868 <-> 91.90.2.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:46.926055 0.099008 udp 10.0.2.22 51868 <-> 178.137.200.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:47.927661 0.076908 udp 10.0.2.22 51868 <-> 82.209.135.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:48.928600 0.189689 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:49.930480 0.000000 udp 10.0.2.22 51868 -> 176.199.74.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:27:50.931804 0.174336 udp 10.0.2.22 51868 <-> 173.16.136.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:51.932966 0.124611 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:52.924462 0.092929 udp 10.0.2.22 51868 <-> 62.99.108.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:53.925969 0.064847 udp 10.0.2.22 51868 <-> 212.104.169.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:54.807210 0.000115 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:27:54.927270 0.427371 udp 10.0.2.22 51868 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:55.218117 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:27:55.928828 0.150469 udp 10.0.2.22 51868 <-> 208.53.224.4 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:56.930442 0.899296 udp 10.0.2.22 51868 <-> 80.91.213.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:57.931484 0.713912 udp 10.0.2.22 51868 <-> 186.191.18.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:58.933182 0.046856 udp 10.0.2.22 51868 <-> 92.108.115.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:27:59.924563 0.185062 udp 10.0.2.22 51868 <-> 159.205.199.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:28:00.926045 0.287443 udp 10.0.2.22 51868 <-> 190.245.43.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:28:01.927269 2.852877 udp 10.0.2.22 51868 <-> 14.98.129.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:28:02.929889 0.000000 udp 10.0.2.22 51868 -> 37.203.120.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:03.931307 0.192931 udp 10.0.2.22 51868 <-> 212.225.185.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:28:04.932170 0.000000 udp 10.0.2.22 51868 -> 183.87.73.38 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:05.933563 0.182309 udp 10.0.2.22 51868 <-> 79.2.78.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:28:06.924729 0.000000 udp 10.0.2.22 51868 -> 187.78.4.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:07.926221 0.053732 udp 10.0.2.22 51868 <-> 195.70.108.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:28:08.927655 0.068015 udp 10.0.2.22 51868 <-> 94.21.66.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:28:09.928849 0.103127 udp 10.0.2.22 51868 <-> 78.251.143.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:28:10.930441 0.189363 udp 10.0.2.22 51868 <-> 70.173.33.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:28:11.932246 0.000000 udp 10.0.2.22 51868 -> 190.130.151.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:12.933207 0.159951 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:28:13.924416 0.000000 udp 10.0.2.22 51868 -> 177.225.129.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:14.926287 0.066543 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:28:15.927871 0.000000 udp 10.0.2.22 51868 -> 186.86.169.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:16.928782 1.160317 udp 10.0.2.22 51868 <-> 71.234.246.13 16464 CON 0 0 4 1616 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:28:18.931846 0.090458 udp 10.0.2.22 51868 <-> 93.72.70.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:28:19.933395 0.000000 udp 10.0.2.22 51868 -> 68.6.156.238 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:20.924704 0.048247 udp 10.0.2.22 51868 <-> 87.247.78.156 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:28:21.806139 0.000102 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:28:21.926489 0.292510 udp 10.0.2.22 51868 <-> 60.56.88.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:28:22.927891 0.018802 udp 10.0.2.22 51868 <-> 95.168.48.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:28:23.928828 0.309717 udp 10.0.2.22 51868 <-> 179.98.145.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:28:24.930840 0.164746 udp 10.0.2.22 51868 <-> 184.153.119.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:28:25.932363 0.165808 udp 10.0.2.22 51868 <-> 50.80.10.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:28:26.933143 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:27.924730 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:28.927586 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:29.928671 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:30.929418 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:31.930537 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:32.932190 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:33.933271 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:34.924735 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:35.926303 0.162097 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:28:36.928583 0.665371 udp 10.0.2.22 51868 <-> 200.127.30.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:28:37.929453 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:38.930546 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:39.932000 3.996843 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:40.933843 3.995847 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:41.924705 0.057573 udp 10.0.2.22 51868 <-> 79.115.87.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:28:42.927004 0.542463 udp 10.0.2.22 51868 <-> 108.230.246.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:28:45.930610 0.144018 udp 10.0.2.22 51868 <-> 71.12.81.250 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:28:46.932323 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:47.933533 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:48.804648 0.000109 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:28:48.924800 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:49.926963 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:50.928185 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:51.929822 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:52.931022 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:53.932342 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:54.934016 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:55.925182 0.000000 udp 10.0.2.22 51868 -> 151.52.90.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:56.926961 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:57.928797 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:58.929376 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:28:59.930826 3.159416 udp 10.0.2.22 51868 <-> 66.25.88.248 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:29:00.932652 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:01.934304 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:03.927142 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:04.928634 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:05.929261 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:06.930949 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:07.932094 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:08.933952 1.993056 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:09.925275 0.166350 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:29:11.928371 0.000000 udp 10.0.2.22 51868 -> 66.130.126.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:12.929848 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:13.930753 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:14.932305 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:15.803856 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:29:15.933906 0.034697 udp 10.0.2.22 51868 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:29:16.925711 0.000000 udp 10.0.2.22 51868 -> 94.190.190.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:17.926885 0.327061 udp 10.0.2.22 51868 <-> 31.44.140.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:29:18.928149 0.212861 udp 10.0.2.22 51868 <-> 184.59.192.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:29:19.929576 0.206618 udp 10.0.2.22 51868 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:29:20.931154 0.118387 udp 10.0.2.22 51868 <-> 207.237.112.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:29:21.932819 4.996117 udp 10.0.2.22 51868 <-> 186.93.166.249 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:29:22.934265 0.000000 udp 10.0.2.22 51868 -> 86.124.236.232 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:23.925148 0.073444 udp 10.0.2.22 51868 <-> 46.42.233.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:29:24.926772 0.000000 udp 10.0.2.22 51868 -> 187.57.16.233 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:25.928099 3.184503 udp 10.0.2.22 51868 <-> 184.59.192.233 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:29:27.672203 0.000000 udp 10.0.2.22 51868 <- 186.93.166.249 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:27.931167 0.000000 udp 10.0.2.22 51868 -> 85.86.236.243 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:29.934322 0.000000 udp 10.0.2.22 51868 -> 186.18.88.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:30.925866 0.041883 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:29:31.926825 0.000000 udp 10.0.2.22 51868 -> 66.79.231.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:32.928623 0.023812 udp 10.0.2.22 51868 <-> 80.99.49.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:29:33.929802 0.092704 udp 10.0.2.22 51868 <-> 95.86.74.2 16464 CON 0 0 3 1558 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:29:34.931314 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:35.932438 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:36.934000 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:37.925646 0.000104 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:37.925750 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:29:38.926843 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:39.928600 0.156275 udp 10.0.2.22 51868 <-> 82.244.99.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:29:40.929700 0.000000 udp 10.0.2.22 51868 -> 88.149.170.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:41.931196 0.071366 udp 10.0.2.22 51868 <-> 93.156.61.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:29:42.932452 1.584618 udp 10.0.2.22 51868 <-> 177.100.202.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:29:43.803682 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:29:43.934221 0.220184 udp 10.0.2.22 51868 <-> 186.91.202.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:29:44.925809 0.000000 udp 10.0.2.22 51868 -> 74.68.63.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:45.926863 0.163498 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:29:46.928202 0.000000 udp 10.0.2.22 51868 -> 152.26.68.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:47.929843 0.212996 udp 10.0.2.22 51868 <-> 67.189.32.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:29:48.931087 0.362648 udp 10.0.2.22 51868 <-> 201.242.45.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:29:49.932899 0.029498 udp 10.0.2.22 51868 <-> 89.215.134.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:29:50.934107 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:51.926125 1.214025 udp 10.0.2.22 51868 <-> 95.238.36.69 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:29:53.928307 0.165323 udp 10.0.2.22 51868 <-> 108.176.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:29:54.930034 0.317703 udp 10.0.2.22 51868 <-> 201.189.224.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:29:55.931168 0.114803 udp 10.0.2.22 51868 <-> 24.122.51.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:29:56.932775 0.058375 udp 10.0.2.22 51868 <-> 212.52.63.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:29:57.933910 0.000000 udp 10.0.2.22 51868 -> 217.203.172.145 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:29:58.926262 0.064119 udp 10.0.2.22 51868 <-> 5.14.138.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:29:59.927053 0.075176 udp 10.0.2.22 51868 <-> 46.185.30.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:00.928604 0.102389 udp 10.0.2.22 51868 <-> 78.204.48.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:01.929722 0.101387 udp 10.0.2.22 51868 <-> 79.7.112.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:02.931467 0.147472 udp 10.0.2.22 51868 <-> 24.208.178.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:03.933119 0.374370 udp 10.0.2.22 51868 <-> 219.85.118.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:04.924242 0.171991 udp 10.0.2.22 51868 <-> 111.125.203.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:05.926099 0.000000 udp 10.0.2.22 51868 -> 188.158.228.130 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:30:06.926943 0.197923 udp 10.0.2.22 51868 <-> 75.85.120.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:07.928512 0.000000 udp 10.0.2.22 51868 -> 31.147.116.45 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:30:08.930347 0.000000 udp 10.0.2.22 51868 -> 114.51.132.127 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:30:09.931318 0.295102 udp 10.0.2.22 51868 <-> 24.232.163.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:10.802511 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:30:10.932940 0.101670 udp 10.0.2.22 51868 <-> 88.184.199.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:11.924244 0.153353 udp 10.0.2.22 51868 <-> 173.220.69.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:12.926306 0.062682 udp 10.0.2.22 51868 <-> 213.66.213.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:13.927254 0.000000 udp 10.0.2.22 51868 -> 199.188.251.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:30:14.928644 1.033712 udp 10.0.2.22 51868 <-> 89.215.228.43 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:16.931142 0.145015 udp 10.0.2.22 51868 <-> 98.229.185.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:17.933023 0.431741 udp 10.0.2.22 51868 <-> 219.85.118.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:18.924211 0.028737 udp 10.0.2.22 51868 <-> 77.70.44.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:19.925971 0.063887 udp 10.0.2.22 51868 <-> 5.14.225.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:20.927099 0.142569 udp 10.0.2.22 51868 <-> 69.122.169.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:21.928714 0.273271 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:22.930139 0.032275 udp 10.0.2.22 51868 <-> 84.119.41.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:23.931794 0.040855 udp 10.0.2.22 51868 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:24.933024 2.220130 udp 10.0.2.22 51868 <-> 178.149.14.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:25.924279 0.077584 udp 10.0.2.22 51868 <-> 79.115.191.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:26.926061 0.064515 udp 10.0.2.22 51868 <-> 5.14.225.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:27.927683 0.033242 udp 10.0.2.22 51868 <-> 91.146.249.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:28.929137 0.164983 udp 10.0.2.22 51868 <-> 68.226.220.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:29.930534 0.141923 udp 10.0.2.22 51868 <-> 208.53.245.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:30.931637 0.092430 udp 10.0.2.22 51868 <-> 82.247.43.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:31.933203 0.607790 udp 10.0.2.22 51868 <-> 105.225.179.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:32.924577 0.048012 udp 10.0.2.22 51868 <-> 77.23.138.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:33.926179 0.832757 udp 10.0.2.22 51868 <-> 181.72.146.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:34.927642 0.096987 udp 10.0.2.22 51868 <-> 82.211.182.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:35.929075 0.000000 udp 10.0.2.22 51868 -> 109.199.236.29 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:30:36.930353 0.336992 udp 10.0.2.22 51868 <-> 201.213.98.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:37.801390 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:30:37.931602 0.282009 udp 10.0.2.22 51868 <-> 200.127.210.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:38.933158 0.049471 udp 10.0.2.22 51868 <-> 62.129.168.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:39.924603 0.175078 udp 10.0.2.22 51868 <-> 68.117.245.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:40.926209 0.382731 udp 10.0.2.22 51868 <-> 200.175.127.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:41.927442 0.349869 udp 10.0.2.22 51868 <-> 190.74.23.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:42.928935 0.178213 udp 10.0.2.22 51868 <-> 216.254.237.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:43.930255 0.448162 udp 10.0.2.22 51868 <-> 115.240.91.225 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:44.931715 0.335041 udp 10.0.2.22 51868 <-> 93.105.1.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:45.933172 0.000000 udp 10.0.2.22 51868 -> 75.131.180.115 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:30:46.924704 0.155667 udp 10.0.2.22 51868 <-> 74.130.106.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:47.927117 0.404353 udp 10.0.2.22 51868 <-> 27.3.138.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:48.927693 0.137363 udp 10.0.2.22 51868 <-> 24.152.221.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:49.929187 0.000000 udp 10.0.2.22 51868 -> 117.197.210.130 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:30:50.930295 0.190357 udp 10.0.2.22 51868 <-> 75.57.152.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:51.931846 0.000000 udp 10.0.2.22 51868 -> 79.117.112.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:30:52.933106 3.532867 udp 10.0.2.22 51868 <-> 77.89.104.82 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:53.924692 0.000000 udp 10.0.2.22 51868 -> 37.214.222.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:30:54.926599 0.290627 udp 10.0.2.22 51868 <-> 179.235.133.223 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:56.929241 1.185635 udp 10.0.2.22 51868 <-> 116.203.101.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:57.930539 0.295649 udp 10.0.2.22 51868 <-> 37.237.51.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:58.932233 0.293523 udp 10.0.2.22 51868 <-> 177.182.77.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:30:59.933049 0.294536 udp 10.0.2.22 51868 <-> 189.25.78.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:00.924809 0.143339 udp 10.0.2.22 51868 <-> 60.254.5.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:01.926297 0.173643 udp 10.0.2.22 51868 <-> 67.242.138.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:02.927644 0.083306 udp 10.0.2.22 51868 <-> 89.152.35.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:03.928989 0.077946 udp 10.0.2.22 51868 <-> 85.219.21.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:04.800504 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:31:04.930775 0.300409 udp 10.0.2.22 51868 <-> 220.86.55.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:05.931922 0.000000 udp 10.0.2.22 51868 -> 114.36.213.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:31:06.933777 0.064424 udp 10.0.2.22 51868 <-> 5.14.225.8 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:07.924775 0.061580 udp 10.0.2.22 51868 <-> 130.204.159.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:08.926411 0.224448 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:09.927847 0.018877 udp 10.0.2.22 51868 <-> 88.132.62.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:10.929171 0.412844 udp 10.0.2.22 51868 <-> 142.136.206.4 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:11.930627 0.146350 udp 10.0.2.22 51868 <-> 108.176.96.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:12.932013 0.257184 udp 10.0.2.22 51868 <-> 72.130.237.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:13.933403 0.169935 udp 10.0.2.22 51868 <-> 68.59.168.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:14.924833 0.144011 udp 10.0.2.22 51868 <-> 74.78.25.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:15.926595 0.162130 udp 10.0.2.22 51868 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:16.927883 0.156825 udp 10.0.2.22 51868 <-> 66.158.58.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:17.929220 0.177601 udp 10.0.2.22 51868 <-> 71.226.87.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:18.930733 0.164761 udp 10.0.2.22 51868 <-> 124.123.124.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:19.931947 0.038854 udp 10.0.2.22 51868 <-> 212.117.58.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:20.933216 0.029992 udp 10.0.2.22 51868 <-> 77.70.41.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:21.924851 0.000000 udp 10.0.2.22 51868 -> 189.68.137.88 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:31:22.926808 0.000000 udp 10.0.2.22 51868 -> 212.59.229.78 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:31:23.927913 0.127466 udp 10.0.2.22 51868 <-> 79.51.215.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:24.929607 0.178522 udp 10.0.2.22 51868 <-> 66.165.198.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:25.930731 0.138828 udp 10.0.2.22 51868 <-> 71.86.96.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:26.932332 0.171993 udp 10.0.2.22 51868 <-> 124.123.124.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:27.932990 0.249788 udp 10.0.2.22 51868 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:28.925015 0.722977 udp 10.0.2.22 51868 <-> 186.91.102.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:29.926752 0.071052 udp 10.0.2.22 51868 <-> 86.123.41.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:30.927900 0.000000 udp 10.0.2.22 51868 -> 213.133.17.151 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:31:31.799035 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:31:31.929419 0.000000 udp 10.0.2.22 51868 -> 177.138.96.92 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:31:32.930770 0.136027 udp 10.0.2.22 51868 <-> 76.116.162.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:33.932312 0.057831 udp 10.0.2.22 51868 <-> 5.13.57.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:34.933907 0.000000 udp 10.0.2.22 51868 -> 74.135.109.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:31:35.925097 0.641205 udp 10.0.2.22 51868 <-> 188.167.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:36.926796 0.074327 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:37.927991 0.464968 udp 10.0.2.22 51868 <-> 213.133.17.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:38.929438 0.368246 udp 10.0.2.22 51868 <-> 177.138.96.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:39.930808 0.143816 udp 10.0.2.22 51868 <-> 75.177.1.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:40.932343 0.142243 udp 10.0.2.22 51868 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:41.933838 0.230584 udp 10.0.2.22 51868 <-> 78.220.84.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:42.924954 0.000000 udp 10.0.2.22 51868 -> 187.78.4.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:31:43.926605 0.000000 udp 10.0.2.22 51868 -> 98.116.60.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:31:44.928141 0.154383 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:45.929796 0.135703 udp 10.0.2.22 51868 <-> 47.16.247.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:46.930890 0.381334 udp 10.0.2.22 51868 <-> 118.168.65.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:47.932551 0.000000 udp 10.0.2.22 51868 -> 83.230.170.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:31:48.934226 0.073561 udp 10.0.2.22 51868 <-> 188.27.217.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:49.925776 0.053991 udp 10.0.2.22 51868 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:50.926657 0.346348 udp 10.0.2.22 51868 <-> 221.141.185.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:51.928108 0.154582 udp 10.0.2.22 51868 <-> 24.215.121.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:52.929405 0.173190 udp 10.0.2.22 51868 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:53.930887 2.059711 udp 10.0.2.22 51868 <-> 90.224.66.98 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:54.932478 0.058922 udp 10.0.2.22 51868 <-> 188.173.128.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:56.925142 0.000000 udp 10.0.2.22 51868 -> 207.6.94.117 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:31:57.926877 0.182692 udp 10.0.2.22 51868 <-> 24.32.236.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:31:58.808699 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:31:58.929002 0.000000 udp 10.0.2.22 51868 -> 111.254.125.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:31:59.929868 0.360364 udp 10.0.2.22 51868 <-> 118.160.130.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:00.931098 0.010846 udp 10.0.2.22 51868 <-> 178.21.51.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:01.932770 3.907622 udp 10.0.2.22 51868 <-> 50.72.184.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:02.934051 0.000000 udp 10.0.2.22 51868 -> 46.73.205.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:32:03.925274 0.137962 udp 10.0.2.22 51868 <-> 71.86.96.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:04.926936 4.005586 udp 10.0.2.22 51868 -> 24.96.16.240 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:32:05.928179 0.231301 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:06.929886 4.996738 udp 10.0.2.22 51868 -> 117.196.129.64 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:32:07.931192 0.063061 udp 10.0.2.22 51868 <-> 95.107.216.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:09.933918 0.000000 udp 10.0.2.22 51868 -> 81.137.241.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:32:10.925695 0.000000 udp 10.0.2.22 51868 -> 69.39.200.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:32:12.241470 0.000000 udp 10.0.2.22 51868 <- 117.196.129.64 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:32:12.928594 0.086236 udp 10.0.2.22 51868 <-> 46.191.214.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:13.930053 0.109757 udp 10.0.2.22 51868 <-> 212.122.101.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:14.931710 0.165203 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:15.932676 1.179366 udp 10.0.2.22 51868 <-> 84.1.20.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:16.933890 0.080876 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:17.925336 0.314416 udp 10.0.2.22 51868 <-> 5.200.236.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:18.926832 0.282485 udp 10.0.2.22 51868 <-> 200.127.210.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:19.928240 0.142707 udp 10.0.2.22 51868 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:20.930137 0.000000 udp 10.0.2.22 51868 -> 188.37.220.48 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:32:21.931794 2.002225 udp 10.0.2.22 51868 -> 190.121.66.121 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:32:22.932962 0.173507 udp 10.0.2.22 51868 <-> 98.194.123.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:24.925973 0.134239 udp 10.0.2.22 51868 <-> 178.78.186.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:25.806569 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:32:25.927065 2.307881 udp 10.0.2.22 51868 <-> 119.14.177.91 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:26.928400 0.000000 udp 10.0.2.22 51868 -> 89.215.64.130 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:32:28.931175 0.000000 udp 10.0.2.22 51868 -> 75.58.127.217 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:32:29.932749 0.000000 udp 10.0.2.22 51868 -> 5.43.88.212 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:32:30.934313 0.446617 udp 10.0.2.22 51868 <-> 186.94.17.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:31.925587 1.157006 udp 10.0.2.22 51868 <-> 146.163.172.106 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:33.928669 0.055210 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:34.929817 0.117059 udp 10.0.2.22 51868 <-> 62.113.14.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:35.931247 0.000000 udp 10.0.2.22 51868 -> 116.203.129.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:32:36.932775 1.132633 udp 10.0.2.22 51868 <-> 98.124.111.152 16464 CON 0 0 7 4566 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:38.925986 0.183672 udp 10.0.2.22 51868 <-> 68.145.102.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:39.927201 0.126850 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:40.928493 0.133464 udp 10.0.2.22 51868 <-> 24.224.154.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:41.930166 0.000000 udp 10.0.2.22 51868 -> 79.47.33.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:32:42.931717 0.015620 udp 10.0.2.22 51868 <-> 164.8.204.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:43.933005 0.000000 udp 10.0.2.22 51868 -> 77.45.49.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:32:44.924063 0.050275 udp 10.0.2.22 51868 <-> 94.21.162.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:45.926089 0.071618 udp 10.0.2.22 51868 <-> 85.226.42.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:46.927239 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:32:47.928709 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:32:48.930187 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:32:49.931337 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:32:50.933148 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:32:51.924145 0.000000 udp 10.0.2.22 51868 -> 94.73.1.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:32:52.805793 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:32:52.926106 0.121744 udp 10.0.2.22 51868 <-> 78.70.192.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:32:53.927397 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:32:54.928928 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:32:55.930133 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:32:56.931794 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:32:57.933117 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:32:58.924535 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:32:59.926003 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:00.927295 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:01.928665 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:02.930388 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:03.931666 0.000140 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:03.931806 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:33:04.932842 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:05.924500 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:06.926287 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:07.927234 0.221711 udp 10.0.2.22 51868 <-> 24.10.7.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:33:08.929079 0.200494 udp 10.0.2.22 51868 <-> 77.45.49.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:33:09.930499 0.142563 udp 10.0.2.22 51868 <-> 24.184.71.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:33:10.931195 0.214046 udp 10.0.2.22 51868 <-> 68.59.72.41 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:33:11.932628 0.120163 udp 10.0.2.22 51868 <-> 69.77.158.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:33:12.924802 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:13.926659 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:14.927712 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:15.928962 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:16.930645 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:17.932018 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:18.933036 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:19.804282 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:33:19.924657 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:21.927840 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:22.929015 0.148809 udp 10.0.2.22 51868 <-> 74.55.169.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:33:23.930712 0.000073 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:23.930785 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:33:24.931233 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:25.933083 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:26.924442 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:27.926326 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:28.927469 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:29.928895 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:30.930507 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:31.932157 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:32.933148 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:33.924489 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:34.926385 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:35.927669 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:36.929523 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:38.932025 0.338757 udp 10.0.2.22 51868 <-> 220.142.70.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:33:39.933224 0.000061 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:39.933285 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:33:40.924676 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:41.926491 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:42.927588 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:43.929225 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:44.930500 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:45.932280 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:46.802774 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:33:46.933169 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:47.924694 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:48.926735 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:49.928410 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:50.929698 4.996763 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:51.930571 4.997542 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:52.932258 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:54.924683 0.338579 udp 10.0.2.22 51868 <-> 220.142.70.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:33:57.929204 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:58.930683 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:33:59.223393 3.002233 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 10:33:59.932606 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:34:00.933146 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:34:01.924946 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:34:02.926565 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:34:03.928070 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:34:05.930738 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:34:06.231025 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:34:06.932210 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:34:07.933110 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:34:08.924979 0.000060 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:34:08.925039 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:34:09.926423 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:34:10.928535 4.005509 udp 10.0.2.22 51868 -> 78.90.35.2 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:34:11.929688 0.072733 udp 10.0.2.22 51868 <-> 84.119.41.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:12.931008 0.055468 udp 10.0.2.22 51868 <-> 88.67.80.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:13.932277 0.000000 udp 10.0.2.22 51868 -> 71.171.91.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:34:14.232840 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:34:14.803721 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:34:15.924916 0.116655 udp 10.0.2.22 51868 <-> 88.166.247.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:16.926467 0.237726 udp 10.0.2.22 51868 <-> 50.176.36.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:17.945673 0.158279 udp 10.0.2.22 51868 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:18.943201 0.253191 udp 10.0.2.22 51868 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:19.939702 0.045214 udp 10.0.2.22 51868 <-> 89.230.29.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:20.936154 4.004956 udp 10.0.2.22 51868 -> 68.119.109.89 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:34:21.934887 0.296066 udp 10.0.2.22 51868 <-> 74.77.183.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:22.944389 0.000000 udp 10.0.2.22 51868 -> 181.168.168.150 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:34:23.943024 0.319646 udp 10.0.2.22 51868 <-> 180.19.158.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:25.938435 0.146844 udp 10.0.2.22 51868 <-> 107.10.164.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:26.935785 1.823293 udp 10.0.2.22 51868 <-> 2.187.205.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:27.933152 0.029940 udp 10.0.2.22 51868 <-> 77.81.147.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:28.933729 0.182061 udp 10.0.2.22 51868 <-> 95.57.52.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:29.925151 0.131587 udp 10.0.2.22 51868 <-> 169.244.248.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:30.235937 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:34:30.926869 0.164722 udp 10.0.2.22 51868 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:31.928085 0.256197 udp 10.0.2.22 51868 <-> 189.37.0.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:32.929987 3.004037 udp 10.0.2.22 51868 -> 184.20.73.14 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:34:33.931273 1.044525 udp 10.0.2.22 51868 <-> 79.173.36.168 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:36.925876 0.000000 udp 10.0.2.22 51868 -> 62.113.14.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:34:37.926760 0.116763 udp 10.0.2.22 51868 <-> 24.50.116.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:38.928242 0.317275 udp 10.0.2.22 51868 <-> 201.93.242.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:39.930070 0.310009 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:40.931036 0.195606 udp 10.0.2.22 51868 <-> 75.84.97.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:41.802378 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:34:41.932656 0.739956 udp 10.0.2.22 51868 <-> 80.171.95.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:42.934477 0.000000 udp 10.0.2.22 51868 -> 174.59.159.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:34:43.925190 0.166877 udp 10.0.2.22 51868 <-> 71.61.103.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:44.926896 0.000000 udp 10.0.2.22 51868 -> 109.199.236.29 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:34:45.928166 0.034448 udp 10.0.2.22 51868 <-> 87.97.201.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:46.929989 0.365857 udp 10.0.2.22 51868 <-> 186.191.29.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:47.931313 0.162071 udp 10.0.2.22 51868 <-> 70.82.157.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:48.932670 0.176187 udp 10.0.2.22 51868 <-> 24.203.152.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:49.934131 0.240799 udp 10.0.2.22 51868 <-> 186.92.38.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:50.925531 0.129077 udp 10.0.2.22 51868 <-> 79.50.212.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:51.926930 0.074312 udp 10.0.2.22 51868 <-> 79.115.191.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:52.928245 0.355476 udp 10.0.2.22 51868 <-> 190.128.117.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:53.930166 0.290746 udp 10.0.2.22 51868 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:54.930996 0.326214 udp 10.0.2.22 51868 <-> 200.181.39.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:55.932558 0.880991 udp 10.0.2.22 51868 <-> 186.122.172.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:56.934359 1.017049 udp 10.0.2.22 51868 <-> 80.99.49.236 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:58.926824 0.065973 udp 10.0.2.22 51868 <-> 86.126.97.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:34:59.928387 0.038747 udp 10.0.2.22 51868 <-> 89.215.31.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:00.929931 0.170929 udp 10.0.2.22 51868 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:01.931116 0.155957 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:02.241895 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:35:02.932900 0.000000 udp 10.0.2.22 51868 -> 193.179.253.38 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:35:03.934531 0.137256 udp 10.0.2.22 51868 <-> 98.27.34.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:04.925238 0.154581 udp 10.0.2.22 51868 <-> 70.189.26.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:05.927066 0.153991 udp 10.0.2.22 51868 <-> 208.82.225.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:06.928482 0.353564 udp 10.0.2.22 51868 <-> 1.172.59.34 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:07.930233 0.000000 udp 10.0.2.22 51868 -> 95.85.176.167 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:35:08.801050 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:35:08.931641 0.000000 udp 10.0.2.22 51868 -> 176.225.99.148 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:35:09.932688 0.000000 udp 10.0.2.22 51868 -> 188.79.24.112 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:35:10.924368 0.162397 udp 10.0.2.22 51868 <-> 75.76.12.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:11.925474 0.569555 udp 10.0.2.22 51868 <-> 77.89.104.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:12.927116 0.222412 udp 10.0.2.22 51868 <-> 91.90.3.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:13.928345 0.072884 udp 10.0.2.22 51868 <-> 87.96.140.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:14.929904 0.064942 udp 10.0.2.22 51868 <-> 5.15.135.33 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:15.931589 0.024621 udp 10.0.2.22 51868 <-> 95.168.34.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:16.932817 0.532723 udp 10.0.2.22 51868 <-> 79.47.33.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:17.924409 0.165459 udp 10.0.2.22 51868 <-> 178.122.80.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:18.926068 0.048077 udp 10.0.2.22 51868 <-> 79.173.35.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:19.926992 0.000000 udp 10.0.2.22 51868 -> 69.47.17.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:35:20.928743 1.229619 udp 10.0.2.22 51868 <-> 186.92.38.144 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:22.931973 0.065798 udp 10.0.2.22 51868 <-> 92.37.3.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:23.932873 0.035946 udp 10.0.2.22 51868 <-> 188.254.156.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:24.924523 0.000000 udp 10.0.2.22 51868 -> 189.103.8.106 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:35:25.925912 0.372149 udp 10.0.2.22 51868 <-> 186.191.29.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:26.927121 0.000000 udp 10.0.2.22 51868 -> 78.84.97.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:35:27.928728 0.041313 udp 10.0.2.22 51868 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:28.930031 2.994484 udp 10.0.2.22 51868 -> 69.248.152.15 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:35:29.931599 0.145063 udp 10.0.2.22 51868 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:30.933129 0.000000 udp 10.0.2.22 51868 -> 186.7.23.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:35:32.932405 0.082347 udp 10.0.2.22 51868 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:33.932720 0.070469 udp 10.0.2.22 51868 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:34.932331 0.066722 udp 10.0.2.22 51868 <-> 37.146.132.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:35.801624 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:35:35.932087 0.000000 udp 10.0.2.22 51868 -> 89.229.162.186 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:35:36.932586 1.382642 udp 10.0.2.22 51868 <-> 70.25.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:37.932981 0.207994 udp 10.0.2.22 51868 <-> 216.105.77.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:38.924602 0.205275 udp 10.0.2.22 51868 <-> 87.10.13.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:39.926423 0.090890 udp 10.0.2.22 51868 <-> 176.73.209.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:40.927235 0.000000 udp 10.0.2.22 51868 -> 37.148.149.142 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:35:41.928838 0.000000 udp 10.0.2.22 51868 -> 89.215.42.167 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:35:42.930286 3.996072 udp 10.0.2.22 51868 <-> 186.188.200.52 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:43.931336 0.342713 udp 10.0.2.22 51868 <-> 186.94.84.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:44.933172 0.161052 udp 10.0.2.22 51868 <-> 198.179.118.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:45.924576 0.139560 udp 10.0.2.22 51868 <-> 68.49.199.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:47.927504 0.308185 udp 10.0.2.22 51868 <-> 124.39.69.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:48.929035 0.098528 udp 10.0.2.22 51868 <-> 79.7.112.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:49.930321 0.000000 udp 10.0.2.22 51868 -> 200.8.112.100 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:35:50.931940 0.331470 udp 10.0.2.22 51868 <-> 91.98.16.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:51.933681 0.515800 udp 10.0.2.22 51868 <-> 180.215.199.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:52.924736 0.355221 udp 10.0.2.22 51868 <-> 111.250.115.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:53.926316 0.229236 udp 10.0.2.22 51868 <-> 200.84.172.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:54.927255 1.052920 udp 10.0.2.22 51868 <-> 193.108.229.8 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:56.930346 0.462567 udp 10.0.2.22 51868 <-> 189.68.129.167 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:57.931874 0.080600 udp 10.0.2.22 51868 <-> 188.25.221.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:58.933723 0.043859 udp 10.0.2.22 51868 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:35:59.924732 0.269077 udp 10.0.2.22 51868 <-> 187.78.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:00.926254 0.096835 udp 10.0.2.22 51868 -> 83.32.103.98 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:36:01.023089 0.000000 icmp 83.32.103.98 0x0303 -> 10.0.2.22 0x5040 URP 192 1 70 flow=Background 1970/01/01 10:36:01.927374 0.152397 udp 10.0.2.22 51868 <-> 96.42.52.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:02.798648 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:36:02.929120 0.156460 udp 10.0.2.22 51868 <-> 96.19.238.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:03.930494 0.046986 udp 10.0.2.22 51868 <-> 46.237.118.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:04.931788 0.000000 udp 10.0.2.22 51868 -> 212.183.245.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:36:05.933450 0.321568 udp 10.0.2.22 51868 <-> 209.55.124.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:06.924602 0.282600 udp 10.0.2.22 51868 <-> 117.222.47.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:07.926375 0.313205 udp 10.0.2.22 51868 <-> 190.110.186.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:08.927580 0.390642 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:09.928810 0.164944 udp 10.0.2.22 51868 <-> 71.89.50.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:10.930385 0.320909 udp 10.0.2.22 51868 <-> 190.95.125.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:11.932095 0.069120 udp 10.0.2.22 51868 <-> 46.35.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:12.933135 0.142723 udp 10.0.2.22 51868 <-> 79.7.112.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:13.924942 0.000000 udp 10.0.2.22 51868 -> 24.207.57.100 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:36:14.926846 0.041027 udp 10.0.2.22 51868 <-> 89.215.64.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:15.927780 0.051910 udp 10.0.2.22 51868 <-> 195.34.119.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:16.929058 4.002125 udp 10.0.2.22 51868 -> 108.230.246.250 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:36:17.934271 0.000000 udp 10.0.2.22 51868 -> 95.220.247.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:36:18.933992 0.287152 udp 10.0.2.22 51868 <-> 201.211.111.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:19.933784 0.000000 udp 10.0.2.22 51868 -> 69.35.9.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:36:21.930832 0.025650 udp 10.0.2.22 51868 <-> 80.99.49.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:22.930868 0.024572 udp 10.0.2.22 51868 <-> 78.42.45.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:23.930802 0.000000 udp 10.0.2.22 51868 -> 24.84.162.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:36:24.930724 0.843111 udp 10.0.2.22 51868 <-> 80.171.95.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:25.932360 0.071420 udp 10.0.2.22 51868 <-> 94.253.231.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:26.935053 0.043902 udp 10.0.2.22 51868 <-> 178.254.205.12 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:27.926198 0.000000 udp 10.0.2.22 51868 -> 85.230.174.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:36:28.926790 0.274213 udp 10.0.2.22 51868 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:29.807796 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:36:29.927913 0.330223 udp 10.0.2.22 51868 <-> 186.92.177.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:30.929469 0.624000 udp 10.0.2.22 51868 <-> 181.55.154.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:31.930736 4.173284 udp 10.0.2.22 51868 <-> 71.15.96.2 16464 CON 0 0 4 496 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:32.932036 0.000000 udp 10.0.2.22 51868 -> 108.150.122.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:36:33.933734 0.000000 udp 10.0.2.22 51868 -> 178.254.205.12 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:36:34.925175 0.053013 udp 10.0.2.22 51868 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:36.928192 0.138328 udp 10.0.2.22 51868 <-> 24.34.66.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:37.929459 0.861978 udp 10.0.2.22 51868 <-> 5.238.245.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:38.930947 0.135590 udp 10.0.2.22 51868 <-> 212.92.251.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:39.932339 0.000000 udp 10.0.2.22 51868 -> 151.77.168.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:36:40.933924 0.104400 udp 10.0.2.22 51868 <-> 46.241.150.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:41.926863 0.134043 udp 10.0.2.22 51868 <-> 62.83.45.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:42.926844 0.068920 udp 10.0.2.22 51868 <-> 62.99.47.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:43.928097 0.073725 udp 10.0.2.22 51868 <-> 85.152.0.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:44.929799 0.360948 udp 10.0.2.22 51868 <-> 114.44.142.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:45.931037 0.160756 udp 10.0.2.22 51868 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:46.932997 0.298434 udp 10.0.2.22 51868 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:47.934008 1.872237 arp 10.0.2.22 who 169.254.129.251 INT 3 126 flow=Background-ARP 1970/01/01 10:36:48.924935 1.012222 udp 10.0.2.22 51868 <-> 89.102.253.92 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:50.927874 0.206930 udp 10.0.2.22 51868 <-> 24.87.74.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:51.929568 0.157263 udp 10.0.2.22 51868 <-> 174.64.190.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:52.930890 0.000000 udp 10.0.2.22 51868 -> 24.240.26.180 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:36:53.935659 0.049147 udp 10.0.2.22 51868 <-> 37.8.220.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:54.936057 0.149466 udp 10.0.2.22 51868 <-> 216.115.131.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:55.930759 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:36:56.810570 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:36:56.930723 0.140882 udp 10.0.2.22 51868 <-> 24.218.164.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:57.932109 0.302807 udp 10.0.2.22 51868 <-> 59.20.31.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:36:58.932202 0.000000 udp 10.0.2.22 51868 -> 208.53.224.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:36:59.931820 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:37:00.932535 0.264858 udp 10.0.2.22 51868 <-> 79.47.59.49 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:01.933969 0.000000 udp 10.0.2.22 51868 -> 201.210.213.118 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:37:02.925337 0.354497 udp 10.0.2.22 51868 <-> 111.252.37.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:03.930763 0.000000 udp 10.0.2.22 51868 -> 79.183.172.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:37:04.934677 0.000000 udp 10.0.2.22 51868 -> 95.220.247.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:37:05.931849 0.075964 udp 10.0.2.22 51868 <-> 79.113.187.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:06.930881 0.185119 udp 10.0.2.22 51868 <-> 69.207.13.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:07.932360 2.140767 udp 10.0.2.22 51868 <-> 216.145.87.238 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:08.933928 0.329019 udp 10.0.2.22 51868 <-> 58.230.46.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:10.926736 0.145920 udp 10.0.2.22 51868 <-> 67.149.214.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:11.928206 0.103176 udp 10.0.2.22 51868 <-> 82.225.28.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:12.929659 0.054531 udp 10.0.2.22 51868 <-> 79.136.122.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:13.931302 0.144695 udp 10.0.2.22 51868 <-> 67.248.70.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:14.932425 0.051426 udp 10.0.2.22 51868 <-> 78.60.105.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:15.934065 0.055058 udp 10.0.2.22 51868 <-> 93.155.184.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:16.926397 0.000000 udp 10.0.2.22 51868 -> 46.248.74.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:37:17.926782 0.065928 udp 10.0.2.22 51868 <-> 86.126.97.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:18.928401 0.195104 udp 10.0.2.22 51868 <-> 186.115.125.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:19.933303 0.158224 udp 10.0.2.22 51868 <-> 72.152.208.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:20.933562 0.162565 udp 10.0.2.22 51868 <-> 68.102.200.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:21.933013 0.166658 udp 10.0.2.22 51868 <-> 184.162.187.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:22.933999 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:37:23.805323 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:37:23.925790 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:37:24.926760 0.169523 udp 10.0.2.22 51868 <-> 66.190.71.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:25.928575 0.158428 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:26.936844 0.356180 udp 10.0.2.22 51868 <-> 2.181.87.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:27.935934 0.304896 udp 10.0.2.22 51868 <-> 186.88.42.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:28.935154 0.222914 udp 10.0.2.22 51868 <-> 71.199.58.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:29.935818 0.122224 udp 10.0.2.22 51868 <-> 90.130.133.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:30.925780 0.154961 udp 10.0.2.22 51868 <-> 98.27.18.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:31.926932 0.000000 udp 10.0.2.22 51868 -> 92.241.134.180 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:37:32.928294 0.047235 udp 10.0.2.22 51868 <-> 212.83.78.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:33.929941 0.194506 udp 10.0.2.22 51868 <-> 24.201.226.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:34.931764 0.041502 udp 10.0.2.22 51868 <-> 83.83.164.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:35.935636 0.324255 udp 10.0.2.22 51868 <-> 189.42.55.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:36.935963 0.205440 udp 10.0.2.22 51868 <-> 108.185.4.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:37.925876 0.000097 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:37:37.925973 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:37:38.927036 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:37:39.928549 0.356054 udp 10.0.2.22 51868 <-> 70.25.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:40.259248 0.021388 udp 10.0.2.22 60068 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 10:37:40.280951 0.000000 udp 10.0.2.22 60069 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:37:40.929883 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:37:41.931183 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:37:42.932595 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:37:44.925822 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:37:45.927290 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:37:46.928402 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:37:47.930490 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:37:48.931493 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:37:49.932538 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:37:50.804094 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:37:50.924163 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:37:51.925763 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:37:52.927240 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:37:53.928716 0.000054 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:37:53.928770 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:37:54.930180 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:37:55.931924 0.000000 udp 10.0.2.22 51868 -> 70.25.138.13 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:37:56.933119 0.000000 udp 10.0.2.22 51868 -> 117.201.73.117 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:37:57.924541 0.154972 udp 10.0.2.22 51868 <-> 174.100.71.86 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:58.926011 0.231773 udp 10.0.2.22 51868 <-> 186.92.139.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:37:59.927203 0.075805 udp 10.0.2.22 51868 <-> 93.176.193.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:00.928702 0.072893 udp 10.0.2.22 51868 <-> 91.133.48.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:01.930540 0.167200 udp 10.0.2.22 51868 <-> 69.207.82.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:02.931531 0.291914 udp 10.0.2.22 51868 <-> 60.47.222.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:03.933039 0.000000 udp 10.0.2.22 51868 -> 69.118.76.32 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:38:04.924220 0.079813 udp 10.0.2.22 51868 <-> 83.251.35.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:05.930457 0.000000 udp 10.0.2.22 51868 -> 50.134.240.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:38:06.931920 0.173410 udp 10.0.2.22 51868 <-> 66.131.206.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:07.932140 0.170178 udp 10.0.2.22 51868 <-> 66.169.204.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:08.932342 0.000000 udp 10.0.2.22 51868 -> 89.231.196.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:38:09.932418 0.168153 udp 10.0.2.22 51868 <-> 142.165.248.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:10.932744 0.156081 udp 10.0.2.22 51868 <-> 178.122.80.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:11.924367 0.045177 udp 10.0.2.22 51868 <-> 178.150.200.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:12.926194 0.052769 udp 10.0.2.22 51868 <-> 213.190.57.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:13.927789 0.168343 udp 10.0.2.22 51868 <-> 66.131.206.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:14.928691 0.000000 udp 10.0.2.22 51868 -> 110.147.139.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:38:15.930236 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:38:16.932429 0.150927 udp 10.0.2.22 51868 <-> 98.27.18.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:17.802660 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:38:17.933471 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:38:18.924485 0.000000 udp 10.0.2.22 51868 -> 117.199.90.31 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:38:19.926049 0.447125 udp 10.0.2.22 51868 <-> 76.105.92.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:20.927579 0.000000 udp 10.0.2.22 51868 -> 190.198.147.65 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:38:21.928694 0.000000 udp 10.0.2.22 51868 -> 2.176.129.131 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:38:22.930241 0.075258 udp 10.0.2.22 51868 <-> 2.27.40.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:23.931707 0.339800 udp 10.0.2.22 51868 <-> 182.225.0.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:24.935906 0.000000 udp 10.0.2.22 51868 -> 123.237.129.66 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:38:25.926189 0.080205 udp 10.0.2.22 51868 <-> 87.120.215.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:26.925988 0.000000 udp 10.0.2.22 51868 -> 186.222.191.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:38:27.935998 0.159105 udp 10.0.2.22 51868 <-> 76.16.25.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:28.936837 0.156100 udp 10.0.2.22 51868 <-> 50.171.133.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:29.933704 0.222171 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:30.934174 0.216877 udp 10.0.2.22 51868 <-> 50.131.239.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:31.941109 1.217655 udp 10.0.2.22 51868 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:32.933962 0.000000 udp 10.0.2.22 51868 -> 91.187.95.9 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:38:33.932546 1.582754 udp 10.0.2.22 51868 <-> 190.198.137.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:34.934997 0.000000 udp 10.0.2.22 51868 -> 189.13.22.86 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:38:35.932939 0.363558 udp 10.0.2.22 51868 <-> 186.52.130.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:36.930364 1.186846 udp 10.0.2.22 51868 <-> 79.36.252.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:37.931654 0.215882 udp 10.0.2.22 51868 <-> 50.131.239.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:38.933460 0.039208 udp 10.0.2.22 51868 <-> 46.10.187.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:39.930595 0.059310 udp 10.0.2.22 51868 <-> 91.187.95.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:40.936685 0.141235 udp 10.0.2.22 51868 <-> 24.215.93.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:41.940155 0.084402 udp 10.0.2.22 51868 <-> 90.157.209.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:42.939556 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:38:43.936521 0.087682 udp 10.0.2.22 51868 <-> 79.16.200.224 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:44.803719 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:38:44.933650 0.140991 udp 10.0.2.22 51868 <-> 71.15.226.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:45.934074 0.061922 udp 10.0.2.22 51868 <-> 91.65.196.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:46.924663 0.000000 udp 10.0.2.22 51868 -> 217.217.179.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:38:47.926042 0.000000 udp 10.0.2.22 51868 -> 60.231.84.237 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:38:48.927902 0.000000 udp 10.0.2.22 51868 -> 74.38.219.237 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:38:49.936235 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:38:50.933251 0.142329 udp 10.0.2.22 51868 <-> 71.15.226.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:51.934151 1.054562 udp 10.0.2.22 51868 <-> 194.94.79.240 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:53.930245 0.065438 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:54.934987 0.221912 udp 10.0.2.22 51868 <-> 66.130.126.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:55.934818 0.280836 udp 10.0.2.22 51868 <-> 190.79.140.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:56.931986 0.326302 udp 10.0.2.22 51868 <-> 180.147.116.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:57.930552 0.055052 udp 10.0.2.22 51868 <-> 95.43.88.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:38:58.931944 0.000000 udp 10.0.2.22 51868 -> 1.36.118.97 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:38:59.935509 0.135344 udp 10.0.2.22 51868 <-> 68.39.158.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:00.928426 0.240696 udp 10.0.2.22 51868 <-> 190.207.8.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:01.928359 0.139243 udp 10.0.2.22 51868 <-> 65.96.235.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:02.928324 0.055102 udp 10.0.2.22 51868 <-> 84.232.34.52 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:03.932304 1.248064 udp 10.0.2.22 51868 <-> 50.29.153.241 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:04.932091 0.315109 udp 10.0.2.22 51868 <-> 200.84.227.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:05.931862 0.376331 udp 10.0.2.22 51868 <-> 189.37.0.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:06.933312 0.182636 udp 10.0.2.22 51868 <-> 68.56.21.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:07.925055 0.171825 udp 10.0.2.22 51868 <-> 184.59.192.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:08.926272 0.116412 udp 10.0.2.22 51868 <-> 24.122.208.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:09.927896 0.214303 udp 10.0.2.22 51868 <-> 50.131.239.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:10.929098 1.041465 udp 10.0.2.22 51868 <-> 187.25.181.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:11.800603 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:39:11.930843 0.061870 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:12.932173 0.123762 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:13.933010 1.275264 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:15.926382 0.383436 udp 10.0.2.22 51868 <-> 118.161.150.93 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:16.927850 0.000000 udp 10.0.2.22 51868 -> 109.72.59.29 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:39:17.929285 0.136845 udp 10.0.2.22 51868 <-> 69.118.76.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:18.930941 0.155173 udp 10.0.2.22 51868 <-> 50.171.133.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:19.932473 0.000000 udp 10.0.2.22 51868 -> 72.47.76.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:39:20.933557 0.173581 udp 10.0.2.22 51868 <-> 173.198.147.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:21.926597 0.378199 udp 10.0.2.22 51868 <-> 106.1.58.161 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:22.926612 0.141528 udp 10.0.2.22 51868 <-> 157.252.96.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:23.928321 0.044244 udp 10.0.2.22 51868 <-> 62.129.168.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:24.929671 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:39:25.930718 0.050674 udp 10.0.2.22 51868 <-> 82.212.10.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:26.932360 0.000000 udp 10.0.2.22 51868 -> 134.3.82.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:39:27.933581 0.000000 udp 10.0.2.22 51868 -> 84.54.171.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:39:28.925028 0.072514 udp 10.0.2.22 51868 <-> 81.203.204.14 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:29.926775 0.000000 udp 10.0.2.22 51868 -> 75.246.254.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:39:30.927975 0.213994 udp 10.0.2.22 51868 <-> 201.167.91.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:31.929745 0.040182 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:32.930845 0.301935 udp 10.0.2.22 51868 <-> 186.68.6.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:33.932375 2.149313 udp 10.0.2.22 51868 <-> 65.30.26.10 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:34.933984 0.162765 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:36.926744 0.158729 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:37.927969 0.000000 udp 10.0.2.22 51868 -> 5.34.141.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:39:38.799175 0.000107 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:39:38.929424 0.334492 udp 10.0.2.22 51868 <-> 211.62.215.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:39.931120 0.000000 udp 10.0.2.22 51868 -> 187.244.94.25 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:39:40.932377 3.995695 udp 10.0.2.22 51868 <-> 190.128.117.25 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:41.934098 0.000000 udp 10.0.2.22 51868 -> 84.222.203.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:39:42.925492 4.537527 udp 10.0.2.22 51868 <-> 151.65.8.187 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:43.926832 0.039269 udp 10.0.2.22 51868 <-> 89.215.31.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:45.929786 0.258133 udp 10.0.2.22 51868 <-> 98.127.49.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:47.932472 0.533935 udp 10.0.2.22 51868 <-> 203.111.214.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:48.934091 0.000000 udp 10.0.2.22 51868 -> 187.83.142.137 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:39:49.925465 0.285740 udp 10.0.2.22 51868 <-> 190.78.39.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:50.926705 0.158916 udp 10.0.2.22 51868 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:51.928269 0.042323 udp 10.0.2.22 51868 <-> 78.90.253.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:52.929927 0.064591 udp 10.0.2.22 51868 <-> 89.235.244.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:53.931107 0.404029 udp 10.0.2.22 51868 <-> 151.51.17.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:54.932553 0.000000 udp 10.0.2.22 51868 -> 216.77.85.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:39:55.934166 0.078022 udp 10.0.2.22 51868 <-> 62.42.133.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:56.925697 2.496917 udp 10.0.2.22 51868 <-> 187.37.207.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:57.685079 0.000000 udp 10.0.2.22 51868 <- 187.83.142.137 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:39:57.926986 0.083010 udp 10.0.2.22 51868 <-> 90.230.7.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:58.928210 0.145871 udp 10.0.2.22 51868 <-> 184.59.92.198 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:39:59.930085 0.318269 udp 10.0.2.22 51868 <-> 187.66.42.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:00.930871 0.540696 udp 10.0.2.22 51868 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:01.932850 0.000000 udp 10.0.2.22 51868 -> 190.38.37.48 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:40:02.934104 0.042403 udp 10.0.2.22 51868 <-> 131.246.84.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:03.925954 0.088883 udp 10.0.2.22 51868 -> 82.199.49.155 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:40:04.014837 0.000000 icmp 82.199.49.155 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 10:40:04.927035 0.147810 udp 10.0.2.22 51868 <-> 184.57.62.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:05.807845 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:40:05.928261 0.067678 udp 10.0.2.22 51868 <-> 62.20.193.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:06.929967 0.343009 udp 10.0.2.22 51868 <-> 218.173.72.220 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:07.931710 0.000000 udp 10.0.2.22 51868 -> 113.193.195.190 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:40:08.932917 0.135035 udp 10.0.2.22 51868 <-> 24.222.149.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:09.924114 0.319811 udp 10.0.2.22 51868 <-> 58.3.144.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:10.925640 0.212203 udp 10.0.2.22 51868 <-> 49.249.140.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:11.927016 0.072979 udp 10.0.2.22 51868 <-> 79.115.191.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:12.928515 0.050271 udp 10.0.2.22 51868 <-> 78.28.15.56 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:13.929968 0.161866 udp 10.0.2.22 51868 <-> 69.125.160.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:14.931266 0.857785 udp 10.0.2.22 51868 <-> 105.227.44.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:15.932786 0.416007 udp 10.0.2.22 51868 <-> 190.206.172.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:16.924126 0.131630 udp 10.0.2.22 51868 <-> 72.209.205.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:17.925076 0.358824 udp 10.0.2.22 51868 <-> 114.200.143.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:18.927016 0.000138 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:40:18.927154 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:40:19.928249 0.211586 udp 10.0.2.22 51868 <-> 190.205.228.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:20.930150 0.086195 udp 10.0.2.22 51868 <-> 78.25.114.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:21.931708 0.048549 udp 10.0.2.22 51868 <-> 217.24.71.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:22.932935 0.234511 udp 10.0.2.22 51868 <-> 14.96.166.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:23.926849 0.185402 udp 10.0.2.22 51868 <-> 69.1.2.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:24.926524 0.323061 udp 10.0.2.22 51868 <-> 181.72.237.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:25.927188 0.301975 udp 10.0.2.22 51868 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:26.928570 0.160412 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:27.929969 0.265327 udp 10.0.2.22 51868 <-> 190.203.117.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:28.933896 0.196788 udp 10.0.2.22 51868 <-> 190.141.46.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:29.933857 4.996062 udp 10.0.2.22 51868 <-> 94.21.162.26 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:30.925027 0.211863 udp 10.0.2.22 51868 <-> 181.53.75.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:31.926249 0.000000 udp 10.0.2.22 51868 -> 190.198.144.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:40:32.806788 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:40:32.927167 0.000000 udp 10.0.2.22 51868 -> 66.79.231.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:40:33.928607 0.074500 udp 10.0.2.22 51868 <-> 46.162.107.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:35.931402 0.344485 udp 10.0.2.22 51868 <-> 36.232.204.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:36.933048 1.852056 udp 10.0.2.22 51868 <-> 190.16.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:37.924273 0.222411 udp 10.0.2.22 51868 <-> 98.202.16.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:38.925792 0.289342 udp 10.0.2.22 51868 <-> 190.198.144.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:39.927299 0.293981 udp 10.0.2.22 51868 <-> 79.22.124.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:40.928633 4.997538 udp 10.0.2.22 51868 <-> 173.176.169.88 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:41.930109 0.000000 udp 10.0.2.22 51868 -> 201.1.189.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:40:42.931566 0.454647 udp 10.0.2.22 51868 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:43.932843 1.762633 udp 10.0.2.22 51868 <-> 190.16.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:44.924465 0.156176 udp 10.0.2.22 51868 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:46.065711 0.999862 udp 10.0.2.22 51868 <-> 173.176.169.88 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:47.928789 0.171891 udp 10.0.2.22 51868 <-> 174.59.176.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:48.929939 0.331229 udp 10.0.2.22 51868 <-> 5.236.230.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:49.932398 0.000000 udp 10.0.2.22 51868 -> 62.12.73.180 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:40:50.933460 0.000000 udp 10.0.2.22 51868 -> 204.14.77.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:40:51.924618 0.340955 udp 10.0.2.22 51868 <-> 61.224.47.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:52.926195 3.003878 udp 10.0.2.22 51868 -> 72.209.205.98 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:40:53.927612 0.157109 udp 10.0.2.22 51868 <-> 174.69.148.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:54.928838 2.050115 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:57.933284 0.357276 udp 10.0.2.22 51868 <-> 114.200.143.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:40:58.924830 0.000000 udp 10.0.2.22 51868 -> 194.94.79.240 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:40:59.805664 0.000106 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:40:59.925773 0.226963 udp 10.0.2.22 51868 <-> 78.25.114.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:41:00.927213 0.024823 udp 10.0.2.22 51868 <-> 158.58.226.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:41:01.928781 0.000000 udp 10.0.2.22 51868 -> 178.148.82.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:02.930065 1.054058 udp 10.0.2.22 51868 <-> 85.232.150.7 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:41:04.933038 1.045752 udp 10.0.2.22 51868 <-> 92.233.16.132 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:41:06.247675 3.001679 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 10:41:06.925974 0.148078 udp 10.0.2.22 51868 <-> 98.239.205.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:41:07.927377 0.000000 udp 10.0.2.22 51868 -> 88.6.72.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:08.929337 0.135183 udp 10.0.2.22 51868 <-> 178.127.14.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:41:09.930359 0.000088 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:09.930447 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:41:10.931826 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:11.933659 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:12.924702 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:13.255115 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:41:13.926060 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:14.927794 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:15.928829 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:16.930682 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:17.932093 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:18.933157 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:19.925003 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:20.926128 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:21.256881 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:41:21.927783 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:22.928923 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:23.930579 0.297572 udp 10.0.2.22 51868 <-> 75.246.254.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:41:24.931840 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:25.933243 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:26.804525 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:41:26.924874 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:27.926306 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:28.927719 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:29.929048 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:31.931971 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:32.933564 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:33.925118 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:34.926206 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:35.927813 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:36.929763 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:37.260302 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:41:37.930516 0.000055 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:37.930571 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:41:38.932185 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:39.934028 0.318327 udp 10.0.2.22 51868 <-> 75.246.254.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:41:40.924847 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:41.926163 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:42.927965 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:43.929401 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:44.930876 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:45.932061 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:46.932982 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:47.924956 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:48.926459 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:49.928015 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:51.930666 0.000046 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:51.930712 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:41:52.931906 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:53.803219 0.000112 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:41:53.933611 2.994454 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:54.925115 4.005747 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:55.926511 0.132899 udp 10.0.2.22 51868 <-> 88.207.58.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:41:57.929212 0.000065 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:41:57.929277 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:41:59.932932 0.044622 udp 10.0.2.22 51868 <-> 93.183.191.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:42:00.934477 0.052121 udp 10.0.2.22 51868 <-> 78.159.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:42:01.925194 0.000000 udp 10.0.2.22 51868 -> 88.6.72.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:02.926701 0.179609 udp 10.0.2.22 51868 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:42:03.928157 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:04.929748 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:05.931187 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:06.932129 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:07.934112 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:08.924951 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:09.265695 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:42:09.926647 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:10.927993 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:11.930523 0.000097 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:11.930620 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:42:12.930795 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:13.932463 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:15.925619 0.000000 udp 10.0.2.22 51868 -> 188.26.181.235 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:16.926772 0.043556 udp 10.0.2.22 51868 <-> 93.183.191.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:42:17.928038 0.358993 udp 10.0.2.22 51868 <-> 181.72.237.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:42:18.929461 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:19.930958 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:20.802242 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:42:20.932593 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:21.934020 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:23.927020 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:24.928142 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:25.929758 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:26.931238 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:27.932645 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:28.934016 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:29.925653 0.000073 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:29.925726 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:42:30.926952 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:31.928122 0.043220 udp 10.0.2.22 51868 <-> 93.183.191.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:42:32.929694 0.132658 udp 10.0.2.22 51868 <-> 178.254.205.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:42:33.931217 0.000000 udp 10.0.2.22 51868 -> 88.6.72.16 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:34.932801 0.225285 udp 10.0.2.22 51868 <-> 98.202.16.243 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:42:35.934007 0.000000 udp 10.0.2.22 51868 -> 24.29.222.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:36.925089 0.062455 udp 10.0.2.22 51868 <-> 188.26.181.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:42:37.927043 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:38.928246 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:39.929764 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:40.931089 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:41.932631 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:42.924861 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:43.925909 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:44.930529 0.002490 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:44.933019 0.000000 icmp 195.113.235.65 0x0003 -> 10.0.2.22 0x9efe URN 192 1 110 flow=Background 1970/01/01 10:42:45.935566 0.000096 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:45.935662 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:42:46.932233 0.055330 udp 10.0.2.22 51868 <-> 78.159.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:42:47.800965 0.000143 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:42:47.931447 0.220304 udp 10.0.2.22 51868 <-> 98.202.16.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:42:48.935292 0.000000 udp 10.0.2.22 51868 -> 188.26.181.235 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:49.925934 0.042254 udp 10.0.2.22 51868 <-> 5.20.145.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:42:50.926066 0.038396 udp 10.0.2.22 51868 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:42:51.926583 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:52.928315 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:53.935611 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:54.935884 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:55.939797 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:56.927865 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:57.925638 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:58.927012 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:42:59.931959 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:43:00.931061 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:43:02.932712 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:43:03.924288 0.000092 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:43:03.924380 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:43:04.925810 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:43:05.926906 0.000000 udp 10.0.2.22 51868 -> 24.29.222.1 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:43:06.928625 0.042865 udp 10.0.2.22 51868 <-> 5.20.145.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:07.930176 0.195163 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:08.931602 0.058533 udp 10.0.2.22 51868 <-> 188.2.254.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:09.932809 2.038158 udp 10.0.2.22 51868 <-> 178.254.205.12 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:10.924269 0.051793 udp 10.0.2.22 51868 <-> 78.159.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:12.927072 0.043476 udp 10.0.2.22 51868 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:13.928599 0.148841 udp 10.0.2.22 51868 <-> 5.43.104.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:14.799683 0.000126 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:43:14.930172 0.000000 udp 10.0.2.22 51868 -> 186.86.169.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:43:15.931390 4.997240 udp 10.0.2.22 51868 -> 5.43.79.128 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:43:16.936869 4.201843 udp 10.0.2.22 51868 <-> 66.53.218.90 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:17.926536 0.334688 udp 10.0.2.22 51868 <-> 201.208.173.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:18.926521 0.149676 udp 10.0.2.22 51868 <-> 174.97.209.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:19.927175 0.159262 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:21.930053 0.313111 udp 10.0.2.22 51868 <-> 181.226.107.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:22.931831 0.124468 udp 10.0.2.22 51868 <-> 77.40.100.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:23.933215 0.152734 udp 10.0.2.22 51868 <-> 174.108.102.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:24.925990 0.323661 udp 10.0.2.22 51868 <-> 190.173.30.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:25.929885 0.000000 udp 10.0.2.22 51868 -> 24.178.45.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:43:26.930301 0.124059 udp 10.0.2.22 51868 <-> 88.207.58.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:27.930316 2.156676 udp 10.0.2.22 51868 <-> 98.217.103.252 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:28.930361 0.144718 udp 10.0.2.22 51868 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:30.934644 0.058787 udp 10.0.2.22 51868 <-> 5.13.57.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:31.924797 0.046557 udp 10.0.2.22 51868 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:32.925959 0.268313 udp 10.0.2.22 51868 <-> 84.1.20.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:33.927370 0.044216 udp 10.0.2.22 51868 <-> 95.108.60.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:34.929156 0.065463 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:35.930204 0.043580 udp 10.0.2.22 51868 <-> 77.76.177.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:36.931709 0.054762 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:37.932741 0.167788 udp 10.0.2.22 51868 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:38.925135 0.049831 udp 10.0.2.22 51868 <-> 79.113.236.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:39.925968 0.000000 udp 10.0.2.22 51868 -> 76.24.62.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:43:40.927333 0.058202 udp 10.0.2.22 51868 <-> 5.13.57.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:41.798621 0.000039 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:43:41.929071 0.165591 udp 10.0.2.22 51868 <-> 76.187.223.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:42.930296 0.049055 udp 10.0.2.22 51868 <-> 80.98.243.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:43.931750 0.199835 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:44.933463 0.057261 udp 10.0.2.22 51868 <-> 31.19.152.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:45.924626 0.000000 udp 10.0.2.22 51868 -> 107.10.164.51 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:43:46.926025 0.374113 udp 10.0.2.22 51868 <-> 190.198.162.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:47.927715 0.000000 udp 10.0.2.22 51868 -> 85.50.243.51 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:43:48.928764 4.400472 udp 10.0.2.22 51868 <-> 187.69.96.60 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:49.932921 0.329169 udp 10.0.2.22 51868 <-> 181.26.51.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:50.932288 0.061266 udp 10.0.2.22 51868 <-> 95.65.118.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:51.933092 0.043565 udp 10.0.2.22 51868 <-> 78.90.253.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:53.926262 0.310641 udp 10.0.2.22 51868 <-> 189.110.71.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:54.927370 1.910258 udp 10.0.2.22 51868 <-> 177.80.15.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:55.929031 0.000000 udp 10.0.2.22 51868 -> 111.250.115.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:43:56.930477 0.047991 udp 10.0.2.22 51868 <-> 77.23.138.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:43:57.932236 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:43:58.933169 0.000000 udp 10.0.2.22 51868 -> 2.187.192.235 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:43:59.924792 1.166623 udp 10.0.2.22 51868 <-> 97.79.31.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:01.927664 0.307867 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:02.929633 0.267844 udp 10.0.2.22 51868 <-> 79.22.124.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:03.930531 0.175396 udp 10.0.2.22 51868 <-> 69.193.106.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:04.931892 2.466256 udp 10.0.2.22 51868 <-> 187.109.249.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:05.935772 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:44:06.925849 0.012288 udp 10.0.2.22 51868 <-> 178.21.51.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:07.926790 0.300798 udp 10.0.2.22 51868 <-> 183.83.97.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:08.809948 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:44:08.930120 0.000000 udp 10.0.2.22 51868 -> 79.16.230.150 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:44:09.930287 2.488326 udp 10.0.2.22 51868 <-> 99.234.108.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:10.931848 0.264988 udp 10.0.2.22 51868 <-> 190.193.82.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:11.931821 0.000000 udp 10.0.2.22 51868 -> 99.225.207.89 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:44:12.934147 0.040160 udp 10.0.2.22 51868 <-> 89.215.145.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:13.924855 3.155308 udp 10.0.2.22 51868 <-> 69.125.160.55 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:14.926273 0.132213 udp 10.0.2.22 51868 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:15.927877 0.000000 udp 10.0.2.22 51868 -> 192.168.1.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:44:17.930929 0.164591 udp 10.0.2.22 51868 <-> 24.193.20.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:18.932009 0.015609 udp 10.0.2.22 51868 <-> 164.8.204.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:19.933668 0.166874 udp 10.0.2.22 51868 <-> 174.108.49.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:20.924852 0.000000 udp 10.0.2.22 51868 -> 99.242.202.173 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:44:21.926279 0.054095 udp 10.0.2.22 51868 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:22.927607 1.425941 udp 10.0.2.22 51868 <-> 178.25.74.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:23.929281 0.164380 udp 10.0.2.22 51868 <-> 75.67.160.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:24.930992 0.000000 udp 10.0.2.22 51868 -> 78.251.171.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:44:25.932143 0.478676 udp 10.0.2.22 51868 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:26.933630 0.000000 udp 10.0.2.22 51868 -> 24.37.68.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:44:27.925166 0.000000 udp 10.0.2.22 51868 -> 188.47.233.218 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:44:28.926365 0.221773 udp 10.0.2.22 51868 <-> 71.84.132.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:29.927941 0.164199 udp 10.0.2.22 51868 <-> 76.187.223.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:30.929662 0.233884 udp 10.0.2.22 51868 <-> 74.132.159.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:31.931001 1.059530 udp 10.0.2.22 51868 <-> 5.13.57.253 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:33.933383 0.000000 udp 10.0.2.22 51868 -> 95.221.4.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:44:34.925057 3.176246 udp 10.0.2.22 51868 <-> 71.45.42.26 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:35.806265 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:44:35.926654 0.000000 udp 10.0.2.22 51868 -> 162.39.217.25 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:44:36.928500 0.388941 udp 10.0.2.22 51868 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:38.930923 0.343598 udp 10.0.2.22 51868 <-> 200.239.150.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:39.932442 0.000000 udp 10.0.2.22 51868 -> 188.26.217.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:44:40.934112 0.133464 udp 10.0.2.22 51868 <-> 68.169.187.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:41.925278 0.159543 udp 10.0.2.22 51868 <-> 23.28.66.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:42.926719 0.155239 udp 10.0.2.22 51868 <-> 174.100.71.86 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:43.928124 1.061341 udp 10.0.2.22 51868 <-> 89.46.84.98 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:45.930780 0.925403 udp 10.0.2.22 51868 <-> 98.94.57.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:46.932465 0.070618 udp 10.0.2.22 51868 <-> 80.183.28.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:47.933968 0.132586 udp 10.0.2.22 51868 <-> 68.82.41.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:48.926540 0.201286 udp 10.0.2.22 51868 <-> 74.211.92.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:49.932633 2.283023 udp 10.0.2.22 51868 <-> 70.80.21.145 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:50.933720 0.173426 udp 10.0.2.22 51868 <-> 70.82.157.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:52.931788 0.299159 udp 10.0.2.22 51868 <-> 201.68.242.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:53.932605 0.045210 udp 10.0.2.22 51868 <-> 178.254.205.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:54.936736 0.164103 udp 10.0.2.22 51868 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:55.926944 0.000000 udp 10.0.2.22 51868 -> 78.119.55.44 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:44:56.928111 0.061457 udp 10.0.2.22 51868 <-> 95.42.254.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:44:57.928379 0.000000 udp 10.0.2.22 51868 -> 98.95.254.63 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:44:58.936662 0.000000 udp 10.0.2.22 51868 -> 71.39.46.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:44:59.936303 0.000000 udp 10.0.2.22 51868 -> 79.115.87.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:00.935299 0.168480 udp 10.0.2.22 51868 <-> 24.178.45.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:45:01.936232 0.163190 udp 10.0.2.22 51868 <-> 24.193.20.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:45:02.806644 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:45:02.926777 0.000000 udp 10.0.2.22 51868 -> 188.214.34.53 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:03.926920 0.154462 udp 10.0.2.22 51868 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:45:04.928182 0.145810 udp 10.0.2.22 51868 <-> 108.202.146.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:45:05.929872 2.126979 udp 10.0.2.22 51868 <-> 89.151.151.1 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:45:06.931433 1.402579 udp 10.0.2.22 51868 <-> 85.64.72.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:45:08.938168 1.155657 udp 10.0.2.22 51868 <-> 174.54.248.12 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:45:10.928766 2.161579 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:45:11.931852 0.066545 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:45:13.937750 0.000000 udp 10.0.2.22 51868 -> 46.177.198.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:14.935713 0.000000 udp 10.0.2.22 51868 -> 50.141.160.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:15.924322 0.151212 udp 10.0.2.22 51868 <-> 98.239.205.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:45:16.928209 0.000000 udp 10.0.2.22 51868 -> 24.137.128.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:17.932173 0.638979 udp 10.0.2.22 51868 <-> 79.47.59.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:45:18.932355 0.178135 udp 10.0.2.22 51868 <-> 216.121.246.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:45:19.932984 0.120770 udp 10.0.2.22 51868 <-> 46.50.27.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:45:20.931879 0.368942 udp 10.0.2.22 51868 <-> 107.223.54.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:45:21.932733 0.259674 udp 10.0.2.22 51868 <-> 177.227.173.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:45:22.924467 0.469519 udp 10.0.2.22 51868 <-> 186.36.244.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:45:23.925789 0.000000 udp 10.0.2.22 51868 -> 83.29.32.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:24.935115 0.000000 udp 10.0.2.22 51868 -> 151.241.214.220 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:25.932914 0.315344 udp 10.0.2.22 51868 <-> 117.194.236.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:45:26.929890 0.180638 udp 10.0.2.22 51868 -> 70.129.185.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:27.110528 0.000000 icmp 70.129.185.247 0x0303 -> 10.0.2.22 0x5040 URP 192 1 70 flow=Background 1970/01/01 10:45:27.931759 0.142515 udp 10.0.2.22 51868 <-> 66.117.244.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:45:28.932893 0.138420 udp 10.0.2.22 51868 <-> 68.192.174.223 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:45:29.803855 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:45:29.924262 0.000000 udp 10.0.2.22 51868 -> 67.201.190.185 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:30.926025 0.568619 udp 10.0.2.22 51868 <-> 190.79.195.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:45:31.926996 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:32.930703 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:33.930282 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:34.931763 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:35.932687 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:36.924148 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:37.925199 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:38.927090 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:39.928570 0.180167 udp 10.0.2.22 51868 <-> 65.93.127.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:45:40.929927 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:41.931590 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:42.932830 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:43.924277 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:44.936226 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:45.937500 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:46.935861 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:47.933796 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:48.931554 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:49.933082 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:50.926112 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:52.927286 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:53.928514 0.000044 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:53.928558 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:45:54.930040 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:55.931179 0.340637 udp 10.0.2.22 51868 <-> 114.38.174.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:45:56.933125 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:57.804139 0.000110 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:45:57.924313 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:58.926192 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:45:59.927066 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:46:00.928840 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:46:01.930173 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:46:02.931642 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:46:03.932980 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:46:04.924740 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:46:05.925829 0.129827 udp 10.0.2.22 51868 <-> 89.250.204.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:06.927160 0.082606 udp 10.0.2.22 51868 <-> 78.8.187.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:07.928767 0.365007 udp 10.0.2.22 51868 <-> 220.246.178.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:08.930092 0.355884 udp 10.0.2.22 51868 <-> 186.92.249.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:09.931931 0.103687 udp 10.0.2.22 51868 <-> 94.240.175.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:10.952916 0.298656 udp 10.0.2.22 51868 <-> 190.75.98.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:11.941256 0.161744 udp 10.0.2.22 51868 <-> 71.61.137.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:12.939384 0.363611 udp 10.0.2.22 51868 <-> 220.246.178.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:13.937179 0.165328 udp 10.0.2.22 51868 <-> 76.187.223.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:14.933827 0.231629 udp 10.0.2.22 51868 <-> 85.84.129.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:15.931562 0.000099 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:46:15.931661 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:46:17.933561 0.267511 udp 10.0.2.22 51868 <-> 117.204.241.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:18.924813 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:46:19.926479 0.157335 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:20.927762 0.055689 udp 10.0.2.22 51868 <-> 89.208.181.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:21.928972 3.298030 udp 10.0.2.22 51868 <-> 190.37.3.93 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:22.930298 4.997103 udp 10.0.2.22 51868 <-> 110.233.68.105 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:23.931923 0.143612 udp 10.0.2.22 51868 <-> 66.168.86.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:24.802998 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:46:25.924629 0.090257 udp 10.0.2.22 51868 <-> 85.194.157.198 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:26.926086 1.480504 udp 10.0.2.22 51868 <-> 61.27.135.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:28.230696 0.000000 udp 10.0.2.22 51868 <- 110.233.68.105 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:46:28.928747 0.000000 udp 10.0.2.22 51868 -> 187.10.24.232 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:46:29.930236 0.341122 udp 10.0.2.22 51868 <-> 114.38.174.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:30.931932 0.517982 udp 10.0.2.22 51868 <-> 77.239.79.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:31.933154 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:46:32.924498 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:46:33.926172 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:46:34.927980 3.003844 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:46:35.929058 0.173774 udp 10.0.2.22 51868 <-> 124.123.124.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:36.930501 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:46:38.933232 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:46:39.924757 0.280228 udp 10.0.2.22 51868 <-> 201.186.194.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:40.926289 0.512207 udp 10.0.2.22 51868 <-> 218.103.165.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:41.927764 0.337697 udp 10.0.2.22 51868 <-> 121.147.28.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:42.929145 0.000000 udp 10.0.2.22 51868 -> 190.173.98.66 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:46:43.930859 0.837902 udp 10.0.2.22 51868 <-> 68.207.92.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:44.932022 0.000000 udp 10.0.2.22 51868 -> 195.182.73.187 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:46:45.933625 0.135121 udp 10.0.2.22 51868 <-> 24.193.122.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:46.924869 0.156266 udp 10.0.2.22 51868 <-> 174.100.202.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:48.927964 0.000000 udp 10.0.2.22 51868 -> 178.78.186.103 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:46:49.929139 0.080413 udp 10.0.2.22 51868 <-> 78.157.75.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:50.930614 0.324887 udp 10.0.2.22 51868 <-> 121.124.80.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:51.801932 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:46:51.932121 1.081245 udp 10.0.2.22 51868 <-> 87.120.215.67 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:53.925199 0.152032 udp 10.0.2.22 51868 <-> 98.239.205.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:54.926474 0.021461 udp 10.0.2.22 51868 <-> 176.63.92.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:55.927962 0.000000 udp 10.0.2.22 51868 -> 105.229.138.31 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:46:56.930227 0.153723 udp 10.0.2.22 51868 <-> 71.61.202.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:57.930678 0.000000 udp 10.0.2.22 51868 -> 78.70.192.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:46:58.932258 0.039125 udp 10.0.2.22 51868 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:46:59.933032 0.397816 udp 10.0.2.22 51868 <-> 219.85.118.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:00.925173 0.141025 udp 10.0.2.22 51868 <-> 69.123.17.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:01.926421 0.111253 udp 10.0.2.22 51868 <-> 79.183.172.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:02.927739 0.000000 udp 10.0.2.22 51868 -> 50.240.145.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:47:03.929609 0.039952 udp 10.0.2.22 51868 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:04.930446 0.300785 udp 10.0.2.22 51868 <-> 190.198.144.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:05.932161 0.286882 udp 10.0.2.22 51868 <-> 85.224.201.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:06.933863 2.876099 udp 10.0.2.22 51868 <-> 101.63.158.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:07.925199 0.344683 udp 10.0.2.22 51868 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:08.926517 0.000000 udp 10.0.2.22 51868 -> 62.221.143.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:47:09.928200 0.141201 udp 10.0.2.22 51868 <-> 188.17.160.71 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:10.929478 0.000000 udp 10.0.2.22 51868 -> 67.22.175.78 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:47:11.930952 0.116630 udp 10.0.2.22 51868 <-> 70.184.172.70 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:12.932529 0.159626 udp 10.0.2.22 51868 <-> 63.246.56.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:13.933885 0.089521 udp 10.0.2.22 51868 <-> 188.2.248.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:14.925094 0.000000 udp 10.0.2.22 51868 -> 24.51.69.97 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:47:15.926466 0.097592 udp 10.0.2.22 51868 <-> 89.134.105.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:16.928041 0.155457 udp 10.0.2.22 51868 <-> 69.14.223.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:17.929368 0.355297 udp 10.0.2.22 51868 <-> 180.148.54.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:18.800683 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:47:18.930949 0.135070 udp 10.0.2.22 51868 <-> 76.127.177.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:19.932338 0.086678 udp 10.0.2.22 51868 <-> 82.229.226.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:20.933931 0.000000 udp 10.0.2.22 51868 -> 98.250.1.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:47:21.925610 0.000000 udp 10.0.2.22 51868 -> 95.220.247.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:47:22.926786 0.000000 udp 10.0.2.22 51868 -> 151.52.90.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:47:23.927901 0.426563 udp 10.0.2.22 51868 <-> 200.127.210.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:24.929626 0.000000 udp 10.0.2.22 51868 -> 87.57.37.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:47:25.930917 0.148100 udp 10.0.2.22 51868 <-> 173.212.89.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:26.932555 0.040884 udp 10.0.2.22 51868 <-> 213.231.166.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:27.933989 0.214845 udp 10.0.2.22 51868 <-> 109.55.196.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:28.925089 0.000000 udp 10.0.2.22 51868 -> 202.29.178.102 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:47:29.926638 0.045895 udp 10.0.2.22 51868 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:30.928113 0.266891 udp 10.0.2.22 51868 <-> 190.19.95.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:31.929481 0.077612 udp 10.0.2.22 51868 <-> 188.24.142.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:32.930824 0.051469 udp 10.0.2.22 51868 <-> 217.24.71.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:33.932400 0.155084 udp 10.0.2.22 51868 <-> 97.76.164.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:34.934148 0.324413 udp 10.0.2.22 51868 <-> 75.193.62.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:35.925305 1.303753 udp 10.0.2.22 51868 <-> 74.62.164.49 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:37.928130 0.206363 udp 10.0.2.22 51868 <-> 76.14.200.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:38.930275 0.259363 udp 10.0.2.22 51868 <-> 186.93.97.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:39.931067 0.145089 udp 10.0.2.22 51868 <-> 66.173.32.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:40.932396 0.138601 udp 10.0.2.22 51868 <-> 24.144.167.223 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:41.934166 0.069089 udp 10.0.2.22 51868 <-> 84.232.15.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:42.925404 0.000000 udp 10.0.2.22 51868 -> 177.149.100.205 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:47:43.927022 0.000000 udp 10.0.2.22 51868 -> 188.34.185.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:47:44.928260 0.150132 udp 10.0.2.22 51868 <-> 69.125.160.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:45.799988 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:47:45.930026 0.143067 udp 10.0.2.22 51868 <-> 24.89.222.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:46.930939 0.058362 udp 10.0.2.22 51868 <-> 5.13.57.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:47.932512 0.341277 udp 10.0.2.22 51868 <-> 201.33.170.198 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:48.924266 0.000000 udp 10.0.2.22 51868 -> 82.213.133.19 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:47:49.925637 0.311509 udp 10.0.2.22 51868 <-> 14.54.173.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:50.926992 2.333435 udp 10.0.2.22 51868 <-> 219.71.217.211 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:51.928507 0.200376 udp 10.0.2.22 51868 <-> 98.154.107.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:53.931316 0.140671 udp 10.0.2.22 51868 <-> 79.32.107.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:54.932815 0.145480 udp 10.0.2.22 51868 <-> 74.59.191.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:55.924618 0.000000 udp 10.0.2.22 51868 -> 5.96.89.251 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:47:56.925826 0.136952 udp 10.0.2.22 51868 <-> 71.195.64.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:57.926983 0.123688 udp 10.0.2.22 51868 <-> 37.250.214.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:58.928601 0.547318 udp 10.0.2.22 51868 <-> 74.12.235.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:47:59.930173 0.511102 udp 10.0.2.22 51868 <-> 210.119.21.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:00.931472 0.082975 udp 10.0.2.22 51868 <-> 217.23.206.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:01.932676 0.577615 udp 10.0.2.22 51868 <-> 183.72.194.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:02.924281 0.031065 udp 10.0.2.22 51868 <-> 94.155.231.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:03.925585 0.371527 udp 10.0.2.22 51868 <-> 200.93.93.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:04.926864 0.246734 udp 10.0.2.22 51868 <-> 174.1.110.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:05.963050 0.258809 udp 10.0.2.22 51868 <-> 64.250.220.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:06.957460 0.131113 udp 10.0.2.22 51868 <-> 65.182.49.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:07.951418 0.275426 udp 10.0.2.22 51868 <-> 177.182.119.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:08.944996 0.135478 udp 10.0.2.22 51868 <-> 71.195.64.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:09.931498 0.046903 udp 10.0.2.22 51868 <-> 37.8.220.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:10.927542 1.622459 udp 10.0.2.22 51868 <-> 190.208.110.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:11.927035 0.323835 udp 10.0.2.22 51868 <-> 220.80.230.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:12.808360 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:48:12.928783 0.000000 udp 10.0.2.22 51868 -> 2.92.4.6 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:48:13.271744 3.001993 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 10:48:13.929816 0.039578 udp 10.0.2.22 51868 <-> 89.215.42.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:14.931527 0.000000 udp 10.0.2.22 51868 -> 85.84.235.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:48:15.932864 1.154830 udp 10.0.2.22 51868 <-> 173.188.107.246 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:17.926204 0.058816 udp 10.0.2.22 51868 <-> 178.168.9.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:18.927213 0.060636 udp 10.0.2.22 51868 <-> 81.190.211.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:19.928772 0.000000 udp 10.0.2.22 51868 -> 190.105.68.61 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:48:20.279085 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:48:20.930318 0.348977 udp 10.0.2.22 51868 <-> 111.242.31.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:21.931911 0.000000 udp 10.0.2.22 51868 -> 98.203.24.225 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:48:22.933087 0.090495 udp 10.0.2.22 51868 <-> 77.78.219.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:23.924620 0.020558 udp 10.0.2.22 51868 <-> 109.193.105.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:24.926563 0.000000 udp 10.0.2.22 51868 -> 201.210.193.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:48:25.927220 0.495237 udp 10.0.2.22 51868 <-> 24.123.44.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:26.928763 0.297132 udp 10.0.2.22 51868 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:27.930356 0.065179 udp 10.0.2.22 51868 <-> 80.238.126.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:28.280458 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:48:28.931670 0.000000 udp 10.0.2.22 51868 -> 5.146.89.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:48:29.932742 0.188248 udp 10.0.2.22 51868 <-> 24.113.18.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:30.924530 0.236229 udp 10.0.2.22 51868 <-> 200.37.182.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:31.926404 0.398132 udp 10.0.2.22 51868 <-> 113.193.195.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:32.927332 0.000000 udp 10.0.2.22 51868 -> 89.74.117.134 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:48:33.928776 0.355681 udp 10.0.2.22 51868 <-> 111.250.219.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:34.930195 0.336818 udp 10.0.2.22 51868 <-> 114.42.212.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:35.931709 0.019686 udp 10.0.2.22 51868 <-> 161.53.202.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:36.932982 0.187480 udp 10.0.2.22 51868 <-> 204.195.53.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:37.924678 0.160081 udp 10.0.2.22 51868 <-> 184.162.214.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:38.926114 0.063399 udp 10.0.2.22 51868 <-> 5.14.225.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:39.807219 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:48:39.927611 0.329604 udp 10.0.2.22 51868 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:40.928815 0.295003 udp 10.0.2.22 51868 <-> 201.215.78.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:41.930285 0.179365 udp 10.0.2.22 51868 <-> 75.135.210.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:42.932176 0.169995 udp 10.0.2.22 51868 <-> 75.64.39.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:43.932899 0.167688 udp 10.0.2.22 51868 <-> 76.105.92.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:44.283718 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:48:44.924509 0.205353 udp 10.0.2.22 51868 <-> 74.61.169.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:45.926488 0.710662 udp 10.0.2.22 51868 <-> 181.29.6.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:46.927420 0.000000 udp 10.0.2.22 51868 -> 71.190.210.98 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:48:47.928924 0.156154 udp 10.0.2.22 51868 <-> 98.223.254.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:48.930271 0.000000 udp 10.0.2.22 51868 -> 118.160.130.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:48:49.931629 0.151191 udp 10.0.2.22 51868 <-> 66.187.121.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:50.933530 0.107044 udp 10.0.2.22 51868 <-> 46.161.110.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:51.924572 0.162329 udp 10.0.2.22 51868 <-> 98.253.7.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:52.926492 0.000000 udp 10.0.2.22 51868 -> 88.187.104.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:48:53.927785 0.209230 udp 10.0.2.22 51868 <-> 186.95.213.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:54.929129 0.334744 udp 10.0.2.22 51868 <-> 114.45.22.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:55.930691 0.112354 udp 10.0.2.22 51868 <-> 188.36.137.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:56.932029 0.000000 udp 10.0.2.22 51868 -> 201.231.197.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:48:57.933261 0.226705 udp 10.0.2.22 51868 <-> 93.184.81.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:58.924823 0.368630 udp 10.0.2.22 51868 <-> 24.191.107.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:48:59.926313 0.024988 udp 10.0.2.22 51868 <-> 158.58.226.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:00.927564 0.109642 udp 10.0.2.22 51868 <-> 62.57.140.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:01.928916 0.067554 udp 10.0.2.22 51868 <-> 79.114.51.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:02.930619 0.000000 udp 10.0.2.22 51868 -> 116.203.215.171 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:49:03.931951 0.000000 udp 10.0.2.22 51868 -> 201.210.213.118 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:49:04.933683 0.159615 udp 10.0.2.22 51868 -> 50.58.188.130 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:49:05.093298 0.000000 icmp 50.58.188.130 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 10:49:05.924545 0.140361 udp 10.0.2.22 51868 <-> 71.15.226.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:06.805980 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:49:06.926200 0.550073 udp 10.0.2.22 51868 <-> 50.29.153.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:07.927901 0.289897 udp 10.0.2.22 51868 <-> 61.1.224.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:08.929096 0.135838 udp 10.0.2.22 51868 <-> 24.3.193.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:09.930552 0.299245 udp 10.0.2.22 51868 <-> 46.224.243.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:10.932032 1.199741 udp 10.0.2.22 51868 <-> 72.172.193.78 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:12.924783 0.000000 udp 10.0.2.22 51868 -> 24.36.65.159 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:49:13.926182 0.305309 udp 10.0.2.22 51868 <-> 190.78.21.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:14.927971 1.369573 udp 10.0.2.22 51868 <-> 122.100.75.41 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:16.290037 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:49:16.930447 0.328971 udp 10.0.2.22 51868 <-> 220.96.151.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:17.932147 0.111797 udp 10.0.2.22 51868 <-> 31.47.136.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:18.933280 0.000000 udp 10.0.2.22 51868 -> 216.106.166.168 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:49:19.924792 0.000000 udp 10.0.2.22 51868 -> 79.17.109.168 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:49:20.926250 0.133901 udp 10.0.2.22 51868 <-> 68.174.186.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:21.927914 0.499392 udp 10.0.2.22 51868 <-> 186.36.244.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:22.929296 0.039267 udp 10.0.2.22 51868 <-> 217.18.251.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:23.930581 0.065631 udp 10.0.2.22 51868 <-> 77.81.224.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:24.931976 0.228017 udp 10.0.2.22 51868 <-> 80.180.187.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:25.933741 0.144179 udp 10.0.2.22 51868 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:26.925155 0.276904 udp 10.0.2.22 51868 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:27.926240 0.314494 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:28.927895 0.282295 udp 10.0.2.22 51868 <-> 190.195.85.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:29.929205 1.305387 udp 10.0.2.22 51868 <-> 79.12.46.88 16464 CON 0 0 8 5456 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:31.932170 0.048764 udp 10.0.2.22 51868 <-> 77.21.231.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:32.933595 0.037823 udp 10.0.2.22 51868 <-> 78.128.125.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:33.804609 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:49:33.925173 0.075852 udp 10.0.2.22 51868 <-> 85.152.248.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:34.926468 0.168555 udp 10.0.2.22 51868 <-> 124.123.130.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:35.928160 0.035785 udp 10.0.2.22 51868 <-> 85.218.139.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:36.929451 0.000000 udp 10.0.2.22 51868 -> 84.123.162.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:49:37.930749 0.360187 udp 10.0.2.22 51868 <-> 46.249.106.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:38.932109 0.745380 udp 10.0.2.22 51868 <-> 70.237.37.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:39.933619 1.193196 udp 10.0.2.22 51868 <-> 37.19.197.206 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:41.927107 0.073915 udp 10.0.2.22 51868 <-> 79.172.107.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:42.927978 0.155663 udp 10.0.2.22 51868 <-> 173.28.68.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:43.929376 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:49:44.931054 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:49:45.932794 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:49:46.933774 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:49:47.925358 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:49:48.926643 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:49:49.928132 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:49:50.929522 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:49:51.930776 4.997358 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:49:52.932294 4.997366 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:49:53.933746 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:49:54.925680 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:49:55.926520 0.179544 udp 10.0.2.22 51868 <-> 64.207.73.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:49:58.931033 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:49:59.933172 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:00.803695 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:50:00.933921 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:01.925776 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:02.926678 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:03.927891 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:04.929651 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:05.931058 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:06.932439 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:07.934085 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:08.925800 0.000091 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:08.925891 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:50:09.926711 3.004483 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:11.929422 0.176907 udp 10.0.2.22 51868 <-> 64.207.73.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:50:13.932673 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:14.934061 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:15.925456 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:16.926744 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:17.928422 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:18.929722 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:19.931249 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:20.932537 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:21.924153 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:22.925253 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:23.926793 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:24.928405 0.000071 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:24.928476 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:50:26.931477 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:27.802330 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:50:27.932593 0.319428 udp 10.0.2.22 51868 <-> 182.235.179.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:50:28.924222 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:29.926188 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:30.927597 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:31.928655 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:32.929836 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:33.931428 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:34.933108 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:35.924312 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:36.925861 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:37.926896 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:38.928674 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:40.931801 0.000049 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:40.931850 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:50:41.932845 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:42.924464 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:43.925837 0.000000 udp 10.0.2.22 51868 -> 182.235.179.171 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:44.927204 0.221791 udp 10.0.2.22 51868 <-> 64.207.73.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:50:45.928681 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:46.929757 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:47.931311 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:48.932832 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:49.924564 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:51.927229 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:52.928552 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:53.929922 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:54.801260 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:50:54.931550 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:55.932892 0.000072 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:55.932964 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:50:56.924320 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:57.926174 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:50:58.927449 0.320762 udp 10.0.2.22 51868 <-> 182.235.179.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:50:59.928577 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:01.931808 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:02.933014 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:03.924108 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:04.925850 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:05.927348 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:06.928715 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:07.929914 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:08.931919 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:09.932813 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:10.924376 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:11.926130 0.000069 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:11.926199 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:51:12.927701 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:13.928667 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:14.930532 0.000000 udp 10.0.2.22 51868 -> 182.235.179.171 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:15.932143 0.177068 udp 10.0.2.22 51868 <-> 64.207.73.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:51:16.933078 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:17.924503 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:18.925807 0.000127 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:18.925934 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:51:19.927514 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:21.800153 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:51:21.930326 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:22.931387 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:23.933246 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:24.924633 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:25.926210 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:26.927808 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:27.928875 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:28.930146 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:29.931734 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:30.933223 0.177030 udp 10.0.2.22 51868 <-> 64.207.73.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:51:31.925048 0.000075 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:31.925123 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:51:32.926118 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:33.927713 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:34.928807 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:35.930524 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:36.931981 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:37.933649 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:38.924489 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:39.926180 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:40.927310 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:41.929040 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:42.930695 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:43.931768 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:44.932965 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:46.926202 0.176426 udp 10.0.2.22 51868 <-> 64.207.73.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:51:47.927620 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:48.798645 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:51:48.929217 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:49.930534 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:50.931832 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:51.933721 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:52.924670 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:53.926364 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:54.927777 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:56.930697 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:57.932057 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:58.934315 0.000116 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:51:58.934431 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:51:59.924870 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:00.926459 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:01.932918 4.991926 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:02.933221 0.175816 udp 10.0.2.22 51868 <-> 64.207.73.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:52:03.933911 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:04.934383 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:05.933897 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:07.926568 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:09.929561 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:10.930732 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:11.932397 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:12.933889 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:13.925553 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:14.926562 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:15.808058 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:52:15.928108 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:16.934239 0.000063 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:16.934302 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:52:17.934618 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:18.933875 0.182644 udp 10.0.2.22 51868 <-> 64.207.73.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:52:19.934179 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:20.925355 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:21.926698 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:22.927795 0.000090 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:22.927885 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:52:23.929424 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:24.931040 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:25.932222 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:26.933847 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:27.927890 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:28.927989 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:29.927825 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:30.929653 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:32.932377 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:33.934197 3.995563 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:34.925208 0.322283 udp 10.0.2.22 51868 <-> 182.235.179.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:52:35.926718 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:36.928141 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:39.932548 0.000111 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:39.932659 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:52:40.262945 0.012251 udp 10.0.2.22 60070 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 10:52:40.275462 0.000000 udp 10.0.2.22 60071 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:40.934150 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:41.925407 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:42.806475 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:52:42.926680 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:43.928115 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:44.929685 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:45.930967 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:46.932503 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:47.933891 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:48.925826 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:49.926989 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:50.928112 0.175773 udp 10.0.2.22 51868 <-> 64.207.73.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:52:51.934157 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:52.933803 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:53.934049 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:54.924471 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:56.973420 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:57.972713 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:58.967059 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:52:59.960754 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:00.959570 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:01.945821 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:02.942321 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:03.937527 0.000060 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:03.937587 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:53:04.932660 4.993358 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:05.929896 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:06.931340 0.328832 udp 10.0.2.22 51868 <-> 182.235.179.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:53:07.932686 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:08.924013 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:09.806188 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:53:10.930519 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:11.938439 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:12.938756 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:13.939895 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:14.938641 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:15.926639 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:16.927137 0.000058 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:16.927195 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:53:17.927814 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:19.930008 0.189798 udp 10.0.2.22 51868 <-> 64.207.73.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:53:20.931491 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:21.932847 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:22.924027 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:23.925605 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:24.927097 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:25.928462 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:26.929900 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:28.932756 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:29.924421 0.000121 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:29.924542 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:53:30.925328 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:31.927170 0.176411 udp 10.0.2.22 51868 <-> 64.207.73.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:53:32.928429 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:33.930295 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:34.931303 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:36.804922 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:53:36.925086 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:37.928595 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:38.928739 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:39.928585 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:40.930267 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:41.932399 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:42.933201 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:43.924613 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:44.925952 0.000131 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:44.926083 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:53:45.927242 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:46.928922 0.177163 udp 10.0.2.22 51868 <-> 64.207.73.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:53:48.931409 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:49.932974 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:50.924625 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:51.926045 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:52.927639 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:53.928578 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:54.930473 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:55.931959 0.000000 udp 10.0.2.22 51868 -> 2.176.129.131 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:53:56.933114 0.083382 udp 10.0.2.22 51868 <-> 88.168.45.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:53:57.924552 0.145621 udp 10.0.2.22 51868 <-> 75.181.151.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:53:58.926266 0.168775 udp 10.0.2.22 51868 <-> 98.100.135.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:53:59.927276 0.117759 udp 10.0.2.22 51868 <-> 31.47.136.150 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:54:00.928852 0.159203 udp 10.0.2.22 51868 <-> 209.182.117.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:54:01.930119 0.000000 udp 10.0.2.22 51868 -> 177.139.89.186 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:02.931881 0.130421 udp 10.0.2.22 51868 <-> 24.57.120.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:54:03.803185 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:54:03.933620 0.281972 udp 10.0.2.22 51868 <-> 201.186.194.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:54:04.924485 0.184889 udp 10.0.2.22 51868 <-> 199.167.165.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:54:05.926988 2.076839 udp 10.0.2.22 51868 <-> 181.208.87.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:54:06.927791 0.103735 udp 10.0.2.22 51868 <-> 85.139.230.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:54:07.934887 0.037018 udp 10.0.2.22 51868 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:54:08.934589 0.052362 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:54:09.934460 1.241041 udp 10.0.2.22 51868 <-> 186.206.236.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:54:10.934186 0.161791 udp 10.0.2.22 51868 <-> 76.107.91.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:54:11.925017 0.211276 udp 10.0.2.22 51868 <-> 186.89.101.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:54:12.926132 0.000000 udp 10.0.2.22 51868 -> 81.201.145.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:13.927347 0.353519 udp 10.0.2.22 51868 <-> 187.18.105.223 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:54:14.929136 0.000000 udp 10.0.2.22 51868 -> 24.23.214.104 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:15.930371 0.120074 udp 10.0.2.22 51868 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:54:16.931660 0.212754 udp 10.0.2.22 51868 <-> 186.89.101.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:54:17.933734 0.531289 udp 10.0.2.22 51868 <-> 77.239.79.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:54:18.925061 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:19.926269 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:20.927355 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:21.928956 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:22.930650 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:23.931969 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:24.933666 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:25.927003 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:26.927177 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:28.929253 0.075710 udp 10.0.2.22 51868 <-> 188.26.185.181 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:54:29.930602 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:30.801757 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:54:30.932060 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:31.933407 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:33.933293 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:34.934029 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:35.934121 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:36.934205 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:37.933988 0.000095 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:37.934083 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:54:38.934113 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:39.925119 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:40.931844 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:41.932288 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:42.932771 4.993504 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:43.932728 0.270484 udp 10.0.2.22 51868 <-> 85.84.129.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:54:44.932957 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:45.933146 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:46.924838 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:48.928060 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:51.372079 0.000041 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:51.372120 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:54:52.359702 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:53.346312 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:54.509586 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:55.491546 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:56.481754 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:58.460081 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:54:59.318951 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:54:59.448006 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:00.435014 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:01.427416 0.171582 udp 10.0.2.22 51868 <-> 24.72.12.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:55:02.409773 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:03.400414 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:04.389917 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:05.378558 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:06.366035 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:07.352909 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:08.345558 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:09.326781 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:10.317073 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:11.306632 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:12.295254 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:13.286786 0.000074 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:13.286860 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 10:55:14.273625 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:15.265810 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:16.248216 0.229934 udp 10.0.2.22 51868 <-> 77.239.79.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:55:17.241454 0.292381 udp 10.0.2.22 51868 <-> 190.189.116.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:55:18.231048 0.000000 udp 10.0.2.22 51868 -> 118.171.112.186 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:19.219695 0.000000 udp 10.0.2.22 51868 -> 103.3.204.196 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:20.208081 0.142100 udp 10.0.2.22 51868 <-> 81.201.145.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:55:21.194949 0.000000 udp 10.0.2.22 51868 -> 24.23.214.104 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:21.555686 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 1 146 flow=Background 1970/01/01 10:55:22.187099 4.519241 udp 10.0.2.22 51868 <-> 89.151.151.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:55:26.933085 1.977467 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 2 292 flow=Background 1970/01/01 10:55:27.556344 2.120182 udp 10.0.2.22 51868 <-> 67.186.187.188 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:55:28.545260 0.166467 udp 10.0.2.22 51868 <-> 173.174.185.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:55:30.390031 0.000092 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:55:30.518997 0.031943 udp 10.0.2.22 51868 <-> 82.41.9.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:55:31.504650 0.000000 udp 10.0.2.22 51868 -> 59.85.5.40 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:32.489128 0.000000 udp 10.0.2.22 51868 -> 190.56.22.209 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:32.855909 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:55:33.472304 0.150511 udp 10.0.2.22 51868 <-> 173.23.113.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:55:34.463021 0.000000 udp 10.0.2.22 51868 -> 147.32.83.216 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:35.451709 0.159808 udp 10.0.2.22 51868 <-> 71.13.218.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:55:36.439379 0.080731 udp 10.0.2.22 51868 <-> 188.27.165.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:55:37.425996 0.070767 udp 10.0.2.22 51868 <-> 86.123.41.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:55:38.411430 0.088997 udp 10.0.2.22 51868 <-> 89.228.47.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:55:39.396094 0.249665 udp 10.0.2.22 51868 <-> 190.206.217.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:55:40.378723 1.154781 udp 10.0.2.22 51868 <-> 173.174.185.34 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:55:40.755474 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:55:42.357553 0.083772 udp 10.0.2.22 51868 <-> 178.156.117.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:55:43.345479 0.000000 udp 10.0.2.22 51868 -> 213.60.233.50 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:44.332017 0.205110 udp 10.0.2.22 51868 <-> 85.84.129.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:55:45.317591 0.338524 udp 10.0.2.22 51868 <-> 118.169.110.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:55:46.302723 0.212654 udp 10.0.2.22 51868 <-> 190.94.233.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:55:47.286683 0.000000 udp 10.0.2.22 51868 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:48.276548 0.167106 udp 10.0.2.22 51868 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:55:49.267597 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:50.254779 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:51.246620 0.203639 udp 10.0.2.22 51868 <-> 186.89.8.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:55:52.236499 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:53.220869 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:55:54.202389 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:56:02.308570 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:56:03.297277 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:56:03.674083 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 10:56:04.165878 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:56:04.284894 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:56:05.271506 0.000000 udp 10.0.2.22 51868 -> 46.1.191.163 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:56:06.257202 0.218013 udp 10.0.2.22 51868 <-> 186.89.8.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:56:07.433937 0.406708 udp 10.0.2.22 51868 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:56:08.405073 0.033701 udp 10.0.2.22 51868 <-> 85.218.139.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:56:09.394803 0.470513 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:56:10.383489 0.152057 udp 10.0.2.22 51868 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:56:11.371265 0.209967 udp 10.0.2.22 51868 <-> 190.252.196.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:56:12.357784 0.298919 udp 10.0.2.22 51868 <-> 88.163.39.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:56:26.904897 0.209987 udp 10.0.2.22 51868 <-> 190.252.196.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:56:27.880186 0.784681 udp 10.0.2.22 51868 <-> 82.245.78.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:56:29.413435 0.024824 udp 10.0.2.22 51868 <-> 89.142.152.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:56:30.403203 0.378194 udp 10.0.2.22 51868 <-> 201.211.111.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:56:31.391923 0.040770 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:56:32.380061 0.000000 udp 10.0.2.22 51868 -> 177.227.216.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:56:44.011280 0.000000 udp 10.0.2.22 51868 <- 177.227.216.250 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:56:44.659465 0.000000 udp 10.0.2.22 51868 -> 79.43.218.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:56:45.643123 0.079926 udp 10.0.2.22 51868 <-> 109.98.76.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:56:46.628017 0.264738 udp 10.0.2.22 51868 <-> 190.195.85.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:56:47.607875 0.024011 udp 10.0.2.22 51868 <-> 78.94.145.79 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:56:48.596354 0.203605 udp 10.0.2.22 51868 <-> 78.251.143.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:56:49.583623 0.000000 udp 10.0.2.22 51868 -> 76.203.209.160 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:56:50.569818 0.000000 udp 10.0.2.22 51868 -> 109.52.225.162 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:56:51.554325 1.007011 udp 10.0.2.22 51868 <-> 89.176.72.172 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:56:53.520187 2.142274 udp 10.0.2.22 51868 <-> 76.85.171.149 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:56:54.500043 0.202603 udp 10.0.2.22 51868 <-> 78.251.143.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:56:56.357436 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:56:56.476156 0.136157 udp 10.0.2.22 51868 <-> 68.39.158.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:57:06.999318 0.000000 udp 10.0.2.22 51868 -> 2.68.0.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:57:07.974454 0.225603 udp 10.0.2.22 51868 <-> 78.251.143.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:57:08.958046 0.136033 udp 10.0.2.22 51868 <-> 68.39.158.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:57:09.941012 1.144327 udp 10.0.2.22 51868 <-> 68.48.58.156 16464 CON 0 0 4 776 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:57:10.317258 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 1 146 flow=Background 1970/01/01 10:57:11.908836 2.248779 udp 10.0.2.22 51868 <-> 181.29.186.105 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:57:12.896076 4.916706 udp 10.0.2.22 51868 -> 109.52.225.162 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:57:14.866826 4.921603 udp 10.0.2.22 51868 <-> 166.154.87.160 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:57:15.850094 0.158262 udp 10.0.2.22 51868 <-> 71.238.72.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:57:16.832894 0.000000 udp 10.0.2.22 51868 -> 141.214.17.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:57:18.801162 0.000000 udp 10.0.2.22 51868 -> 76.203.209.160 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:57:20.145248 0.000000 udp 10.0.2.22 51868 <- 166.154.87.160 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:57:20.774941 1.144928 udp 10.0.2.22 51868 <-> 24.178.45.245 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:57:22.744094 0.000000 udp 10.0.2.22 51868 -> 75.120.2.82 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:57:23.727187 0.000000 udp 10.0.2.22 51868 -> 87.111.149.81 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:57:24.706761 0.327178 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:57:25.695340 0.075416 udp 10.0.2.22 51868 <-> 62.20.124.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:57:26.682589 0.000000 udp 10.0.2.22 51868 -> 89.201.69.232 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:57:27.668878 0.000000 udp 10.0.2.22 51868 -> 187.10.24.232 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:57:35.642821 0.000000 udp 10.0.2.22 51868 <- 89.201.69.232 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:57:45.480148 0.000000 udp 10.0.2.22 51868 <- 187.10.24.232 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:57:45.480165 0.152772 udp 10.0.2.22 51868 <-> 68.58.91.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:57:46.865837 0.000000 udp 10.0.2.22 51868 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:57:47.855460 0.083040 udp 10.0.2.22 51868 <-> 79.112.143.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:57:48.839201 0.269295 udp 10.0.2.22 51868 <-> 190.246.10.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:57:49.713043 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:57:49.832408 0.000000 udp 10.0.2.22 51868 -> 93.151.1.154 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:57:50.825235 0.164239 udp 10.0.2.22 51868 <-> 70.124.90.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:57:51.816767 0.049996 udp 10.0.2.22 51868 <-> 79.113.22.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:57:52.807644 0.159050 udp 10.0.2.22 51868 <-> 66.72.190.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:57:53.797868 0.139780 udp 10.0.2.22 51868 <-> 18.111.124.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:57:54.787355 0.083112 udp 10.0.2.22 51868 <-> 217.77.28.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:57:55.771074 0.332361 udp 10.0.2.22 51868 <-> 121.124.80.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:57:56.763817 4.955495 udp 10.0.2.22 51868 -> 79.118.114.37 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:57:57.756555 0.263154 udp 10.0.2.22 51868 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:57:58.748057 0.316097 udp 10.0.2.22 51868 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:57:59.739498 0.209940 udp 10.0.2.22 51868 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:58:00.729667 2.146077 udp 10.0.2.22 51868 <-> 76.183.28.26 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:58:03.698316 0.167182 udp 10.0.2.22 51868 <-> 75.67.160.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:58:04.690742 0.000000 udp 10.0.2.22 51868 -> 188.27.46.40 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:58:05.682283 0.000000 udp 10.0.2.22 51868 -> 66.31.213.102 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:58:06.673070 2.963291 udp 10.0.2.22 51868 <-> 190.80.114.46 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:58:07.662973 0.168906 udp 10.0.2.22 51868 <-> 82.56.138.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:58:08.652426 0.069139 udp 10.0.2.22 51868 <-> 79.114.66.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:58:10.629356 0.000000 udp 10.0.2.22 51868 -> 188.37.220.48 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:58:51.785065 0.205364 udp 10.0.2.22 51868 <-> 186.188.24.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:58:52.770781 2.951439 udp 10.0.2.22 51868 <-> 71.80.71.242 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:58:53.754607 0.354983 udp 10.0.2.22 51868 <-> 201.231.197.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:58:54.738235 0.208542 udp 10.0.2.22 51868 <-> 190.213.116.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:58:58.822138 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:58:58.941201 0.068918 udp 10.0.2.22 51868 <-> 79.114.66.233 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:58:59.929373 0.287942 udp 10.0.2.22 51868 <-> 95.180.171.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:59:00.916225 0.250750 udp 10.0.2.22 51868 <-> 187.78.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:59:01.901886 0.247881 udp 10.0.2.22 51868 <-> 199.117.183.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:59:02.885967 0.000000 udp 10.0.2.22 51868 -> 95.235.207.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:59:03.869513 0.000000 udp 10.0.2.22 51868 -> 190.213.116.10 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:59:04.851916 0.000000 udp 10.0.2.22 51868 -> 186.19.203.238 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:59:05.831061 0.000000 udp 10.0.2.22 51868 -> 141.196.163.9 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:59:06.820730 0.000000 udp 10.0.2.22 51868 -> 92.250.108.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:59:07.808011 0.302831 udp 10.0.2.22 51868 <-> 181.43.67.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:59:08.793633 0.368848 udp 10.0.2.22 51868 <-> 118.160.130.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:59:09.778217 0.353811 udp 10.0.2.22 51868 <-> 201.231.197.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:59:10.762701 3.936832 udp 10.0.2.22 51868 -> 199.117.183.235 16464 REQ 0 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:59:11.744996 0.000000 udp 10.0.2.22 51868 -> 95.180.171.234 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:59:12.724391 0.068679 udp 10.0.2.22 51868 <-> 79.114.66.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:59:13.712580 0.080555 udp 10.0.2.22 51868 <-> 86.124.222.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:59:26.514917 0.000000 udp 10.0.2.22 51868 <- 199.117.183.235 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:59:27.260937 0.000000 udp 10.0.2.22 51868 -> 141.196.163.9 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:59:28.245572 0.000000 udp 10.0.2.22 51868 -> 95.180.171.234 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:59:29.229162 0.167190 udp 10.0.2.22 51868 <-> 24.177.86.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:59:30.219260 0.218732 udp 10.0.2.22 51868 <-> 200.84.7.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:59:31.198448 0.056410 udp 10.0.2.22 51868 <-> 5.15.138.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:59:32.186334 0.024024 udp 10.0.2.22 51868 <-> 176.199.74.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:59:33.173093 0.230450 udp 10.0.2.22 51868 <-> 98.194.208.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:59:34.210701 0.155012 udp 10.0.2.22 51868 <-> 98.181.49.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:59:35.195265 0.000000 udp 10.0.2.22 51868 -> 190.37.3.93 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:59:36.178558 0.000000 udp 10.0.2.22 51868 -> 190.146.36.60 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:59:37.040060 0.000035 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 10:59:37.168977 0.165444 udp 10.0.2.22 51868 <-> 174.108.102.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:59:38.148055 0.168114 udp 10.0.2.22 51868 <-> 68.113.165.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:59:45.665865 0.274536 udp 10.0.2.22 51868 <-> 186.92.31.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:59:46.658090 1.308041 udp 10.0.2.22 51868 <-> 190.130.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:59:47.659615 0.089036 udp 10.0.2.22 51868 <-> 85.152.188.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 10:59:48.661049 0.000000 udp 10.0.2.22 51868 -> 71.63.13.85 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 10:59:49.662250 0.000000 udp 10.0.2.22 51868 -> 75.143.122.221 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:00:48.370255 0.000000 udp 10.0.2.22 51868 <- 75.143.122.221 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:00:51.750512 0.354458 udp 10.0.2.22 51868 <-> 114.47.209.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:00:52.732677 0.143847 udp 10.0.2.22 51868 <-> 204.210.176.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:00:53.735592 0.040077 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:00:54.735259 0.000000 udp 10.0.2.22 51868 -> 173.214.226.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:00:55.737027 0.000000 udp 10.0.2.22 51868 -> 69.244.18.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:00:56.738756 0.000000 udp 10.0.2.22 51868 -> 217.217.179.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:00:57.739910 4.997119 udp 10.0.2.22 51868 <-> 190.75.66.241 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:00:58.741259 0.000000 udp 10.0.2.22 51868 -> 88.245.7.89 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:00:59.732855 0.055262 udp 10.0.2.22 51868 <-> 5.15.233.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:01:00.736375 0.193774 udp 10.0.2.22 51868 <-> 109.67.249.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:01:01.735936 0.049982 udp 10.0.2.22 51868 <-> 79.113.22.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:01:03.138704 2.906484 udp 10.0.2.22 51868 <-> 190.75.66.241 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:01:03.738672 0.000000 udp 10.0.2.22 51868 -> 71.51.2.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:01:04.739987 0.144955 udp 10.0.2.22 51868 <-> 71.15.226.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:01:06.732678 0.721100 udp 10.0.2.22 51868 <-> 190.201.56.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:01:07.734382 1.164896 udp 10.0.2.22 51868 <-> 98.80.235.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:01:08.736013 1.041542 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:01:10.738727 0.000000 udp 10.0.2.22 51868 -> 115.241.58.107 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:01:11.960916 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:01:12.090165 0.152775 udp 10.0.2.22 51868 <-> 24.45.223.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:01:13.074450 0.250188 udp 10.0.2.22 51868 <-> 37.218.19.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:01:14.067644 0.499387 udp 10.0.2.22 51868 <-> 190.201.56.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:01:15.060408 0.000000 udp 10.0.2.22 51868 -> 14.99.22.24 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:01:16.053596 0.000000 udp 10.0.2.22 51868 -> 46.223.177.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:01:35.572668 0.677168 udp 10.0.2.22 51868 <-> 161.200.125.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:01:36.980026 0.034592 udp 10.0.2.22 51868 <-> 80.253.61.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:01:37.964866 0.000077 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:01:37.964943 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:01:38.945645 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:01:39.935611 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:01:40.924659 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:01:41.912460 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:01:53.428534 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:01:54.414105 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:01:55.398385 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:01:56.379102 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:01:57.368865 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:01:58.357458 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:01:59.345548 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:02:00.332396 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:02:01.318002 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:02:02.302475 0.421825 udp 10.0.2.22 51868 <-> 186.210.126.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:02:03.283383 0.030584 udp 10.0.2.22 51868 <-> 80.253.61.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:02:04.273213 0.045127 udp 10.0.2.22 51868 <-> 89.137.195.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:02:05.263130 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:02:06.250787 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:02:07.238798 4.770224 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:02:12.009022 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:02:12.854207 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:02:12.983077 4.924933 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:02:14.945935 0.041439 udp 10.0.2.22 51868 <-> 130.204.23.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:02:15.934439 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:02:16.921707 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:02:18.893138 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:02:19.878705 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:02:20.861909 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:02:21.842023 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:02:22.829985 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:02:23.818836 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:02:24.805059 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:02:26.774026 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:02:27.756734 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:02:55.534175 0.953408 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:02:56.487583 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:02:57.468578 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:02:58.458724 0.311188 udp 10.0.2.22 51868 <-> 180.56.125.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:02:59.448139 4.431402 udp 10.0.2.22 51868 -> 200.127.62.94 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:03:02.894461 0.109003 udp 10.0.2.22 51868 <-> 77.239.28.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:03:04.696704 1.800130 udp 10.0.2.22 51868 <- 200.127.62.94 16464 RSP 0 0 2 1780 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:03:04.863682 0.213538 udp 10.0.2.22 51868 <-> 64.139.119.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:03:05.844351 0.000042 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:03:05.844393 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:03:06.833869 0.177539 udp 10.0.2.22 51868 <-> 67.148.202.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:03:13.139487 0.169507 udp 10.0.2.22 51868 <-> 71.63.13.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:03:14.118803 0.332369 udp 10.0.2.22 51868 <-> 111.243.164.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:03:14.975962 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:03:15.104915 0.071757 udp 10.0.2.22 51868 <-> 81.232.31.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:03:16.089854 0.124342 udp 10.0.2.22 51868 <-> 24.57.120.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:03:17.073514 0.000000 udp 10.0.2.22 51868 -> 98.95.254.63 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:03:18.054052 0.320590 udp 10.0.2.22 51868 <-> 181.226.152.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:03:19.043536 0.165271 udp 10.0.2.22 51868 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:03:20.031960 0.126851 udp 10.0.2.22 51868 <-> 188.36.137.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:03:21.019341 0.396527 udp 10.0.2.22 51868 <-> 203.205.21.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:03:22.005514 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:03:22.990741 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:03:23.974964 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:03:24.955694 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:03:25.944961 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:03:26.933431 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:03:27.920335 0.000078 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:03:27.920413 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:03:28.906442 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:03:29.891518 0.000000 udp 10.0.2.22 51868 -> 86.180.223.140 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:03:30.876018 0.166057 udp 10.0.2.22 51868 <-> 107.10.72.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:03:31.856480 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:03:32.845865 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:03:33.834088 0.091794 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:03:33.925882 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:03:34.901151 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:03:36.344053 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:03:38.316576 0.115869 udp 10.0.2.22 51868 <-> 68.229.91.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:03:39.297020 0.051400 udp 10.0.2.22 51868 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:03:40.286471 0.167178 udp 10.0.2.22 51868 <-> 74.140.150.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:03:44.851126 0.200477 udp 10.0.2.22 51868 <-> 186.14.134.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:03:45.829720 0.035928 udp 10.0.2.22 51868 <-> 85.130.12.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:03:46.686515 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:03:46.815518 0.145129 udp 10.0.2.22 51868 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:03:47.800500 0.988991 udp 10.0.2.22 51868 <-> 173.230.174.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:03:48.784570 0.168213 udp 10.0.2.22 51868 <-> 107.10.72.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:03:49.765069 0.000000 udp 10.0.2.22 51868 -> 24.122.213.114 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:03:50.754245 0.084335 udp 10.0.2.22 51868 <-> 82.235.20.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:03:51.742528 0.148118 udp 10.0.2.22 51868 <-> 67.253.48.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:03:52.729637 0.197561 udp 10.0.2.22 51868 <-> 173.17.237.142 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:03:53.716059 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:03:54.701805 3.011168 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:03:55.685593 2.959957 udp 10.0.2.22 51868 <-> 173.174.0.5 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:03:56.665947 0.000000 udp 10.0.2.22 51868 -> 188.28.192.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:03:59.632621 0.000000 udp 10.0.2.22 51868 -> 178.25.74.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:04:00.618151 0.000000 udp 10.0.2.22 51868 -> 187.18.235.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:04:12.557997 0.000000 udp 10.0.2.22 51868 <- 178.25.74.21 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:04:13.533289 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:04:14.019326 0.000000 udp 10.0.2.22 51868 <- 187.18.235.28 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:04:14.517415 0.137361 udp 10.0.2.22 51868 <-> 67.81.193.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:04:15.497587 0.048688 udp 10.0.2.22 51868 <-> 77.89.104.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:04:16.486781 0.000000 udp 10.0.2.22 51868 -> 5.15.195.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:04:17.475821 0.223014 udp 10.0.2.22 51868 <-> 76.27.32.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:04:18.848712 0.168568 udp 10.0.2.22 51868 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:04:19.895176 0.519074 udp 10.0.2.22 51868 <-> 190.160.244.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:04:20.870113 0.328766 udp 10.0.2.22 51868 <-> 58.230.46.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:04:21.853970 0.091022 udp 10.0.2.22 51868 <-> 83.249.21.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:04:22.834164 0.000000 udp 10.0.2.22 51868 -> 71.178.136.161 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:04:23.823562 0.000000 udp 10.0.2.22 51868 -> 176.240.90.48 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:04:34.855621 0.000000 udp 10.0.2.22 51868 <- 71.178.136.161 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:04:35.831984 0.030402 udp 10.0.2.22 51868 <-> 80.99.15.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:04:36.688093 0.000036 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:04:36.816957 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:04:37.607329 0.000000 udp 10.0.2.22 51868 <- 176.240.90.48 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:04:37.801726 0.302227 udp 10.0.2.22 51868 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:04:38.784949 0.077664 udp 10.0.2.22 51868 <-> 83.253.100.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:04:39.767378 3.940516 udp 10.0.2.22 51868 -> 105.162.34.217 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:04:40.746904 0.245083 udp 10.0.2.22 51868 <-> 190.73.238.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:04:41.735063 0.000000 udp 10.0.2.22 51868 -> 184.89.246.105 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:04:42.722287 0.000000 udp 10.0.2.22 51868 -> 187.101.238.31 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:04:44.692209 0.073212 udp 10.0.2.22 51868 <-> 86.120.85.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:04:45.677966 0.891071 udp 10.0.2.22 51868 <-> 46.248.74.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:04:46.668414 0.000000 udp 10.0.2.22 51868 -> 76.24.62.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:04:47.649163 0.213933 udp 10.0.2.22 51868 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:04:48.636862 0.329089 udp 10.0.2.22 51868 <-> 188.36.137.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:04:49.623944 0.236381 udp 10.0.2.22 51868 <-> 31.200.186.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:04:50.609639 1.721325 udp 10.0.2.22 51868 <-> 188.28.207.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:04:51.882206 0.008402 udp 10.0.2.22 51868 <-> 82.209.26.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:04:57.933177 0.279789 udp 10.0.2.22 51868 <-> 186.94.172.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:04:58.913491 0.270501 udp 10.0.2.22 51868 <-> 190.206.6.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:04:59.892520 0.340974 udp 10.0.2.22 51868 <-> 190.142.118.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:05:00.880435 1.204469 udp 10.0.2.22 51868 <-> 205.240.139.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:05:01.866814 0.000000 udp 10.0.2.22 51868 -> 202.29.178.131 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:05:02.852286 0.676935 udp 10.0.2.22 51868 <-> 201.209.188.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:05:10.307119 0.000000 udp 10.0.2.22 51868 -> 207.6.7.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:05:11.280038 0.246957 udp 10.0.2.22 51868 <-> 161.200.125.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:05:12.270261 0.089330 udp 10.0.2.22 51868 <-> 82.56.49.161 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:05:13.249691 0.288594 udp 10.0.2.22 51868 <-> 78.228.56.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:05:14.237586 0.145539 udp 10.0.2.22 51868 <-> 174.108.78.50 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:05:15.106505 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:05:15.225411 1.327168 udp 10.0.2.22 51868 <-> 190.113.141.193 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:05:17.199783 0.265644 udp 10.0.2.22 51868 <-> 186.136.213.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:05:18.183249 0.159175 udp 10.0.2.22 51868 <-> 96.59.230.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:05:19.173316 4.597546 udp 10.0.2.22 51868 <-> 89.40.179.170 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:05:20.156071 0.301649 udp 10.0.2.22 51868 <-> 76.11.169.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:05:22.758317 0.133913 udp 10.0.2.22 51868 <-> 98.124.111.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:05:24.720582 0.000000 udp 10.0.2.22 51868 -> 190.51.16.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:05:25.704791 0.218898 udp 10.0.2.22 51868 <-> 24.117.40.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:05:26.688187 0.199750 udp 10.0.2.22 51868 <-> 76.11.169.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:05:27.668393 0.035888 udp 10.0.2.22 51868 <-> 89.40.179.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:05:28.657726 0.181076 udp 10.0.2.22 51868 <-> 68.6.74.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:05:29.645940 0.355035 udp 10.0.2.22 51868 <-> 173.214.226.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:05:30.632749 2.114902 udp 10.0.2.22 51868 <-> 71.236.119.239 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:05:33.585467 3.936170 udp 10.0.2.22 51868 <-> 50.90.102.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:05:38.331005 0.000000 udp 10.0.2.22 51868 -> 71.236.119.239 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:06:04.167988 0.000000 udp 10.0.2.22 51868 <- 71.236.119.239 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:06:05.057831 0.082293 udp 10.0.2.22 51868 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:06:06.043398 3.043301 udp 10.0.2.22 51868 <-> 188.24.11.119 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:06:07.038358 0.000000 udp 10.0.2.22 51868 -> 187.123.136.129 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:06:08.032502 0.000000 udp 10.0.2.22 51868 -> 82.210.124.133 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:06:10.021199 0.077956 udp 10.0.2.22 51868 <-> 89.136.139.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:06:11.035460 0.242754 udp 10.0.2.22 51868 <-> 190.207.8.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:06:12.033590 0.736739 udp 10.0.2.22 51868 <-> 105.229.138.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:06:12.911188 0.000034 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:06:13.031267 0.073246 udp 10.0.2.22 51868 <-> 85.85.25.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:06:14.029600 4.984784 udp 10.0.2.22 51868 <-> 84.236.102.29 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:06:15.026536 2.074440 udp 10.0.2.22 51868 <-> 81.203.204.14 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:06:16.023101 0.179130 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:06:18.012659 0.000000 udp 10.0.2.22 51868 -> 87.198.116.132 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:06:19.085983 0.000000 udp 10.0.2.22 51868 <- 84.236.102.29 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:06:20.015841 2.093745 udp 10.0.2.22 51868 -> 187.19.211.33 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:06:21.113847 0.267525 udp 10.0.2.22 51868 <-> 179.209.89.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:06:23.101481 0.073289 udp 10.0.2.22 51868 <-> 85.85.25.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:06:24.092638 0.034533 udp 10.0.2.22 51868 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:06:25.077985 1.011952 udp 10.0.2.22 51868 <-> 95.168.48.47 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:06:27.066054 0.289806 udp 10.0.2.22 51868 <-> 14.99.31.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:06:28.059538 0.222539 udp 10.0.2.22 51868 <-> 24.23.11.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:06:29.051621 0.159922 udp 10.0.2.22 51868 <-> 31.147.61.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:06:30.043622 0.171362 udp 10.0.2.22 51868 <-> 24.220.225.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:06:31.035013 0.463714 udp 10.0.2.22 51868 <-> 101.59.16.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:06:32.019711 0.157804 udp 10.0.2.22 51868 <-> 71.61.202.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:06:33.014156 0.211574 udp 10.0.2.22 51868 <-> 50.131.239.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:06:34.015765 0.137198 udp 10.0.2.22 51868 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:06:35.016846 0.162775 udp 10.0.2.22 51868 <-> 65.34.172.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:06:36.018657 0.146543 udp 10.0.2.22 51868 <-> 107.10.164.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:06:37.020049 0.000000 udp 10.0.2.22 51868 -> 190.213.116.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:07:27.354784 0.000000 udp 10.0.2.22 51868 <- 190.213.116.10 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:07:27.943188 2.825320 udp 10.0.2.22 51868 <-> 195.174.174.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:07:30.691195 0.000000 udp 10.0.2.22 51868 -> 5.248.190.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:07:31.560817 0.000120 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:07:31.679704 0.000000 udp 10.0.2.22 51868 -> 114.36.213.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:07:32.667076 0.000000 udp 10.0.2.22 51868 -> 190.188.124.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:07:38.713298 0.000000 udp 10.0.2.22 51868 <- 190.188.124.5 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:07:38.961357 0.121771 udp 10.0.2.22 51868 <-> 85.86.103.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:07:39.944868 0.061682 udp 10.0.2.22 51868 <-> 77.22.44.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:07:40.927496 0.000000 udp 10.0.2.22 51868 -> 92.41.207.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:07:41.907683 0.224098 udp 10.0.2.22 51868 <-> 190.219.0.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:07:42.885784 0.042869 udp 10.0.2.22 51868 <-> 87.252.173.82 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:07:43.873569 0.047954 udp 10.0.2.22 51868 <-> 82.75.28.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:07:44.859951 0.153466 udp 10.0.2.22 51868 <-> 184.162.187.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:07:45.844959 0.000000 udp 10.0.2.22 51868 -> 187.37.207.195 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:07:57.062206 0.269149 udp 10.0.2.22 51868 <-> 189.61.212.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:07:57.931788 0.000000 udp 10.0.2.22 51868 <- 187.37.207.195 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:07:58.063904 0.000000 udp 10.0.2.22 51868 -> 176.218.72.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:07:59.065089 0.175891 udp 10.0.2.22 51868 <-> 75.108.181.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:00.056655 0.139409 udp 10.0.2.22 51868 <-> 69.125.238.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:01.058173 0.000000 udp 10.0.2.22 51868 -> 115.241.91.204 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:08:02.059390 0.152798 udp 10.0.2.22 51868 <-> 66.78.122.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:03.060917 0.000000 udp 10.0.2.22 51868 -> 98.226.172.156 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:08:04.063910 0.150793 udp 10.0.2.22 51868 <-> 107.15.31.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:05.063985 2.454805 udp 10.0.2.22 51868 <-> 190.179.130.145 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:06.065004 0.139593 udp 10.0.2.22 51868 <-> 71.224.22.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:08.058233 0.042370 udp 10.0.2.22 51868 <-> 37.143.247.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:09.059274 0.352136 udp 10.0.2.22 51868 <-> 111.254.131.47 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:10.061067 0.136562 udp 10.0.2.22 51868 <-> 173.3.37.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:11.062526 0.334572 udp 10.0.2.22 51868 <-> 121.124.80.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:12.064119 0.374129 udp 10.0.2.22 51868 <-> 186.122.172.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:13.065279 3.076598 udp 10.0.2.22 51868 <-> 5.12.54.75 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:13.936599 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:08:14.056830 4.005737 udp 10.0.2.22 51868 <-> 188.230.250.55 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:15.058136 0.285698 udp 10.0.2.22 51868 <-> 66.130.116.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:17.060997 0.331277 udp 10.0.2.22 51868 <-> 121.124.80.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:27.438367 0.000000 udp 10.0.2.22 51868 <- 188.230.250.55 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:08:28.388863 0.162703 udp 10.0.2.22 51868 <-> 69.125.160.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:29.373330 0.348526 udp 10.0.2.22 51868 <-> 114.47.13.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:30.354251 0.055728 udp 10.0.2.22 51868 <-> 85.231.171.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:31.343516 0.044233 udp 10.0.2.22 51868 <-> 178.148.147.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:32.331819 0.020043 udp 10.0.2.22 51868 <-> 176.199.74.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:33.319174 0.047908 udp 10.0.2.22 51868 <-> 89.136.139.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:34.305453 0.000000 udp 10.0.2.22 51868 -> 91.187.95.9 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:08:35.290553 0.000000 udp 10.0.2.22 51868 -> 79.116.107.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:08:36.274525 0.194645 udp 10.0.2.22 51868 <-> 97.79.31.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:37.255141 0.000000 udp 10.0.2.22 51868 -> 204.16.10.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:08:38.245068 0.116406 udp 10.0.2.22 51868 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:39.233253 0.076936 udp 10.0.2.22 51868 <-> 134.249.0.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:40.220444 0.143801 udp 10.0.2.22 51868 <-> 174.108.78.50 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:41.205904 0.159297 udp 10.0.2.22 51868 <-> 184.162.187.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:42.190835 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:08:43.174758 0.071835 udp 10.0.2.22 51868 <-> 2.27.232.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:44.155284 0.058503 udp 10.0.2.22 51868 <-> 87.121.26.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:45.144593 0.082227 udp 10.0.2.22 51868 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:46.133208 0.107252 udp 10.0.2.22 51868 <-> 92.228.55.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:47.120475 0.185166 udp 10.0.2.22 51868 <-> 70.75.88.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:48.106804 1.215552 udp 10.0.2.22 51868 <-> 190.205.228.221 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:49.946960 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:08:50.075893 0.395283 udp 10.0.2.22 51868 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:51.057303 0.053280 udp 10.0.2.22 51868 <-> 95.88.104.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:52.045379 4.912385 udp 10.0.2.22 51868 <-> 24.89.222.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:57.776763 0.154550 udp 10.0.2.22 51868 <-> 184.57.62.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:58.763858 0.030293 udp 10.0.2.22 51868 <-> 176.63.245.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:08:59.750075 0.068208 udp 10.0.2.22 51868 <-> 178.164.167.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:09:00.735059 0.000000 udp 10.0.2.22 51868 -> 68.59.168.93 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:09:01.719124 0.331146 udp 10.0.2.22 51868 <-> 70.233.97.220 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:09:02.699725 2.362838 udp 10.0.2.22 51868 <-> 190.204.102.101 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:09:03.689040 0.094883 udp 10.0.2.22 51868 <-> 80.86.237.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:09:05.664367 2.175335 udp 10.0.2.22 51868 <-> 184.57.62.102 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:09:06.653582 0.150394 udp 10.0.2.22 51868 <-> 96.23.154.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:09:08.623504 0.064793 udp 10.0.2.22 51868 <-> 31.222.118.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:09:09.603568 3.149802 udp 10.0.2.22 51868 <-> 68.144.86.185 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:09:10.592812 0.161556 udp 10.0.2.22 51868 <-> 67.149.214.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:09:10.983657 2.958273 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 11:09:11.582174 0.065607 udp 10.0.2.22 51868 <-> 81.61.202.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:09:13.555354 0.200917 udp 10.0.2.22 51868 <-> 186.92.81.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:09:14.540240 0.172483 udp 10.0.2.22 51868 <-> 24.107.104.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:09:15.524423 0.155509 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:09:16.504527 0.074865 udp 10.0.2.22 51868 <-> 82.211.188.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:09:17.495603 0.153256 udp 10.0.2.22 51868 <-> 68.196.251.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:09:17.892204 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:09:18.483637 2.011524 udp 10.0.2.22 51868 <-> 78.97.224.217 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:09:19.470623 0.222195 udp 10.0.2.22 51868 <-> 190.38.124.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:09:21.313033 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:09:21.441992 0.162650 udp 10.0.2.22 51868 <-> 108.183.125.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:09:22.432528 0.000000 udp 10.0.2.22 51868 -> 172.243.169.7 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:09:27.417740 0.122669 udp 10.0.2.22 51868 <-> 176.200.124.161 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:09:28.406917 0.000000 udp 10.0.2.22 51868 -> 49.252.222.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:09:29.396752 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:09:29.793235 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:09:30.383650 0.470259 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:09:31.369628 0.301450 udp 10.0.2.22 51868 <-> 76.16.25.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:09:32.369127 0.165443 udp 10.0.2.22 51868 <-> 209.33.13.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:09:33.350215 0.000000 udp 10.0.2.22 51868 -> 27.140.6.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:09:48.715004 0.000000 udp 10.0.2.22 51868 <- 172.243.169.7 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:09:49.000052 0.000000 udp 10.0.2.22 51868 <- 27.140.6.16 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:09:49.684205 0.000000 udp 10.0.2.22 51868 -> 66.79.231.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:09:50.672094 0.216495 udp 10.0.2.22 51868 <-> 201.132.213.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:09:51.659084 0.000000 udp 10.0.2.22 51868 -> 201.95.144.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:09:52.644937 0.179797 udp 10.0.2.22 51868 <-> 162.213.22.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:09:53.629871 0.000000 udp 10.0.2.22 51868 -> 186.57.202.173 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:09:54.613357 0.195886 udp 10.0.2.22 51868 <-> 174.7.21.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:09:55.603486 0.000000 udp 10.0.2.22 51868 -> 62.221.143.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:09:56.582506 0.000000 udp 10.0.2.22 51868 -> 79.191.35.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:09:57.570498 0.052491 udp 10.0.2.22 51868 <-> 37.153.128.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:09:58.557834 0.330361 udp 10.0.2.22 51868 <-> 220.143.152.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:09:59.544219 0.413270 udp 10.0.2.22 51868 <-> 219.85.118.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:10:00.529737 0.066447 udp 10.0.2.22 51868 <-> 85.230.179.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:10:00.925926 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:10:01.512711 0.230911 udp 10.0.2.22 51868 <-> 37.254.21.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:10:02.502486 0.280990 udp 10.0.2.22 51868 <-> 186.92.31.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:10:03.481512 0.000000 udp 10.0.2.22 51868 -> 190.55.92.89 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:10.014439 0.000000 udp 10.0.2.22 51868 <- 190.55.92.89 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:10.713276 0.602867 udp 10.0.2.22 51868 <-> 202.216.86.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:10:11.700587 0.268192 udp 10.0.2.22 51868 <-> 186.92.31.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:10:12.688524 0.126047 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:10:13.546104 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:10:13.675053 1.486905 udp 10.0.2.22 51868 <-> 176.201.32.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:10:14.658037 0.064616 udp 10.0.2.22 51868 <-> 188.25.82.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:10:18.724151 0.368169 udp 10.0.2.22 51868 <-> 117.201.119.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:10:19.703065 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:20.690922 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:21.677251 0.182149 udp 10.0.2.22 51868 <-> 70.170.60.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:10:22.667115 0.604843 udp 10.0.2.22 51868 <-> 202.29.179.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:10:23.652248 0.308151 udp 10.0.2.22 51868 <-> 111.185.49.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:10:24.634628 0.222507 udp 10.0.2.22 51868 <-> 24.8.139.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:10:25.615442 0.000096 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:25.615538 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:10:26.604211 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:27.591769 0.172356 udp 10.0.2.22 51868 <-> 76.11.169.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:10:28.577752 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:29.563066 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:30.590386 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:31.573744 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:32.553905 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:33.543949 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:34.534732 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:35.521197 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:36.506706 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:43.546129 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:44.529529 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:45.509578 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:46.498507 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:47.486295 0.000131 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:47.486426 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:10:47.892484 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 1 146 flow=Background 1970/01/01 11:10:48.827073 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:49.683592 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:10:49.812380 0.162319 udp 10.0.2.22 51868 <-> 72.191.111.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:10:50.796347 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:52.758479 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:53.747073 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:54.734913 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:55.721498 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:56.707119 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:57.690612 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:10:58.673662 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:11:00.475241 0.000076 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:11:00.475317 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:11:01.464033 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:11:02.451446 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:11:03.437922 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:11:04.423456 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:11:05.408002 4.925714 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:11:06.390854 1.205544 udp 10.0.2.22 51868 <-> 76.11.169.1 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:11:08.359490 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:11:09.347275 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:11:11.319201 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:11:12.303252 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:11:13.287858 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:11:14.267747 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:11:18.310834 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:11:19.298370 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:11:20.155935 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:11:20.284798 0.177033 udp 10.0.2.22 51868 <-> 76.11.169.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:11:21.270016 0.000000 udp 10.0.2.22 51868 -> 192.168.1.89 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:11:22.254289 0.215654 udp 10.0.2.22 51868 <-> 186.89.117.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:11:23.237109 0.166337 udp 10.0.2.22 51868 <-> 24.160.149.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:11:24.217410 0.120373 udp 10.0.2.22 51868 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:11:25.205763 0.066365 udp 10.0.2.22 51868 <-> 86.126.100.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:11:26.193319 0.069618 udp 10.0.2.22 51868 <-> 62.57.140.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:11:27.179627 0.163012 udp 10.0.2.22 51868 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:11:44.084232 0.302464 udp 10.0.2.22 51868 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:11:45.076455 0.164166 udp 10.0.2.22 51868 <-> 184.74.129.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:11:46.077952 1.559001 udp 10.0.2.22 51868 <-> 201.235.95.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:11:47.069507 0.620503 udp 10.0.2.22 51868 <-> 142.136.206.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:11:48.071025 1.757649 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:11:51.389751 0.087077 udp 10.0.2.22 51868 <-> 79.114.227.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:11:52.367792 2.058744 udp 10.0.2.22 51868 <-> 209.102.248.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:11:53.355463 0.065538 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:11:54.341518 0.000000 udp 10.0.2.22 51868 -> 92.160.189.217 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:11:55.323530 0.152128 udp 10.0.2.22 51868 <-> 27.106.26.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:11:56.314077 0.211786 udp 10.0.2.22 51868 <-> 151.74.7.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:11:57.304153 0.157442 udp 10.0.2.22 51868 <-> 64.83.204.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:11:58.293276 0.978740 udp 10.0.2.22 51868 <-> 173.44.69.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:11:59.280962 0.356638 udp 10.0.2.22 51868 <-> 111.240.96.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:12:00.268189 0.000000 udp 10.0.2.22 51868 -> 118.160.130.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:12:04.802971 0.348058 udp 10.0.2.22 51868 <-> 190.75.98.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:12:05.783378 1.301833 udp 10.0.2.22 51868 <-> 190.198.144.241 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:12:07.641615 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:12:07.760680 0.000000 udp 10.0.2.22 51868 -> 71.192.132.121 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:12:08.747838 0.052663 udp 10.0.2.22 51868 <-> 85.11.180.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:12:09.733938 4.080546 udp 10.0.2.22 51868 <-> 75.130.142.6 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:12:10.718999 0.124149 udp 10.0.2.22 51868 <-> 37.123.3.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:12:12.683397 0.000000 udp 10.0.2.22 51868 -> 188.27.46.40 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:12:14.660683 0.137839 udp 10.0.2.22 51868 <-> 76.117.140.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:12:15.647931 0.191636 udp 10.0.2.22 51868 <-> 37.237.51.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:12:16.634023 0.152195 udp 10.0.2.22 51868 <-> 66.56.26.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:12:17.619040 0.257533 udp 10.0.2.22 51868 <-> 177.182.86.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:12:18.603035 0.552176 udp 10.0.2.22 51868 <-> 2.228.29.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:12:21.162131 0.156885 udp 10.0.2.22 51868 <-> 64.83.204.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:12:22.141467 0.686949 udp 10.0.2.22 51868 <-> 71.196.205.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:12:23.592907 0.182857 udp 10.0.2.22 51868 <-> 70.181.157.227 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:12:23.920192 0.015289 udp 10.0.2.22 60072 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 11:12:23.935866 0.000000 udp 10.0.2.22 60073 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:12:24.580017 1.076735 udp 10.0.2.22 51868 <-> 188.252.201.213 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:12:26.551621 0.000000 udp 10.0.2.22 51868 -> 24.202.102.113 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:12:38.109490 0.000000 udp 10.0.2.22 51868 <- 24.202.102.113 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:12:38.904292 0.072737 udp 10.0.2.22 51868 <-> 93.72.46.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:12:39.884699 0.258694 udp 10.0.2.22 51868 <-> 177.182.86.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:12:40.874141 0.000000 udp 10.0.2.22 51868 -> 99.196.156.159 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:12:41.862682 0.000000 udp 10.0.2.22 51868 -> 209.213.131.112 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:12:42.849750 0.275030 udp 10.0.2.22 51868 <-> 190.124.145.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:12:43.835922 0.327309 udp 10.0.2.22 51868 <-> 125.1.93.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:12:44.820933 0.176064 udp 10.0.2.22 51868 <-> 98.196.143.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:12:45.804929 0.160503 udp 10.0.2.22 51868 <-> 69.136.170.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:12:46.785218 0.278797 udp 10.0.2.22 51868 <-> 187.33.158.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:12:47.655420 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:12:47.774472 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:12:48.762635 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:12:49.749802 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:12:50.735789 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:12:51.720649 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:12:51.974750 0.000000 udp 10.0.2.22 51868 <- 99.196.156.159 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:12:52.711613 0.000000 udp 10.0.2.22 51868 -> 79.114.51.173 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:12:53.691950 1.070234 udp 10.0.2.22 51868 <-> 66.66.140.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:12:55.574424 0.336269 udp 10.0.2.22 51868 <-> 190.177.244.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:12:56.565250 0.153185 udp 10.0.2.22 51868 <-> 76.16.25.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:12:57.552422 0.129428 udp 10.0.2.22 51868 <-> 157.252.96.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:12:58.538562 0.000000 udp 10.0.2.22 51868 -> 86.126.0.125 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:13:05.126449 0.145305 udp 10.0.2.22 51868 <-> 98.24.73.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:13:06.110636 0.195592 udp 10.0.2.22 51868 <-> 24.139.142.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:13:07.090834 0.162659 udp 10.0.2.22 51868 <-> 174.64.165.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:13:08.080029 0.310015 udp 10.0.2.22 51868 <-> 218.152.217.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:13:09.068098 0.017808 udp 10.0.2.22 51868 <-> 77.175.74.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:13:10.055102 0.175806 udp 10.0.2.22 51868 <-> 71.229.16.226 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:13:11.040629 2.017166 udp 10.0.2.22 51868 <-> 92.241.152.140 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:13:12.027525 0.228402 udp 10.0.2.22 51868 <-> 71.92.217.0 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:13:13.991364 0.175429 udp 10.0.2.22 51868 <-> 68.184.203.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:13:14.980641 0.465306 udp 10.0.2.22 51868 <-> 190.18.110.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:13:15.968777 0.072178 udp 10.0.2.22 51868 <-> 82.38.6.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:13:16.955925 0.241557 udp 10.0.2.22 51868 <-> 186.95.213.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:13:17.941679 0.941565 udp 10.0.2.22 51868 <-> 67.100.230.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:13:18.926461 0.139182 udp 10.0.2.22 51868 <-> 24.185.176.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:13:19.917809 0.323991 udp 10.0.2.22 51868 <-> 123.194.233.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:13:20.778708 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:13:20.897766 0.080530 udp 10.0.2.22 51868 <-> 79.235.71.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:13:21.887995 0.278562 udp 10.0.2.22 51868 <-> 190.47.113.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:13:22.875993 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:13:23.862874 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:13:24.848751 0.000000 udp 10.0.2.22 51868 -> 200.93.94.100 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:13:25.833512 0.174077 udp 10.0.2.22 51868 <-> 68.113.165.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:13:26.824612 0.000000 udp 10.0.2.22 51868 -> 68.149.112.104 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:13:33.208342 0.000000 udp 10.0.2.22 51868 <- 68.149.112.104 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:13:33.997004 0.136246 udp 10.0.2.22 51868 <-> 24.190.186.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:13:34.985787 0.039404 udp 10.0.2.22 51868 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:13:35.974292 0.000000 udp 10.0.2.22 51868 -> 98.250.1.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:13:55.461778 0.000000 udp 10.0.2.22 51868 <- 98.250.1.250 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:13:56.271818 0.000000 udp 10.0.2.22 51868 -> 14.97.19.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:13:57.256416 0.000000 udp 10.0.2.22 51868 -> 174.59.159.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:13:58.239519 0.308225 udp 10.0.2.22 51868 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:13:59.233430 0.673232 udp 10.0.2.22 51868 <-> 111.248.57.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:14:00.212032 0.573974 udp 10.0.2.22 51868 <-> 185.25.87.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:14:01.199629 0.175715 udp 10.0.2.22 51868 <-> 68.184.203.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:14:02.186106 1.717244 udp 10.0.2.22 51868 <-> 186.206.236.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:14:03.171861 0.000000 udp 10.0.2.22 51868 -> 68.200.123.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:14:04.156037 0.214150 udp 10.0.2.22 51868 <-> 186.95.213.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:14:05.139214 0.000000 udp 10.0.2.22 51868 -> 67.59.37.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:14:06.119307 0.093181 udp 10.0.2.22 51868 <-> 82.235.20.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:14:07.108164 0.046683 udp 10.0.2.22 51868 <-> 178.148.77.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:14:08.095998 3.497781 udp 10.0.2.22 51868 <-> 77.52.32.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:14:12.365465 0.329907 udp 10.0.2.22 51868 <-> 181.168.18.6 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:14:13.350865 0.223377 udp 10.0.2.22 51868 <-> 31.222.103.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:14:14.335457 0.160209 udp 10.0.2.22 51868 -> 70.239.13.0 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:14:14.495666 0.000000 icmp 70.239.13.0 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 11:14:15.321545 0.306728 udp 10.0.2.22 51868 -> 177.6.47.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:14:15.628273 0.000000 icmp 177.6.47.236 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 11:14:16.182831 0.000082 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:14:16.301756 0.126933 udp 10.0.2.22 51868 <-> 24.222.116.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:14:17.290776 0.000000 udp 10.0.2.22 51868 -> 74.132.164.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:14:18.278405 0.034475 udp 10.0.2.22 51868 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:14:19.264953 2.928790 udp 10.0.2.22 51868 <-> 201.231.197.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:14:23.625256 0.000000 udp 10.0.2.22 51868 -> 47.16.247.243 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:14:24.598101 1.124860 udp 10.0.2.22 51868 <-> 173.220.69.174 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:14:26.559215 0.050884 udp 10.0.2.22 51868 <-> 78.28.15.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:14:27.547247 0.511494 udp 10.0.2.22 51868 <-> 115.242.194.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:14:28.533594 0.263668 udp 10.0.2.22 51868 <-> 31.147.61.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:14:29.518878 0.000000 udp 10.0.2.22 51868 -> 72.188.185.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:14:41.907914 0.000000 udp 10.0.2.22 51868 <- 72.188.185.26 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:14:42.734776 0.057868 udp 10.0.2.22 51868 <-> 188.24.11.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:14:43.736315 0.000000 udp 10.0.2.22 51868 -> 24.231.62.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:14:48.948423 0.000000 udp 10.0.2.22 51868 -> 185.13.243.78 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:14:49.190620 0.000000 udp 10.0.2.22 51868 <- 24.231.62.34 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:14:49.929306 0.099184 udp 10.0.2.22 51868 <-> 78.242.194.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:14:50.918907 3.258419 udp 10.0.2.22 51868 <-> 213.60.233.50 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:14:55.090837 0.159287 udp 10.0.2.22 51868 <-> 71.195.155.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:14:56.077443 0.076157 udp 10.0.2.22 51868 <-> 77.239.28.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:14:57.062890 0.000000 udp 10.0.2.22 51868 -> 120.138.104.99 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:14:58.047538 0.170511 udp 10.0.2.22 51868 <-> 49.204.179.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:14:59.028356 0.218813 udp 10.0.2.22 51868 <-> 186.95.213.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:15:00.018125 3.089708 udp 10.0.2.22 51868 <-> 94.253.205.252 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:15:01.006821 0.134328 udp 10.0.2.22 51868 <-> 68.83.124.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:15:01.994524 0.000000 udp 10.0.2.22 51868 -> 27.3.107.225 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:15:03.966634 0.000000 udp 10.0.2.22 51868 -> 49.107.6.226 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:15:04.821791 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:15:04.950707 0.000000 udp 10.0.2.22 51868 -> 24.145.54.236 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:15:05.931579 0.033729 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:15:06.921238 0.000000 udp 10.0.2.22 51868 -> 190.38.66.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:15:07.909873 0.000000 udp 10.0.2.22 51868 -> 62.99.108.243 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:15:08.897574 0.047994 udp 10.0.2.22 51868 <-> 85.232.150.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:15:09.884179 1.458135 udp 10.0.2.22 51868 <-> 190.79.124.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:15:10.869431 0.065106 udp 10.0.2.22 51868 <-> 5.43.104.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:15:11.853891 2.008371 udp 10.0.2.22 51868 <-> 92.32.25.62 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:15:14.759376 0.046544 udp 10.0.2.22 51868 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:15:15.749035 0.000000 udp 10.0.2.22 51868 -> 122.131.251.232 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:15:58.564711 0.000000 udp 10.0.2.22 51868 <- 122.131.251.232 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:15:59.228137 0.096940 udp 10.0.2.22 51868 <-> 82.235.20.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:16:00.205495 0.000000 udp 10.0.2.22 51868 -> 95.86.74.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:16:11.598051 0.000000 udp 10.0.2.22 51868 <- 95.86.74.2 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:16:12.504649 0.002033 udp 10.0.2.22 51868 <-> 109.239.76.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:16:13.506062 0.034808 udp 10.0.2.22 51868 <-> 84.252.26.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:16:14.507626 0.000000 udp 10.0.2.22 51868 -> 14.98.186.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:16:15.499061 0.000000 udp 10.0.2.22 51868 -> 66.224.248.82 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:16:16.500175 0.065072 udp 10.0.2.22 51868 <-> 89.234.212.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:16:17.501695 0.212991 udp 10.0.2.22 51868 <-> 24.21.223.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:16:18.503012 0.178730 udp 10.0.2.22 51868 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:16:19.504708 0.114864 udp 10.0.2.22 51868 <-> 188.28.198.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:16:20.505769 0.000000 udp 10.0.2.22 51868 -> 177.138.96.92 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:16:21.507623 0.165476 udp 10.0.2.22 51868 <-> 217.202.44.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:16:22.498734 0.098884 udp 10.0.2.22 51868 <-> 83.252.33.114 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:16:23.500650 0.311666 udp 10.0.2.22 51868 <-> 49.206.17.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:16:24.501841 4.510004 udp 10.0.2.22 51868 <-> 115.240.209.204 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:16:27.840517 0.000000 udp 10.0.2.22 51868 -> 111.254.125.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:16:28.828655 0.162236 udp 10.0.2.22 51868 <-> 174.108.49.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:16:29.686855 1.110049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:16:30.915474 0.163900 udp 10.0.2.22 51868 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:16:31.899520 2.785474 udp 10.0.2.22 51868 <-> 94.253.231.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:16:35.586092 0.062488 udp 10.0.2.22 51868 <-> 212.75.2.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:16:37.563959 0.000079 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:16:37.564038 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:16:38.551372 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:16:39.537721 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:16:40.522752 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:16:41.506889 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:16:42.487618 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:16:43.477077 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:16:44.465142 0.158610 udp 10.0.2.22 51868 <-> 98.193.134.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:16:45.452417 0.000000 udp 10.0.2.22 51868 -> 75.76.137.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:16:46.438805 0.985213 udp 10.0.2.22 51868 <-> 78.159.43.12 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:16:48.407973 0.151373 udp 10.0.2.22 51868 <-> 69.183.230.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:16:49.388661 0.067294 udp 10.0.2.22 51868 <-> 83.213.107.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:16:50.378135 0.000000 udp 10.0.2.22 51868 -> 219.162.244.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:16:56.750629 0.000000 udp 10.0.2.22 51868 <- 219.162.244.34 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:16:58.014343 0.238493 udp 10.0.2.22 51868 <-> 75.50.181.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:16:58.991678 0.168293 udp 10.0.2.22 51868 <-> 71.89.26.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:16:59.977998 0.388754 udp 10.0.2.22 51868 <-> 74.196.148.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:17:00.963077 0.054522 udp 10.0.2.22 51868 <-> 46.55.146.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:17:01.947063 0.980578 udp 10.0.2.22 51868 <-> 88.216.4.151 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:17:19.396515 0.000000 udp 10.0.2.22 51868 <- 88.216.4.151 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:17:20.256999 0.210976 udp 10.0.2.22 51868 <-> 74.193.59.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:17:21.245266 0.139356 udp 10.0.2.22 51868 <-> 24.229.141.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:17:22.232331 0.343447 udp 10.0.2.22 51868 <-> 187.5.145.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:17:23.089470 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:17:23.218390 0.078203 udp 10.0.2.22 51868 <-> 77.4.115.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:17:24.203283 0.000000 udp 10.0.2.22 51868 -> 69.31.160.174 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:17:25.187266 0.000000 udp 10.0.2.22 51868 -> 177.80.138.178 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:17:26.167525 0.301937 udp 10.0.2.22 51868 <-> 124.102.89.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:17:27.157022 0.149084 udp 10.0.2.22 51868 <-> 96.23.154.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:17:28.145119 2.127062 udp 10.0.2.22 51868 <-> 216.115.131.145 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:17:29.131646 0.000000 udp 10.0.2.22 51868 -> 188.28.192.1 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:17:31.104378 4.534977 udp 10.0.2.22 51868 <-> 176.201.32.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:17:32.088365 0.151932 udp 10.0.2.22 51868 <-> 174.99.98.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:17:33.068502 0.052848 udp 10.0.2.22 51868 <-> 95.76.49.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:17:34.057492 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:17:35.046584 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:17:36.130371 1.711800 udp 10.0.2.22 51868 <-> 190.16.162.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:17:37.116366 0.000000 udp 10.0.2.22 51868 -> 2.238.184.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:17:38.103997 0.071031 udp 10.0.2.22 51868 <-> 91.65.196.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:17:39.088032 0.135754 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:17:40.068658 0.000000 udp 10.0.2.22 51868 -> 71.77.141.55 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:17:41.057842 0.079380 udp 10.0.2.22 51868 <-> 78.28.15.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:17:42.045937 0.345411 udp 10.0.2.22 51868 <-> 121.124.80.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:17:43.032909 0.000000 udp 10.0.2.22 51868 -> 87.6.66.35 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:17:44.018978 0.264420 udp 10.0.2.22 51868 <-> 190.195.85.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:17:45.004017 2.026732 udp 10.0.2.22 51868 <-> 86.125.184.50 16464 CON 0 0 5 2786 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:17:45.988616 1.098580 udp 10.0.2.22 51868 <-> 181.166.124.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:17:47.958573 0.143593 udp 10.0.2.22 51868 <-> 71.77.141.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:17:48.946761 0.053118 udp 10.0.2.22 51868 <-> 78.28.15.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:17:49.808114 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:17:49.937043 0.345882 udp 10.0.2.22 51868 <-> 111.254.184.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:17:52.477717 0.169885 udp 10.0.2.22 51868 <-> 66.68.188.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:17:53.453059 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:17:54.437077 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:17:55.419516 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:17:56.408792 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:17:57.396674 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:17:58.383491 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:17:59.372206 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:18:00.357242 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:18:01.341633 0.000090 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:18:01.341723 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:18:02.321640 1.981245 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:18:03.310758 0.087637 udp 10.0.2.22 51868 <-> 37.235.189.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:18:05.289791 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:18:41.994027 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:18:43.035697 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:18:45.808765 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:18:47.780657 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:18:48.770170 0.000043 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:18:48.770213 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:18:49.758317 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:18:50.745956 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:18:51.732290 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:18:52.725390 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:18:53.707853 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:18:54.698408 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:18:55.568719 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:18:55.687863 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:18:56.676542 0.069470 udp 10.0.2.22 51868 <-> 85.84.89.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:18:57.664202 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:18:58.650558 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:00.624126 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:01.614767 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:02.604017 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:03.592686 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:04.580313 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:05.566714 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:06.549266 0.000056 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:06.549322 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:19:07.540510 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:08.535487 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:09.525113 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:10.513745 4.938586 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:11.501552 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:12.487880 0.000000 udp 10.0.2.22 51868 -> 37.203.120.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:13.470281 0.075596 udp 10.0.2.22 51868 <-> 85.84.89.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:19:14.461713 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:16.441719 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:17.430184 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:18.417492 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:19.403900 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:20.386217 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:21.377575 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:22.248548 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:19:22.367676 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:23.357069 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:24.345398 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:25.332947 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:26.319500 3.953579 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:27.301777 0.000113 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:27.301890 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:19:28.293237 0.069194 udp 10.0.2.22 51868 <-> 85.84.89.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:19:29.283847 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:31.261175 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:32.248656 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:33.234889 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:34.217460 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:35.208510 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:36.198850 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:37.187907 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:38.176488 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:39.164078 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:40.150738 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:41.133138 0.000068 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:41.133206 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:19:43.113964 0.060503 udp 10.0.2.22 51868 <-> 37.203.120.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:19:44.103289 0.169044 udp 10.0.2.22 51868 <-> 46.233.24.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:19:45.091512 3.285381 udp 10.0.2.22 51868 <-> 85.84.235.254 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:19:46.078870 0.364606 udp 10.0.2.22 51868 <-> 186.122.172.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:19:47.065459 2.963318 udp 10.0.2.22 51868 <-> 86.126.32.58 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:19:48.919435 0.000111 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:19:49.038706 0.000000 udp 10.0.2.22 51868 -> 201.95.144.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:51.017996 0.308483 udp 10.0.2.22 51868 <-> 201.208.173.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:19:52.006390 0.225847 udp 10.0.2.22 51868 <-> 46.155.211.8 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:19:52.993737 0.245383 udp 10.0.2.22 51868 <-> 161.200.173.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:19:53.980006 0.064861 udp 10.0.2.22 51868 <-> 94.156.49.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:19:54.962116 0.000000 udp 10.0.2.22 51868 -> 181.16.84.173 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:55.953293 0.000000 udp 10.0.2.22 51868 -> 76.246.157.91 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:56.943476 0.259143 udp 10.0.2.22 51868 <-> 91.82.39.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:19:57.933021 0.463717 udp 10.0.2.22 51868 <-> 186.88.174.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:19:58.921191 0.000000 udp 10.0.2.22 51868 -> 186.18.76.183 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:19:59.908646 2.309837 udp 10.0.2.22 51868 <-> 189.92.130.184 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:00.894929 0.000000 udp 10.0.2.22 51868 -> 95.169.196.132 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:20:02.868092 0.451700 udp 10.0.2.22 51868 <-> 186.93.121.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:03.858312 0.181486 udp 10.0.2.22 51868 <-> 65.32.237.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:04.847418 0.000000 udp 10.0.2.22 51868 -> 76.123.129.230 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:20:05.835826 0.068074 udp 10.0.2.22 51868 <-> 78.52.41.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:06.822901 0.194168 udp 10.0.2.22 51868 <-> 99.141.253.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:07.809618 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:20:08.791765 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:20:09.782704 0.000040 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:20:09.782744 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:20:10.773315 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:20:11.761920 0.000000 udp 10.0.2.22 51868 -> 172.243.169.7 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:20:12.750101 0.162667 udp 10.0.2.22 51868 <-> 98.243.26.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:13.737339 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:20:14.723634 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:20:15.586353 0.000039 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:20:15.705488 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:20:17.686388 0.000000 udp 10.0.2.22 51868 -> 172.243.169.7 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:20:18.675542 0.206564 udp 10.0.2.22 51868 <-> 69.247.73.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:19.663977 0.293009 udp 10.0.2.22 51868 <-> 200.84.79.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:20.651687 1.971326 udp 10.0.2.22 51868 -> 111.240.40.248 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:20:21.641116 0.085619 udp 10.0.2.22 51868 <-> 84.237.172.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:22.746416 0.000000 udp 10.0.2.22 51868 <- 172.243.169.7 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:20:23.613736 0.399977 udp 10.0.2.22 51868 <-> 37.45.182.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:24.603575 0.101474 udp 10.0.2.22 51868 <-> 93.191.98.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:25.592348 0.176250 udp 10.0.2.22 51868 <-> 135.19.5.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:26.579744 0.048537 udp 10.0.2.22 51868 <-> 93.79.47.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:26.999430 2.961599 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 11:20:27.566595 0.159391 udp 10.0.2.22 51868 <-> 71.13.218.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:28.386227 0.000000 udp 10.0.2.22 51868 <- 172.243.169.7 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:20:28.552468 0.213302 udp 10.0.2.22 51868 <-> 76.14.200.201 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:29.534150 0.046413 udp 10.0.2.22 51868 <-> 46.237.76.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:30.525080 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:20:31.514551 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:20:32.503261 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:20:33.491329 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:20:33.917962 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:20:34.478063 0.306033 udp 10.0.2.22 51868 <-> 184.162.187.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:35.464114 0.190910 udp 10.0.2.22 51868 <-> 134.129.72.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:36.445870 0.000000 udp 10.0.2.22 51868 -> 31.47.27.101 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:20:37.436771 0.140232 udp 10.0.2.22 51868 <-> 92.228.55.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:38.426459 0.057975 udp 10.0.2.22 51868 <-> 87.121.149.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:39.415241 1.210772 udp 10.0.2.22 51868 <-> 95.88.209.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:40.403380 0.067663 udp 10.0.2.22 51868 <-> 31.222.118.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:41.390021 0.202418 udp 10.0.2.22 51868 <-> 113.193.40.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:41.816824 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:20:42.246932 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:20:42.376007 0.410959 udp 10.0.2.22 51868 <-> 122.63.239.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:43.358132 0.109827 udp 10.0.2.22 51868 <-> 82.53.63.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:44.348599 0.145066 udp 10.0.2.22 51868 <-> 24.154.53.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:45.338395 0.273058 udp 10.0.2.22 51868 <-> 72.47.26.120 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:46.327265 0.158937 udp 10.0.2.22 51868 <-> 49.207.122.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:47.315151 0.151350 udp 10.0.2.22 51868 <-> 24.59.225.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:48.301712 0.187100 udp 10.0.2.22 51868 <-> 182.156.224.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:49.287906 0.300098 udp 10.0.2.22 51868 <-> 219.106.157.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:50.269857 0.061504 udp 10.0.2.22 51868 <-> 188.25.121.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:51.260773 2.966543 udp 10.0.2.22 51868 -> 114.43.0.30 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:20:52.250386 0.000000 udp 10.0.2.22 51868 -> 80.54.213.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:20:53.239187 0.201494 udp 10.0.2.22 51868 <-> 76.189.34.36 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:55.214584 0.038973 udp 10.0.2.22 51868 <-> 94.73.1.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:56.200628 0.020347 udp 10.0.2.22 51868 <-> 149.172.60.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:57.182054 1.062129 udp 10.0.2.22 51868 <-> 188.171.29.237 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:20:57.618802 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:20:59.162396 0.157425 udp 10.0.2.22 51868 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:00.151169 0.154575 udp 10.0.2.22 51868 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:01.138870 0.361204 udp 10.0.2.22 51868 <-> 201.248.21.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:02.125141 0.170616 udp 10.0.2.22 51868 <-> 67.148.202.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:03.110905 0.000000 udp 10.0.2.22 51868 -> 187.101.238.31 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:21:04.092583 0.111504 udp 10.0.2.22 51868 <-> 85.152.63.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:05.083441 0.322251 udp 10.0.2.22 51868 <-> 150.162.192.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:06.072983 0.065260 udp 10.0.2.22 51868 <-> 78.28.15.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:07.061564 0.159503 udp 10.0.2.22 51868 <-> 108.170.53.186 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:08.049529 0.121066 udp 10.0.2.22 51868 <-> 95.133.193.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:08.907408 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:21:09.036472 0.393347 udp 10.0.2.22 51868 <-> 187.105.33.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:10.022146 1.166901 udp 10.0.2.22 51868 <-> 166.230.66.56 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:11.994077 0.292248 udp 10.0.2.22 51868 <-> 70.82.157.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:12.991474 0.000000 udp 10.0.2.22 51868 -> 92.41.207.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:21:13.992935 0.156513 udp 10.0.2.22 51868 <-> 97.100.98.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:14.994739 0.158527 udp 10.0.2.22 51868 <-> 76.112.187.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:15.995733 0.165411 udp 10.0.2.22 51868 <-> 74.193.110.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:16.997092 0.186113 udp 10.0.2.22 51868 <-> 74.56.240.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:17.988325 0.000000 udp 10.0.2.22 51868 -> 188.2.139.161 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:21:18.990294 0.315331 udp 10.0.2.22 51868 <-> 182.165.97.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:19.991156 0.202645 udp 10.0.2.22 51868 <-> 66.184.241.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:20.992981 0.000000 udp 10.0.2.22 51868 -> 147.32.83.216 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:21:21.994044 0.246322 udp 10.0.2.22 51868 <-> 190.181.150.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:22.995858 0.062485 udp 10.0.2.22 51868 <-> 62.57.52.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:23.996795 0.000000 udp 10.0.2.22 51868 -> 201.235.95.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:21:24.988529 1.094073 udp 10.0.2.22 51868 <-> 62.99.108.243 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:26.991257 0.000000 udp 10.0.2.22 51868 -> 14.96.192.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:21:27.992541 0.057869 udp 10.0.2.22 51868 <-> 5.13.57.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:28.994168 0.067724 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:29.434782 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:21:29.995210 0.000000 udp 10.0.2.22 51868 -> 178.90.11.35 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:21:30.996904 0.000000 udp 10.0.2.22 51868 -> 69.204.114.84 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:21:31.988435 1.067403 udp 10.0.2.22 51868 <-> 85.86.106.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:32.989785 0.056032 udp 10.0.2.22 51868 <-> 5.15.233.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:33.991722 0.000000 udp 10.0.2.22 51868 -> 195.0.170.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:21:34.992503 4.997535 udp 10.0.2.22 51868 <-> 177.230.92.237 16464 CON 0 0 5 1954 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:35.864387 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:21:35.994625 0.067348 udp 10.0.2.22 51868 <-> 62.83.219.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:36.995934 0.225822 udp 10.0.2.22 51868 <-> 76.113.45.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:38.988484 0.000000 udp 10.0.2.22 51868 -> 148.204.134.29 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:21:40.199425 0.000000 udp 10.0.2.22 51868 <- 177.230.92.237 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:21:40.991756 0.000000 udp 10.0.2.22 51868 -> 195.0.170.28 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:21:41.992971 0.166250 udp 10.0.2.22 51868 <-> 96.20.86.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:42.994391 2.994264 udp 10.0.2.22 51868 -> 79.118.114.37 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:21:43.996239 0.330470 udp 10.0.2.22 51868 <-> 37.238.253.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:44.987268 0.062299 udp 10.0.2.22 51868 <-> 5.15.135.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:46.992073 0.194539 udp 10.0.2.22 51868 <-> 69.208.5.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:47.992376 0.169200 udp 10.0.2.22 51868 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:48.994352 0.248990 udp 10.0.2.22 51868 <-> 68.127.91.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:49.994222 0.028507 udp 10.0.2.22 51868 <-> 77.70.5.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:50.996033 0.000000 udp 10.0.2.22 51868 -> 84.124.183.72 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:21:51.987270 0.316735 udp 10.0.2.22 51868 <-> 58.3.144.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:52.988521 0.178091 udp 10.0.2.22 51868 <-> 197.206.38.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:53.990354 0.159679 udp 10.0.2.22 51868 <-> 76.119.125.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:54.991783 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:21:55.993314 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:21:56.994560 0.089346 udp 10.0.2.22 51868 <-> 87.0.238.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:57.995375 0.189017 udp 10.0.2.22 51868 <-> 98.173.95.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:58.987185 0.158885 udp 10.0.2.22 51868 <-> 79.2.118.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:21:59.988900 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:00.990414 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:01.991934 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:02.862716 0.000105 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:22:02.993446 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:03.994465 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:04.995383 4.997642 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:05.987260 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:06.988667 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:07.990259 0.317917 udp 10.0.2.22 51868 <-> 69.208.5.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:22:08.992056 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:10.994438 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:11.996119 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:12.987662 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:13.988854 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:14.990350 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:15.991799 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:16.993149 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:17.994533 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:18.995885 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:19.987441 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:20.989135 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:21.990575 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:23.993173 0.082198 udp 10.0.2.22 51868 <-> 79.112.143.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:22:24.994627 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:25.996207 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:26.987539 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:27.989174 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:29.862372 0.000108 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:22:29.992414 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:30.993053 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:31.994700 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:32.996060 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:33.987903 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:34.989207 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:35.990728 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:36.991991 0.000063 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:36.992054 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:22:37.993108 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:38.995016 1.001108 udp 10.0.2.22 51868 <-> 79.112.143.52 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:22:40.987733 0.479867 udp 10.0.2.22 51868 <-> 69.208.5.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:22:41.989345 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:42.990629 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:43.991883 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:44.993205 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:45.995121 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:46.996224 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:47.987594 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:48.989237 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:49.990770 0.000048 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:49.990818 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:22:51.993163 0.077030 udp 10.0.2.22 51868 <-> 79.101.3.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:22:52.994725 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:53.996267 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:54.987908 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:55.989780 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:56.870592 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:22:56.990513 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:57.992663 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:58.993942 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:22:59.994964 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:00.996277 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:02.989190 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:03.990807 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:04.992238 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:05.993972 0.000074 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:05.994046 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:23:06.995313 1.992499 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:07.996512 0.332107 udp 10.0.2.22 51868 <-> 69.208.5.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:23:09.994191 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:10.994724 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:11.995088 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:13.995089 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:14.996651 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:15.987870 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:16.989190 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:17.990773 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:18.992370 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:19.993948 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:20.995005 0.000054 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:20.995059 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:23:21.996606 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:22.988112 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:23.869643 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:23:23.989874 0.077579 udp 10.0.2.22 51868 <-> 79.101.3.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:23:24.991161 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:25.992300 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:26.993907 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:27.995012 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:28.996648 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:29.987893 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:30.989581 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:31.990847 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:32.992503 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:33.994087 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:34.995237 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:35.996850 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:36.990877 0.000112 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:36.990989 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:23:38.992192 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:39.992492 0.090265 udp 10.0.2.22 51868 <-> 79.112.143.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:23:40.994041 0.288404 udp 10.0.2.22 51868 <-> 69.208.5.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:23:41.995557 0.235853 udp 10.0.2.22 51868 <-> 177.54.140.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:23:42.996942 0.342080 udp 10.0.2.22 51868 <-> 117.194.72.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:23:43.988090 0.133634 udp 10.0.2.22 51868 <-> 178.121.173.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:23:44.992578 0.029009 udp 10.0.2.22 51868 <-> 95.111.109.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:23:45.993123 0.399987 udp 10.0.2.22 51868 <-> 211.74.92.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:23:46.993131 0.157832 udp 10.0.2.22 51868 <-> 97.68.127.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:23:47.994147 0.186763 udp 10.0.2.22 51868 <-> 2.192.229.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:23:48.995359 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:49.996959 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:50.868120 0.000037 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:23:50.988058 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:51.989847 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:52.991184 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:53.992711 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:54.994173 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:23:55.995213 0.037450 udp 10.0.2.22 51868 <-> 46.40.104.124 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:23:56.997063 0.265823 udp 10.0.2.22 51868 <-> 181.29.200.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:23:57.988481 0.214445 udp 10.0.2.22 51868 <-> 24.21.31.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:23:58.990068 0.053280 udp 10.0.2.22 51868 <-> 92.237.138.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:23:59.991670 0.204006 udp 10.0.2.22 51868 <-> 109.72.59.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:00.992927 0.156232 udp 10.0.2.22 51868 <-> 69.244.114.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:01.994431 0.000000 udp 10.0.2.22 51868 -> 186.22.32.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:24:02.995900 2.783419 udp 10.0.2.22 51868 <-> 75.246.254.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:03.998765 0.140875 udp 10.0.2.22 51868 <-> 85.219.46.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:04.989916 0.032135 udp 10.0.2.22 51868 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:05.990768 0.151037 udp 10.0.2.22 51868 <-> 98.213.124.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:06.990977 1.259295 udp 10.0.2.22 51868 <-> 187.245.97.11 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:08.994255 0.090178 udp 10.0.2.22 51868 <-> 84.125.139.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:09.995311 0.090552 udp 10.0.2.22 51868 <-> 88.172.136.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:10.987025 0.974252 udp 10.0.2.22 51868 <-> 24.51.69.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:11.988333 0.032246 udp 10.0.2.22 51868 <-> 109.199.149.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:12.990138 0.176659 udp 10.0.2.22 51868 <-> 136.159.63.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:13.991706 0.450546 udp 10.0.2.22 51868 <-> 114.49.7.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:14.993044 0.000000 udp 10.0.2.22 51868 -> 14.97.19.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:24:15.994101 0.000000 udp 10.0.2.22 51868 -> 24.232.19.31 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:24:16.995303 0.144783 udp 10.0.2.22 51868 <-> 107.10.164.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:17.866880 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:24:17.987087 0.258862 udp 10.0.2.22 51868 <-> 186.92.54.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:18.988653 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:24:19.990299 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:24:20.991786 0.000000 udp 10.0.2.22 51868 -> 218.215.171.111 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:24:21.993170 1.001311 udp 10.0.2.22 51868 <-> 61.64.169.110 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:23.995751 0.262325 udp 10.0.2.22 51868 <-> 186.92.54.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:24.986966 0.000000 udp 10.0.2.22 51868 -> 84.124.183.72 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:24:25.988762 0.000000 udp 10.0.2.22 51868 -> 124.121.210.116 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:24:26.990297 0.000000 udp 10.0.2.22 51868 -> 108.46.251.156 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:24:27.991325 3.004614 udp 10.0.2.22 51868 -> 2.177.249.115 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:24:28.993115 0.000000 udp 10.0.2.22 51868 -> 75.197.19.113 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:24:29.994391 0.062109 udp 10.0.2.22 51868 <-> 5.15.135.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:31.987127 0.095521 udp 10.0.2.22 51868 <-> 212.122.101.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:32.988559 0.152940 udp 10.0.2.22 51868 <-> 98.223.203.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:33.996817 0.221630 udp 10.0.2.22 51868 <-> 64.183.30.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:34.996856 0.120166 udp 10.0.2.22 51868 <-> 79.1.147.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:35.995856 0.325296 udp 10.0.2.22 51868 <-> 190.78.151.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:36.995885 0.193201 udp 10.0.2.22 51868 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:37.995300 0.000000 udp 10.0.2.22 51868 -> 181.16.55.53 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:24:38.987254 0.035116 udp 10.0.2.22 51868 <-> 84.252.26.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:39.989554 0.000000 udp 10.0.2.22 51868 -> 95.180.191.25 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:24:40.990291 4.997332 udp 10.0.2.22 51868 <-> 76.169.58.24 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:41.991554 0.165001 udp 10.0.2.22 51868 <-> 173.174.185.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:42.993094 0.184728 udp 10.0.2.22 51868 <-> 184.160.92.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:43.994727 0.064942 udp 10.0.2.22 51868 <-> 84.54.171.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:44.865072 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:24:44.995373 0.000000 udp 10.0.2.22 51868 -> 95.180.191.25 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:24:46.199184 0.000000 udp 10.0.2.22 51868 <- 76.169.58.24 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:24:46.988621 1.325300 udp 10.0.2.22 51868 <-> 201.235.95.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:47.990769 0.901551 udp 10.0.2.22 51868 <-> 181.72.115.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:48.991786 0.000000 udp 10.0.2.22 51868 -> 76.254.100.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:24:49.993461 0.000000 udp 10.0.2.22 51868 -> 82.243.94.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:24:50.994627 0.062442 udp 10.0.2.22 51868 <-> 86.125.184.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:51.995604 0.335230 udp 10.0.2.22 51868 <-> 123.110.11.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:52.987490 0.000000 udp 10.0.2.22 51868 -> 95.180.191.25 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:24:53.989031 0.119417 udp 10.0.2.22 51868 <-> 84.228.222.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:54.990272 0.165712 udp 10.0.2.22 51868 <-> 173.174.185.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:55.991797 0.867957 udp 10.0.2.22 51868 <-> 181.16.55.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:56.993512 0.361332 udp 10.0.2.22 51868 <-> 190.206.217.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:57.994680 1.669911 udp 10.0.2.22 51868 <-> 186.206.236.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:58.995896 0.199439 udp 10.0.2.22 51868 <-> 173.80.197.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:24:59.987710 0.000000 udp 10.0.2.22 51868 -> 69.70.166.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:25:00.988815 0.138471 udp 10.0.2.22 51868 <-> 47.16.247.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:01.990485 0.164885 udp 10.0.2.22 51868 <-> 71.199.218.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:02.991965 0.289776 udp 10.0.2.22 51868 <-> 179.208.248.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:03.993396 0.377228 udp 10.0.2.22 51868 <-> 201.46.181.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:04.994667 0.000000 udp 10.0.2.22 51868 -> 91.89.7.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:25:05.996096 0.078894 udp 10.0.2.22 51868 <-> 94.34.154.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:06.987818 0.046877 udp 10.0.2.22 51868 <-> 95.87.232.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:07.989083 0.000000 udp 10.0.2.22 51868 -> 181.208.87.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:25:08.990454 0.099153 udp 10.0.2.22 51868 <-> 178.137.200.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:09.992103 0.160416 udp 10.0.2.22 51868 <-> 174.64.185.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:10.993963 0.349205 udp 10.0.2.22 51868 <-> 111.242.31.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:11.864418 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:25:11.994983 0.163904 udp 10.0.2.22 51868 <-> 71.70.83.28 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:12.996333 0.085240 udp 10.0.2.22 51868 <-> 85.86.241.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:13.987561 0.168967 udp 10.0.2.22 51868 <-> 75.15.64.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:14.989207 0.010552 udp 10.0.2.22 51868 <-> 178.21.51.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:15.990774 0.192377 udp 10.0.2.22 51868 <-> 98.176.21.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:16.992108 0.213676 udp 10.0.2.22 51868 <-> 24.9.113.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:17.993785 0.636072 udp 10.0.2.22 51868 <-> 190.201.56.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:18.995005 4.997317 udp 10.0.2.22 51868 -> 94.197.154.57 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:25:19.996196 0.170180 udp 10.0.2.22 51868 <-> 109.67.249.137 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:20.987922 0.155816 udp 10.0.2.22 51868 <-> 24.102.154.241 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:21.989013 0.076731 udp 10.0.2.22 51868 <-> 134.249.0.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:22.990697 0.000000 udp 10.0.2.22 51868 -> 76.5.98.57 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:25:24.995936 0.143149 udp 10.0.2.22 51868 <-> 71.225.111.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:25.402621 0.000000 udp 10.0.2.22 51868 <- 94.197.154.57 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:25:25.995984 0.329829 udp 10.0.2.22 51868 <-> 111.252.37.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:26.996288 4.997388 udp 10.0.2.22 51868 -> 95.169.196.132 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:25:27.987633 3.076399 udp 10.0.2.22 51868 <-> 134.249.0.46 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:28.989424 0.685776 udp 10.0.2.22 51868 <-> 190.201.56.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:29.990629 0.000000 udp 10.0.2.22 51868 -> 184.149.146.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:25:32.324360 0.023134 udp 10.0.2.22 60074 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 11:25:32.347808 0.000000 udp 10.0.2.22 60075 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:25:32.994939 1.185256 udp 10.0.2.22 51868 <-> 181.29.6.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:33.996455 0.200309 udp 10.0.2.22 51868 <-> 76.115.104.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:34.987749 0.139454 udp 10.0.2.22 51868 <-> 75.130.142.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:35.989250 1.388744 udp 10.0.2.22 51868 <-> 186.206.236.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:36.990856 0.292771 udp 10.0.2.22 51868 <-> 220.216.24.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:37.992032 0.214936 udp 10.0.2.22 51868 <-> 190.252.196.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:38.863470 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:25:38.993808 0.000000 udp 10.0.2.22 51868 -> 75.197.126.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:25:39.994918 0.053203 udp 10.0.2.22 51868 <-> 188.241.10.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:40.996535 0.000000 udp 10.0.2.22 51868 -> 76.20.186.162 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:25:41.987760 0.358701 udp 10.0.2.22 51868 <-> 186.92.60.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:42.989255 0.207489 udp 10.0.2.22 51868 <-> 98.234.99.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:43.990746 0.244689 udp 10.0.2.22 51868 <-> 69.31.247.224 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:44.992232 0.324129 udp 10.0.2.22 51868 <-> 180.71.25.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:45.993481 0.058104 udp 10.0.2.22 51868 <-> 176.73.209.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:46.995052 0.159080 udp 10.0.2.22 51868 <-> 62.83.219.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:47.996726 0.991226 udp 10.0.2.22 51868 <-> 178.167.135.104 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:49.989776 0.193635 udp 10.0.2.22 51868 <-> 190.219.0.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:50.991172 1.053340 udp 10.0.2.22 51868 <-> 190.203.207.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:51.992610 0.380364 udp 10.0.2.22 51868 <-> 75.253.15.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:52.993918 0.143101 udp 10.0.2.22 51868 <-> 24.201.226.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:53.995152 0.000000 udp 10.0.2.22 51868 -> 88.254.143.69 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:25:54.996698 0.394774 udp 10.0.2.22 51868 <-> 61.223.170.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:55.988100 0.377440 udp 10.0.2.22 51868 <-> 2.185.117.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:56.989662 0.043269 udp 10.0.2.22 51868 <-> 92.36.233.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:57.991187 4.996921 udp 10.0.2.22 51868 <-> 79.50.212.236 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:25:58.995991 0.000000 udp 10.0.2.22 51868 -> 189.94.168.238 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:25:59.996080 0.314325 udp 10.0.2.22 51868 <-> 46.224.243.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:26:00.996016 0.000000 udp 10.0.2.22 51868 -> 79.115.191.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:01.996839 0.029072 udp 10.0.2.22 51868 <-> 78.42.232.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:26:03.113738 3.042337 udp 10.0.2.22 51868 <-> 79.50.212.236 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:26:03.989932 0.000000 udp 10.0.2.22 51868 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:04.991068 0.066909 udp 10.0.2.22 51868 <-> 93.105.14.115 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:26:05.862304 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:26:06.993851 0.049424 udp 10.0.2.22 51868 <-> 92.36.233.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:26:08.996744 0.421451 udp 10.0.2.22 51868 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:26:09.988363 0.163804 udp 10.0.2.22 51868 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:26:10.989671 0.262827 udp 10.0.2.22 51868 <-> 200.122.103.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:26:11.991163 0.165789 udp 10.0.2.22 51868 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:26:12.992643 0.398238 udp 10.0.2.22 51868 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:26:13.994132 0.293246 udp 10.0.2.22 51868 <-> 126.60.25.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:26:14.995624 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:15.996614 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:16.988200 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:17.989755 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:18.990903 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:19.992753 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:20.994269 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:21.995325 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:22.996942 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:23.988479 0.137860 udp 10.0.2.22 51868 <-> 195.62.0.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:26:24.989975 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:25.991130 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:26.992446 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:27.993878 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:28.995659 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:29.996728 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:30.988314 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:31.990105 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:32.870921 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:26:32.991011 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:33.992978 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:34.994033 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:36.996884 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:37.988461 0.000046 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:37.988507 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:26:38.989846 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:39.991235 0.079866 udp 10.0.2.22 51868 <-> 85.85.25.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:26:40.992781 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:41.994220 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:42.995170 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:43.986959 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:44.988602 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:45.989999 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:46.991785 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:47.992618 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:49.995782 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:50.987039 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:51.988462 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:52.989922 4.997263 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:53.991300 0.000052 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:53.991352 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:26:54.992914 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:55.994309 0.411257 udp 10.0.2.22 51868 <-> 218.226.32.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:26:56.996050 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:58.988953 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:26:59.869712 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:26:59.989965 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:00.991384 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:01.992970 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:02.994508 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:03.995713 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:04.987049 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:05.988633 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:06.990160 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:07.991638 0.000082 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:07.991720 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:27:08.993495 3.995607 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:09.994451 4.997127 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:10.995663 0.379291 udp 10.0.2.22 51868 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:27:11.987116 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:13.990426 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:15.993037 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:17.000325 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:18.000449 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:18.991645 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:19.992163 0.000072 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:19.992235 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:27:20.992416 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:21.992600 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:22.996282 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:23.996614 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:24.996235 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:25.991575 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:26.872372 0.000108 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:27:26.992658 0.498713 udp 10.0.2.22 51868 <-> 218.226.32.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:27:27.992756 0.000000 udp 10.0.2.22 51868 -> 195.62.0.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:28.992476 0.356288 udp 10.0.2.22 51868 <-> 46.155.211.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:27:29.993546 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:30.994747 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:31.996262 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:32.987539 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:33.440893 3.001714 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 11:27:33.988751 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:34.990477 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:35.991891 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:36.993077 0.000067 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:36.993144 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:27:37.994891 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:38.996258 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:39.987290 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:40.448172 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:27:40.989113 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:41.990516 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:42.992182 2.138948 udp 10.0.2.22 51868 <-> 195.62.0.2 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:27:45.996496 2.244360 udp 10.0.2.22 51868 <-> 24.209.250.28 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:27:46.987737 0.000000 udp 10.0.2.22 51868 -> 37.203.120.59 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:48.449912 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:27:48.990689 0.212386 udp 10.0.2.22 51868 <-> 98.242.27.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:27:49.991862 0.044113 udp 10.0.2.22 51868 <-> 89.136.139.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:27:50.993547 0.152229 udp 10.0.2.22 51868 <-> 24.231.152.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:27:51.994699 0.039903 udp 10.0.2.22 51868 <-> 89.40.179.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:27:52.996466 0.142619 udp 10.0.2.22 51868 <-> 66.209.141.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:27:53.867802 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:27:53.987749 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:54.989254 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:55.990619 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:56.991954 0.221683 udp 10.0.2.22 51868 <-> 190.80.114.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:27:57.994104 0.000000 udp 10.0.2.22 51868 -> 213.202.38.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:27:58.994910 4.048730 udp 10.0.2.22 51868 <-> 94.21.162.26 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:27:59.996547 2.130556 udp 10.0.2.22 51868 <-> 69.123.197.24 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:00.987770 0.273732 udp 10.0.2.22 51868 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:03.992156 0.036396 udp 10.0.2.22 51868 <-> 84.252.26.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:04.452597 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:28:04.994009 0.155124 udp 10.0.2.22 51868 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:05.995102 0.143443 udp 10.0.2.22 51868 <-> 97.81.201.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:06.996476 0.290103 udp 10.0.2.22 51868 <-> 210.191.155.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:07.987740 0.046721 udp 10.0.2.22 51868 <-> 89.230.29.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:08.989311 0.309061 udp 10.0.2.22 51868 <-> 180.56.125.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:09.990613 0.167475 udp 10.0.2.22 51868 <-> 76.122.95.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:10.992227 0.102205 udp 10.0.2.22 51868 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:11.994015 0.046734 udp 10.0.2.22 51868 <-> 92.108.115.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:12.995008 0.085985 udp 10.0.2.22 51868 <-> 217.217.124.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:13.996479 0.033606 udp 10.0.2.22 51868 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:14.987912 0.055402 udp 10.0.2.22 51868 <-> 84.55.62.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:15.989791 0.173651 udp 10.0.2.22 51868 <-> 184.156.13.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:16.990973 0.134824 udp 10.0.2.22 51868 <-> 91.89.7.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:17.992425 0.144212 udp 10.0.2.22 51868 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:18.994197 0.029217 udp 10.0.2.22 51868 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:19.994922 0.036908 udp 10.0.2.22 51868 <-> 87.254.183.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:20.866637 0.000093 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:28:20.996857 1.266005 udp 10.0.2.22 51868 <-> 98.100.21.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:21.987843 0.467001 udp 10.0.2.22 51868 <-> 77.45.49.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:22.989730 0.000000 udp 10.0.2.22 51868 -> 84.229.204.125 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:28:23.990753 0.159663 udp 10.0.2.22 51868 <-> 68.57.213.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:24.992395 0.033242 udp 10.0.2.22 51868 <-> 91.146.249.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:25.993869 1.141101 udp 10.0.2.22 51868 <-> 24.232.62.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:26.995103 2.994741 udp 10.0.2.22 51868 -> 96.37.19.63 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:28:27.996773 0.070846 udp 10.0.2.22 51868 <-> 31.222.118.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:28.988193 0.000000 udp 10.0.2.22 51868 -> 75.111.95.130 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:28:30.991376 0.152599 udp 10.0.2.22 51868 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:31.992374 0.094052 udp 10.0.2.22 51868 <-> 79.165.97.68 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:32.993914 0.415215 udp 10.0.2.22 51868 <-> 190.192.195.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:33.995315 3.033823 udp 10.0.2.22 51868 <-> 213.231.166.253 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:34.996802 4.135585 udp 10.0.2.22 51868 <-> 108.176.154.248 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:35.988146 0.231894 udp 10.0.2.22 51868 <-> 201.160.70.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:36.459127 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:28:37.990849 0.165618 udp 10.0.2.22 51868 <-> 85.230.174.252 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:39.994075 0.000000 udp 10.0.2.22 51868 -> 95.220.247.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:28:40.995340 0.356462 udp 10.0.2.22 51868 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:41.996617 0.152394 udp 10.0.2.22 51868 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:42.988330 0.154231 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:43.990058 0.290838 udp 10.0.2.22 51868 <-> 181.29.200.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:44.991157 0.000000 udp 10.0.2.22 51868 -> 90.132.108.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:28:45.992444 0.150104 udp 10.0.2.22 51868 <-> 69.127.65.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:46.994104 0.000000 udp 10.0.2.22 51868 -> 108.20.12.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:28:47.865017 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:28:47.995405 0.000000 udp 10.0.2.22 51868 -> 77.23.180.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:28:48.996784 0.010192 udp 10.0.2.22 51868 <-> 178.21.51.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:49.987976 0.187094 udp 10.0.2.22 51868 <-> 69.1.2.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:50.990062 2.140776 udp 10.0.2.22 51868 <-> 88.187.105.26 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:51.991182 0.051281 udp 10.0.2.22 51868 <-> 77.103.126.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:53.996191 0.000000 udp 10.0.2.22 51868 -> 85.230.38.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:28:54.995957 0.204119 udp 10.0.2.22 51868 <-> 67.177.197.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:55.997015 0.966159 udp 10.0.2.22 51868 <-> 190.208.110.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:56.988416 0.205223 udp 10.0.2.22 51868 <-> 79.53.104.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:57.990044 0.084383 udp 10.0.2.22 51868 <-> 80.216.65.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:58.991096 0.039559 udp 10.0.2.22 51868 <-> 109.202.246.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:28:59.992642 1.134366 udp 10.0.2.22 51868 <-> 24.0.29.18 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:01.995598 0.055681 udp 10.0.2.22 51868 <-> 95.43.88.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:02.996887 0.051479 udp 10.0.2.22 51868 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:03.988236 0.293644 udp 10.0.2.22 51868 <-> 126.60.25.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:04.990031 0.000000 udp 10.0.2.22 51868 -> 2.185.124.124 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:29:05.991640 2.267919 udp 10.0.2.22 51868 <-> 172.249.23.18 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:06.992906 0.264769 udp 10.0.2.22 51868 <-> 190.194.201.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:08.995689 0.326353 udp 10.0.2.22 51868 <-> 122.131.251.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:09.997215 0.051731 udp 10.0.2.22 51868 <-> 149.172.60.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:10.988341 0.141897 udp 10.0.2.22 51868 <-> 69.119.31.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:11.990230 0.189911 udp 10.0.2.22 51868 <-> 88.67.80.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:12.991203 0.141652 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:13.992991 0.235436 udp 10.0.2.22 51868 <-> 82.243.94.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:14.864170 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:29:14.994254 0.275207 udp 10.0.2.22 51868 <-> 181.31.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:16.001506 0.072572 udp 10.0.2.22 51868 <-> 212.225.170.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:16.992574 0.000000 udp 10.0.2.22 51868 -> 90.209.100.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:29:17.994129 0.475163 udp 10.0.2.22 51868 <-> 69.151.57.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:18.994342 0.000000 udp 10.0.2.22 51868 -> 71.177.238.67 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:29:19.994211 0.050235 udp 10.0.2.22 51868 <-> 178.148.145.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:20.993922 0.158500 udp 10.0.2.22 51868 <-> 74.12.109.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:21.994149 4.997577 udp 10.0.2.22 51868 -> 114.43.0.30 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:29:22.995797 0.280675 udp 10.0.2.22 51868 <-> 201.74.242.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:23.986964 0.051881 udp 10.0.2.22 51868 <-> 78.28.15.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:24.988695 0.068063 udp 10.0.2.22 51868 <-> 188.25.221.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:25.990047 0.000000 udp 10.0.2.22 51868 -> 178.79.25.188 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:29:27.336958 0.000000 udp 10.0.2.22 51868 <- 114.43.0.30 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:29:27.992789 0.000000 udp 10.0.2.22 51868 -> 216.121.246.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:29:28.994438 0.050303 udp 10.0.2.22 51868 <-> 46.253.3.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:29.995320 4.342192 udp 10.0.2.22 51868 <-> 36.232.204.18 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:30.987106 0.000000 udp 10.0.2.22 51868 -> 76.16.28.17 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:29:31.988544 0.081973 udp 10.0.2.22 51868 <-> 217.217.124.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:32.990024 0.000000 udp 10.0.2.22 51868 -> 173.16.181.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:29:34.992885 0.155958 udp 10.0.2.22 51868 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:35.994352 0.045329 udp 10.0.2.22 51868 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:36.996272 0.000000 udp 10.0.2.22 51868 -> 178.79.25.188 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:29:37.987042 0.068644 udp 10.0.2.22 51868 <-> 188.25.221.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:38.988750 0.062928 udp 10.0.2.22 51868 <-> 212.92.251.134 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:39.990181 0.000000 udp 10.0.2.22 51868 -> 216.121.246.15 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:29:40.991434 1.217013 udp 10.0.2.22 51868 <-> 95.249.31.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:41.862683 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:29:41.993038 0.052388 udp 10.0.2.22 51868 <-> 78.28.15.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:42.994445 0.154778 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:43.996092 2.994027 udp 10.0.2.22 51868 -> 24.193.202.251 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:29:44.987195 0.145150 udp 10.0.2.22 51868 <-> 76.16.28.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:45.988847 0.141638 udp 10.0.2.22 51868 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:47.991815 0.045985 udp 10.0.2.22 51868 <-> 92.108.115.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:48.993064 1.152682 udp 10.0.2.22 51868 <-> 24.191.81.20 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:50.995410 0.067558 udp 10.0.2.22 51868 <-> 94.253.231.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:51.987743 0.132932 udp 10.0.2.22 51868 <-> 88.72.192.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:52.988904 0.592427 udp 10.0.2.22 51868 <-> 46.223.177.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:53.990504 0.340436 udp 10.0.2.22 51868 <-> 201.62.138.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:54.991954 0.297669 udp 10.0.2.22 51868 <-> 116.64.95.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:55.993747 0.095500 udp 10.0.2.22 51868 <-> 31.147.117.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:56.994648 0.058298 udp 10.0.2.22 51868 <-> 85.217.233.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:57.996293 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:29:58.987327 0.065066 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:29:59.989037 0.118216 udp 10.0.2.22 51868 <-> 137.118.142.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:00.990323 0.309695 udp 10.0.2.22 51868 <-> 219.105.73.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:01.991845 0.136175 udp 10.0.2.22 51868 <-> 72.241.245.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:02.993089 0.155623 udp 10.0.2.22 51868 <-> 184.161.209.173 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:03.994591 0.148177 udp 10.0.2.22 51868 <-> 174.99.98.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:04.996083 0.000000 udp 10.0.2.22 51868 -> 200.84.56.145 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:30:05.987723 0.075608 udp 10.0.2.22 51868 <-> 195.3.228.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:06.988821 0.166191 udp 10.0.2.22 51868 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:07.990179 0.169158 udp 10.0.2.22 51868 <-> 97.79.248.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:08.861868 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:30:08.991938 0.000000 udp 10.0.2.22 51868 -> 81.144.197.2 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:30:09.993246 0.266353 udp 10.0.2.22 51868 <-> 201.74.242.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:10.994643 2.088404 udp 10.0.2.22 51868 <-> 94.41.58.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:11.996156 2.208537 udp 10.0.2.22 51868 <-> 70.132.115.237 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:14.990508 0.155073 udp 10.0.2.22 51868 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:15.991749 1.184649 udp 10.0.2.22 51868 <-> 24.232.62.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:16.993437 0.050082 udp 10.0.2.22 51868 <-> 78.96.104.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:17.994990 0.147407 udp 10.0.2.22 51868 <-> 71.238.117.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:18.996020 0.046959 udp 10.0.2.22 51868 <-> 95.87.232.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:19.987534 1.001467 udp 10.0.2.22 51868 <-> 187.244.94.25 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:21.990559 0.066375 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:22.992005 1.048649 udp 10.0.2.22 51868 <-> 181.72.115.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:24.994603 0.000000 udp 10.0.2.22 51868 -> 190.80.114.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:30:25.996298 0.411092 udp 10.0.2.22 51868 <-> 190.177.244.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:26.987667 0.156841 udp 10.0.2.22 51868 <-> 18.111.124.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:27.989044 0.000000 udp 10.0.2.22 51868 -> 99.237.11.56 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:30:28.990637 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:30:29.992048 0.080529 udp 10.0.2.22 51868 <-> 213.60.233.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:30.993459 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:30:31.995079 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:30:32.996285 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:30:33.987969 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:30:34.989035 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:30:35.870411 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:30:35.990741 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:30:36.992137 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:30:37.993609 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:30:38.994905 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:30:39.996570 0.072054 udp 10.0.2.22 51868 <-> 134.249.0.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:40.987724 0.120070 udp 10.0.2.22 51868 <-> 24.75.190.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:41.989349 0.292237 udp 10.0.2.22 51868 <-> 119.231.181.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:42.990756 0.000000 udp 10.0.2.22 51868 -> 186.149.131.47 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:30:43.991957 0.251329 udp 10.0.2.22 51868 <-> 190.206.94.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:44.993741 0.171267 udp 10.0.2.22 51868 <-> 66.169.204.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:45.994892 0.211290 udp 10.0.2.22 51868 <-> 75.85.212.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:46.996266 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:30:47.987924 0.245157 udp 10.0.2.22 51868 <-> 87.19.140.157 16464 CON 0 0 2 528 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:48.989585 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:30:49.990538 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:30:50.992122 0.000047 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:30:50.992169 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:30:51.993858 0.088320 udp 10.0.2.22 51868 <-> 93.81.206.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:52.994836 0.305398 udp 10.0.2.22 51868 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:53.996558 0.051579 udp 10.0.2.22 51868 <-> 94.21.162.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:55.989393 0.000000 udp 10.0.2.22 51868 -> 69.248.152.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:30:56.990605 0.000000 udp 10.0.2.22 51868 -> 5.15.138.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:30:57.992242 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:30:58.993745 0.078250 udp 10.0.2.22 51868 <-> 188.171.29.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:30:59.995215 0.317939 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:00.996580 4.161009 udp 10.0.2.22 51868 <-> 76.183.28.26 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:01.987891 4.006077 udp 10.0.2.22 51868 -> 135.19.220.28 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:31:02.869394 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:31:02.989679 0.052362 udp 10.0.2.22 51868 <-> 94.21.162.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:03.990849 0.151677 udp 10.0.2.22 51868 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:06.994839 0.000000 udp 10.0.2.22 51868 -> 69.248.152.15 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:31:07.996758 0.000000 udp 10.0.2.22 51868 -> 79.116.107.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:31:08.988213 0.055750 udp 10.0.2.22 51868 <-> 5.15.138.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:09.989600 0.686860 udp 10.0.2.22 51868 <-> 186.91.102.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:10.991070 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:31:11.992438 0.380189 udp 10.0.2.22 51868 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:12.993479 0.063308 udp 10.0.2.22 51868 <-> 85.204.248.33 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:13.994559 0.150674 udp 10.0.2.22 51868 <-> 98.28.102.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:14.996479 0.542931 udp 10.0.2.22 51868 <-> 115.242.68.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:15.988462 0.170641 udp 10.0.2.22 51868 <-> 212.122.101.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:16.989568 0.047916 udp 10.0.2.22 51868 <-> 77.23.138.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:17.991147 0.297258 udp 10.0.2.22 51868 <-> 186.222.191.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:18.992762 0.261919 udp 10.0.2.22 51868 <-> 95.38.253.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:19.993866 0.250211 udp 10.0.2.22 51868 <-> 187.241.191.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:20.995201 0.168222 udp 10.0.2.22 51868 <-> 83.180.191.223 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:21.996745 0.415822 udp 10.0.2.22 51868 <-> 117.220.10.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:22.988060 0.270780 udp 10.0.2.22 51868 <-> 201.160.70.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:23.989908 1.501437 udp 10.0.2.22 51868 <-> 186.32.66.223 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:24.991331 0.000000 udp 10.0.2.22 51868 -> 181.33.138.232 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:31:25.992566 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:31:26.993843 0.361240 udp 10.0.2.22 51868 <-> 111.242.46.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:27.995217 0.049129 udp 10.0.2.22 51868 <-> 84.30.232.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:28.996885 0.124127 udp 10.0.2.22 51868 <-> 151.74.245.245 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:29.868057 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:31:29.988287 3.004803 udp 10.0.2.22 51868 -> 66.214.56.213 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:31:30.989854 1.040940 udp 10.0.2.22 51868 <-> 178.150.156.252 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:33.993968 0.148287 udp 10.0.2.22 51868 <-> 69.244.114.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:34.995663 0.213786 udp 10.0.2.22 51868 <-> 67.168.219.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:35.996720 0.005633 udp 10.0.2.22 51868 <-> 92.240.171.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:36.988198 0.075613 udp 10.0.2.22 51868 <-> 95.155.219.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:37.989967 0.077366 udp 10.0.2.22 51868 <-> 79.54.96.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:38.991156 0.081527 udp 10.0.2.22 51868 <-> 91.89.7.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:39.993026 0.000062 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:31:39.993088 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:31:40.994150 0.822075 udp 10.0.2.22 51868 <-> 187.37.207.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:41.995569 0.160320 udp 10.0.2.22 51868 <-> 108.183.69.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:42.996948 0.187624 udp 10.0.2.22 51868 <-> 24.117.40.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:43.988342 0.286037 udp 10.0.2.22 51868 <-> 190.163.230.144 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:44.989998 0.093917 udp 10.0.2.22 51868 <-> 88.186.78.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:45.991283 0.155727 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:46.992588 0.073140 udp 10.0.2.22 51868 <-> 78.136.117.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:47.994309 0.146082 udp 10.0.2.22 51868 <-> 47.17.133.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:48.995114 0.158710 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:49.987135 0.000000 udp 10.0.2.22 51868 -> 79.33.64.189 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:31:50.988434 0.187540 udp 10.0.2.22 51868 <-> 184.74.129.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:51.989889 0.164608 udp 10.0.2.22 51868 <-> 70.36.60.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:52.991468 0.231465 udp 10.0.2.22 51868 <-> 98.232.173.213 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:53.992572 0.144252 udp 10.0.2.22 51868 <-> 69.119.241.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:54.994108 0.099634 udp 10.0.2.22 51868 <-> 79.182.1.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:55.995119 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:31:56.866766 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:31:56.987026 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:31:57.988633 0.122164 udp 10.0.2.22 51868 <-> 176.201.226.222 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:58.990157 0.987958 udp 10.0.2.22 51868 <-> 190.111.199.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:31:59.991735 0.000000 udp 10.0.2.22 51868 -> 76.110.239.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:00.992795 0.020188 udp 10.0.2.22 51868 <-> 176.198.111.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:32:01.994103 0.000000 udp 10.0.2.22 51868 -> 114.43.0.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:02.995688 0.039417 udp 10.0.2.22 51868 <-> 84.196.249.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:32:03.987237 0.333697 udp 10.0.2.22 51868 <-> 186.93.155.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:32:04.988589 0.145582 udp 10.0.2.22 51868 <-> 174.98.118.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:32:05.990193 1.564340 udp 10.0.2.22 51868 <-> 2.187.205.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:32:06.991116 0.061113 udp 10.0.2.22 51868 <-> 82.43.52.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:32:07.992763 0.311694 udp 10.0.2.22 51868 <-> 186.67.39.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:32:08.994746 0.165825 udp 10.0.2.22 51868 <-> 2.192.99.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:32:09.995736 0.202302 udp 10.0.2.22 51868 <-> 24.116.234.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:32:10.987118 0.049148 udp 10.0.2.22 51868 <-> 92.108.115.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:32:11.988723 0.174992 udp 10.0.2.22 51868 <-> 68.117.245.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:32:12.990144 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:13.991009 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:14.993039 0.162678 udp 10.0.2.22 51868 <-> 79.2.118.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:32:15.994442 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:16.995219 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:17.987116 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:18.988726 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:19.990214 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:20.991588 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:21.992731 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:22.994535 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:23.865084 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:32:23.995328 0.000124 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:23.995452 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:32:24.987347 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:25.988931 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:26.990285 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:27.991525 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:28.992859 2.994562 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:29.994539 4.996797 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:30.996464 0.360252 udp 10.0.2.22 51868 <-> 189.92.130.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:32:32.988789 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:33.990290 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:35.992996 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:36.994821 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:37.996242 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:38.987705 0.000106 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:38.987811 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:32:39.988761 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:40.990359 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:41.991902 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:42.993096 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:43.994639 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:44.996282 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:45.987861 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:46.989292 0.348601 udp 10.0.2.22 51868 <-> 189.92.130.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:32:47.990555 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:48.992071 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:49.993409 0.000042 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:49.993451 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:32:50.864392 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:32:50.995013 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:51.996271 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:52.987579 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:53.988901 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:54.990621 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:55.991696 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:56.993721 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:57.994742 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:58.996438 4.996657 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:32:59.987783 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:00.989230 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:01.990548 4.997366 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:02.992122 0.364631 udp 10.0.2.22 51868 <-> 189.92.130.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:33:04.994823 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:05.996063 0.000044 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:05.996107 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:33:07.989070 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:08.990712 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:09.992102 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:10.993677 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:11.994823 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:12.996360 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:13.987720 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:14.989069 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:15.990516 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:16.992040 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:17.863123 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:33:17.993559 0.351532 udp 10.0.2.22 51868 <-> 189.92.130.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:33:18.994954 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:19.996219 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:20.987964 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:21.989620 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:22.990751 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:23.992148 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:24.993449 0.000095 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:24.993544 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:33:25.995156 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:26.996534 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:27.987980 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:28.989362 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:29.990788 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:30.992254 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:31.993624 4.997011 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:32.995164 0.595434 udp 10.0.2.22 51868 <-> 189.92.130.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:33:33.996862 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:34.988093 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:35.989592 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:37.992192 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:38.993947 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:39.995111 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:40.996684 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:41.988105 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:42.989794 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:43.990999 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:44.862073 0.000039 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:33:44.992274 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:45.993836 0.000072 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:45.993908 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:33:46.995238 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:47.996659 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:48.988279 0.347360 udp 10.0.2.22 51868 <-> 189.92.130.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:33:49.989934 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:50.990992 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:51.992638 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:52.993786 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:53.995215 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:54.996924 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:55.988223 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:56.989525 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:57.990965 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:58.992628 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:59.994028 2.994342 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:33:59.994082 2.994288 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 2 172 flow=Background 1970/01/01 11:34:00.995281 0.349929 udp 10.0.2.22 51868 <-> 189.92.130.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:34:01.996856 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:03.989612 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:04.991027 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:05.992515 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:06.994040 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:07.995290 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:08.996953 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:09.988241 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:10.989810 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:11.870675 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:34:11.991255 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:12.992590 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:13.994135 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:14.995766 3.995394 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:15.996959 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:16.988411 0.397915 udp 10.0.2.22 51868 <-> 189.92.130.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:34:17.989918 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:19.992585 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:20.994077 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:21.995469 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:22.987000 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:23.988503 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:24.990136 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:25.991275 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:26.992631 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:27.993953 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:28.995664 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:29.987046 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:30.988721 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:31.989815 0.000069 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:31.989884 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:34:32.991051 0.356304 udp 10.0.2.22 51868 <-> 189.92.130.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:34:33.992745 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:34.994192 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:35.995897 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:36.986938 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:37.988548 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:38.869702 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:34:38.989940 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:39.991676 0.098510 udp 10.0.2.22 51868 <-> 78.251.143.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:34:40.992706 0.403118 udp 10.0.2.22 51868 <-> 201.160.70.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:34:41.994244 0.156052 udp 10.0.2.22 51868 <-> 69.141.89.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:34:42.467752 3.001476 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 11:34:42.995800 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:43.987205 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:44.988653 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:45.990099 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:46.991722 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:47.993036 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:48.994409 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:49.475097 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:34:49.995412 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:50.987256 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:51.988502 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:52.989980 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:53.991770 3.995541 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:54.992885 0.000000 udp 10.0.2.22 51868 -> 179.210.166.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:55.994322 0.156420 udp 10.0.2.22 51868 <-> 69.141.89.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:34:56.995816 0.039223 udp 10.0.2.22 51868 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:34:57.476326 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:34:58.988712 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:34:59.990204 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:00.991919 0.000000 udp 10.0.2.22 51868 -> 179.210.166.5 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:01.992782 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:02.994541 0.036108 udp 10.0.2.22 51868 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:03.996013 0.310787 udp 10.0.2.22 51868 <-> 182.168.230.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:04.987443 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:05.868355 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:35:05.988774 0.000000 udp 10.0.2.22 51868 -> 72.172.160.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:06.990217 0.121772 udp 10.0.2.22 51868 <-> 173.238.180.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:08.992842 0.171655 udp 10.0.2.22 51868 <-> 24.210.196.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:09.994756 0.323703 udp 10.0.2.22 51868 <-> 114.180.181.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:10.996012 0.000000 udp 10.0.2.22 51868 -> 177.80.138.178 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:11.987212 0.115418 udp 10.0.2.22 51868 <-> 68.230.129.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:12.988814 0.243336 udp 10.0.2.22 51868 <-> 190.73.238.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:13.479468 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:35:13.990454 0.000000 udp 10.0.2.22 51868 -> 99.240.230.92 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:14.992010 0.000000 udp 10.0.2.22 51868 -> 69.157.108.32 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:15.992837 0.169217 udp 10.0.2.22 51868 <-> 98.212.118.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:16.994502 0.060650 udp 10.0.2.22 51868 <-> 86.122.240.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:17.995787 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:18.987585 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:20.136489 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:21.130248 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:22.123431 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:23.116080 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:24.107661 0.000080 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:24.107741 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:35:25.098803 0.055130 udp 10.0.2.22 51868 <-> 89.208.181.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:26.083486 0.154535 udp 10.0.2.22 51868 <-> 66.56.172.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:27.077965 0.590666 udp 10.0.2.22 51868 <-> 187.69.96.60 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:28.071529 0.000000 udp 10.0.2.22 51868 -> 92.86.49.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:29.064561 0.147384 udp 10.0.2.22 51868 <-> 174.96.94.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:30.057405 0.151279 udp 10.0.2.22 51868 <-> 173.212.24.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:31.049589 0.061620 udp 10.0.2.22 51868 <-> 86.122.240.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:32.040611 0.303872 udp 10.0.2.22 51868 <-> 126.86.87.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:32.905852 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:35:33.025312 0.097441 udp 10.0.2.22 51868 <-> 84.55.21.104 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:34.019806 0.113320 udp 10.0.2.22 51868 <-> 86.121.43.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:35.013822 0.028215 udp 10.0.2.22 51868 <-> 78.90.142.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:36.006595 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:36.998414 0.234459 udp 10.0.2.22 51868 <-> 201.243.172.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:37.994273 2.391661 udp 10.0.2.22 51868 <-> 77.126.38.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:38.996269 0.155118 udp 10.0.2.22 51868 <-> 67.172.65.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:39.988073 0.132843 udp 10.0.2.22 51868 <-> 72.241.245.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:40.989007 0.363074 udp 10.0.2.22 51868 <-> 37.14.162.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:41.990488 0.054002 udp 10.0.2.22 51868 <-> 79.113.236.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:42.992046 0.201988 udp 10.0.2.22 51868 <-> 74.79.65.157 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:43.993245 0.118759 udp 10.0.2.22 51868 <-> 24.36.117.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:44.994749 0.205129 udp 10.0.2.22 51868 <-> 190.37.37.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:45.485609 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:35:45.996383 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:47.989116 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:48.990537 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:49.992240 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:50.993269 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:51.995044 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:52.996326 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:53.987803 0.261830 udp 10.0.2.22 51868 <-> 189.60.133.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:35:54.989487 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:55.991064 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:56.992287 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:57.992966 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:58.995963 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:35:59.866145 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:35:59.996653 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:36:00.988230 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:36:01.989426 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:36:02.990660 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:36:03.992191 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:36:04.993640 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:36:05.995092 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:36:06.999350 0.000045 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:36:06.999395 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:36:08.991923 0.284655 udp 10.0.2.22 51868 <-> 189.60.133.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:09.991962 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:36:10.992315 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:36:11.993876 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:36:12.994967 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:36:13.996673 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:36:14.988023 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:36:15.989556 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:36:16.999825 0.155208 udp 10.0.2.22 51868 <-> 75.97.82.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:18.009837 0.147432 udp 10.0.2.22 51868 <-> 24.98.204.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:19.007652 0.320305 udp 10.0.2.22 51868 <-> 201.186.166.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:20.003717 0.117387 udp 10.0.2.22 51868 <-> 24.36.173.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:21.001453 0.279797 udp 10.0.2.22 51868 <-> 190.198.209.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:21.995586 0.000000 udp 10.0.2.22 51868 -> 89.247.62.128 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:36:23.002206 0.088422 udp 10.0.2.22 51868 <-> 213.112.131.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:23.999767 0.020045 udp 10.0.2.22 51868 <-> 88.152.207.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:24.997657 0.147499 udp 10.0.2.22 51868 <-> 74.58.30.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:25.993729 0.132105 udp 10.0.2.22 51868 <-> 95.67.190.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:26.864989 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:36:26.995173 0.164148 udp 10.0.2.22 51868 <-> 76.101.70.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:27.998438 0.525249 udp 10.0.2.22 51868 <-> 61.231.220.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:28.988448 0.210220 udp 10.0.2.22 51868 <-> 98.232.131.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:29.989776 0.305411 udp 10.0.2.22 51868 <-> 187.39.118.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:30.990966 0.160214 udp 10.0.2.22 51868 <-> 24.30.2.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:31.992546 0.184095 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:32.993822 0.304120 udp 10.0.2.22 51868 <-> 61.70.234.252 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:33.995751 0.000000 udp 10.0.2.22 51868 -> 78.38.187.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:36:34.996970 0.000000 udp 10.0.2.22 51868 -> 85.11.182.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:36:35.988389 0.000000 udp 10.0.2.22 51868 -> 80.139.58.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:36:36.989945 0.052893 udp 10.0.2.22 51868 <-> 194.94.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:37.991069 0.163010 udp 10.0.2.22 51868 <-> 71.61.218.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:38.992551 0.193162 udp 10.0.2.22 51868 <-> 68.231.114.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:39.993866 0.000000 udp 10.0.2.22 51868 -> 14.98.186.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:36:40.995867 0.148354 udp 10.0.2.22 51868 <-> 66.131.206.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:41.996807 0.165435 udp 10.0.2.22 51868 <-> 76.101.70.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:42.988213 0.046397 udp 10.0.2.22 51868 <-> 84.28.226.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:43.990378 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:36:44.991228 0.000000 udp 10.0.2.22 51868 -> 97.68.75.182 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:36:45.992565 0.369649 udp 10.0.2.22 51868 <-> 114.198.190.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:46.993379 0.271558 udp 10.0.2.22 51868 <-> 70.132.115.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:47.995512 0.179469 udp 10.0.2.22 51868 <-> 183.83.74.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:48.996872 0.165469 udp 10.0.2.22 51868 <-> 71.61.103.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:49.988153 0.153521 udp 10.0.2.22 51868 <-> 71.59.124.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:50.990114 4.299944 udp 10.0.2.22 51868 <-> 115.184.182.65 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:51.991260 0.155280 udp 10.0.2.22 51868 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:52.992429 0.053141 udp 10.0.2.22 51868 <-> 79.113.236.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:53.863324 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:36:53.993868 0.000000 udp 10.0.2.22 51868 -> 86.194.213.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:36:55.986820 0.300367 udp 10.0.2.22 51868 <-> 211.14.251.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:56.988573 0.160693 udp 10.0.2.22 51868 <-> 96.42.70.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:57.989885 0.000000 udp 10.0.2.22 51868 -> 189.19.128.182 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:36:58.991702 0.356942 udp 10.0.2.22 51868 <-> 114.45.53.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:36:59.992630 1.154940 udp 10.0.2.22 51868 <-> 184.162.187.14 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:01.995554 0.329257 udp 10.0.2.22 51868 <-> 121.124.80.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:02.987029 0.310532 udp 10.0.2.22 51868 <-> 219.116.87.227 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:03.991244 0.090561 udp 10.0.2.22 51868 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:04.991063 3.014680 udp 10.0.2.22 51868 -> 217.217.179.236 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:37:05.991218 0.000000 udp 10.0.2.22 51868 -> 71.80.71.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:37:06.993063 0.186960 udp 10.0.2.22 51868 <-> 98.163.239.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:09.003630 0.175463 udp 10.0.2.22 51868 <-> 68.184.206.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:09.992691 0.124210 udp 10.0.2.22 51868 <-> 24.204.248.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:10.990551 0.170039 udp 10.0.2.22 51868 <-> 50.73.12.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:11.990037 0.143629 udp 10.0.2.22 51868 <-> 24.215.93.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:12.991274 0.157778 udp 10.0.2.22 51868 <-> 71.194.150.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:13.992568 0.366752 udp 10.0.2.22 51868 <-> 218.166.155.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:14.994457 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:37:15.996244 0.000000 udp 10.0.2.22 51868 -> 178.165.59.127 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:37:16.987068 0.062112 udp 10.0.2.22 51868 <-> 84.126.54.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:17.988387 0.053879 udp 10.0.2.22 51868 <-> 147.156.170.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:18.990098 0.398289 udp 10.0.2.22 51868 <-> 181.74.134.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:19.991609 0.214529 udp 10.0.2.22 51868 <-> 186.95.119.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:20.862634 0.000039 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:37:20.992959 0.063372 udp 10.0.2.22 51868 <-> 77.4.115.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:21.994466 1.992750 udp 10.0.2.22 51868 -> 69.248.152.15 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:37:22.996148 0.496396 udp 10.0.2.22 51868 <-> 190.94.233.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:24.988850 0.283635 udp 10.0.2.22 51868 <-> 189.39.150.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:25.991828 0.166775 udp 10.0.2.22 51868 <-> 68.206.170.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:26.991210 0.267921 udp 10.0.2.22 51868 <-> 187.63.102.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:27.992812 0.351463 udp 10.0.2.22 51868 <-> 190.230.85.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:28.994318 0.052306 udp 10.0.2.22 51868 <-> 31.19.152.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:29.995922 0.069294 udp 10.0.2.22 51868 <-> 85.84.86.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:30.987639 0.299045 udp 10.0.2.22 51868 <-> 126.15.243.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:31.988674 0.000000 udp 10.0.2.22 51868 -> 209.106.45.86 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:37:32.990339 0.163171 udp 10.0.2.22 51868 <-> 98.224.54.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:33.991676 0.135568 udp 10.0.2.22 51868 <-> 71.206.33.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:34.995040 0.158019 udp 10.0.2.22 51868 <-> 82.233.157.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:35.995490 0.202339 udp 10.0.2.22 51868 <-> 200.84.172.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:36.995895 0.318602 udp 10.0.2.22 51868 <-> 211.211.69.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:37.987358 0.000000 udp 10.0.2.22 51868 -> 68.196.169.156 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:37:38.988680 0.371745 udp 10.0.2.22 51868 <-> 118.161.150.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:39.995871 2.525118 udp 10.0.2.22 51868 <-> 75.97.212.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:40.996184 0.467540 udp 10.0.2.22 51868 <-> 199.192.212.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:41.996018 0.854146 udp 10.0.2.22 51868 <-> 190.1.107.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:42.995711 0.407366 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:43.996003 0.353050 udp 10.0.2.22 51868 <-> 111.254.131.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:44.987671 0.030791 udp 10.0.2.22 51868 <-> 212.186.12.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:45.988766 0.016539 udp 10.0.2.22 51868 <-> 94.113.97.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:46.990537 0.172352 udp 10.0.2.22 51868 <-> 183.87.85.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:47.861770 0.000112 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:37:47.992114 1.173051 udp 10.0.2.22 51868 <-> 98.215.220.153 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:49.994777 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:37:50.995930 0.105896 udp 10.0.2.22 51868 <-> 79.24.135.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:51.987818 0.226240 udp 10.0.2.22 51868 <-> 190.36.226.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:52.988820 0.163899 udp 10.0.2.22 51868 <-> 69.63.41.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:53.990355 0.177676 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:54.994336 0.000000 udp 10.0.2.22 51868 -> 72.47.76.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:37:55.994980 0.330029 udp 10.0.2.22 51868 <-> 211.206.235.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:56.994585 0.167911 udp 10.0.2.22 51868 <-> 76.106.208.214 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:57.996297 0.213123 udp 10.0.2.22 51868 <-> 76.172.91.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:37:58.987798 1.189706 udp 10.0.2.22 51868 <-> 68.106.224.68 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:00.990243 0.170267 udp 10.0.2.22 51868 <-> 71.45.42.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:01.992109 0.034675 udp 10.0.2.22 51868 <-> 178.79.51.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:02.993071 0.112386 udp 10.0.2.22 51868 <-> 79.23.235.210 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:03.994550 0.062682 udp 10.0.2.22 51868 <-> 82.22.227.203 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:04.996433 0.000000 udp 10.0.2.22 51868 -> 85.220.165.198 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:38:05.987757 0.261036 udp 10.0.2.22 51868 <-> 98.127.49.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:06.988955 0.125559 udp 10.0.2.22 51868 <-> 76.78.208.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:07.990471 0.236065 udp 10.0.2.22 51868 <-> 107.196.134.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:08.991991 0.000000 udp 10.0.2.22 51868 -> 87.198.109.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:38:09.993102 0.301200 udp 10.0.2.22 51868 <-> 187.66.42.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:10.994780 0.084746 udp 10.0.2.22 51868 <-> 88.168.232.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:11.996217 0.154933 udp 10.0.2.22 51868 <-> 98.214.4.160 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:12.987877 0.135403 udp 10.0.2.22 51868 <-> 67.85.14.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:13.989061 0.067377 udp 10.0.2.22 51868 <-> 213.254.68.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:14.870468 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:38:14.990626 0.311587 udp 10.0.2.22 51868 <-> 58.114.74.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:15.991904 0.174162 udp 10.0.2.22 51868 <-> 70.80.21.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:16.993446 0.000000 udp 10.0.2.22 51868 -> 72.204.77.150 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:38:17.994635 1.089536 udp 10.0.2.22 51868 <-> 200.44.254.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:18.996580 0.261270 udp 10.0.2.22 51868 <-> 190.245.43.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:19.987873 0.299662 udp 10.0.2.22 51868 <-> 87.4.183.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:20.989073 0.151455 udp 10.0.2.22 51868 <-> 174.109.218.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:21.990665 0.152754 udp 10.0.2.22 51868 <-> 74.70.185.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:22.995763 0.156378 udp 10.0.2.22 51868 <-> 98.25.25.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:23.995540 0.133918 udp 10.0.2.22 51868 <-> 68.169.186.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:24.994921 0.437683 udp 10.0.2.22 51868 <-> 177.138.96.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:26.001827 0.000000 udp 10.0.2.22 51868 -> 186.0.193.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:38:26.992413 0.000000 udp 10.0.2.22 51868 -> 190.38.101.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:38:27.992363 0.540031 udp 10.0.2.22 51868 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:28.993072 0.049251 udp 10.0.2.22 51868 <-> 79.117.54.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:29.996125 0.064121 udp 10.0.2.22 51868 <-> 94.253.231.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:31.004309 0.158239 udp 10.0.2.22 51868 <-> 174.64.178.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:32.009936 0.000000 udp 10.0.2.22 51868 -> 89.216.146.135 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:38:32.339860 0.012780 udp 10.0.2.22 60076 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 11:38:32.352981 0.000000 udp 10.0.2.22 60077 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:38:33.015045 0.216133 udp 10.0.2.22 51868 <-> 50.193.233.87 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:34.006713 0.000000 udp 10.0.2.22 51868 -> 209.137.215.138 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:38:35.005485 0.000000 udp 10.0.2.22 51868 -> 107.196.134.131 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:38:36.003676 1.323477 udp 10.0.2.22 51868 <-> 111.217.235.135 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:38.008970 0.052841 udp 10.0.2.22 51868 <-> 5.15.202.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:39.005773 0.126696 udp 10.0.2.22 51868 <-> 176.237.213.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:40.002059 1.052321 udp 10.0.2.22 51868 <-> 201.242.70.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:40.993934 0.000000 udp 10.0.2.22 51868 -> 76.87.27.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:38:41.872607 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:38:41.992253 0.073501 udp 10.0.2.22 51868 <-> 79.115.108.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:42.990856 0.135439 udp 10.0.2.22 51868 <-> 24.89.198.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:43.992548 0.315473 udp 10.0.2.22 51868 <-> 119.201.78.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:44.994058 0.062104 udp 10.0.2.22 51868 <-> 93.155.146.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:45.997872 0.305535 udp 10.0.2.22 51868 <-> 219.116.87.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:47.001931 0.000000 udp 10.0.2.22 51868 -> 99.83.7.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:38:47.992183 0.170006 udp 10.0.2.22 51868 <-> 174.59.159.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:48.992457 1.163571 udp 10.0.2.22 51868 <-> 71.89.115.229 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:50.992406 0.000000 udp 10.0.2.22 51868 -> 68.49.199.235 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:38:51.993534 0.053743 udp 10.0.2.22 51868 <-> 89.2.226.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:52.995679 0.000000 udp 10.0.2.22 51868 -> 179.203.215.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:38:53.996839 0.377018 udp 10.0.2.22 51868 <-> 190.160.37.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:38:54.988377 0.000000 udp 10.0.2.22 51868 -> 89.253.133.12 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:38:56.994608 0.000088 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:38:56.994696 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:38:57.999631 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:38:58.997793 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:38:59.995197 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:00.996662 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:01.988172 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:02.989617 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:03.995784 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:04.995942 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:05.995304 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:06.995088 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:07.998049 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:08.867950 0.000039 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:39:08.988090 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:09.990085 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:10.991093 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:11.996409 0.066256 udp 10.0.2.22 51868 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:39:12.995884 2.082324 udp 10.0.2.22 51868 <-> 81.203.204.14 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:39:13.999808 3.280889 udp 10.0.2.22 51868 <-> 200.84.136.19 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:39:15.992116 0.267471 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:39:17.991984 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:18.991990 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:19.993930 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:20.995142 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:21.996836 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:22.988567 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:23.990094 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:24.991233 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:25.992441 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:26.993686 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:27.995242 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:28.986844 0.000000 udp 10.0.2.22 51868 -> 128.68.67.11 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:29.988482 0.000000 udp 10.0.2.22 51868 -> 190.80.114.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:30.992395 4.293979 udp 10.0.2.22 51868 <-> 60.62.93.24 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:39:31.991899 0.072865 udp 10.0.2.22 51868 <-> 81.203.204.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:39:32.992875 0.361414 udp 10.0.2.22 51868 <-> 201.246.136.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:39:33.994273 0.145127 udp 10.0.2.22 51868 <-> 98.239.205.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:39:35.866724 0.000039 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:39:35.986885 0.290555 udp 10.0.2.22 51868 <-> 179.216.199.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:39:36.988520 0.129895 udp 10.0.2.22 51868 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:39:37.990020 0.000000 udp 10.0.2.22 51868 -> 200.84.136.19 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:38.990894 0.069787 udp 10.0.2.22 51868 <-> 81.203.204.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:39:39.992689 0.000000 udp 10.0.2.22 51868 -> 190.80.114.46 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:40.994168 0.289817 udp 10.0.2.22 51868 <-> 60.62.93.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:39:41.995161 0.134581 udp 10.0.2.22 51868 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:39:42.986891 0.168747 udp 10.0.2.22 51868 <-> 76.189.34.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:39:43.988399 0.066804 udp 10.0.2.22 51868 <-> 128.68.67.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:39:44.990100 0.185626 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:39:45.991541 0.000000 udp 10.0.2.22 51868 -> 74.77.25.49 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:46.992441 0.241952 udp 10.0.2.22 51868 <-> 174.103.104.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:39:47.994149 0.184888 udp 10.0.2.22 51868 <-> 76.189.34.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:39:48.995807 0.165208 udp 10.0.2.22 51868 <-> 173.218.201.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:39:49.987285 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:50.988567 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:51.990028 0.037814 udp 10.0.2.22 51868 <-> 130.43.184.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:39:52.991749 0.275586 udp 10.0.2.22 51868 <-> 190.181.150.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:39:53.992938 0.049112 udp 10.0.2.22 51868 <-> 194.110.116.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:39:54.994123 0.066680 udp 10.0.2.22 51868 <-> 5.14.8.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:39:55.995092 1.129632 udp 10.0.2.22 51868 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:39:56.987168 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:39:57.988641 0.378870 udp 10.0.2.22 51868 <-> 24.244.127.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:39:58.990099 0.144182 udp 10.0.2.22 51868 <-> 24.228.86.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:39:59.991632 0.147034 udp 10.0.2.22 51868 <-> 76.16.28.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:00.992868 0.733185 udp 10.0.2.22 51868 <-> 111.248.57.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:01.994270 0.075625 udp 10.0.2.22 51868 <-> 85.87.200.174 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:02.865634 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:40:02.995788 0.143211 udp 10.0.2.22 51868 <-> 24.190.186.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:03.987286 0.000000 udp 10.0.2.22 51868 -> 95.57.180.55 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:40:04.988536 0.256491 udp 10.0.2.22 51868 <-> 190.254.103.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:05.990015 0.362445 udp 10.0.2.22 51868 <-> 190.160.244.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:06.991627 0.000000 udp 10.0.2.22 51868 -> 98.80.235.18 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:40:07.992869 0.000000 udp 10.0.2.22 51868 -> 174.54.92.78 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:40:08.994649 0.000000 udp 10.0.2.22 51868 -> 190.78.188.114 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:40:09.995460 0.201636 udp 10.0.2.22 51868 <-> 186.92.110.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:10.987130 0.000000 udp 10.0.2.22 51868 -> 186.10.121.102 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:40:11.988543 0.502055 udp 10.0.2.22 51868 <-> 77.183.99.92 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:12.990392 0.064271 udp 10.0.2.22 51868 <-> 85.204.248.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:13.991675 0.196934 udp 10.0.2.22 51868 <-> 82.229.113.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:14.992803 1.078956 udp 10.0.2.22 51868 <-> 188.24.142.173 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:16.995586 0.050963 udp 10.0.2.22 51868 <-> 78.28.15.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:17.987491 0.118546 udp 10.0.2.22 51868 <-> 87.2.181.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:18.988744 0.000000 udp 10.0.2.22 51868 -> 201.4.16.136 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:40:19.990341 0.000000 udp 10.0.2.22 51868 -> 173.245.67.108 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:40:20.991783 0.328867 udp 10.0.2.22 51868 <-> 121.124.80.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:21.992554 1.143641 udp 10.0.2.22 51868 <-> 24.75.169.69 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:23.996293 0.155676 udp 10.0.2.22 51868 <-> 188.152.54.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:24.987332 1.178134 udp 10.0.2.22 51868 <-> 74.77.226.153 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:26.990098 0.074561 udp 10.0.2.22 51868 <-> 81.232.31.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:27.991948 0.000000 udp 10.0.2.22 51868 -> 180.215.199.97 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:40:28.993335 0.870883 udp 10.0.2.22 51868 <-> 190.195.127.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:29.864069 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:40:29.994407 0.724966 udp 10.0.2.22 51868 <-> 24.232.62.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:31.002607 0.179050 udp 10.0.2.22 51868 <-> 69.1.2.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:31.992283 0.000000 udp 10.0.2.22 51868 -> 77.230.200.32 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:40:32.992695 0.038221 udp 10.0.2.22 51868 <-> 46.175.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:33.992432 0.000000 udp 10.0.2.22 51868 -> 72.222.72.67 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:40:34.992081 0.317682 udp 10.0.2.22 51868 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:35.993068 2.116547 udp 10.0.2.22 51868 <-> 24.50.116.245 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:36.994610 4.404356 udp 10.0.2.22 51868 <-> 111.240.40.248 16464 CON 0 0 6 3676 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:38.987292 1.336602 udp 10.0.2.22 51868 <-> 190.208.110.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:39.988976 3.090097 udp 10.0.2.22 51868 <-> 93.186.103.49 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:41.992086 0.168657 udp 10.0.2.22 51868 <-> 76.184.250.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:43.994707 4.118184 udp 10.0.2.22 51868 <-> 115.240.81.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:44.996031 0.138413 udp 10.0.2.22 51868 <-> 69.124.203.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:45.987720 0.000000 udp 10.0.2.22 51868 -> 190.246.109.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:40:46.989082 0.066403 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:47.990653 0.164083 udp 10.0.2.22 51868 <-> 98.209.179.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:48.992058 1.183981 udp 10.0.2.22 51868 <-> 69.59.89.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:49.992969 0.145531 udp 10.0.2.22 51868 <-> 69.127.160.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:50.994714 0.000000 udp 10.0.2.22 51868 -> 180.147.116.143 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:40:51.996261 0.136464 udp 10.0.2.22 51868 <-> 24.45.223.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:52.987862 0.143798 udp 10.0.2.22 51868 <-> 71.75.119.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:53.989118 0.502858 udp 10.0.2.22 51868 <-> 190.203.117.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:54.990541 3.930192 udp 10.0.2.22 51868 <-> 189.93.227.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:55.992049 0.051251 udp 10.0.2.22 51868 <-> 178.117.62.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:56.863128 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:40:56.993569 0.287400 udp 10.0.2.22 51868 <-> 179.219.214.223 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:57.994685 0.209225 udp 10.0.2.22 51868 <-> 98.234.66.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:58.996290 0.209689 udp 10.0.2.22 51868 <-> 50.168.18.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:40:59.987844 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:41:00.989097 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:41:01.990596 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:41:02.992001 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:41:03.993666 1.166470 udp 10.0.2.22 51868 <-> 67.167.170.6 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:05.996192 0.000000 udp 10.0.2.22 51868 -> 79.183.172.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:41:06.988196 0.000000 udp 10.0.2.22 51868 -> 93.29.87.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:41:07.989265 0.000000 udp 10.0.2.22 51868 -> 85.152.244.7 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:41:08.990676 4.298993 udp 10.0.2.22 51868 <-> 187.39.55.231 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:09.992316 0.141696 udp 10.0.2.22 51868 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:10.993621 0.036742 udp 10.0.2.22 51868 <-> 89.73.207.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:11.994888 0.000000 udp 10.0.2.22 51868 -> 93.29.87.246 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:41:13.988023 0.000000 udp 10.0.2.22 51868 -> 187.34.71.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:41:14.989237 0.000000 udp 10.0.2.22 51868 -> 118.160.130.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:41:15.990687 0.000000 udp 10.0.2.22 51868 -> 111.240.40.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:41:16.992143 0.000000 udp 10.0.2.22 51868 -> 66.25.88.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:41:17.993877 0.131162 udp 10.0.2.22 51868 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:18.994982 0.000000 udp 10.0.2.22 51868 -> 46.175.229.8 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:41:19.996477 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:41:20.987972 0.000000 udp 10.0.2.22 51868 -> 202.29.179.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:41:21.989803 0.410153 udp 10.0.2.22 51868 <-> 201.160.70.249 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:22.990966 0.000000 udp 10.0.2.22 51868 -> 181.118.86.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:41:23.862012 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:41:23.992345 0.120097 udp 10.0.2.22 51868 <-> 24.50.116.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:24.993622 0.000000 udp 10.0.2.22 51868 -> 79.183.172.249 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:41:25.995266 0.000000 udp 10.0.2.22 51868 -> 71.170.7.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:41:26.996359 0.000000 udp 10.0.2.22 51868 -> 89.73.207.4 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:41:27.988200 0.133812 udp 10.0.2.22 51868 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:28.989300 4.005864 udp 10.0.2.22 51868 -> 111.240.40.248 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:41:29.990988 0.374587 udp 10.0.2.22 51868 <-> 187.39.55.231 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:30.992282 0.246385 udp 10.0.2.22 51868 <-> 66.25.88.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:31.993594 0.000000 udp 10.0.2.22 51868 -> 118.160.130.247 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:41:33.996566 0.135072 udp 10.0.2.22 51868 <-> 24.188.69.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:34.988104 0.462606 udp 10.0.2.22 51868 <-> 77.38.98.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:35.989913 0.336024 udp 10.0.2.22 51868 <-> 187.57.16.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:36.991100 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:41:37.992424 0.074949 udp 10.0.2.22 51868 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:38.994379 0.146854 udp 10.0.2.22 51868 <-> 24.241.36.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:39.995156 0.000000 udp 10.0.2.22 51868 -> 31.147.134.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:41:40.996582 0.379315 udp 10.0.2.22 51868 <-> 74.132.159.8 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:41.988254 0.000000 udp 10.0.2.22 51868 -> 31.147.61.38 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:41:42.989957 0.161790 udp 10.0.2.22 51868 <-> 68.117.244.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:43.991082 0.074704 udp 10.0.2.22 51868 <-> 178.156.117.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:44.992543 0.190905 udp 10.0.2.22 51868 <-> 78.228.56.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:45.993997 1.317079 udp 10.0.2.22 51868 <-> 190.150.187.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:46.994988 0.000000 udp 10.0.2.22 51868 -> 92.17.72.66 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:41:47.996711 0.158960 udp 10.0.2.22 51868 <-> 65.60.153.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:48.988225 0.102090 udp 10.0.2.22 51868 <-> 88.184.199.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:49.989910 0.000000 udp 10.0.2.22 51868 -> 93.116.203.211 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:41:50.870842 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:41:50.990944 0.357695 udp 10.0.2.22 51868 <-> 114.45.53.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:51.992500 0.169052 udp 10.0.2.22 51868 <-> 98.239.20.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:52.993929 1.113569 udp 10.0.2.22 51868 <-> 92.78.41.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:53.995137 0.066544 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:54.986758 0.308262 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:55.988206 0.095514 udp 10.0.2.22 51868 <-> 109.163.134.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:56.989951 0.174714 udp 10.0.2.22 51868 <-> 98.250.1.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:57.492882 3.001399 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 11:41:57.991146 0.212543 udp 10.0.2.22 51868 <-> 76.169.58.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:58.992965 0.279536 udp 10.0.2.22 51868 <-> 181.31.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:41:59.994023 0.032039 udp 10.0.2.22 51868 <-> 77.70.120.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:00.995328 0.035155 udp 10.0.2.22 51868 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:01.991098 0.361998 udp 10.0.2.22 51868 <-> 50.134.240.23 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:02.990703 4.438477 udp 10.0.2.22 51868 <-> 190.38.81.148 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:03.990513 0.173132 udp 10.0.2.22 51868 <-> 174.54.248.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:04.500541 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:42:04.991340 1.172873 udp 10.0.2.22 51868 <-> 98.194.123.59 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:07.995898 0.704358 udp 10.0.2.22 51868 <-> 79.19.32.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:08.986861 0.000000 udp 10.0.2.22 51868 -> 201.210.213.118 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:42:09.988738 1.300053 udp 10.0.2.22 51868 <-> 186.92.2.123 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:11.991670 0.053896 udp 10.0.2.22 51868 <-> 46.249.179.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:12.501865 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:42:12.992520 0.188166 udp 10.0.2.22 51868 <-> 84.240.226.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:13.994222 0.786819 udp 10.0.2.22 51868 <-> 181.28.59.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:14.997628 0.380948 udp 10.0.2.22 51868 <-> 190.79.141.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:15.988210 0.140788 udp 10.0.2.22 51868 <-> 24.192.199.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:16.988453 0.000000 udp 10.0.2.22 51868 -> 77.43.44.42 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:42:17.869857 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:42:17.989969 0.000000 udp 10.0.2.22 51868 -> 76.173.112.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:42:18.991183 0.237785 udp 10.0.2.22 51868 <-> 50.47.95.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:19.992836 0.179761 udp 10.0.2.22 51868 <-> 97.106.251.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:20.994177 0.137002 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:21.995265 0.000000 udp 10.0.2.22 51868 -> 95.85.148.210 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:42:22.987148 0.058971 udp 10.0.2.22 51868 <-> 77.244.39.54 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:23.988529 0.258767 udp 10.0.2.22 51868 <-> 201.243.172.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:24.990134 0.155718 udp 10.0.2.22 51868 <-> 70.189.26.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:25.991367 0.157959 udp 10.0.2.22 51868 <-> 173.81.250.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:26.992556 0.169803 udp 10.0.2.22 51868 <-> 75.65.186.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:27.994434 0.090705 udp 10.0.2.22 51868 <-> 80.86.237.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:28.505187 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:42:28.995857 0.347720 udp 10.0.2.22 51868 <-> 187.10.81.107 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:29.987276 0.398927 udp 10.0.2.22 51868 <-> 75.120.2.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:30.988625 0.047305 udp 10.0.2.22 51868 <-> 213.46.47.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:31.990724 0.296644 udp 10.0.2.22 51868 <-> 190.208.117.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:32.991620 2.061727 udp 10.0.2.22 51868 <-> 95.169.211.29 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:33.992965 0.000000 udp 10.0.2.22 51868 -> 66.237.94.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:42:35.995897 0.232549 udp 10.0.2.22 51868 <-> 24.48.118.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:36.987347 0.082771 udp 10.0.2.22 51868 <-> 5.248.190.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:37.988567 0.554408 udp 10.0.2.22 51868 <-> 186.36.244.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:38.989964 0.136733 udp 10.0.2.22 51868 <-> 68.39.158.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:39.991380 0.070728 udp 10.0.2.22 51868 <-> 82.78.141.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:40.992649 0.000000 udp 10.0.2.22 51868 -> 95.169.211.29 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:42:41.994644 0.000000 udp 10.0.2.22 51868 -> 62.43.8.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:42:42.997588 3.994521 udp 10.0.2.22 51868 -> 186.9.249.3 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:42:43.988128 0.000000 udp 10.0.2.22 51868 -> 24.48.118.17 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:42:44.868456 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:42:44.988598 0.072942 udp 10.0.2.22 51868 <-> 178.79.11.31 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:45.990219 0.051271 udp 10.0.2.22 51868 <-> 46.253.3.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:47.992566 0.060073 udp 10.0.2.22 51868 <-> 95.169.211.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:48.994385 1.113861 udp 10.0.2.22 51868 <-> 79.19.32.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:49.996329 0.000000 udp 10.0.2.22 51868 -> 190.212.94.42 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:42:50.987585 0.070184 udp 10.0.2.22 51868 <-> 82.78.141.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:51.989851 0.270304 udp 10.0.2.22 51868 <-> 201.46.181.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:52.990244 0.000000 udp 10.0.2.22 51868 -> 67.187.191.37 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:42:53.991832 0.000000 udp 10.0.2.22 51868 -> 177.19.96.14 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:42:54.992951 0.200248 udp 10.0.2.22 51868 <-> 66.181.250.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:55.994363 0.000000 udp 10.0.2.22 51868 -> 24.187.58.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:42:56.996005 1.788070 udp 10.0.2.22 51868 <-> 79.109.4.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:57.987617 0.675294 udp 10.0.2.22 51868 <-> 68.96.178.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:58.989061 3.311820 udp 10.0.2.22 51868 <-> 118.236.118.248 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:42:59.990314 0.230425 udp 10.0.2.22 51868 <-> 94.253.205.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:43:00.512429 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:43:00.992622 0.354912 udp 10.0.2.22 51868 <-> 14.198.30.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:43:02.995069 0.000000 udp 10.0.2.22 51868 -> 195.80.135.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:03.995973 0.000000 udp 10.0.2.22 51868 -> 190.31.237.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:04.987798 0.000000 udp 10.0.2.22 51868 -> 190.218.101.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:05.988955 0.000000 udp 10.0.2.22 51868 -> 79.183.172.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:06.990227 0.000000 udp 10.0.2.22 51868 -> 94.253.205.252 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:07.992014 0.171972 udp 10.0.2.22 51868 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:43:08.993233 0.148536 udp 10.0.2.22 51868 <-> 75.143.172.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:43:09.994762 0.121943 udp 10.0.2.22 51868 <-> 24.122.115.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:43:10.996235 0.000000 udp 10.0.2.22 51868 -> 24.170.201.177 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:11.867588 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:43:11.994588 0.073594 udp 10.0.2.22 51868 <-> 82.77.102.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:43:12.994911 0.324866 udp 10.0.2.22 51868 <-> 189.93.227.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:43:13.995082 0.000000 udp 10.0.2.22 51868 -> 187.15.239.40 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:14.995432 0.167848 udp 10.0.2.22 51868 <-> 174.103.104.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:43:15.995970 0.298834 udp 10.0.2.22 51868 <-> 190.75.98.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:43:16.995260 0.288675 udp 10.0.2.22 51868 <-> 187.66.17.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:43:17.996126 0.170826 udp 10.0.2.22 51868 <-> 98.194.208.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:43:18.988025 0.151165 udp 10.0.2.22 51868 <-> 173.28.68.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:43:19.990397 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:20.990427 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:21.991950 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:22.993419 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:23.994936 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:24.996212 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:25.987749 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:26.989659 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:27.990701 0.000000 udp 10.0.2.22 51868 -> 201.250.95.43 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:28.992024 0.000000 udp 10.0.2.22 51868 -> 82.54.253.86 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:30.007776 0.000000 udp 10.0.2.22 51868 -> 37.254.37.89 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:31.003646 0.334551 udp 10.0.2.22 51868 <-> 114.45.22.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:43:32.001126 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:32.995658 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:33.993837 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:34.991809 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:35.992419 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:36.993409 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:37.994969 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:38.865502 0.000097 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:43:38.995916 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:39.987828 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:40.989271 0.000068 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:40.989339 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:43:42.992071 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:43.992922 0.155786 udp 10.0.2.22 51868 <-> 173.28.68.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:43:44.994989 0.321214 udp 10.0.2.22 51868 <-> 81.191.116.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:43:45.996311 0.316785 udp 10.0.2.22 51868 <-> 99.1.149.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:43:46.988157 0.363734 udp 10.0.2.22 51868 <-> 27.3.107.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:43:47.989433 0.170459 udp 10.0.2.22 51868 <-> 173.18.114.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:43:48.990616 0.051990 udp 10.0.2.22 51868 <-> 78.28.15.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:43:49.992383 0.000000 udp 10.0.2.22 51868 -> 190.94.221.68 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:50.993588 0.154681 udp 10.0.2.22 51868 <-> 71.194.150.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:43:51.995084 0.382480 udp 10.0.2.22 51868 <-> 118.169.130.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:43:52.996615 0.000000 udp 10.0.2.22 51868 -> 24.181.182.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:53.988185 0.161373 udp 10.0.2.22 51868 <-> 50.140.159.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:43:54.989748 0.000000 udp 10.0.2.22 51868 -> 69.249.214.211 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:55.990732 0.000000 udp 10.0.2.22 51868 -> 178.17.29.68 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:43:56.992264 0.618494 udp 10.0.2.22 51868 <-> 190.203.120.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:43:57.993567 0.046878 udp 10.0.2.22 51868 <-> 95.87.207.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:43:58.995289 0.438108 udp 10.0.2.22 51868 <-> 201.211.168.171 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:43:59.996414 0.058116 udp 10.0.2.22 51868 <-> 85.230.38.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:44:00.988029 0.141855 udp 10.0.2.22 51868 <-> 79.117.59.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:44:01.989466 0.141202 udp 10.0.2.22 51868 <-> 74.67.25.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:44:02.990860 0.058519 udp 10.0.2.22 51868 <-> 188.173.128.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:44:03.992518 0.305602 udp 10.0.2.22 51868 <-> 189.111.16.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:44:04.999455 1.160630 udp 10.0.2.22 51868 <-> 190.195.127.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:44:05.869272 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:44:05.999490 1.275716 udp 10.0.2.22 51868 <-> 190.79.50.14 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:44:07.990312 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:08.990599 0.166087 udp 10.0.2.22 51868 <-> 98.253.7.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:44:09.990866 0.149926 udp 10.0.2.22 51868 <-> 37.45.244.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:44:10.992488 0.303379 udp 10.0.2.22 51868 <-> 190.208.117.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:44:11.993760 0.242122 udp 10.0.2.22 51868 <-> 190.78.39.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:44:12.995082 0.000000 udp 10.0.2.22 51868 -> 90.154.230.144 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:13.996764 0.389512 udp 10.0.2.22 51868 <-> 200.175.212.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:44:14.988184 0.075732 udp 10.0.2.22 51868 <-> 85.85.84.183 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:44:15.989739 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:16.991063 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:17.992520 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:18.993556 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:19.995664 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:20.996627 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:21.988314 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:22.989607 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:23.992152 0.573510 udp 10.0.2.22 51868 <-> 204.16.10.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:44:24.992678 2.002673 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:25.994189 0.123604 udp 10.0.2.22 51868 <-> 24.254.138.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:44:27.986791 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:28.988204 0.000083 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:28.988287 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:44:29.989643 0.274819 udp 10.0.2.22 51868 <-> 200.85.88.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:44:30.991242 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:31.992460 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:32.863387 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:44:32.994129 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:33.995112 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:34.987074 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:35.988739 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:36.989799 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:37.993113 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:38.993073 0.446555 udp 10.0.2.22 51868 <-> 190.79.50.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:44:39.994025 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:41.001004 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:41.990822 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:42.993820 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:43.992443 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:44.991059 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:45.992911 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:46.994197 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:47.995830 0.388961 udp 10.0.2.22 51868 <-> 204.16.10.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:44:48.987132 1.458673 udp 10.0.2.22 51868 <-> 117.227.108.228 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:44:50.990087 0.045116 udp 10.0.2.22 51868 <-> 88.72.192.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:44:51.991213 2.534170 udp 10.0.2.22 51868 <-> 178.149.14.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:44:52.992626 1.662211 udp 10.0.2.22 51868 <-> 71.80.71.242 16464 CON 0 0 9 7178 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:44:53.995629 0.284151 udp 10.0.2.22 51868 <-> 200.85.88.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:44:54.995767 0.000000 udp 10.0.2.22 51868 -> 181.165.132.237 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:44:55.987207 0.289203 udp 10.0.2.22 51868 <-> 201.214.63.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:44:56.988636 0.075708 udp 10.0.2.22 51868 <-> 95.180.171.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:44:57.993240 0.144731 udp 10.0.2.22 51868 <-> 24.211.81.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:44:58.992786 2.191492 udp 10.0.2.22 51868 <-> 190.218.244.197 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:44:59.862588 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:44:59.992964 0.000000 udp 10.0.2.22 51868 -> 68.196.224.139 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:45:01.995827 0.000000 udp 10.0.2.22 51868 -> 24.232.19.31 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:45:02.987000 0.120173 udp 10.0.2.22 51868 <-> 173.238.152.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:03.988415 0.171774 udp 10.0.2.22 51868 <-> 75.115.165.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:04.991978 0.000000 udp 10.0.2.22 51868 -> 66.181.250.208 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:45:05.992003 0.185469 udp 10.0.2.22 51868 <-> 68.6.74.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:06.992741 0.000000 udp 10.0.2.22 51868 -> 86.211.237.139 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:45:07.996218 0.000000 udp 10.0.2.22 51868 -> 186.15.13.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:45:08.996395 0.000000 udp 10.0.2.22 51868 -> 186.52.130.134 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:45:09.988043 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:45:10.988852 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:45:11.989982 0.455509 udp 10.0.2.22 51868 <-> 68.14.166.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:12.994175 0.000000 udp 10.0.2.22 51868 -> 178.17.29.68 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:45:13.999930 0.000000 udp 10.0.2.22 51868 -> 178.235.175.124 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:45:14.997153 3.992936 udp 10.0.2.22 51868 <-> 188.121.26.82 16464 CON 0 0 5 1954 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:16.987885 0.085327 udp 10.0.2.22 51868 <-> 84.237.172.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:17.988748 0.374798 udp 10.0.2.22 51868 <-> 186.52.130.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:19.991274 0.287703 udp 10.0.2.22 51868 <-> 177.103.74.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:20.992986 0.462756 udp 10.0.2.22 51868 <-> 118.179.243.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:21.995298 0.000000 udp 10.0.2.22 51868 -> 178.6.63.9 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:45:22.995253 0.000000 udp 10.0.2.22 51868 -> 72.193.224.120 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:45:23.987074 0.154771 udp 10.0.2.22 51868 <-> 74.130.106.122 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:24.988685 0.099983 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:25.990383 0.140552 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:26.861769 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:45:26.991883 0.331765 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:27.994858 4.995414 udp 10.0.2.22 51868 -> 173.76.187.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:45:28.995041 4.996776 udp 10.0.2.22 51868 -> 178.6.63.9 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:45:29.997588 4.996892 udp 10.0.2.22 51868 <-> 190.246.109.252 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:30.988184 0.079055 udp 10.0.2.22 51868 <-> 79.115.191.247 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:31.989036 0.000000 udp 10.0.2.22 51868 -> 75.118.149.252 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:45:35.994593 0.000000 udp 10.0.2.22 51868 -> 69.122.169.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:45:37.002880 0.059119 udp 10.0.2.22 51868 <-> 5.13.57.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:37.992794 1.076610 udp 10.0.2.22 51868 <-> 79.115.191.247 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:39.996950 0.053262 udp 10.0.2.22 51868 <-> 178.117.62.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:40.997101 0.169453 udp 10.0.2.22 51868 <-> 174.100.151.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:41.997944 0.000000 udp 10.0.2.22 51868 -> 173.76.187.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:45:42.995917 0.000000 udp 10.0.2.22 51868 -> 177.103.74.115 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:45:43.996199 0.202663 udp 10.0.2.22 51868 <-> 72.193.224.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:44.987828 0.000000 udp 10.0.2.22 51868 -> 190.193.222.68 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:45:45.992261 0.177886 udp 10.0.2.22 51868 <-> 74.130.106.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:46.992340 0.157543 udp 10.0.2.22 51868 <-> 66.130.116.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:47.992218 0.000000 udp 10.0.2.22 51868 -> 178.17.29.68 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:45:48.993266 0.202936 udp 10.0.2.22 51868 <-> 84.237.172.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:50.088629 0.066578 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:51.082881 0.159014 udp 10.0.2.22 51868 <-> 74.130.106.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:52.067484 0.177972 udp 10.0.2.22 51868 <-> 136.159.63.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:53.068748 0.187992 udp 10.0.2.22 51868 <-> 72.193.224.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:53.943288 0.007365 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:45:54.062876 0.137316 udp 10.0.2.22 51868 <-> 24.193.202.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:55.056231 0.000000 udp 10.0.2.22 51868 -> 75.118.149.252 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:45:56.049049 0.047233 udp 10.0.2.22 51868 <-> 178.117.62.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:45:57.040621 0.000000 udp 10.0.2.22 51868 -> 178.6.63.9 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:45:58.034621 0.000000 udp 10.0.2.22 51868 -> 177.103.74.115 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:45:59.023711 0.066601 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:00.021128 0.082580 udp 10.0.2.22 51868 <-> 84.237.172.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:01.014368 0.000000 udp 10.0.2.22 51868 -> 118.179.243.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:46:02.007580 0.180061 udp 10.0.2.22 51868 <-> 71.15.96.2 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:02.999761 0.175321 udp 10.0.2.22 51868 <-> 136.159.63.95 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:03.995192 0.071426 udp 10.0.2.22 51868 <-> 79.115.191.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:04.996191 0.000000 udp 10.0.2.22 51868 -> 190.38.101.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:46:05.987910 0.000000 udp 10.0.2.22 51868 -> 75.118.149.252 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:46:06.990082 0.425939 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:07.993859 1.259851 udp 10.0.2.22 51868 <-> 181.21.153.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:08.993962 0.143277 udp 10.0.2.22 51868 <-> 173.212.89.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:09.993484 2.177438 udp 10.0.2.22 51868 <-> 201.210.29.209 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:10.994889 0.219815 udp 10.0.2.22 51868 <-> 173.198.103.122 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:11.996378 0.155245 udp 10.0.2.22 51868 <-> 96.59.111.121 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:12.988184 4.005526 udp 10.0.2.22 51868 -> 99.182.223.23 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:46:13.988997 0.026393 udp 10.0.2.22 51868 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:14.990813 0.000000 udp 10.0.2.22 51868 -> 82.227.89.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:46:15.992040 1.731360 udp 10.0.2.22 51868 <-> 93.105.145.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:17.995169 0.361042 udp 10.0.2.22 51868 <-> 111.254.125.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:18.996487 0.180292 udp 10.0.2.22 51868 <-> 70.94.206.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:19.987989 0.316263 udp 10.0.2.22 51868 <-> 190.198.144.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:20.869224 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:46:20.989419 0.000000 udp 10.0.2.22 51868 -> 75.250.43.136 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:46:21.990752 0.365829 udp 10.0.2.22 51868 <-> 146.83.193.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:22.992238 0.116683 udp 10.0.2.22 51868 <-> 2.68.0.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:23.994237 0.000000 udp 10.0.2.22 51868 -> 201.68.62.68 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:46:25.092895 0.250704 udp 10.0.2.22 51868 <-> 190.37.221.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:26.083819 0.143170 udp 10.0.2.22 51868 <-> 68.83.113.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:27.068874 0.020679 udp 10.0.2.22 51868 <-> 176.199.74.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:28.062983 0.123613 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:29.056478 0.153249 udp 10.0.2.22 51868 <-> 174.78.104.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:30.048733 0.460265 udp 10.0.2.22 51868 <-> 85.179.124.254 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:31.041465 4.954452 udp 10.0.2.22 51868 <-> 24.7.146.40 16464 CON 0 0 5 1394 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:32.033075 0.343878 udp 10.0.2.22 51868 <-> 179.210.57.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:33.024080 0.000000 udp 10.0.2.22 51868 -> 69.244.18.241 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:46:34.008370 0.052242 udp 10.0.2.22 51868 <-> 94.21.162.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:36.209820 0.000000 udp 10.0.2.22 51868 <- 24.7.146.40 16464 RSP 0 0 1 610 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:46:36.992290 0.236508 udp 10.0.2.22 51868 <-> 68.1.94.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:37.993990 0.443019 udp 10.0.2.22 51868 <-> 181.53.224.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:38.994968 4.058312 udp 10.0.2.22 51868 <-> 188.214.34.53 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:40.002715 0.119589 udp 10.0.2.22 51868 <-> 24.50.116.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:40.994570 0.000000 udp 10.0.2.22 51868 -> 24.164.171.64 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:46:41.991928 0.000000 udp 10.0.2.22 51868 -> 80.54.213.23 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:46:43.992462 0.000000 udp 10.0.2.22 51868 -> 105.229.138.31 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:46:44.993853 0.136734 udp 10.0.2.22 51868 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:45.995159 0.741099 udp 10.0.2.22 51868 <-> 186.95.182.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:46.996867 0.056657 udp 10.0.2.22 51868 <-> 188.214.34.53 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:47.870056 0.000093 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:46:47.990102 0.384874 udp 10.0.2.22 51868 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:48.990325 0.176233 udp 10.0.2.22 51868 <-> 69.1.2.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:49.990855 1.165923 udp 10.0.2.22 51868 <-> 108.176.74.5 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:51.994013 0.129685 udp 10.0.2.22 51868 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:52.994854 0.000000 udp 10.0.2.22 51868 -> 31.147.134.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:46:53.996949 0.143536 udp 10.0.2.22 51868 <-> 24.187.58.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:54.988213 0.099573 udp 10.0.2.22 51868 <-> 5.228.173.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:55.989846 4.996868 udp 10.0.2.22 51868 -> 37.250.142.18 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:46:56.991001 0.135341 udp 10.0.2.22 51868 <-> 24.222.149.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:57.992568 0.139628 udp 10.0.2.22 51868 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:46:58.994096 0.000000 udp 10.0.2.22 51868 -> 69.122.169.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:46:59.995472 0.054330 udp 10.0.2.22 51868 <-> 194.94.79.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:01.185372 0.929939 udp 10.0.2.22 51868 <-> 37.250.142.18 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:02.989592 0.145828 udp 10.0.2.22 51868 <-> 47.16.247.243 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:03.991092 0.759357 udp 10.0.2.22 51868 <-> 190.73.13.250 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:04.992465 0.139424 udp 10.0.2.22 51868 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:05.994311 0.000000 udp 10.0.2.22 51868 -> 201.248.21.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:06.994791 0.337079 udp 10.0.2.22 51868 <-> 66.165.198.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:07.986921 0.066404 udp 10.0.2.22 51868 <-> 213.254.71.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:08.988308 0.000000 udp 10.0.2.22 51868 -> 114.51.132.127 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:09.989617 0.272825 udp 10.0.2.22 51868 <-> 201.46.189.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:10.990967 0.104594 udp 10.0.2.22 51868 -> 108.61.40.171 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:11.095561 0.000000 icmp 108.61.40.171 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 11:47:11.992673 2.823450 udp 10.0.2.22 51868 <-> 200.127.62.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:12.994083 4.019905 udp 10.0.2.22 51868 <-> 98.67.228.85 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:13.995910 0.254939 udp 10.0.2.22 51868 <-> 190.254.197.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:14.866502 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:47:14.986808 0.051113 udp 10.0.2.22 51868 <-> 178.164.145.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:16.989823 0.059283 udp 10.0.2.22 51868 <-> 31.147.117.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:17.990902 0.145934 udp 10.0.2.22 51868 <-> 76.16.28.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:18.992638 0.206458 udp 10.0.2.22 51868 <-> 67.160.217.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:19.994317 0.000000 udp 10.0.2.22 51868 -> 60.56.154.77 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:20.995574 1.044176 udp 10.0.2.22 51868 <-> 89.228.154.72 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:22.988295 0.146981 udp 10.0.2.22 51868 <-> 37.45.244.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:23.989865 0.139550 udp 10.0.2.22 51868 <-> 68.192.76.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:24.991202 0.156063 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:25.992715 0.039078 udp 10.0.2.22 51868 <-> 94.73.1.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:26.994228 0.050622 udp 10.0.2.22 51868 <-> 78.159.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:27.995050 0.000000 udp 10.0.2.22 51868 -> 65.32.93.182 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:28.987053 0.173564 udp 10.0.2.22 51868 <-> 69.73.42.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:29.988566 0.000066 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:29.988632 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:47:30.989869 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:31.991462 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:32.992922 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:33.994289 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:34.995155 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:35.987002 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:36.988626 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:37.990084 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:38.991726 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:39.993022 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:40.994280 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:41.865797 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:47:41.995835 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:42.987222 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:43.988676 1.443601 udp 10.0.2.22 51868 <-> 98.80.235.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:44.990610 0.173274 udp 10.0.2.22 51868 <-> 69.73.42.153 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:45.991843 0.158005 udp 10.0.2.22 51868 <-> 62.18.149.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:46.993131 0.274123 udp 10.0.2.22 51868 <-> 186.221.45.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:47.994426 0.154547 udp 10.0.2.22 51868 <-> 98.27.18.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:48.995162 1.209255 udp 10.0.2.22 51868 <-> 27.106.24.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:47:49.987391 0.000000 udp 10.0.2.22 51868 -> 179.15.119.106 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:50.988628 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:51.990295 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:52.991792 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:54.994252 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:55.995799 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:56.987303 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:57.988737 0.000070 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:57.988807 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:47:58.990377 4.996985 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:47:59.992013 0.574127 udp 10.0.2.22 51868 <-> 27.106.24.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:48:00.992646 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:01.994382 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:04.988944 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:05.990566 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:06.991173 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:07.993276 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:08.864522 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:48:08.994624 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:09.996013 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:10.987644 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:11.988992 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:12.990358 4.997406 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:13.991233 3.004900 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:13.991332 3.004801 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 2 172 flow=Background 1970/01/01 11:48:14.993225 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:15.994752 0.153015 udp 10.0.2.22 51868 <-> 71.197.28.72 16464 CON 0 0 2 528 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:48:18.989084 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:19.990133 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:20.992079 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:21.993384 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:22.994526 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:23.995651 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:24.987924 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:25.988851 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:26.990314 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:27.992145 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:28.993806 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:30.996393 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:31.987751 0.142266 udp 10.0.2.22 51868 <-> 71.12.81.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:48:32.989017 0.156837 udp 10.0.2.22 51868 <-> 71.40.150.82 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:48:33.990804 0.304853 udp 10.0.2.22 51868 <-> 201.231.197.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:48:34.991699 0.100710 udp 10.0.2.22 51868 <-> 88.161.48.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:48:35.863051 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:48:35.993238 0.060295 udp 10.0.2.22 51868 <-> 37.143.69.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:48:36.994985 0.180424 udp 10.0.2.22 51868 <-> 64.185.54.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:48:37.995831 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:38.987854 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:39.989098 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:40.990544 0.060416 udp 10.0.2.22 51868 <-> 109.110.18.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:48:41.992125 0.309782 udp 10.0.2.22 51868 <-> 119.14.177.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:48:42.993606 0.157094 udp 10.0.2.22 51868 <-> 76.105.92.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:48:43.994833 0.000000 udp 10.0.2.22 51868 -> 89.74.117.134 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:44.996372 0.046114 udp 10.0.2.22 51868 <-> 78.60.105.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:48:45.987957 0.046806 udp 10.0.2.22 51868 <-> 46.160.101.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:48:46.989112 0.099274 udp 10.0.2.22 51868 <-> 178.120.66.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:48:47.992141 0.029765 udp 10.0.2.22 51868 <-> 134.3.82.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:48:48.992220 0.000000 udp 10.0.2.22 51868 -> 173.23.208.52 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:49.994004 0.066941 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:48:50.995096 0.217206 udp 10.0.2.22 51868 <-> 71.95.216.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:48:51.996182 0.066850 udp 10.0.2.22 51868 <-> 109.110.18.172 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:48:52.988037 0.137862 udp 10.0.2.22 51868 <-> 69.119.241.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:48:53.989247 4.112968 udp 10.0.2.22 51868 <-> 178.120.66.17 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:48:54.990670 0.069956 udp 10.0.2.22 51868 <-> 84.232.82.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:48:55.992073 0.590633 udp 10.0.2.22 51868 <-> 204.16.10.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:48:56.993851 0.000000 udp 10.0.2.22 51868 -> 80.4.111.170 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:48:58.996512 0.173164 udp 10.0.2.22 51868 <-> 69.244.18.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:48:59.987712 0.286020 udp 10.0.2.22 51868 <-> 117.194.251.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:00.989624 0.544420 udp 10.0.2.22 51868 <-> 190.11.97.59 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:01.990878 0.143140 udp 10.0.2.22 51868 <-> 69.116.80.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:02.865757 0.000039 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:49:02.995916 0.137749 udp 10.0.2.22 51868 <-> 76.123.37.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:03.995825 0.060045 udp 10.0.2.22 51868 <-> 95.169.211.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:04.518461 3.000243 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 11:49:04.995971 0.161039 udp 10.0.2.22 51868 <-> 50.143.57.80 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:05.996550 0.112142 udp 10.0.2.22 51868 <-> 85.87.65.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:06.988159 1.667329 udp 10.0.2.22 51868 <-> 186.94.169.232 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:07.989495 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:49:08.990841 0.082301 udp 10.0.2.22 51868 <-> 151.50.233.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:09.992153 0.584746 udp 10.0.2.22 51868 <-> 173.217.236.162 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:10.993890 0.154672 udp 10.0.2.22 51868 <-> 50.90.244.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:11.524247 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:49:11.994988 0.209944 udp 10.0.2.22 51868 <-> 74.242.10.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:12.996512 0.127560 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:13.987957 0.039156 udp 10.0.2.22 51868 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:14.989634 0.000000 udp 10.0.2.22 51868 -> 71.60.243.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:49:15.990829 0.198526 udp 10.0.2.22 51868 <-> 70.79.30.85 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:16.992256 0.051073 udp 10.0.2.22 51868 <-> 89.46.217.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:17.993862 0.251332 udp 10.0.2.22 51868 <-> 14.97.128.131 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:18.995046 0.173708 udp 10.0.2.22 51868 <-> 108.242.151.195 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:19.525910 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:49:19.996750 0.229095 udp 10.0.2.22 51868 <-> 208.127.113.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:20.988215 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:49:21.989702 0.213448 udp 10.0.2.22 51868 <-> 67.55.242.130 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:22.990731 0.147590 udp 10.0.2.22 51868 <-> 96.27.40.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:23.992554 0.143689 udp 10.0.2.22 51868 <-> 24.224.78.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:24.994059 0.023661 udp 10.0.2.22 51868 <-> 80.98.204.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:25.995031 0.201735 udp 10.0.2.22 51868 <-> 190.199.231.216 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:26.996837 0.160711 udp 10.0.2.22 51868 <-> 50.128.173.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:27.988041 0.321848 udp 10.0.2.22 51868 <-> 61.228.89.196 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:28.989923 4.212890 udp 10.0.2.22 51868 <-> 190.78.188.114 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:29.870759 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:49:29.991165 0.152459 udp 10.0.2.22 51868 <-> 76.11.73.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:30.992454 0.030767 udp 10.0.2.22 51868 <-> 94.155.231.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:32.995168 0.168066 udp 10.0.2.22 51868 <-> 50.71.21.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:33.986852 0.143610 udp 10.0.2.22 51868 <-> 173.3.53.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:34.988205 0.133142 udp 10.0.2.22 51868 <-> 71.224.230.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:35.528878 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:49:35.989925 2.061026 udp 10.0.2.22 51868 <-> 188.173.128.69 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:36.991207 0.045213 udp 10.0.2.22 51868 <-> 89.65.132.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:38.993908 0.087174 udp 10.0.2.22 51868 <-> 151.74.93.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:39.995254 0.000000 udp 10.0.2.22 51868 -> 179.45.48.82 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:49:40.987039 0.290890 udp 10.0.2.22 51868 <-> 119.231.181.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:41.988779 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:49:42.989908 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:49:43.990867 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:49:44.993703 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:49:45.993606 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:49:46.995670 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:49:47.987017 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:49:48.988308 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:49:49.989924 0.040281 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:50.991157 0.000000 udp 10.0.2.22 51868 -> 37.104.253.56 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:49:51.992603 0.150297 udp 10.0.2.22 51868 <-> 50.82.72.64 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:52.994075 0.921455 udp 10.0.2.22 51868 <-> 77.183.99.92 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:53.995315 0.025031 udp 10.0.2.22 51868 <-> 80.99.49.236 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:54.987146 2.214346 udp 10.0.2.22 51868 <-> 208.99.142.222 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:55.988378 0.000000 udp 10.0.2.22 51868 -> 82.22.216.33 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:49:56.869772 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:49:57.991060 0.253545 udp 10.0.2.22 51868 <-> 161.200.212.141 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:58.992639 0.169591 udp 10.0.2.22 51868 <-> 66.69.28.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:49:59.994062 4.011205 udp 10.0.2.22 51868 <-> 164.8.214.99 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:00.995356 0.028912 udp 10.0.2.22 51868 <-> 89.215.134.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:01.986958 0.000000 udp 10.0.2.22 51868 -> 186.30.192.156 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:50:02.988465 0.000000 udp 10.0.2.22 51868 -> 70.83.116.152 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:50:04.991411 0.299356 udp 10.0.2.22 51868 <-> 190.77.247.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:05.992738 0.267147 udp 10.0.2.22 51868 <-> 190.206.6.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:06.994321 0.137204 udp 10.0.2.22 51868 <-> 173.3.53.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:07.535103 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:50:07.996020 0.203079 udp 10.0.2.22 51868 <-> 83.37.17.8 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:08.987141 0.196758 udp 10.0.2.22 51868 <-> 208.126.231.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:09.988566 0.402065 udp 10.0.2.22 51868 <-> 177.106.47.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:10.990058 0.156662 udp 10.0.2.22 51868 <-> 76.16.13.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:11.991080 0.000000 udp 10.0.2.22 51868 -> 80.185.169.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:50:12.992808 4.997187 udp 10.0.2.22 51868 <-> 50.169.208.27 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:13.994680 0.000000 udp 10.0.2.22 51868 -> 114.43.0.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:50:14.996007 0.081539 udp 10.0.2.22 51868 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:15.987099 0.000000 udp 10.0.2.22 51868 -> 109.163.134.240 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:50:16.988591 1.741373 udp 10.0.2.22 51868 <-> 66.79.231.41 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:18.123810 0.000000 udp 10.0.2.22 51868 <- 50.169.208.27 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:50:18.991028 0.042631 udp 10.0.2.22 51868 <-> 89.136.139.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:19.993072 0.216512 udp 10.0.2.22 51868 <-> 85.84.235.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:20.994423 0.095813 udp 10.0.2.22 51868 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:21.995792 0.082274 udp 10.0.2.22 51868 <-> 83.249.231.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:22.987493 0.000000 udp 10.0.2.22 51868 -> 82.211.188.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:50:23.868586 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:50:23.988472 0.050263 udp 10.0.2.22 51868 <-> 93.105.19.26 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:24.990238 0.164961 udp 10.0.2.22 51868 <-> 24.243.8.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:25.991774 0.459325 udp 10.0.2.22 51868 <-> 188.253.67.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:26.992885 0.172700 udp 10.0.2.22 51868 <-> 75.69.111.115 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:27.994591 0.029174 udp 10.0.2.22 51868 <-> 89.215.134.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:28.996320 0.157584 udp 10.0.2.22 51868 <-> 71.82.221.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:29.987221 0.031406 udp 10.0.2.22 51868 <-> 149.172.60.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:30.988840 0.152924 udp 10.0.2.22 51868 <-> 98.27.18.66 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:31.990423 0.163658 udp 10.0.2.22 51868 <-> 66.177.33.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:32.991958 0.137147 udp 10.0.2.22 51868 <-> 24.34.66.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:33.993108 0.221496 udp 10.0.2.22 51868 <-> 184.45.92.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:34.994284 0.037405 udp 10.0.2.22 51868 <-> 89.71.59.189 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:35.996009 0.302965 udp 10.0.2.22 51868 <-> 187.11.102.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:36.987712 0.000000 udp 10.0.2.22 51868 -> 74.128.200.100 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:50:37.988691 0.128433 udp 10.0.2.22 51868 <-> 95.74.212.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:38.990159 0.396158 udp 10.0.2.22 51868 <-> 75.193.62.134 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:39.991341 1.872932 arp 10.0.2.22 who 169.254.195.33 INT 3 126 flow=Background-ARP 1970/01/01 11:50:40.993363 0.000000 udp 10.0.2.22 51868 -> 207.118.197.177 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:50:41.994864 0.000000 udp 10.0.2.22 51868 -> 174.59.159.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:50:42.996359 3.995604 udp 10.0.2.22 51868 <-> 85.84.235.254 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:43.987418 0.206519 udp 10.0.2.22 51868 <-> 190.144.82.218 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:44.988978 0.000000 udp 10.0.2.22 51868 -> 190.157.39.161 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:50:45.990244 0.061586 udp 10.0.2.22 51868 <-> 79.117.59.1 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:47.993489 0.000000 udp 10.0.2.22 51868 -> 174.59.159.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:50:48.994781 0.100542 udp 10.0.2.22 51868 <-> 95.74.212.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:49.996341 1.261322 udp 10.0.2.22 51868 <-> 190.193.86.78 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:50.867424 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:50:51.989225 0.142531 udp 10.0.2.22 51868 <-> 93.156.11.162 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:52.990203 0.056400 udp 10.0.2.22 51868 <-> 85.228.202.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:53.992015 0.229145 udp 10.0.2.22 51868 <-> 76.174.151.175 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:54.993467 0.054104 udp 10.0.2.22 51868 <-> 82.211.188.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:55.994725 0.000000 udp 10.0.2.22 51868 -> 184.162.119.200 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:50:56.996195 0.154656 udp 10.0.2.22 51868 <-> 75.115.10.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:57.987611 0.194863 udp 10.0.2.22 51868 <-> 66.72.190.185 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:58.988828 2.852649 udp 10.0.2.22 51868 <-> 66.186.245.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:50:59.990448 0.199252 udp 10.0.2.22 51868 <-> 49.249.140.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:00.991995 0.053307 udp 10.0.2.22 51868 <-> 89.253.170.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:01.993190 0.000000 udp 10.0.2.22 51868 -> 69.23.215.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:51:02.994661 0.035480 udp 10.0.2.22 51868 <-> 109.202.246.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:03.996417 4.997158 udp 10.0.2.22 51868 -> 71.80.71.242 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:51:04.987777 0.226897 udp 10.0.2.22 51868 <-> 190.72.27.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:05.988943 0.067045 udp 10.0.2.22 51868 <-> 79.115.191.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:06.990393 0.055160 udp 10.0.2.22 51868 <-> 89.208.181.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:07.992268 0.408519 udp 10.0.2.22 51868 <-> 80.171.95.242 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:09.146692 0.000000 udp 10.0.2.22 51868 <- 71.80.71.242 16464 RSP 0 0 1 890 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:51:09.994891 0.129384 udp 10.0.2.22 51868 <-> 24.50.116.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:10.996191 0.530255 udp 10.0.2.22 51868 <-> 75.197.51.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:11.987754 0.000000 udp 10.0.2.22 51868 -> 89.252.221.134 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:51:12.989112 0.210257 udp 10.0.2.22 51868 <-> 24.2.42.229 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:13.990574 0.174508 udp 10.0.2.22 51868 <-> 183.87.170.137 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:14.992137 0.041992 udp 10.0.2.22 51868 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:15.993251 0.000000 udp 10.0.2.22 51868 -> 62.18.155.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:51:16.994836 0.074411 udp 10.0.2.22 51868 <-> 62.99.12.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:17.865791 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:51:17.996330 0.177228 udp 10.0.2.22 51868 <-> 68.51.133.150 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:18.987935 0.358208 udp 10.0.2.22 51868 <-> 114.37.121.140 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:19.989969 0.298252 udp 10.0.2.22 51868 <-> 181.165.62.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:20.990883 0.141327 udp 10.0.2.22 51868 <-> 69.121.228.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:21.992289 0.166627 udp 10.0.2.22 51868 <-> 216.254.237.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:22.993740 0.432951 udp 10.0.2.22 51868 <-> 82.54.48.13 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:23.994817 2.895576 udp 10.0.2.22 51868 <-> 62.68.106.27 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:24.996337 0.041664 udp 10.0.2.22 51868 <-> 91.179.184.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:25.987802 0.023636 udp 10.0.2.22 51868 <-> 178.203.39.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:26.989706 0.202348 udp 10.0.2.22 51868 <-> 76.172.91.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:27.990714 0.060835 udp 10.0.2.22 51868 <-> 62.57.52.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:28.992187 0.133688 udp 10.0.2.22 51868 <-> 76.116.153.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:29.993964 0.331297 udp 10.0.2.22 51868 <-> 58.115.80.145 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:30.994969 0.898127 udp 10.0.2.22 51868 <-> 50.29.153.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:31.996420 0.168777 udp 10.0.2.22 51868 <-> 216.186.178.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:32.988127 0.000000 udp 10.0.2.22 51868 -> 5.15.195.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:51:33.989225 0.256539 udp 10.0.2.22 51868 <-> 76.189.34.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:34.990709 0.303249 udp 10.0.2.22 51868 <-> 181.225.32.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:35.992336 0.099832 udp 10.0.2.22 51868 <-> 85.56.52.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:36.993809 0.209647 udp 10.0.2.22 51868 <-> 99.39.113.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:37.995327 0.038786 udp 10.0.2.22 51868 <-> 62.107.91.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:38.996462 0.157580 udp 10.0.2.22 51868 <-> 69.212.254.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:39.988164 0.139165 udp 10.0.2.22 51868 <-> 96.21.32.15 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:40.989934 0.173937 udp 10.0.2.22 51868 <-> 76.107.65.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:41.990809 0.163852 udp 10.0.2.22 51868 <-> 71.16.80.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:42.992434 0.142022 udp 10.0.2.22 51868 <-> 18.111.124.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:43.993782 0.000000 udp 10.0.2.22 51868 -> 179.186.121.109 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:51:44.864488 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:51:44.995148 0.213718 udp 10.0.2.22 51868 <-> 50.174.107.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:51:45.996667 0.000044 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:51:45.996711 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:51:46.987898 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:51:47.989720 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:51:48.991106 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:51:50.006462 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:51:51.002831 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:51:51.999209 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:51:52.996674 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:51:53.988282 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:51:54.992889 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:51:55.993310 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:51:56.993743 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:51:57.993935 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:51:58.995404 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:51:59.996626 0.222673 udp 10.0.2.22 51868 <-> 50.174.107.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:00.988251 0.035625 udp 10.0.2.22 51868 <-> 195.182.199.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:01.989850 0.000000 udp 10.0.2.22 51868 -> 79.115.60.77 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:52:02.991036 0.152140 udp 10.0.2.22 51868 <-> 162.213.22.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:03.992281 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:52:04.993924 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:52:05.995151 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:52:06.986736 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:52:07.988262 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:52:09.993874 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:52:10.994504 0.000047 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:52:10.994551 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:52:11.864319 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:52:11.994367 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:52:12.995025 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:52:13.986952 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:52:14.994705 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:52:15.994275 0.000000 udp 10.0.2.22 51868 -> 212.238.72.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:52:16.994736 0.222732 udp 10.0.2.22 51868 <-> 50.174.107.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:17.995013 0.215368 udp 10.0.2.22 51868 <-> 86.58.36.89 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:18.994509 0.000000 udp 10.0.2.22 51868 -> 118.6.66.92 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:52:19.995110 0.164601 udp 10.0.2.22 51868 <-> 68.59.56.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:20.986805 0.064720 udp 10.0.2.22 51868 <-> 78.136.117.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:21.988521 0.060524 udp 10.0.2.22 51868 <-> 2.92.4.6 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:22.989820 0.048427 udp 10.0.2.22 51868 <-> 92.108.115.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:23.991043 2.758405 udp 10.0.2.22 51868 <-> 24.137.128.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:25.078841 0.133846 udp 10.0.2.22 51868 <-> 24.0.29.18 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:26.070886 0.059541 udp 10.0.2.22 51868 <-> 94.156.153.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:27.062221 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:52:28.047248 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:52:29.041761 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:52:30.035548 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:52:31.029453 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:52:32.021910 2.143765 udp 10.0.2.22 51868 <-> 98.193.134.246 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:33.013696 1.772840 udp 10.0.2.22 51868 <-> 190.79.124.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:34.990188 0.146142 udp 10.0.2.22 51868 <-> 24.191.81.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:35.988267 0.251002 udp 10.0.2.22 51868 <-> 181.33.188.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:37.991340 0.000000 udp 10.0.2.22 51868 -> 75.118.148.187 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:52:38.862396 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:52:38.992850 0.036235 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:39.994504 0.374994 udp 10.0.2.22 51868 <-> 14.99.56.113 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:40.996040 0.475184 udp 10.0.2.22 51868 <-> 124.171.169.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:41.987016 0.170708 udp 10.0.2.22 51868 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:42.988333 0.075179 udp 10.0.2.22 51868 <-> 213.254.71.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:43.989993 2.003012 udp 10.0.2.22 51868 -> 79.19.32.21 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:52:44.991619 2.156767 udp 10.0.2.22 51868 <-> 24.191.81.20 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:47.995636 0.000000 udp 10.0.2.22 51868 -> 188.31.199.29 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:52:48.987186 0.000000 udp 10.0.2.22 51868 -> 109.199.236.29 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:52:49.988604 0.000000 udp 10.0.2.22 51868 -> 135.19.220.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:52:50.989947 0.000000 udp 10.0.2.22 51868 -> 84.123.4.31 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:52:51.991778 0.150661 udp 10.0.2.22 51868 <-> 66.187.121.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:52.992938 0.000000 udp 10.0.2.22 51868 -> 75.95.128.57 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:52:53.994361 0.310848 udp 10.0.2.22 51868 <-> 119.14.177.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:54.996351 0.348733 udp 10.0.2.22 51868 <-> 173.212.89.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:55.987142 0.049806 udp 10.0.2.22 51868 <-> 213.46.47.81 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:56.988602 0.000000 udp 10.0.2.22 51868 -> 12.192.118.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:52:57.989947 0.559235 udp 10.0.2.22 51868 <-> 124.171.169.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:58.991656 0.371120 udp 10.0.2.22 51868 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:52:59.993123 0.144388 udp 10.0.2.22 51868 <-> 174.108.102.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:00.994477 0.203741 udp 10.0.2.22 51868 <-> 66.237.94.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:01.995832 0.295245 udp 10.0.2.22 51868 <-> 60.56.154.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:02.987200 0.159162 udp 10.0.2.22 51868 <-> 108.183.48.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:03.988661 0.782878 udp 10.0.2.22 51868 <-> 199.117.183.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:04.990366 0.051069 udp 10.0.2.22 51868 <-> 78.159.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:05.861238 0.000220 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:53:05.991752 0.000000 udp 10.0.2.22 51868 -> 93.183.191.234 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:53:06.992908 0.000000 udp 10.0.2.22 51868 -> 68.185.124.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:53:07.994351 0.000000 udp 10.0.2.22 51868 -> 31.147.134.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:53:08.996010 0.148083 udp 10.0.2.22 51868 <-> 216.145.87.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:09.987174 0.240553 udp 10.0.2.22 51868 <-> 85.179.124.254 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:10.988600 0.053311 udp 10.0.2.22 51868 <-> 188.241.10.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:11.990126 0.051788 udp 10.0.2.22 51868 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:12.991419 0.000000 udp 10.0.2.22 51868 -> 184.160.92.16 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:53:13.993379 0.162521 udp 10.0.2.22 51868 <-> 67.190.245.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:14.994460 0.049944 udp 10.0.2.22 51868 <-> 79.113.236.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:15.996003 2.994497 udp 10.0.2.22 51868 -> 74.216.7.82 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:53:16.987304 0.079292 udp 10.0.2.22 51868 <-> 62.43.7.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:17.988697 0.000000 udp 10.0.2.22 51868 -> 122.121.6.112 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:53:19.991764 0.000000 udp 10.0.2.22 51868 -> 41.107.190.179 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:53:20.993605 0.047885 udp 10.0.2.22 51868 <-> 79.113.236.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:21.995859 0.000000 udp 10.0.2.22 51868 -> 95.59.21.62 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:53:22.996092 0.067253 udp 10.0.2.22 51868 <-> 62.43.7.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:23.988847 0.169886 udp 10.0.2.22 51868 <-> 24.187.58.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:24.997668 0.051328 udp 10.0.2.22 51868 <-> 193.108.229.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:25.995660 0.188475 udp 10.0.2.22 51868 <-> 65.65.137.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:26.997523 0.000000 udp 10.0.2.22 51868 -> 195.70.108.58 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:53:28.003783 0.163919 udp 10.0.2.22 51868 <-> 75.67.160.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:29.001593 0.368983 udp 10.0.2.22 51868 <-> 211.76.60.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:30.002603 0.991650 udp 10.0.2.22 51868 <-> 173.174.185.34 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:32.002360 0.313749 udp 10.0.2.22 51868 <-> 190.97.41.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:32.336584 0.011474 udp 10.0.2.22 60078 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 11:53:32.348325 0.000000 udp 10.0.2.22 60079 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:53:32.889905 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:53:33.009662 0.138639 udp 10.0.2.22 51868 <-> 108.176.154.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:34.006276 0.000000 udp 10.0.2.22 51868 -> 174.59.159.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:53:35.004230 0.086615 udp 10.0.2.22 51868 <-> 94.153.61.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:36.001801 0.080868 udp 10.0.2.22 51868 <-> 86.124.222.126 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:36.999642 0.150206 udp 10.0.2.22 51868 <-> 98.239.205.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:37.987376 0.199433 udp 10.0.2.22 51868 <-> 67.149.214.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:38.990284 0.000000 udp 10.0.2.22 51868 -> 78.157.15.84 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:53:39.990453 0.058534 udp 10.0.2.22 51868 <-> 85.67.48.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:40.996853 0.161985 udp 10.0.2.22 51868 <-> 70.185.202.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:41.996241 0.000000 udp 10.0.2.22 51868 -> 187.13.223.190 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:53:42.995699 0.000000 udp 10.0.2.22 51868 -> 95.85.134.40 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:53:43.996123 0.367513 udp 10.0.2.22 51868 <-> 202.78.81.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:44.987537 0.000000 udp 10.0.2.22 51868 -> 190.79.130.76 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:53:45.989041 0.089887 udp 10.0.2.22 51868 <-> 85.67.48.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:46.990754 0.158356 udp 10.0.2.22 51868 <-> 108.176.217.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:47.994016 0.000000 udp 10.0.2.22 51868 -> 216.106.166.168 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:53:48.994299 0.249766 udp 10.0.2.22 51868 <-> 190.206.213.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:49.998929 0.000000 udp 10.0.2.22 51868 -> 75.137.114.253 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:53:50.998747 0.066952 udp 10.0.2.22 51868 <-> 5.58.18.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:51.990446 4.308295 udp 10.0.2.22 51868 <-> 186.137.65.148 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:52.991641 0.050539 udp 10.0.2.22 51868 <-> 85.202.146.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:53.992133 4.033054 udp 10.0.2.22 51868 <-> 94.155.231.163 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:54.992136 0.160908 udp 10.0.2.22 51868 <-> 70.185.202.93 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:56.995351 0.834653 udp 10.0.2.22 51868 <-> 90.227.35.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:58.987702 0.682261 udp 10.0.2.22 51868 <-> 187.13.223.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:53:59.874627 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:53:59.994592 0.000000 udp 10.0.2.22 51868 -> 216.106.166.168 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:54:00.994534 0.000000 udp 10.0.2.22 51868 -> 31.185.114.195 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:54:01.994454 0.000000 udp 10.0.2.22 51868 -> 74.15.158.213 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:54:02.994366 0.000000 udp 10.0.2.22 51868 -> 70.122.85.141 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:54:03.994972 0.165589 udp 10.0.2.22 51868 <-> 66.168.73.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:04.996464 0.634146 udp 10.0.2.22 51868 <-> 90.227.35.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:05.987680 0.203620 udp 10.0.2.22 51868 <-> 186.115.125.165 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:06.989750 0.420565 udp 10.0.2.22 51868 <-> 187.13.223.190 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:07.990704 0.259956 udp 10.0.2.22 51868 <-> 179.210.57.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:08.992366 0.207650 udp 10.0.2.22 51868 <-> 68.35.78.193 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:09.993665 0.171771 udp 10.0.2.22 51868 <-> 97.81.50.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:10.994917 0.162728 udp 10.0.2.22 51868 <-> 71.234.246.13 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:11.996595 0.000000 udp 10.0.2.22 51868 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:54:12.987988 0.128593 udp 10.0.2.22 51868 <-> 78.251.171.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:13.989491 0.000000 udp 10.0.2.22 51868 -> 186.30.202.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:54:14.990783 1.545546 udp 10.0.2.22 51868 <-> 65.50.60.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:15.992309 0.055139 udp 10.0.2.22 51868 <-> 89.208.181.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:16.993799 0.105378 udp 10.0.2.22 51868 <-> 81.37.173.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:17.995103 0.696611 udp 10.0.2.22 51868 <-> 190.190.123.168 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:18.996694 0.000000 udp 10.0.2.22 51868 -> 190.36.162.46 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:54:19.987874 0.169176 udp 10.0.2.22 51868 <-> 173.175.90.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:20.989706 0.000000 udp 10.0.2.22 51868 -> 5.20.145.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:54:21.991034 0.267090 udp 10.0.2.22 51868 <-> 187.245.97.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:22.992481 0.324567 udp 10.0.2.22 51868 <-> 181.166.200.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:23.994019 0.000000 udp 10.0.2.22 51868 -> 95.169.211.29 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:54:24.995124 0.168969 udp 10.0.2.22 51868 <-> 66.165.198.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:25.996661 0.000000 udp 10.0.2.22 51868 -> 177.225.129.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:54:26.867327 0.000113 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:54:26.987883 0.694910 udp 10.0.2.22 51868 <-> 188.167.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:27.989876 0.151771 udp 10.0.2.22 51868 <-> 74.129.39.118 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:28.990722 0.153612 udp 10.0.2.22 51868 <-> 64.53.138.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:29.992438 2.045134 udp 10.0.2.22 51868 <-> 5.20.145.20 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:30.993417 0.243941 udp 10.0.2.22 51868 <-> 187.245.97.11 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:32.996773 0.673821 udp 10.0.2.22 51868 <-> 188.167.110.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:33.988023 0.234301 udp 10.0.2.22 51868 <-> 24.59.225.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:34.990007 0.000000 udp 10.0.2.22 51868 -> 37.218.48.41 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:54:35.990849 0.152286 udp 10.0.2.22 51868 <-> 109.61.112.39 16464 CON 0 0 5 3618 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:36.992431 0.142829 udp 10.0.2.22 51868 <-> 24.44.159.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:37.994148 0.078723 udp 10.0.2.22 51868 <-> 88.222.170.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:38.995204 0.163592 udp 10.0.2.22 51868 <-> 70.124.90.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:39.986885 0.830537 udp 10.0.2.22 51868 <-> 187.57.60.156 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:40.988020 0.049054 udp 10.0.2.22 51868 <-> 80.99.14.128 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:41.989716 0.000000 udp 10.0.2.22 51868 -> 62.68.106.27 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:54:42.991302 0.348887 udp 10.0.2.22 51868 <-> 220.136.8.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:43.992556 0.066044 udp 10.0.2.22 51868 <-> 78.136.117.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:44.994009 0.169046 udp 10.0.2.22 51868 <-> 68.1.94.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:45.995636 0.253923 udp 10.0.2.22 51868 <-> 186.92.2.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:46.986809 0.343948 udp 10.0.2.22 51868 <-> 200.175.212.99 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:47.988235 0.198591 udp 10.0.2.22 51868 <-> 24.209.250.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:48.989883 0.316262 udp 10.0.2.22 51868 <-> 200.236.0.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:49.991003 0.146885 udp 10.0.2.22 51868 <-> 69.116.80.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:50.992491 1.070988 udp 10.0.2.22 51868 <-> 178.25.74.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:51.993906 0.087638 udp 10.0.2.22 51868 <-> 78.236.112.132 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:52.995276 0.022148 udp 10.0.2.22 51868 <-> 78.42.232.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:53.866762 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:54:53.986831 1.001364 udp 10.0.2.22 51868 <-> 24.242.53.41 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:55.989852 0.056839 udp 10.0.2.22 51868 <-> 5.15.195.36 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:56.991156 0.000000 udp 10.0.2.22 51868 -> 79.112.143.52 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:54:57.992575 0.334459 udp 10.0.2.22 51868 <-> 186.50.111.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:58.994101 0.073883 udp 10.0.2.22 51868 <-> 85.85.25.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:54:59.995521 0.137723 udp 10.0.2.22 51868 <-> 76.123.37.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:00.986984 0.000000 udp 10.0.2.22 51868 -> 217.41.43.54 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:55:01.988222 3.058501 udp 10.0.2.22 51868 <-> 5.15.195.36 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:02.990052 0.081607 udp 10.0.2.22 51868 <-> 79.112.143.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:03.991084 0.331484 udp 10.0.2.22 51868 <-> 186.50.111.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:05.994215 0.000000 udp 10.0.2.22 51868 -> 217.41.43.54 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:55:06.995648 0.146705 udp 10.0.2.22 51868 <-> 69.125.160.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:07.986976 0.000000 udp 10.0.2.22 51868 -> 75.148.129.106 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:55:08.988597 0.310676 udp 10.0.2.22 51868 <-> 110.233.68.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:09.989803 2.286579 udp 10.0.2.22 51868 <-> 190.193.86.78 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:10.991131 0.223521 udp 10.0.2.22 51868 <-> 177.224.86.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:12.994162 0.172481 udp 10.0.2.22 51868 <-> 174.59.123.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:13.995631 0.154902 udp 10.0.2.22 51868 <-> 24.59.225.47 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:14.987162 0.000000 udp 10.0.2.22 51868 -> 69.1.124.11 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:55:15.988546 3.039807 udp 10.0.2.22 51868 <-> 83.221.86.2 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:16.992500 0.151812 udp 10.0.2.22 51868 <-> 24.186.58.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:17.992527 0.000000 udp 10.0.2.22 51868 -> 75.237.109.0 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:55:19.994532 0.227943 udp 10.0.2.22 51868 -> 69.1.124.11 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:55:20.222475 0.000000 icmp 69.1.124.11 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 11:55:20.867776 0.000116 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:55:20.998213 0.188668 udp 10.0.2.22 51868 <-> 68.44.131.21 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:22.038592 0.163021 udp 10.0.2.22 51868 <-> 75.67.160.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:23.035406 0.130883 udp 10.0.2.22 51868 <-> 71.200.147.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:24.030555 0.178599 udp 10.0.2.22 51868 <-> 197.205.198.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:25.025349 0.260917 udp 10.0.2.22 51868 <-> 201.132.60.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:26.023576 0.125543 udp 10.0.2.22 51868 <-> 5.15.141.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:27.068505 0.000000 udp 10.0.2.22 51868 -> 41.250.215.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:55:28.059775 0.202779 udp 10.0.2.22 51868 <-> 75.85.120.105 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:29.047964 0.311723 udp 10.0.2.22 51868 <-> 177.138.96.92 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:30.042448 0.294817 udp 10.0.2.22 51868 <-> 60.56.154.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:31.036091 0.000000 udp 10.0.2.22 51868 -> 190.191.117.97 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:55:32.121520 0.397772 udp 10.0.2.22 51868 <-> 31.47.27.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:33.114200 0.229721 udp 10.0.2.22 51868 <-> 190.37.211.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:34.105863 0.046759 udp 10.0.2.22 51868 <-> 95.87.232.24 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:35.098270 0.540342 udp 10.0.2.22 51868 <-> 190.245.135.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:36.085986 0.000000 udp 10.0.2.22 51868 -> 190.191.117.97 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:55:37.081059 0.292471 udp 10.0.2.22 51868 <-> 97.106.251.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:38.074579 2.236457 udp 10.0.2.22 51868 <-> 109.72.59.29 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:39.067815 0.221897 udp 10.0.2.22 51868 <-> 173.174.0.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:40.097974 0.000000 udp 10.0.2.22 51868 -> 95.57.180.55 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:55:41.091621 1.024568 udp 10.0.2.22 51868 <-> 222.158.167.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:42.083159 0.074542 udp 10.0.2.22 51868 <-> 46.162.107.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:43.067974 0.000000 udp 10.0.2.22 51868 -> 190.245.135.83 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:55:44.062556 0.000000 udp 10.0.2.22 51868 -> 72.26.130.61 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:55:45.056525 0.000000 udp 10.0.2.22 51868 -> 75.197.126.36 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:55:46.051135 0.146844 udp 10.0.2.22 51868 <-> 95.57.180.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:47.043624 0.388350 udp 10.0.2.22 51868 <-> 202.43.160.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:47.910414 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:55:48.040509 0.163291 udp 10.0.2.22 51868 <-> 24.161.48.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:49.031477 0.678242 udp 10.0.2.22 51868 <-> 190.245.135.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:50.021109 0.151089 udp 10.0.2.22 51868 <-> 98.236.119.96 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:51.015475 0.286753 udp 10.0.2.22 51868 <-> 177.143.165.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:52.012219 0.187649 udp 10.0.2.22 51868 <-> 172.219.86.219 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:53.005467 0.145195 udp 10.0.2.22 51868 <-> 24.208.178.212 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:53.998043 0.124593 udp 10.0.2.22 51868 <-> 31.223.219.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:54.994614 0.000000 udp 10.0.2.22 51868 -> 96.63.150.229 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:55:55.996111 0.357853 udp 10.0.2.22 51868 <-> 186.38.71.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:56.987623 0.000000 udp 10.0.2.22 51868 -> 95.237.143.233 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:55:57.988898 0.420137 udp 10.0.2.22 51868 <-> 69.208.5.133 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:55:58.990544 0.000000 udp 10.0.2.22 51868 -> 200.127.252.118 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:55:59.995885 0.181402 udp 10.0.2.22 51868 <-> 97.85.182.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:56:00.999784 0.000000 udp 10.0.2.22 51868 -> 71.92.217.0 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:02.000277 0.000046 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:02.000323 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:56:03.003766 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:03.994932 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:04.992598 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:05.990174 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:06.992153 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:07.993264 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:08.994849 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:09.996374 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:10.987857 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:11.541163 3.001438 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 11:56:11.988885 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:12.990431 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:13.992106 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:14.862990 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:56:14.993469 2.994300 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:15.994893 0.173052 udp 10.0.2.22 51868 <-> 50.139.210.35 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:56:16.996224 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:18.548371 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:56:18.988885 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:19.990556 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:20.991991 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:21.993554 0.202732 udp 10.0.2.22 51868 <-> 71.92.217.0 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:56:22.995045 0.105014 udp 10.0.2.22 51868 <-> 213.57.43.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:56:23.996184 0.357037 udp 10.0.2.22 51868 <-> 114.46.215.240 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:56:24.987826 0.156975 udp 10.0.2.22 51868 <-> 216.196.163.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:56:25.989036 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:26.550128 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:56:26.990688 0.220631 udp 10.0.2.22 51868 <-> 49.249.143.76 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:56:27.991804 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:28.993781 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:29.995001 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:30.996377 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:31.988059 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:32.989069 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:33.990591 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:34.991894 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:35.993303 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:36.994800 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:37.996547 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:38.988123 0.147260 udp 10.0.2.22 51868 <-> 76.181.153.102 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:56:39.989718 0.206085 udp 10.0.2.22 51868 <-> 24.8.188.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:56:40.990512 0.137101 udp 10.0.2.22 51868 <-> 75.177.8.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:56:41.862105 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:56:41.992260 0.157158 udp 10.0.2.22 51868 <-> 98.184.128.60 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:56:42.552925 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:56:42.993905 0.135538 udp 10.0.2.22 51868 <-> 68.84.110.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:56:43.995004 0.153308 udp 10.0.2.22 51868 <-> 68.114.151.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:56:44.996720 0.163664 udp 10.0.2.22 51868 <-> 64.53.138.163 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:56:45.987983 0.205542 udp 10.0.2.22 51868 <-> 76.176.197.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:56:46.989315 0.385293 udp 10.0.2.22 51868 <-> 36.230.26.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:56:47.990549 0.051785 udp 10.0.2.22 51868 <-> 95.77.123.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:56:48.992555 0.100022 udp 10.0.2.22 51868 <-> 95.74.212.159 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:56:49.993799 0.000000 udp 10.0.2.22 51868 -> 135.19.63.178 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:50.995176 0.139903 udp 10.0.2.22 51868 <-> 72.15.127.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:56:51.996504 0.431116 udp 10.0.2.22 51868 <-> 76.77.224.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:56:52.987926 0.259974 udp 10.0.2.22 51868 <-> 72.226.4.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:56:53.989555 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:54.990900 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:55.992306 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:56.993745 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:57.995081 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:56:58.996527 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:00.989727 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:01.990694 0.000087 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:01.990781 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:57:02.992566 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:03.993710 0.058439 udp 10.0.2.22 51868 <-> 95.180.20.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:57:04.995092 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:05.996527 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:06.988196 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:07.990357 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:08.870727 0.000146 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:57:08.990910 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:09.992437 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:10.993908 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:11.995186 0.000073 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:11.995259 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:57:12.986611 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:14.558901 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 11:57:14.989930 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:15.991343 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:16.992460 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:17.994035 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:18.995176 4.997179 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:19.986875 0.113880 udp 10.0.2.22 51868 <-> 79.1.147.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:57:20.988432 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:21.989624 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:22.990929 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:24.994158 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:25.995103 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:26.986764 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:27.988399 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:28.989957 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:29.990976 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:30.992626 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:31.994027 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:33.986902 0.000080 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:33.986982 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:57:34.988477 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:35.869615 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:57:35.989898 0.060984 udp 10.0.2.22 51868 <-> 95.180.20.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:57:37.992821 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:38.993967 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:39.995799 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:40.986869 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:41.988846 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:42.989914 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:43.991763 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:44.993118 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:45.994141 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:46.995078 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:47.986886 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:48.988441 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:49.990026 0.000096 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:49.990122 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:57:50.991727 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:51.992745 0.075057 udp 10.0.2.22 51868 <-> 188.24.136.26 16464 CON 0 0 2 528 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:57:53.996004 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:54.986913 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:55.994904 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:56.994832 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:57.994965 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:58.994680 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:57:59.994787 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:00.995108 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:01.987214 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:02.868407 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:58:02.988568 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:03.990166 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:04.991814 0.000049 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:04.991863 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:58:05.992817 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:06.994348 0.063914 udp 10.0.2.22 51868 <-> 95.180.20.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:58:07.995149 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:08.987185 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:09.988558 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:10.990222 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:11.991793 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:12.992857 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:13.994501 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:14.995319 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:15.987289 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:16.988724 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:17.990394 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:18.991768 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:19.993266 4.996974 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:20.994404 4.997409 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:21.996331 0.000047 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:21.996378 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:58:22.987491 0.388728 udp 10.0.2.22 51868 <-> 36.230.26.151 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:58:23.988821 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:26.993023 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:27.994572 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:29.867075 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:58:29.987282 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:30.988737 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:31.991144 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:32.991848 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:33.993015 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:34.994870 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:35.996155 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:36.987733 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:37.988748 0.230490 udp 10.0.2.22 51868 <-> 184.155.114.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:58:38.990288 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:39.992166 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:40.993312 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:41.994487 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:43.000052 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:44.990834 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:45.990826 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:46.991782 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:47.993753 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:49.001631 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:49.997953 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:50.987837 0.000055 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:50.987892 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:58:51.989109 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:52.990408 2.221574 udp 10.0.2.22 51868 <-> 201.164.233.146 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:58:53.991979 0.338261 udp 10.0.2.22 51868 <-> 190.182.128.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:58:55.994810 0.136749 udp 10.0.2.22 51868 <-> 72.226.4.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:58:56.866066 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:58:56.996236 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:57.987981 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:58:59.990905 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:59:00.992378 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:59:01.993770 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:59:02.994646 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:59:03.996368 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:59:04.988023 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:59:05.989079 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:59:06.990632 0.000051 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:59:06.990683 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 11:59:07.992064 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:59:08.993675 0.218181 udp 10.0.2.22 51868 <-> 201.164.233.146 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:09.994800 0.000000 udp 10.0.2.22 51868 -> 190.182.128.103 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:59:10.996517 0.347782 udp 10.0.2.22 51868 <-> 122.121.39.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:11.988247 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:59:12.989533 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:59:13.990805 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:59:15.993733 0.320262 udp 10.0.2.22 51868 <-> 126.115.117.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:16.994947 0.198264 udp 10.0.2.22 51868 <-> 159.20.98.37 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:17.996518 0.066487 udp 10.0.2.22 51868 <-> 86.126.100.215 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:18.987868 0.000000 udp 10.0.2.22 51868 -> 98.185.153.66 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:59:19.989614 0.000000 udp 10.0.2.22 51868 -> 109.105.194.186 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:59:20.990766 0.325591 udp 10.0.2.22 51868 <-> 186.19.88.32 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:21.992236 0.000000 udp 10.0.2.22 51868 -> 76.110.62.13 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:59:22.993380 0.000000 udp 10.0.2.22 51868 -> 187.241.191.115 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:59:23.864729 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:59:23.995171 0.285549 udp 10.0.2.22 51868 <-> 186.89.152.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:24.996616 0.291784 udp 10.0.2.22 51868 <-> 186.14.10.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:25.988096 4.010976 udp 10.0.2.22 51868 <-> 96.54.178.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:26.989457 0.359508 udp 10.0.2.22 51868 <-> 122.121.19.127 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:27.990839 0.000000 udp 10.0.2.22 51868 -> 190.130.151.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:59:28.992255 0.000000 udp 10.0.2.22 51868 -> 108.176.74.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:59:29.993894 0.339668 udp 10.0.2.22 51868 <-> 190.199.66.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:30.994957 0.565205 udp 10.0.2.22 51868 <-> 31.220.228.194 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:31.996646 0.149433 udp 10.0.2.22 51868 <-> 76.16.28.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:32.987810 0.434100 udp 10.0.2.22 51868 <-> 69.105.142.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:33.989648 0.000000 udp 10.0.2.22 51868 -> 111.91.34.172 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:59:34.990975 0.353631 udp 10.0.2.22 51868 <-> 24.102.154.241 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:35.992477 0.310908 udp 10.0.2.22 51868 <-> 190.188.145.157 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:36.993809 0.415197 udp 10.0.2.22 51868 <-> 201.249.10.40 16464 CON 0 0 2 808 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:37.995137 0.167382 udp 10.0.2.22 51868 <-> 24.27.70.94 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:38.996574 0.000000 udp 10.0.2.22 51868 -> 105.139.71.155 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:59:39.988091 0.293014 udp 10.0.2.22 51868 <-> 76.119.125.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:40.989861 0.000000 udp 10.0.2.22 51868 -> 50.11.204.67 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:59:41.991027 0.027143 udp 10.0.2.22 51868 <-> 89.212.235.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:42.992538 0.101326 udp 10.0.2.22 51868 <-> 109.52.227.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:43.993870 1.175557 udp 10.0.2.22 51868 <-> 190.246.109.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:44.995282 0.072207 udp 10.0.2.22 51868 <-> 128.71.112.178 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:45.986637 0.065212 udp 10.0.2.22 51868 <-> 46.73.205.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:46.988383 0.000000 udp 10.0.2.22 51868 -> 190.91.82.10 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:59:47.989485 0.163668 udp 10.0.2.22 51868 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:48.990897 0.299252 udp 10.0.2.22 51868 <-> 61.192.74.98 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:49.992693 0.373849 udp 10.0.2.22 51868 <-> 187.84.77.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:50.863303 0.000039 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 11:59:50.993992 0.088767 udp 10.0.2.22 51868 <-> 217.217.124.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:51.995618 0.250923 udp 10.0.2.22 51868 <-> 201.209.115.220 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:52.986748 1.277063 udp 10.0.2.22 51868 <-> 89.229.29.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:53.988305 0.000000 udp 10.0.2.22 51868 -> 186.50.111.39 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:59:54.989668 0.000000 udp 10.0.2.22 51868 -> 61.227.72.182 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:59:55.991226 0.000000 udp 10.0.2.22 51868 -> 1.172.166.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 11:59:56.992638 0.055261 udp 10.0.2.22 51868 <-> 89.208.181.248 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:57.996909 4.120638 udp 10.0.2.22 51868 <-> 68.185.124.13 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:58.996570 1.072075 udp 10.0.2.22 51868 <-> 89.229.29.164 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 11:59:59.986789 1.001649 udp 10.0.2.22 51868 <-> 190.36.26.170 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:02.993631 0.378477 udp 10.0.2.22 51868 <-> 61.227.72.182 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:03.995755 3.066912 udp 10.0.2.22 51868 <-> 79.118.203.15 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:04.995920 0.239375 udp 10.0.2.22 51868 <-> 190.206.37.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:05.995117 0.000000 udp 10.0.2.22 51868 -> 68.185.124.13 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:07.988851 0.145952 udp 10.0.2.22 51868 <-> 75.131.21.204 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:08.990010 0.099247 udp 10.0.2.22 51868 <-> 85.84.168.206 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:09.994532 0.666931 udp 10.0.2.22 51868 <-> 99.21.240.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:10.997917 0.086179 udp 10.0.2.22 51868 <-> 85.67.48.154 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:11.998084 0.110314 udp 10.0.2.22 51868 <-> 91.105.64.34 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:13.001517 0.300608 udp 10.0.2.22 51868 <-> 187.15.59.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:13.990751 0.161808 udp 10.0.2.22 51868 <-> 69.245.13.199 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:14.993588 0.332441 udp 10.0.2.22 51868 <-> 123.194.233.237 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:15.995610 0.386048 udp 10.0.2.22 51868 <-> 117.203.132.61 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:16.993266 0.114021 udp 10.0.2.22 51868 <-> 95.155.11.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:17.862386 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:00:17.992741 0.029550 udp 10.0.2.22 51868 <-> 95.111.109.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:18.993949 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:19.995128 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:20.986752 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:21.998669 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:23.025978 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:24.021485 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:25.020953 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:26.015278 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:27.009587 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:28.000024 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:28.995734 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:29.991316 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:30.996005 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:31.997422 0.000000 udp 10.0.2.22 51868 -> 177.68.211.15 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:32.996752 0.029600 udp 10.0.2.22 51868 <-> 95.111.109.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:33.996616 0.929194 udp 10.0.2.22 51868 <-> 70.241.74.140 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:34.986991 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:35.988523 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:36.990200 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:37.991320 0.052081 udp 10.0.2.22 51868 <-> 85.229.11.235 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:38.993967 0.229801 udp 10.0.2.22 51868 <-> 190.72.3.187 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:39.994402 0.359714 udp 10.0.2.22 51868 <-> 180.176.22.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:40.995691 0.167207 udp 10.0.2.22 51868 <-> 71.226.87.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:41.987296 0.000000 udp 10.0.2.22 51868 -> 105.226.121.131 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:42.988756 0.070002 udp 10.0.2.22 51868 <-> 81.203.204.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:43.990177 0.064195 udp 10.0.2.22 51868 <-> 151.48.113.228 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:44.861483 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:00:44.991364 0.071975 udp 10.0.2.22 51868 <-> 83.97.251.198 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:46.994617 0.127204 udp 10.0.2.22 51868 <-> 68.39.69.84 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:47.996059 0.059073 udp 10.0.2.22 51868 <-> 81.236.193.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:48.987706 0.313718 udp 10.0.2.22 51868 <-> 187.57.16.233 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:49.988671 0.071031 udp 10.0.2.22 51868 <-> 85.152.0.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:00:50.990225 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:51.991056 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:52.993085 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:53.994585 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:54.996107 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:55.987564 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:56.988737 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:57.990283 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:58.991667 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:00:59.993449 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:00.994912 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:01.996323 0.000050 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:01.996373 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:01:02.987795 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:03.988886 0.000000 udp 10.0.2.22 51868 -> 173.247.187.250 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:04.990229 0.152058 udp 10.0.2.22 51868 <-> 71.79.133.210 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:01:05.991574 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:06.992614 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:07.994696 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:08.996276 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:09.987594 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:10.989026 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:11.870200 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:01:11.990396 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:12.992094 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:13.994028 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:14.994702 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:15.996213 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:16.987724 0.000055 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:16.987779 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:01:17.989042 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:19.991805 0.091793 udp 10.0.2.22 51868 <-> 78.235.244.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:01:20.993626 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:21.994721 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:22.996238 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:23.987725 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:24.989150 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:25.990622 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:27.992690 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:28.994565 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:29.996448 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:30.987980 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:31.989095 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:32.990384 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:33.992654 0.000049 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:33.992703 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:01:34.993065 0.002600 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:34.995665 0.000000 icmp 195.113.235.65 0x0003 -> 10.0.2.22 0x9efe URN 192 1 110 flow=Background 1970/01/01 12:01:35.995037 0.000000 udp 10.0.2.22 51868 -> 173.247.187.250 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:36.996361 0.086202 udp 10.0.2.22 51868 <-> 78.235.244.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:01:37.987748 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:38.992482 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:39.872504 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:01:39.993330 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:40.994143 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:41.994238 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:42.994944 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:43.996475 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:44.988089 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:45.989040 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:46.990575 0.000065 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:46.990640 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:01:47.992058 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:48.993636 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:49.995095 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:51.988051 0.168160 udp 10.0.2.22 51868 <-> 174.49.200.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:01:52.989566 3.005131 udp 10.0.2.22 51868 -> 173.247.187.250 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:53.990566 0.100827 udp 10.0.2.22 51868 <-> 79.7.112.117 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:01:54.992279 0.000000 udp 10.0.2.22 51868 -> 179.210.224.161 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:01:56.995160 0.166817 udp 10.0.2.22 51868 <-> 174.49.200.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:01:57.996719 0.220281 udp 10.0.2.22 51868 <-> 177.224.86.78 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:01:58.987915 0.218951 udp 10.0.2.22 51868 <-> 71.199.58.149 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:01:59.989645 0.000000 udp 10.0.2.22 51868 -> 76.242.184.63 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:02:00.990659 0.073822 udp 10.0.2.22 51868 <-> 85.152.0.177 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:01.996928 0.065208 udp 10.0.2.22 51868 <-> 94.253.254.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:02.997209 0.790196 udp 10.0.2.22 51868 <-> 198.45.191.58 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:03.997369 0.172647 udp 10.0.2.22 51868 <-> 208.107.49.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:05.002320 0.297694 udp 10.0.2.22 51868 <-> 75.248.210.40 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:05.992458 0.167162 udp 10.0.2.22 51868 <-> 174.49.200.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:06.876056 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:02:06.996104 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:02:07.999454 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:02:08.997612 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:02:10.002673 2.988799 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:02:11.996586 0.226914 udp 10.0.2.22 51868 <-> 98.127.221.100 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:13.992746 0.318751 udp 10.0.2.22 51868 <-> 114.181.159.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:15.003026 0.176797 udp 10.0.2.22 51868 <-> 134.129.72.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:16.005525 0.302941 udp 10.0.2.22 51868 <-> 190.181.150.207 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:17.007222 0.188489 udp 10.0.2.22 51868 <-> 68.225.217.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:18.004700 0.000000 udp 10.0.2.22 51868 -> 24.101.248.175 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:02:18.991020 0.136430 udp 10.0.2.22 51868 <-> 96.27.40.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:19.989113 0.000000 udp 10.0.2.22 51868 -> 24.215.75.81 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:02:20.989475 0.146222 udp 10.0.2.22 51868 <-> 184.59.85.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:21.990828 0.127047 udp 10.0.2.22 51868 <-> 173.81.172.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:22.992516 0.067538 udp 10.0.2.22 51868 <-> 213.231.55.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:23.993960 0.628352 udp 10.0.2.22 51868 <-> 186.89.201.180 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:24.995692 0.240924 udp 10.0.2.22 51868 <-> 192.252.239.56 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:25.986791 0.188151 udp 10.0.2.22 51868 <-> 96.47.95.112 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:26.988153 0.164720 udp 10.0.2.22 51868 <-> 69.245.165.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:27.990070 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:02:28.991065 0.111287 udp 10.0.2.22 51868 <-> 109.55.103.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:29.992431 0.268934 udp 10.0.2.22 51868 <-> 201.80.112.184 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:30.994020 0.000000 udp 10.0.2.22 51868 -> 96.27.40.56 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:02:31.995544 0.077658 udp 10.0.2.22 51868 <-> 85.152.244.7 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:32.993659 0.121256 udp 10.0.2.22 51868 <-> 88.0.186.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:33.871440 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:02:33.991469 0.068279 udp 10.0.2.22 51868 <-> 95.180.20.73 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:34.989493 0.134013 udp 10.0.2.22 51868 <-> 62.18.149.225 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:35.991103 0.326622 udp 10.0.2.22 51868 <-> 220.129.2.53 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:36.993337 0.161622 udp 10.0.2.22 51868 <-> 98.30.8.42 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:37.994055 0.942702 udp 10.0.2.22 51868 <-> 115.244.92.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:38.994967 0.123425 udp 10.0.2.22 51868 <-> 92.250.2.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:39.986808 0.396477 udp 10.0.2.22 51868 <-> 186.89.152.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:40.988338 0.039463 udp 10.0.2.22 51868 <-> 89.215.37.125 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:41.990034 0.136413 udp 10.0.2.22 51868 <-> 67.86.90.91 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:42.991179 0.302195 udp 10.0.2.22 51868 <-> 61.70.234.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:43.996992 0.321597 udp 10.0.2.22 51868 <-> 119.200.155.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:45.000952 0.000000 udp 10.0.2.22 51868 -> 83.7.59.132 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:02:45.997843 0.000000 udp 10.0.2.22 51868 -> 177.68.171.220 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:02:46.986944 0.000000 udp 10.0.2.22 51868 -> 190.74.247.166 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:02:47.988569 0.573978 udp 10.0.2.22 51868 <-> 202.29.179.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:48.989905 0.159972 udp 10.0.2.22 51868 <-> 76.19.248.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:49.991134 0.207164 udp 10.0.2.22 51868 <-> 71.93.149.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:50.993091 0.317551 udp 10.0.2.22 51868 <-> 61.70.94.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:51.994370 0.053728 udp 10.0.2.22 51868 <-> 95.77.123.77 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:52.995312 0.000000 udp 10.0.2.22 51868 -> 186.210.126.122 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:02:53.986914 0.000000 udp 10.0.2.22 51868 -> 50.152.72.124 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:02:54.988401 0.032943 udp 10.0.2.22 51868 <-> 78.97.175.138 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:55.990041 0.157663 udp 10.0.2.22 51868 <-> 66.171.56.246 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:56.991450 0.326733 udp 10.0.2.22 51868 <-> 121.84.135.45 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:57.992822 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:02:58.994101 0.313948 udp 10.0.2.22 51868 <-> 60.37.183.143 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:02:59.995252 0.172715 udp 10.0.2.22 51868 <-> 106.51.115.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:03:00.872531 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:03:00.992805 0.035200 udp 10.0.2.22 51868 <-> 130.204.89.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:03:01.992947 0.305582 udp 10.0.2.22 51868 <-> 61.70.140.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:03:02.994098 0.162775 udp 10.0.2.22 51868 <-> 216.186.178.208 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:03:03.994265 0.508552 udp 10.0.2.22 51868 <-> 200.175.127.19 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:03:04.994449 0.302324 udp 10.0.2.22 51868 <-> 119.231.181.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:03:05.994725 1.175736 udp 10.0.2.22 51868 <-> 186.206.236.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:03:06.995648 0.125945 udp 10.0.2.22 51868 <-> 24.75.190.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:03:07.987094 0.119517 udp 10.0.2.22 51868 <-> 216.164.210.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:03:08.988729 0.000000 udp 10.0.2.22 51868 -> 95.252.133.47 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:09.990166 0.061564 udp 10.0.2.22 51868 <-> 85.204.248.33 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:03:10.991381 0.214686 udp 10.0.2.22 51868 <-> 65.30.26.10 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:03:11.993270 0.085124 udp 10.0.2.22 51868 <-> 94.41.58.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:03:12.994555 0.000000 udp 10.0.2.22 51868 -> 207.191.144.112 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:13.996155 0.000000 udp 10.0.2.22 51868 -> 189.35.224.135 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:14.987430 0.300710 udp 10.0.2.22 51868 <-> 180.3.235.119 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:03:15.988682 3.004175 udp 10.0.2.22 51868 -> 108.163.249.248 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:16.990102 0.045985 udp 10.0.2.22 51868 <-> 84.30.232.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:03:17.991494 0.000000 udp 10.0.2.22 51868 -> 108.163.253.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:18.564879 3.001864 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 12:03:19.994495 0.000000 udp 10.0.2.22 51868 -> 188.165.199.95 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:20.996372 0.000000 udp 10.0.2.22 51868 -> 205.168.80.123 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:21.987262 0.000000 udp 10.0.2.22 51868 -> 108.163.249.244 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:22.988806 0.131835 udp 10.0.2.22 51868 -> 108.163.253.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:23.120641 0.000000 icmp 108.163.253.247 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 12:03:23.990127 0.129865 udp 10.0.2.22 51868 -> 108.163.249.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:24.119992 0.000000 icmp 108.163.249.247 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 12:03:24.991049 0.130067 udp 10.0.2.22 51868 -> 108.163.253.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:25.121116 0.000000 icmp 108.163.253.246 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 12:03:25.572336 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:03:25.993272 0.123829 udp 10.0.2.22 51868 -> 108.163.249.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:26.117101 0.000000 icmp 108.163.249.246 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 12:03:26.994598 0.168480 udp 10.0.2.22 51868 -> 24.208.8.170 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:27.163078 0.000000 icmp 24.208.8.170 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 12:03:27.865806 0.000113 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:03:27.996343 0.000000 udp 10.0.2.22 51868 -> 74.50.139.52 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:28.987424 0.000000 udp 10.0.2.22 51868 -> 207.191.144.112 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:29.988900 0.000000 udp 10.0.2.22 51868 -> 108.163.249.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:30.990047 1.058367 udp 10.0.2.22 51868 <-> 84.30.232.111 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:03:32.992859 4.363143 udp 10.0.2.22 51868 <-> 190.178.240.139 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:03:33.573746 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:03:33.994150 0.000000 udp 10.0.2.22 51868 -> 188.165.199.95 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:34.995612 0.000000 udp 10.0.2.22 51868 -> 108.163.253.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:37.990366 0.000000 udp 10.0.2.22 51868 -> 72.192.186.195 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:38.991639 0.000000 udp 10.0.2.22 51868 -> 24.208.8.170 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:39.993140 0.000000 udp 10.0.2.22 51868 -> 190.205.148.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:40.994434 0.160696 udp 10.0.2.22 51868 <-> 76.19.248.148 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:03:41.996007 0.000000 udp 10.0.2.22 51868 -> 108.163.249.246 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:42.987739 0.000000 udp 10.0.2.22 51868 -> 108.163.253.249 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:43.989135 0.000000 udp 10.0.2.22 51868 -> 205.168.80.123 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:44.990247 0.000000 udp 10.0.2.22 51868 -> 108.163.253.246 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:45.991509 0.000000 udp 10.0.2.22 51868 -> 108.163.249.247 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:46.993581 0.000000 udp 10.0.2.22 51868 -> 207.191.144.112 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:47.994562 0.000000 udp 10.0.2.22 51868 -> 24.208.8.170 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:48.996161 0.044287 udp 10.0.2.22 51868 <-> 84.30.232.111 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:03:49.576892 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:03:49.987874 0.052525 udp 10.0.2.22 51868 <-> 91.193.84.200 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:03:50.988879 0.226201 udp 10.0.2.22 51868 <-> 189.195.85.103 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:03:51.990285 0.181718 udp 10.0.2.22 51868 -> 72.192.186.195 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:52.172003 0.000000 icmp 72.192.186.195 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 12:03:52.991829 0.000000 udp 10.0.2.22 51868 -> 190.205.148.28 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:53.993483 0.016446 udp 10.0.2.22 51868 -> 188.165.199.95 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:54.009929 0.000000 icmp 188.165.199.95 0x0303 -> 10.0.2.22 0x5040 URP 192 1 86 flow=Background 1970/01/01 12:03:54.864591 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:03:54.994591 0.000000 udp 10.0.2.22 51868 -> 108.163.253.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:55.996261 0.000000 udp 10.0.2.22 51868 -> 108.163.249.246 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:56.987825 0.000000 udp 10.0.2.22 51868 -> 108.163.249.245 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:57.988967 0.000000 udp 10.0.2.22 51868 -> 108.163.253.246 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:58.990240 0.000000 udp 10.0.2.22 51868 -> 108.163.249.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:03:59.992093 0.000000 udp 10.0.2.22 51868 -> 108.163.249.247 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:00.993381 0.000000 udp 10.0.2.22 51868 -> 207.191.144.112 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:01.994987 0.000000 udp 10.0.2.22 51868 -> 108.163.253.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:02.996015 0.348729 udp 10.0.2.22 51868 <-> 190.178.240.139 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:04:03.987575 0.000000 udp 10.0.2.22 51868 -> 108.163.249.244 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:04.989175 0.000000 udp 10.0.2.22 51868 -> 205.168.80.123 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:05.990541 0.000000 udp 10.0.2.22 51868 -> 24.208.8.170 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:06.991781 0.000000 udp 10.0.2.22 51868 -> 108.163.253.249 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:07.993795 0.000000 udp 10.0.2.22 51868 -> 74.50.139.52 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:08.995079 0.000000 udp 10.0.2.22 51868 -> 108.163.249.248 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:09.996326 1.860403 udp 10.0.2.22 51868 <-> 189.35.224.135 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:04:10.987912 0.146305 udp 10.0.2.22 51868 <-> 128.164.237.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:04:11.989217 0.155835 udp 10.0.2.22 51868 <-> 98.181.35.9 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:04:12.990530 0.139439 udp 10.0.2.22 51868 <-> 71.76.197.227 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:04:13.992019 0.059719 udp 10.0.2.22 51868 <-> 91.65.196.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:04:14.995427 0.449563 udp 10.0.2.22 51868 <-> 115.242.146.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:04:15.995164 0.495099 udp 10.0.2.22 51868 <-> 201.210.253.211 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:04:16.996252 0.239638 udp 10.0.2.22 51868 <-> 201.242.148.238 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:04:17.987880 0.000000 udp 10.0.2.22 51868 -> 5.234.87.239 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:18.989208 1.190965 udp 10.0.2.22 51868 <-> 186.88.132.166 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:04:19.990506 0.132461 udp 10.0.2.22 51868 <-> 74.72.169.152 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:04:20.992247 3.004166 udp 10.0.2.22 51868 -> 79.116.107.4 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:21.582971 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:04:21.862733 0.000111 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:04:21.993480 0.159127 udp 10.0.2.22 51868 <-> 66.158.58.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:04:22.995034 0.137675 udp 10.0.2.22 51868 <-> 69.121.228.155 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:04:24.988193 0.159398 udp 10.0.2.22 51868 <-> 74.193.135.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:04:25.989506 0.151960 udp 10.0.2.22 51868 <-> 69.125.160.55 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:04:26.993578 0.365563 udp 10.0.2.22 51868 <-> 114.47.13.30 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:04:27.994667 0.000000 udp 10.0.2.22 51868 -> 69.204.108.164 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:28.994882 0.000000 udp 10.0.2.22 51868 -> 188.29.7.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:29.995779 0.000000 udp 10.0.2.22 51868 -> 70.65.248.65 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:30.998109 0.297873 udp 10.0.2.22 51868 <-> 190.193.56.65 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:04:32.990051 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:33.990727 0.000109 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:33.990836 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:04:34.995899 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:35.996143 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:36.995720 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:37.996515 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:38.988575 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:39.990059 0.168553 udp 10.0.2.22 51868 <-> 68.170.235.188 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:04:40.990825 1.017317 udp 10.0.2.22 51868 <-> 181.166.124.51 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:04:41.992426 0.000000 udp 10.0.2.22 51868 -> 99.121.92.180 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:42.993363 0.276640 udp 10.0.2.22 51868 <-> 177.227.216.250 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:04:43.995354 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:44.996521 0.000000 udp 10.0.2.22 51868 -> 186.94.84.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:45.988482 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:46.989392 1.169180 udp 10.0.2.22 51868 <-> 85.230.174.252 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:04:48.862326 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:04:48.992556 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:49.993750 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:50.995228 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:51.986761 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:52.988243 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:53.989695 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:54.990578 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:55.992609 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:56.993849 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:57.995509 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:58.986684 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:04:59.988235 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:00.989909 0.000116 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:00.990025 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:05:01.991038 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:03.994314 0.000000 udp 10.0.2.22 51868 -> 186.94.84.246 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:04.995769 0.151263 udp 10.0.2.22 51868 <-> 24.187.58.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:05:05.986646 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:06.988647 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:07.989586 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:08.991081 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:09.992564 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:10.994523 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:11.995761 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:12.986910 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:13.988239 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:14.990297 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:15.870836 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:05:15.991007 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:16.992697 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:17.994025 0.143983 udp 10.0.2.22 51868 <-> 24.187.58.253 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:05:18.995877 0.231503 udp 10.0.2.22 51868 <-> 190.37.211.72 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:05:19.986983 0.000000 udp 10.0.2.22 51868 -> 87.97.146.161 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:20.989209 0.411098 udp 10.0.2.22 51868 <-> 201.81.192.158 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:05:21.989709 0.154494 udp 10.0.2.22 51868 <-> 98.217.103.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:05:22.991154 0.271524 udp 10.0.2.22 51868 <-> 76.178.38.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:05:23.992771 0.000000 udp 10.0.2.22 51868 -> 71.125.194.20 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:24.994228 0.000000 udp 10.0.2.22 51868 -> 88.243.145.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:25.995149 0.075242 udp 10.0.2.22 51868 <-> 213.60.233.50 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:05:26.987011 0.419400 udp 10.0.2.22 51868 <-> 110.172.19.169 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:05:27.988653 0.250291 udp 10.0.2.22 51868 <-> 190.202.252.202 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:05:28.989988 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:29.991151 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:31.994409 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:32.996274 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:33.987016 4.006003 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:34.988563 0.000000 udp 10.0.2.22 51868 -> 24.249.56.178 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:35.990193 0.153392 udp 10.0.2.22 51868 <-> 71.234.18.167 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:05:36.991437 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:38.994233 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:39.995973 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:40.988391 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:41.989715 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:42.869831 0.000099 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:05:42.991822 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:43.992823 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:44.993495 0.000195 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:44.993690 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:05:45.994675 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:46.996285 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:47.987313 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:48.988651 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:49.990231 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:50.991374 0.527028 udp 10.0.2.22 51868 <-> 200.126.150.83 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:05:51.992918 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:52.995107 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:53.995977 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:54.987533 0.000075 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:54.987608 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:05:55.988819 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:56.990563 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:57.991440 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:58.993263 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:05:59.994476 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:06:00.995813 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:06:01.987278 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:06:02.988760 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:06:03.990012 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:06:04.991911 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:06:05.992899 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:06:06.994292 0.301687 udp 10.0.2.22 51868 <-> 84.228.222.43 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:07.996131 0.167822 udp 10.0.2.22 51868 <-> 66.168.73.197 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:08.987662 0.000000 udp 10.0.2.22 51868 -> 77.222.27.243 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:06:09.868981 0.000125 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:06:09.988828 0.143349 udp 10.0.2.22 51868 <-> 69.120.84.63 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:10.990549 1.417261 udp 10.0.2.22 51868 <-> 24.232.62.74 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:11.991736 0.141113 udp 10.0.2.22 51868 <-> 24.75.169.69 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:12.993353 0.162299 udp 10.0.2.22 51868 <-> 184.162.187.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:13.994810 0.220441 udp 10.0.2.22 51868 <-> 72.174.46.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:14.996342 0.000000 udp 10.0.2.22 51868 -> 184.151.61.30 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:06:15.987827 0.000000 udp 10.0.2.22 51868 -> 87.198.109.26 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:06:16.989005 0.000000 udp 10.0.2.22 51868 -> 187.69.96.60 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:06:17.990240 0.339016 udp 10.0.2.22 51868 <-> 125.230.11.38 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:18.991678 0.176820 udp 10.0.2.22 51868 <-> 65.65.137.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:19.993290 0.176580 udp 10.0.2.22 51868 <-> 66.66.140.114 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:20.994881 0.000000 udp 10.0.2.22 51868 -> 188.27.196.55 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:06:21.997121 0.336151 udp 10.0.2.22 51868 <-> 114.36.70.1 16464 CON 0 0 4 2728 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:22.988300 0.137183 udp 10.0.2.22 51868 <-> 75.130.147.110 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:23.989109 0.145033 udp 10.0.2.22 51868 <-> 108.183.176.48 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:24.990425 0.170182 udp 10.0.2.22 51868 <-> 135.19.152.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:25.991797 0.198595 udp 10.0.2.22 51868 <-> 71.197.165.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:26.993818 0.000000 udp 10.0.2.22 51868 -> 114.140.10.221 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:06:27.994925 0.358973 udp 10.0.2.22 51868 <-> 186.36.70.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:28.996374 2.164228 udp 10.0.2.22 51868 <-> 72.241.245.145 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:29.987559 0.278583 udp 10.0.2.22 51868 <-> 201.235.247.205 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:31.990296 0.200898 udp 10.0.2.22 51868 <-> 71.197.165.192 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:32.992111 0.333878 udp 10.0.2.22 51868 <-> 200.84.79.2 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:33.993815 0.150700 udp 10.0.2.22 51868 <-> 184.56.142.17 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:34.994675 1.993293 udp 10.0.2.22 51868 -> 92.232.162.246 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:06:35.996118 0.202899 udp 10.0.2.22 51868 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:36.867656 0.000152 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:06:37.988951 0.071761 udp 10.0.2.22 51868 <-> 78.136.117.245 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:38.990575 0.000000 udp 10.0.2.22 51868 -> 115.241.58.107 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:06:39.991953 0.000000 udp 10.0.2.22 51868 -> 80.171.95.242 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:06:40.993857 0.000000 udp 10.0.2.22 51868 -> 151.52.90.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:06:41.994903 0.000000 udp 10.0.2.22 51868 -> 190.77.199.238 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:06:42.996424 1.997045 udp 10.0.2.22 51868 -> 201.230.81.243 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:06:43.991844 0.148474 udp 10.0.2.22 51868 <-> 71.236.119.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:45.993912 0.128456 udp 10.0.2.22 51868 <-> 85.85.49.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:46.994595 4.090676 udp 10.0.2.22 51868 <-> 79.165.97.68 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:47.994720 0.000000 udp 10.0.2.22 51868 -> 178.25.74.21 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:06:48.995286 0.150782 udp 10.0.2.22 51868 <-> 192.226.149.28 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:49.996615 0.051075 udp 10.0.2.22 51868 <-> 178.148.145.69 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:51.989256 1.504023 udp 10.0.2.22 51868 <-> 190.203.238.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:52.990760 1.001331 udp 10.0.2.22 51868 -> 95.75.179.132 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:06:54.993907 0.340757 udp 10.0.2.22 51868 <-> 190.135.144.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:55.994922 0.412503 udp 10.0.2.22 51868 <-> 75.214.226.190 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:56.996311 0.162428 udp 10.0.2.22 51868 <-> 74.193.135.44 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:57.987875 3.048818 udp 10.0.2.22 51868 <-> 178.148.145.69 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:58.989392 0.278325 udp 10.0.2.22 51868 <-> 79.11.59.136 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:06:59.990810 0.000000 udp 10.0.2.22 51868 -> 212.231.253.153 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:07:01.993819 4.158538 udp 10.0.2.22 51868 <-> 70.185.202.93 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:02.995251 0.539450 udp 10.0.2.22 51868 <-> 186.88.174.68 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:03.866203 0.000099 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:07:03.996361 0.431147 udp 10.0.2.22 51868 <-> 190.160.244.39 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:04.988009 0.000000 udp 10.0.2.22 51868 -> 151.224.6.199 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:07:06.990629 0.215445 udp 10.0.2.22 51868 <-> 72.174.46.16 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:07.992661 3.036262 udp 10.0.2.22 51868 <-> 130.204.89.5 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:08.993878 3.149185 udp 10.0.2.22 51868 <-> 174.78.104.11 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:09.994943 0.000000 udp 10.0.2.22 51868 -> 190.38.101.247 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:07:12.989833 0.174909 udp 10.0.2.22 51868 <-> 184.162.187.14 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:13.990763 1.001429 udp 10.0.2.22 51868 <-> 68.59.72.41 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:15.994063 0.000000 udp 10.0.2.22 51868 -> 92.86.42.111 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:07:16.995298 0.267028 udp 10.0.2.22 51868 <-> 177.182.184.116 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:17.996703 2.994117 udp 10.0.2.22 51868 <-> 68.108.105.140 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:18.988413 0.000000 udp 10.0.2.22 51868 -> 5.15.141.148 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:07:19.990124 0.000000 udp 10.0.2.22 51868 -> 190.186.103.143 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:07:21.992490 0.178004 udp 10.0.2.22 51868 <-> 65.60.153.176 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:22.994087 0.242615 udp 10.0.2.22 51868 <-> 24.49.211.170 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:23.995187 0.159472 udp 10.0.2.22 51868 <-> 75.74.9.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:24.986731 0.146480 udp 10.0.2.22 51868 <-> 76.16.25.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:25.988186 0.050645 udp 10.0.2.22 51868 <-> 78.159.43.12 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:26.990193 0.000000 udp 10.0.2.22 51868 -> 190.218.101.4 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:07:27.990963 0.000000 udp 10.0.2.22 51868 -> 67.160.217.116 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:07:28.992236 0.415769 udp 10.0.2.22 51868 <-> 179.208.248.104 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:29.994229 0.148147 udp 10.0.2.22 51868 <-> 76.16.25.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:30.865096 0.000038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:07:30.995405 0.126014 udp 10.0.2.22 51868 <-> 76.78.208.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:31.986921 0.113942 udp 10.0.2.22 51868 <-> 78.251.227.52 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:32.988527 4.005727 udp 10.0.2.22 51868 -> 176.200.244.236 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:07:33.990044 4.996704 udp 10.0.2.22 51868 -> 96.32.8.241 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:07:34.990999 0.000000 udp 10.0.2.22 51868 -> 24.182.21.245 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:07:35.993130 0.808052 udp 10.0.2.22 51868 <-> 78.94.228.245 16464 CON 0 0 3 1838 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:37.995334 1.993228 udp 10.0.2.22 51868 <-> 79.114.66.233 16464 CON 0 0 3 1006 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:40.989792 0.788579 udp 10.0.2.22 51868 <-> 181.29.6.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:41.990948 0.127543 udp 10.0.2.22 51868 <-> 76.78.208.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:42.992624 0.141200 udp 10.0.2.22 51868 <-> 76.116.153.129 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:43.993835 0.157021 udp 10.0.2.22 51868 <-> 209.182.117.234 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:44.995762 0.000000 udp 10.0.2.22 51868 -> 79.173.35.28 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:07:45.986842 0.335906 udp 10.0.2.22 51868 <-> 181.53.224.22 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:46.988618 2.002511 udp 10.0.2.22 51868 -> 188.76.236.7 16464 INT 0 2 116 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:07:47.990179 0.016056 udp 10.0.2.22 51868 <-> 94.113.97.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:49.992996 0.000000 udp 10.0.2.22 51868 -> 177.225.129.22 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:07:50.994270 0.210257 udp 10.0.2.22 51868 <-> 74.132.159.8 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:51.995710 0.079626 udp 10.0.2.22 51868 <-> 79.115.173.230 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:52.987081 0.131331 udp 10.0.2.22 51868 <-> 62.43.7.49 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:53.988183 0.317543 udp 10.0.2.22 51868 <-> 177.103.74.115 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:54.990046 0.404307 udp 10.0.2.22 51868 <-> 177.80.250.251 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:55.991311 0.563602 udp 10.0.2.22 51868 <-> 181.55.154.252 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:56.992915 0.125512 udp 10.0.2.22 51868 <-> 50.70.157.3 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:57.864270 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:07:57.994499 0.000000 udp 10.0.2.22 51868 -> 79.116.207.5 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:07:58.995883 0.155293 udp 10.0.2.22 51868 <-> 74.132.164.239 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:07:59.986846 0.339506 udp 10.0.2.22 51868 <-> 181.226.64.123 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:00.988730 0.325483 udp 10.0.2.22 51868 <-> 190.204.21.101 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:01.990171 0.054246 udp 10.0.2.22 51868 <-> 84.54.174.109 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:02.991185 0.137173 udp 10.0.2.22 51868 <-> 68.199.57.57 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:03.993049 0.209615 udp 10.0.2.22 51868 <-> 76.189.34.36 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:04.994214 0.000000 udp 10.0.2.22 51868 -> 93.172.67.148 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:08:05.995863 0.031984 udp 10.0.2.22 51868 <-> 46.33.10.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:06.987813 0.208775 udp 10.0.2.22 51868 <-> 62.18.57.147 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:07.988852 0.131353 udp 10.0.2.22 51868 <-> 87.103.32.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:08.990406 0.163551 udp 10.0.2.22 51868 <-> 67.34.142.170 16464 CON 0 0 2 248 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:09.991334 0.139648 udp 10.0.2.22 51868 <-> 83.186.104.161 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:10.993026 0.000000 udp 10.0.2.22 51868 -> 114.36.213.71 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:08:11.994564 0.155976 udp 10.0.2.22 51868 <-> 146.163.172.106 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:12.995713 3.056757 udp 10.0.2.22 51868 <-> 5.12.54.75 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:13.987142 1.294933 udp 10.0.2.22 51868 <-> 116.64.192.94 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:16.991383 0.000000 udp 10.0.2.22 51868 -> 222.158.167.86 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:08:17.992934 4.140224 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:18.994854 4.061277 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 6 2844 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:19.995865 0.000000 udp 10.0.2.22 51868 -> 98.244.164.3 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:08:23.991666 0.142846 udp 10.0.2.22 51868 <-> 74.68.63.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:24.862320 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:08:24.992849 3.150541 udp 10.0.2.22 51868 <-> 146.163.172.106 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:25.995098 0.047837 udp 10.0.2.22 51868 <-> 31.17.92.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:26.996362 0.000000 udp 10.0.2.22 51868 -> 116.64.192.94 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:08:28.989007 1.708454 udp 10.0.2.22 51868 <-> 201.210.246.46 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:29.990174 0.155781 udp 10.0.2.22 51868 <-> 76.16.25.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:30.991341 0.000000 udp 10.0.2.22 51868 -> 114.36.213.71 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:08:31.992952 0.052840 udp 10.0.2.22 51868 <-> 31.17.92.120 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:32.323944 0.010245 udp 10.0.2.22 60080 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 12:08:32.334486 0.000000 udp 10.0.2.22 60081 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:08:32.994577 0.450703 udp 10.0.2.22 51868 <-> 222.158.167.86 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:33.995768 4.052917 udp 10.0.2.22 51868 <-> 5.12.54.75 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:34.987397 0.000000 udp 10.0.2.22 51868 -> 173.174.185.34 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:08:35.988590 0.000000 udp 10.0.2.22 51868 -> 79.116.107.4 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:08:36.990274 0.196024 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:38.993186 1.172912 udp 10.0.2.22 51868 <-> 24.51.69.97 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:39.994601 0.000000 udp 10.0.2.22 51868 -> 71.109.69.96 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:08:40.996364 0.000000 udp 10.0.2.22 51868 -> 151.52.90.249 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:08:41.987615 0.064224 udp 10.0.2.22 51868 <-> 79.116.107.4 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:42.989505 0.140360 udp 10.0.2.22 51868 <-> 95.223.45.5 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:43.990359 0.000000 udp 10.0.2.22 51868 -> 74.68.63.5 16464 REQ 0 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:08:44.991623 0.000000 udp 10.0.2.22 51868 -> 98.244.164.3 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:08:45.993479 0.160787 udp 10.0.2.22 51868 <-> 75.74.9.221 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:46.994895 0.155232 udp 10.0.2.22 51868 <-> 76.16.25.108 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:47.995997 0.148276 udp 10.0.2.22 51868 <-> 66.56.26.75 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:48.988596 0.049465 udp 10.0.2.22 51868 <-> 79.117.54.247 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:49.988813 0.162725 udp 10.0.2.22 51868 <-> 173.188.107.246 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:50.990500 0.000000 udp 10.0.2.22 51868 -> 76.24.62.246 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:08:51.861172 0.000145 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:08:51.991900 0.133041 udp 10.0.2.22 51868 <-> 71.230.91.244 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:52.993335 0.146525 udp 10.0.2.22 51868 <-> 184.56.45.20 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:53.994651 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:08:54.996247 0.189812 udp 10.0.2.22 51868 <-> 173.216.251.25 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:55.987843 0.126954 udp 10.0.2.22 51868 <-> 76.78.208.90 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:08:56.988908 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:08:57.993087 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:08:58.994434 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:08:59.993914 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:00.994484 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:01.996198 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:02.987671 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:03.989164 0.152018 udp 10.0.2.22 51868 <-> 75.138.193.217 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:09:04.990461 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:05.992142 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:06.993217 0.000134 udp 10.0.2.22 51868 -> 230.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:06.993351 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:09:07.995121 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:08.996083 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:09.988119 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:10.989618 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:11.990561 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:12.991932 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:13.993763 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:14.995014 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:15.995774 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:17.989070 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:18.869951 0.000126 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:09:18.990144 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:19.992095 0.000000 udp 10.0.2.22 51868 -> 181.31.156.202 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:20.994390 0.159350 udp 10.0.2.22 51868 <-> 98.253.7.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:09:21.995008 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:22.996466 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:23.987924 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:24.989589 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:25.990725 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:26.992526 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:27.994484 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:28.994997 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:29.996480 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:30.988483 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:32.990815 0.000085 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:32.990900 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:09:33.992194 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:34.994071 0.000000 udp 10.0.2.22 51868 -> 181.31.156.202 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:35.995366 1.206738 udp 10.0.2.22 51868 <-> 71.196.226.207 16464 CON 0 0 4 1896 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:09:37.988362 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:38.989772 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:39.990848 0.000000 udp 10.0.2.22 51868 -> 183.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:40.992432 0.000087 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:40.992519 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:09:41.993791 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:42.995121 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:44.992502 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:45.993278 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:46.873749 0.000082 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:09:46.993990 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 INT 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:47.995361 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:48.995832 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:49.995339 0.135266 udp 10.0.2.22 51868 <-> 24.3.193.88 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:09:50.996711 0.000000 udp 10.0.2.22 51868 -> 182.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:52.989927 0.000000 udp 10.0.2.22 51868 -> 180.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:53.990822 0.000000 udp 10.0.2.22 51868 -> 184.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:54.996098 0.000000 udp 10.0.2.22 51868 -> 190.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:55.997461 0.000000 udp 10.0.2.22 51868 -> 197.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:56.997042 0.000000 udp 10.0.2.22 51868 -> 204.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:57.988582 0.000000 udp 10.0.2.22 51868 -> 158.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:58.989556 0.000000 udp 10.0.2.22 51868 -> 174.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:09:59.990112 0.000000 udp 10.0.2.22 51868 -> 168.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:10:00.990764 0.000000 udp 10.0.2.22 51868 -> 206.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:10:01.992347 0.000000 udp 10.0.2.22 51868 -> 220.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:10:02.993871 0.000000 udp 10.0.2.22 51868 -> 222.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:10:03.995434 0.000101 udp 10.0.2.22 51868 -> 230.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:10:03.995535 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.22 0x0000 TXD 192 1 86 flow=Background 1970/01/01 12:10:04.986571 0.000000 udp 10.0.2.22 51868 -> 166.254.253.254 16464 REQ 0 1 58 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:10:05.988659 0.159471 udp 10.0.2.22 51868 <-> 98.253.7.67 16464 CON 0 0 2 948 flow=From-Botnet-V1-UDP-Established 1970/01/01 12:23:16.597171 3.002047 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/01 12:23:23.605203 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:23:31.606164 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:23:47.609752 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:24:19.615200 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:27:32.322602 0.000107 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:27:32.322784 0.013171 udp 10.0.2.22 60082 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 12:27:32.336258 0.000000 udp 10.0.2.22 60083 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:30:23.621754 3.000884 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 12:30:30.628969 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:30:38.630501 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:30:54.633624 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:31:26.639594 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:37:30.645288 3.001753 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 12:37:37.653045 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:37:45.654470 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:38:01.657397 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:38:32.326377 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:38:32.326470 0.010491 udp 10.0.2.22 60084 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 12:38:32.337247 0.000000 udp 10.0.2.22 60085 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:38:33.671589 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:44:37.671799 2.999308 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 12:44:44.685523 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:44:52.678242 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:45:08.681216 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:45:40.691775 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:51:44.692944 3.002036 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 12:51:51.700339 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:51:59.705981 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:52:15.705190 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:52:47.711187 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:53:32.327113 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 12:53:32.327198 0.010782 udp 10.0.2.22 60086 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 12:53:32.338260 0.000000 udp 10.0.2.22 60087 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 12:58:51.716437 3.027816 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 12:58:58.734802 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:59:06.735939 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:59:22.739306 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 12:59:54.748167 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:05:58.751186 3.001549 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 13:06:05.758793 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:06:13.760305 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:06:29.763015 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:07:01.769264 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:08:32.319365 0.000125 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:08:32.319600 0.010301 udp 10.0.2.22 60088 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 13:08:32.330227 0.000000 udp 10.0.2.22 60089 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 13:24:38.782031 3.001584 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 13:24:45.789064 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:24:53.790693 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:25:09.793807 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:25:41.800169 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:27:32.318737 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:27:32.318897 0.012045 udp 10.0.2.22 60090 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 13:27:32.331265 0.000000 udp 10.0.2.22 60091 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 13:31:45.806339 3.000941 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 13:31:52.813352 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:32:00.815140 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:32:16.818187 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:32:48.823344 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:38:32.317539 0.015031 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:38:32.332645 0.010293 udp 10.0.2.22 60092 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 13:38:32.343259 0.000000 udp 10.0.2.22 60093 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 13:38:52.829512 3.001540 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 13:38:59.837024 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:39:07.845005 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:39:23.841428 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:39:55.852692 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:45:59.853418 3.001660 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 13:46:06.860961 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:46:14.862543 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:46:30.864828 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:47:02.871470 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:53:06.877032 3.003343 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 13:53:13.884964 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:53:21.887195 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:53:32.321738 0.000119 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 13:53:32.321951 0.010419 udp 10.0.2.22 60094 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 13:53:32.332672 0.000000 udp 10.0.2.22 60095 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 13:53:37.889734 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 13:54:09.895585 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:00:13.900852 3.002579 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 14:00:20.908846 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:00:28.913478 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:00:44.913497 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:01:16.922926 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:07:20.925322 3.001737 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 14:07:27.936181 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:07:35.934590 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:07:51.939948 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:08:23.945890 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:08:32.325378 0.000214 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 14:08:32.325688 0.010188 udp 10.0.2.22 60096 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 14:08:32.336152 0.000000 udp 10.0.2.22 60097 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 14:25:15.953619 3.002310 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 14:25:22.958721 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:25:30.960107 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:25:46.962929 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:26:18.969311 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:27:32.324987 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 14:27:32.325084 0.012429 udp 10.0.2.22 60098 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 14:27:32.337773 0.000000 udp 10.0.2.22 60099 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 14:32:22.975181 3.054447 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 14:32:30.010023 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:32:37.994263 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:32:53.997135 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:33:26.002900 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:38:32.323641 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 14:38:32.323780 0.010092 udp 10.0.2.22 60100 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 14:38:32.334171 0.000000 udp 10.0.2.22 60101 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 14:39:30.008971 3.008681 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 14:39:37.021764 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:39:45.018744 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:40:01.022768 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:40:33.040543 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:46:37.047500 2.997609 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 14:46:44.059827 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:46:52.057566 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:47:08.055041 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:47:40.061088 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:53:32.317521 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 14:53:32.317621 0.010163 udp 10.0.2.22 60102 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 14:53:32.328124 0.000000 udp 10.0.2.22 60103 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 14:53:44.066597 3.001880 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 14:53:51.074406 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:53:59.075933 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:54:15.079209 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 14:54:47.092190 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:00:51.091726 3.000679 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 15:00:58.098456 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:01:06.100183 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:01:22.102728 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:01:54.115599 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:07:58.114922 3.001436 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 15:08:05.122517 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:08:13.123972 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:08:29.126905 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:08:32.321762 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 15:08:32.321942 0.010284 udp 10.0.2.22 60104 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 15:08:32.332555 0.000000 udp 10.0.2.22 60105 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 15:09:01.132854 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:15:05.138492 3.002221 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 15:15:12.146679 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:15:20.152241 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:15:36.150864 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:16:08.156855 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:22:12.166462 2.998142 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 15:22:19.170479 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:22:27.171756 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:22:43.174811 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:23:15.180739 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:27:32.320871 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 15:27:32.320972 0.015030 udp 10.0.2.22 60106 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 15:27:32.336303 0.000000 udp 10.0.2.22 60107 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 15:29:19.187157 3.001388 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 15:29:26.194080 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:29:34.195109 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:29:50.198672 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:30:22.204908 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:36:26.210839 3.002003 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 15:36:33.218753 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:36:41.219454 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:36:57.222673 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:37:29.228656 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:38:32.319672 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 15:38:32.319799 0.010796 udp 10.0.2.22 60108 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 15:38:32.330914 0.000000 udp 10.0.2.22 60109 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 15:43:33.235232 3.001162 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 15:43:40.242585 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:43:48.243745 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:44:04.247826 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:44:36.252744 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:50:40.258449 3.002048 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 15:50:47.266085 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:50:55.267604 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:51:11.270469 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:51:43.276654 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:53:32.327847 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 15:53:32.327932 0.010243 udp 10.0.2.22 60110 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 15:53:32.338471 0.000000 udp 10.0.2.22 60111 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 15:57:47.282898 3.001459 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 15:57:54.292167 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:58:02.291935 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:58:18.294554 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 15:58:50.300701 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:04:54.307137 3.001416 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 16:05:01.314204 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:05:09.315809 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:05:25.318871 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:05:57.324538 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:08:32.317586 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 16:08:32.317690 0.010156 udp 10.0.2.22 60112 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 16:08:32.328150 0.000000 udp 10.0.2.22 60113 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 16:24:04.340343 3.001437 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 16:24:11.348025 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:24:19.349032 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:24:35.352363 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:25:07.358500 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:27:32.316795 0.000116 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 16:27:32.317007 0.012172 udp 10.0.2.22 60114 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 16:27:32.329516 0.000000 udp 10.0.2.22 60115 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 16:31:11.364541 3.001661 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 16:31:18.371418 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:31:26.373040 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:31:42.376480 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:32:14.382021 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:38:18.388560 3.001534 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 16:38:25.395562 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:38:32.315591 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 16:38:32.315686 0.010299 udp 10.0.2.22 60116 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 16:38:32.326255 0.000000 udp 10.0.2.22 60117 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 16:38:33.396936 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:38:49.399801 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:39:21.405924 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:45:25.411850 3.005021 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 16:45:32.425148 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:45:40.427301 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:45:56.423785 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:46:28.429975 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:52:32.436565 3.001522 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 16:52:39.443488 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:52:47.446274 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:53:03.448101 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:53:32.331770 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 16:53:32.331868 0.010081 udp 10.0.2.22 60118 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 16:53:32.342257 0.000000 udp 10.0.2.22 60119 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 16:53:35.459640 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:59:39.459679 3.002247 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 16:59:46.467904 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 16:59:54.469020 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:00:10.472243 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:00:42.477845 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:06:46.483823 3.001630 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 17:06:53.491560 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:07:01.492880 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:07:17.495571 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:07:49.501877 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:08:32.323611 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 17:08:32.323768 0.010547 udp 10.0.2.22 60120 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 17:08:32.334644 0.000000 udp 10.0.2.22 60121 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 17:25:00.517098 3.001439 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 17:25:07.524205 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:25:15.526327 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:25:31.529011 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:26:03.534685 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:27:32.323163 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 17:27:32.323261 0.011813 udp 10.0.2.22 60122 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 17:27:32.335465 0.000000 udp 10.0.2.22 60123 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 17:32:07.540632 3.001738 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 17:32:14.548507 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:32:22.549635 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:32:38.552794 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:33:10.558780 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:38:32.321844 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 17:38:32.322032 0.010456 udp 10.0.2.22 60124 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 17:38:32.332842 0.000000 udp 10.0.2.22 60125 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 17:39:14.573177 3.002604 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 17:39:21.572426 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:39:29.573565 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:39:45.576678 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:40:17.582782 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:46:21.588597 3.001878 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 17:46:28.596149 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:46:36.597735 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:46:52.600718 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:47:24.606745 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:53:28.619243 3.002884 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 17:53:32.321138 0.000098 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 17:53:32.321462 0.010101 udp 10.0.2.22 60126 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 17:53:32.331920 0.000000 udp 10.0.2.22 60127 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 17:53:35.620319 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:53:43.622544 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:53:59.624595 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 17:54:31.630806 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:00:35.640342 3.021519 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 18:00:42.657775 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:00:50.659586 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:01:06.658499 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:01:38.664238 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:07:42.675213 3.000895 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 18:07:49.678720 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:07:57.679163 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:08:13.682759 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:08:32.319335 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 18:08:32.319505 0.010768 udp 10.0.2.22 60128 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 18:08:32.330594 0.000000 udp 10.0.2.22 60129 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 18:08:45.688926 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:25:29.695185 3.001491 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 18:25:36.702560 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:25:44.703726 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:26:00.706693 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:26:32.712543 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:27:32.318560 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 18:27:32.318743 0.011475 udp 10.0.2.22 60130 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 18:27:32.330534 0.000000 udp 10.0.2.22 60131 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 18:32:36.719106 3.001498 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 18:32:43.726104 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:32:51.728104 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:33:07.730859 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:33:39.737237 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:38:32.317707 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 18:38:32.317816 0.010293 udp 10.0.2.22 60132 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 18:38:32.328523 0.000000 udp 10.0.2.22 60133 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 18:39:43.747474 2.997006 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 18:39:50.750119 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:39:58.752639 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:40:14.761590 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:40:46.760091 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:46:50.766435 3.004570 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 18:46:57.774241 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:47:05.787233 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:47:21.788655 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:47:53.794983 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:53:32.321797 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 18:53:32.321979 0.010142 udp 10.0.2.22 60134 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 18:53:32.332431 0.000000 udp 10.0.2.22 60135 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 18:53:57.805255 2.998547 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 18:54:04.808208 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:54:12.810173 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:54:28.812983 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 18:55:00.818643 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:01:04.824560 3.001640 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 19:01:11.832087 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:01:19.833769 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:01:35.836278 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:02:07.843760 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:08:11.848823 3.001385 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 19:08:18.855942 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:08:26.857969 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:08:32.316030 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 19:08:32.316125 0.010652 udp 10.0.2.22 60136 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 19:08:32.327084 0.000000 udp 10.0.2.22 60137 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 19:08:42.860483 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:09:14.866688 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:15:18.872671 3.001526 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 19:15:25.879983 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:15:33.881589 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:15:49.884390 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:16:21.890617 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:22:25.898951 3.000428 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 19:22:32.903898 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:22:40.905179 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:22:56.908504 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:23:28.914761 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:27:32.318835 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 19:27:32.318969 0.011861 udp 10.0.2.22 60138 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 19:27:32.331159 0.000000 udp 10.0.2.22 60139 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 19:29:32.920877 3.001420 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 19:29:39.928584 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:29:47.929791 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:30:03.932697 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:30:35.938295 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:36:39.949283 2.998782 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 19:36:46.951969 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:36:54.957546 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:37:10.956404 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:37:42.962460 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:38:32.313913 0.000105 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 19:38:32.314108 0.010747 udp 10.0.2.22 60140 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 19:38:32.325168 0.000000 udp 10.0.2.22 60141 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 19:43:46.968252 3.001894 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 19:43:53.975934 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:44:01.977331 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:44:17.982601 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:44:49.987931 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:51:15.002307 3.002648 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 19:51:22.010017 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:51:30.011820 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:51:46.014463 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:52:18.020712 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:53:32.318228 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 19:53:32.318332 0.010135 udp 10.0.2.22 60142 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 19:53:32.328790 0.000000 udp 10.0.2.22 60143 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 19:58:31.029508 3.001901 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 19:58:38.037051 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:58:46.038374 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:59:02.041624 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 19:59:34.047762 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:05:38.058202 2.997420 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 20:05:45.060940 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:05:53.062766 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:06:09.065456 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:06:41.071501 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:08:32.321864 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 20:08:32.321965 0.010471 udp 10.0.2.22 60144 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 20:08:32.344675 0.000000 udp 10.0.2.22 60145 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 20:24:24.082616 3.007299 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 20:24:31.089917 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:24:39.091925 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:24:55.094615 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:25:27.102487 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:27:32.320722 0.000133 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 20:27:32.320967 0.011933 udp 10.0.2.22 60146 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 20:27:32.333219 0.000000 udp 10.0.2.22 60147 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 20:31:31.106621 3.001917 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 20:31:38.114049 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:31:46.115103 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:32:02.118504 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:32:34.124243 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:38:32.319826 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 20:38:32.319976 0.011665 udp 10.0.2.22 60148 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 20:38:32.331932 0.000000 udp 10.0.2.22 60149 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 20:38:38.138122 2.995585 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 20:38:45.142904 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:38:53.152150 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:39:09.153906 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:39:41.160890 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:45:45.165380 3.001874 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 20:45:52.174011 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:46:00.174626 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:46:16.176222 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:46:48.182389 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:52:52.187626 3.002408 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 20:52:59.195870 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:53:07.197258 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:53:23.200316 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 20:53:32.313577 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 20:53:32.313715 0.010107 udp 10.0.2.22 60150 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 20:53:32.324178 0.000000 udp 10.0.2.22 60151 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 20:53:55.206759 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:00:01.215487 3.001321 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 21:00:08.222489 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:00:16.224188 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:00:32.227231 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:01:04.233850 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:07:08.238816 3.002081 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 21:07:15.246677 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:07:23.248528 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:07:39.251115 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:08:11.257052 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:08:32.317824 0.000114 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 21:08:32.318037 0.010809 udp 10.0.2.22 60152 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 21:08:32.329125 0.000000 udp 10.0.2.22 60153 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 21:25:10.265124 3.001463 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 21:25:17.272352 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:25:25.274158 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:25:41.276765 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:26:13.283110 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:27:32.316676 0.000134 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 21:27:32.316904 0.012024 udp 10.0.2.22 60154 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 21:27:32.329230 0.000000 udp 10.0.2.22 60155 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 21:32:17.289747 3.000770 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 21:32:24.296240 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:32:32.297751 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:32:48.300795 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:33:20.306846 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:38:32.320233 0.000105 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 21:38:32.320432 0.012312 udp 10.0.2.22 60156 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 21:38:32.333126 0.000000 udp 10.0.2.22 60157 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 21:39:24.313633 3.007495 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 21:39:31.332566 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:39:39.322015 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:39:55.324824 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:40:27.330691 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:46:31.342157 2.997608 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 21:46:38.345967 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:46:46.348190 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:47:02.348825 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:47:34.354863 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:53:32.319442 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 21:53:32.319613 0.011884 udp 10.0.2.22 60158 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 21:53:32.331840 0.000000 udp 10.0.2.22 60159 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 21:53:38.360770 3.001724 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 21:53:45.367979 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:53:53.369858 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:54:09.376077 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 21:54:41.378745 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:00:48.388988 3.001911 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 22:00:55.396768 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:01:03.399094 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:01:19.413018 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:01:51.406973 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:07:55.412788 3.002494 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 22:08:02.420705 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:08:10.422286 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:08:26.426785 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:08:32.314323 0.000132 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 22:08:32.314548 0.010245 udp 10.0.2.22 60160 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 22:08:32.325082 0.000000 udp 10.0.2.22 60161 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 22:08:58.430901 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:15:02.437048 3.001324 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 22:15:09.444821 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:15:17.446024 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:15:33.449189 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:16:05.455198 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:22:09.461628 3.000822 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 22:22:16.468613 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:22:24.469872 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:22:40.472905 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:23:12.478907 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:27:32.312893 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 22:27:32.313052 0.011575 udp 10.0.2.22 60162 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 22:27:32.324936 0.000000 udp 10.0.2.22 60163 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 22:29:16.491050 2.995467 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 22:29:23.492312 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:29:31.493915 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:29:47.496883 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:30:19.502927 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:36:23.508940 3.003290 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 22:36:30.516227 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:36:38.518503 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:36:54.520737 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:37:26.526875 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:38:32.311909 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 22:38:32.312077 0.013710 udp 10.0.2.22 60164 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 22:38:32.326147 0.000000 udp 10.0.2.22 60165 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 22:43:30.535274 2.999818 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 22:43:37.545026 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:43:45.544300 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:44:01.544504 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:44:33.551057 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:50:50.565524 3.001878 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 22:50:57.572832 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:51:05.574511 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:51:21.577433 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:51:53.583848 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:53:32.316259 0.000118 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 22:53:32.316486 0.011504 udp 10.0.2.22 60166 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 22:53:32.328341 0.000000 udp 10.0.2.22 60167 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 22:58:09.597190 3.001124 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 22:58:16.604192 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:58:24.605585 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:58:40.608780 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 22:59:12.614508 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:05:20.626398 3.006074 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 23:05:27.633232 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:05:35.635414 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:05:51.638434 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:06:23.644070 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:08:32.319441 0.000124 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 23:08:32.319670 0.010109 udp 10.0.2.22 60168 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 23:08:32.330051 0.000000 udp 10.0.2.22 60169 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 23:24:18.653693 3.000703 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 23:24:25.660009 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:24:33.661759 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:24:49.664535 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:25:21.670376 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:27:32.318427 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 23:27:32.318622 0.012267 udp 10.0.2.22 60170 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 23:27:32.331269 0.000000 udp 10.0.2.22 60171 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 23:31:25.675895 3.002414 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 23:31:32.683645 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:31:40.685151 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:31:56.688742 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:32:28.694453 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:38:32.317526 0.678992 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 23:38:32.996642 0.011349 udp 10.0.2.22 60172 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 23:38:33.008334 0.000000 udp 10.0.2.22 60173 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 23:38:33.365533 2.966787 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 23:38:40.289150 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:38:52.709883 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:39:08.501674 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:39:41.912669 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:45:40.941184 2.952151 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 23:45:47.848037 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:45:55.734787 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:46:11.510579 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:46:43.088191 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:52:46.768631 3.001222 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/01 23:52:53.776079 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:53:01.777376 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:53:17.780303 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:53:32.311126 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 23:53:32.311225 0.010227 udp 10.0.2.22 60174 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/01 23:53:32.321715 0.000000 udp 10.0.2.22 60175 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 23:53:49.786322 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/01 23:59:53.793059 3.013823 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 00:00:00.799832 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:00:08.801694 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:00:24.814835 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:01:30.539112 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:07:30.049134 2.964245 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 00:07:36.954848 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:07:44.844639 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:08:00.624938 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:08:32.150244 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:08:59.191885 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 00:08:59.192049 0.010318 udp 10.0.2.22 60176 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 00:08:59.202658 0.000000 udp 10.0.2.22 60177 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 00:25:21.590856 2.971489 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 00:25:28.510924 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:25:36.394190 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:25:52.157506 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:26:23.684058 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:27:41.882512 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 00:27:41.882601 0.010277 udp 10.0.2.22 60178 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 00:27:41.893161 0.000000 udp 10.0.2.22 60179 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 00:32:22.382981 2.952851 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 00:32:29.281389 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:32:37.155766 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:32:52.919044 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:33:24.450929 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:38:32.403804 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 00:38:32.403975 0.011470 udp 10.0.2.22 60180 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 00:38:32.415758 0.000000 udp 10.0.2.22 60181 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 00:39:24.010756 3.001247 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 00:39:31.018126 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:39:39.023987 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:39:55.022611 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:40:27.028247 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:46:31.035575 3.000764 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 00:46:38.042059 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:46:46.043095 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:47:02.046183 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:47:34.054078 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:53:32.407712 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 00:53:32.407843 0.011275 udp 10.0.2.22 60182 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 00:53:32.419463 0.000000 udp 10.0.2.22 60183 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 00:53:38.058798 3.001480 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 00:53:45.066278 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:53:53.067291 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:54:09.075840 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 00:54:41.081938 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:00:45.082606 3.006201 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 01:00:52.090136 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:01:00.091233 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:01:16.096042 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:01:48.100526 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:07:52.106318 3.001803 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 01:07:59.113742 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:08:07.115214 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:08:23.118363 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:08:32.406089 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 01:08:32.406236 0.010687 udp 10.0.2.22 60184 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 01:08:32.417251 0.000000 udp 10.0.2.22 60185 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 01:08:55.124033 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:14:59.130420 3.001870 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 01:15:06.138302 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:15:14.139194 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:15:30.142379 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:16:02.149954 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:22:06.156304 2.999898 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 01:22:13.161711 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:22:21.163311 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:22:37.166112 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:23:09.172620 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:27:32.400692 0.000163 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 01:27:32.400966 0.014320 udp 10.0.2.22 60186 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 01:27:32.415605 0.000000 udp 10.0.2.22 60187 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 01:29:13.178152 3.001828 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 01:29:20.190164 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:29:28.187233 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:29:44.190108 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:30:16.195809 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:36:20.203653 3.000193 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 01:36:27.209864 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:36:35.216004 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:36:51.215913 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:37:23.220601 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:38:32.400071 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 01:38:32.400175 0.013251 udp 10.0.2.22 60188 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 01:38:32.413703 0.000000 udp 10.0.2.22 60189 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 01:43:27.225928 3.001771 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 01:43:34.245269 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:43:42.234908 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:43:58.238112 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:44:30.243935 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:50:34.250773 3.001495 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 01:50:41.257392 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:50:49.258967 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:51:05.262107 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:51:37.268291 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:53:32.403758 0.000115 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 01:53:32.403976 0.012720 udp 10.0.2.22 60190 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 01:53:32.417013 0.000000 udp 10.0.2.22 60191 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 01:57:41.273484 3.002486 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 01:57:48.282979 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:57:56.283169 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:58:12.286067 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 01:58:44.292305 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:04:48.298115 3.002429 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 02:04:55.305949 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:05:03.307162 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:05:19.309940 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:05:51.316538 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:08:32.408177 0.000099 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 02:08:32.408359 0.010103 udp 10.0.2.22 60192 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 02:08:32.418835 0.000000 udp 10.0.2.22 60193 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 02:24:04.330517 3.001138 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 02:24:11.337808 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:24:19.349997 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:24:39.966675 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:25:11.525278 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:27:34.790602 0.000106 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 02:27:34.790794 0.011355 udp 10.0.2.22 60194 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 02:27:34.802487 0.000000 udp 10.0.2.22 60195 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 02:31:11.383995 3.002262 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 02:31:18.391383 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:31:26.393228 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:31:42.396584 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:32:14.402142 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:38:18.414117 2.995614 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 02:38:25.415067 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:38:32.406240 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 02:38:32.406413 0.010167 udp 10.0.2.22 60196 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 02:38:32.416886 0.000000 udp 10.0.2.22 60197 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 02:38:33.417143 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:38:49.420012 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:39:21.426298 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:45:33.432992 3.002311 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 02:45:40.440866 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:45:48.442619 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:46:04.446180 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:46:36.451529 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:52:40.458282 3.000853 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 02:52:47.464724 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:52:55.466770 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:53:11.469363 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:53:32.400127 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 02:53:32.400277 0.013363 udp 10.0.2.22 60198 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 02:53:32.413959 0.000000 udp 10.0.2.22 60199 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 02:53:43.475734 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 02:59:47.482464 3.058155 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 02:59:54.518614 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:00:02.559005 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:00:18.516258 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:00:50.519690 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:06:54.525506 3.011741 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 03:07:01.542974 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:07:09.544415 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:07:25.547233 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:07:57.553366 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:08:32.407884 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 03:08:32.408022 0.010269 udp 10.0.2.22 60200 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 03:08:32.418618 0.000000 udp 10.0.2.22 60201 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 03:25:03.561239 3.001624 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 03:25:10.568144 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:25:18.572042 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:25:34.574568 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:26:06.579164 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:27:32.402751 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 03:27:32.402909 0.011393 udp 10.0.2.22 60202 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 03:27:32.414601 0.000000 udp 10.0.2.22 60203 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 03:32:10.585765 3.001047 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 03:32:17.592578 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:32:25.594175 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:32:41.597095 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:33:13.603088 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:38:32.401724 0.000099 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 03:38:32.401912 0.025371 udp 10.0.2.22 60204 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 03:38:32.427607 0.000000 udp 10.0.2.22 60205 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 03:39:17.610936 2.999437 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 03:39:24.616566 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:39:32.621449 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:39:48.621091 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:40:20.627101 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:46:24.633030 3.001754 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 03:46:31.641801 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:46:39.642121 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:46:55.645200 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:47:27.651153 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:53:31.657566 3.001203 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 03:53:32.406203 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 03:53:32.406376 0.012516 udp 10.0.2.22 60206 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 03:53:32.419184 0.000000 udp 10.0.2.22 60207 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 03:53:38.663867 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:53:46.666082 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:54:02.670119 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 03:54:34.675215 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:00:38.681058 3.001584 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 04:00:45.688706 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:00:53.689969 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:01:09.696389 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:01:41.699046 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:07:45.704497 3.002757 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 04:07:52.712320 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:08:00.714110 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:08:16.717431 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:08:32.400187 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 04:08:32.400343 0.010796 udp 10.0.2.22 60208 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 04:08:32.411496 0.000000 udp 10.0.2.22 60209 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 04:08:48.722868 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:25:29.735931 3.002524 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 04:25:36.742351 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:25:44.745130 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:26:00.746687 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:26:32.752926 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:27:33.872973 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 04:27:33.873066 0.011366 udp 10.0.2.22 60210 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 04:27:33.884787 0.000000 udp 10.0.2.22 60211 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 04:32:36.768264 3.002207 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 04:32:43.776520 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:32:51.777840 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:33:07.780352 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:33:39.786936 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:38:32.408340 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 04:38:32.408495 0.012335 udp 10.0.2.22 60212 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 04:38:32.421147 0.000000 udp 10.0.2.22 60213 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 04:39:43.804936 3.001625 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 04:39:50.800110 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:39:58.801952 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:40:14.804830 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:40:46.810588 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:46:50.816630 3.001776 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 04:46:57.824284 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:47:05.825586 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:47:21.828670 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:47:53.834931 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:53:32.401771 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 04:53:32.401955 0.013044 udp 10.0.2.22 60214 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 04:53:32.415275 0.000000 udp 10.0.2.22 60215 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 04:53:59.843157 3.002010 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 04:54:06.850957 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:54:14.852876 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:54:30.860790 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 04:55:02.861844 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:01:06.866861 3.002427 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 05:01:13.875187 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:01:21.877630 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:01:37.885928 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:02:09.885780 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:08:13.891917 3.001737 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 05:08:20.899277 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:08:28.900786 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:08:32.406468 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 05:08:32.406612 0.012560 udp 10.0.2.22 60216 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 05:08:32.419502 0.000000 udp 10.0.2.22 60217 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 05:08:44.903668 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:09:16.910105 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:15:20.915425 3.001859 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 05:15:27.922949 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:15:35.924682 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:15:51.927334 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:16:23.934026 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:22:27.939103 3.002165 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 05:22:34.948268 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:22:42.948368 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:22:58.951778 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:23:30.957699 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:27:32.405051 0.000115 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 05:27:32.405252 0.012524 udp 10.0.2.22 60218 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 05:27:32.418079 0.000000 udp 10.0.2.22 60219 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 05:29:34.963365 3.001253 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 05:29:41.971044 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:29:49.972465 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:30:05.975455 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:30:37.981268 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:36:41.987242 3.001942 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 05:36:48.995002 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:36:56.996297 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:37:12.999374 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:37:45.007178 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:38:32.403793 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 05:38:32.403917 0.011547 udp 10.0.2.22 60220 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 05:38:32.415734 0.000000 udp 10.0.2.22 60221 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 05:43:51.016964 2.998617 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 05:43:58.021597 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:44:06.023115 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:44:22.026468 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:44:54.032217 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:51:07.041120 3.001603 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 05:51:14.048491 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:51:22.050041 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:51:38.053104 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:52:10.059248 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:53:32.397587 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 05:53:32.397674 0.014403 udp 10.0.2.22 60222 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 05:53:32.412398 0.000000 udp 10.0.2.22 60223 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 05:58:14.065627 3.001102 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 05:58:21.072650 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:58:29.074239 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:58:45.077190 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 05:59:17.083346 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:05:21.088857 3.002093 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 06:05:28.096800 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:05:36.098079 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:05:52.101105 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:06:24.107257 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:08:32.402064 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 06:08:32.402226 0.016582 udp 10.0.2.22 60224 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 06:08:32.419118 0.000000 udp 10.0.2.22 60225 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 06:24:19.115540 3.001397 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 06:24:26.124856 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:24:34.124482 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:24:50.128409 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:25:22.133597 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:27:32.400625 0.000082 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 06:27:32.400779 0.011324 udp 10.0.2.22 60226 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 06:27:32.412393 0.000000 udp 10.0.2.22 60227 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 06:31:26.139200 3.001903 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 06:31:33.146708 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:31:41.148312 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:31:57.151164 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:32:29.157252 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:38:32.400152 0.000085 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 06:38:32.400311 0.022192 udp 10.0.2.22 60228 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 06:38:32.422839 0.000000 udp 10.0.2.22 60229 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 06:38:33.163510 3.001524 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 06:38:40.171965 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:38:48.172149 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:39:04.175360 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:39:36.187592 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:45:40.187749 3.000905 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 06:45:47.194728 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:45:55.195577 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:46:11.203717 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:46:43.211573 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:52:47.212150 3.000608 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 06:52:54.218770 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:53:02.220386 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:53:18.222987 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:53:32.403807 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 06:53:32.403897 0.011428 udp 10.0.2.22 60230 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 06:53:32.415610 0.000000 udp 10.0.2.22 60231 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 06:53:50.229110 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 06:59:54.236324 3.000333 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 07:00:01.242627 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:00:09.244033 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:00:25.247020 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:00:57.253137 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:07:01.258642 3.002064 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 07:07:08.269960 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:07:16.268191 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:07:32.270980 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:08:04.277122 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:08:32.397876 0.000112 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 07:08:32.398079 0.010491 udp 10.0.2.22 60232 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 07:08:32.408882 0.000000 udp 10.0.2.22 60233 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 07:25:09.283266 3.002032 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 07:25:16.291326 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:25:24.293501 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:25:40.296118 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:26:12.301586 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:27:32.399963 0.000115 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 07:27:32.400223 0.010667 udp 10.0.2.22 60234 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 07:27:32.411172 0.000000 udp 10.0.2.22 60235 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 07:32:16.308412 3.000594 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 07:32:23.315650 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:32:31.316310 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:32:47.319770 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:33:19.325487 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:38:32.405866 0.000105 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 07:38:32.406074 0.010574 udp 10.0.2.22 60236 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 07:38:32.416979 0.000000 udp 10.0.2.22 60237 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 07:39:23.331825 3.001284 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 07:39:30.338815 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:39:38.340362 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:39:54.346845 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:40:26.349297 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:46:30.355081 3.002070 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 07:46:37.362861 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:46:45.364327 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:47:01.367110 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:47:33.373207 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:53:32.399955 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 07:53:32.400062 0.011483 udp 10.0.2.22 60238 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 07:53:32.411904 0.000000 udp 10.0.2.22 60239 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 07:53:37.379906 3.001156 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 07:53:44.386717 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:53:52.392026 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:54:08.391232 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 07:54:40.397481 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:00:44.402825 3.002759 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 08:00:51.410709 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:00:59.414655 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:01:15.415027 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:01:47.421180 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:07:51.431088 2.999022 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 08:07:58.435112 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:08:06.436514 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:08:22.439129 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:08:32.403908 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 08:08:32.404087 0.012728 udp 10.0.2.22 60240 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 08:08:32.417201 0.000000 udp 10.0.2.22 60241 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 08:08:54.445738 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:14:58.451469 3.001439 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 08:15:05.458709 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:15:13.460217 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:15:29.463570 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:16:01.469508 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:22:05.475174 3.001768 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 08:22:12.482271 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:22:20.484167 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:22:36.487268 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:23:08.493038 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:27:32.402970 0.000130 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 08:27:32.403186 0.016722 udp 10.0.2.22 60242 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 08:27:32.420277 0.000000 udp 10.0.2.22 60243 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 08:29:12.499797 3.000835 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 08:29:19.506620 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:29:27.508179 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:29:43.511247 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:30:15.517168 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:36:19.522617 3.002389 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 08:36:26.530390 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:36:34.532067 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:36:50.534829 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:37:22.541056 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:38:32.401773 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 08:38:32.401909 0.011512 udp 10.0.2.22 60244 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 08:38:32.413705 0.000000 udp 10.0.2.22 60245 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 08:43:26.546800 3.001937 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 08:43:33.554381 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:43:41.555910 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:43:57.559906 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:44:29.564781 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:50:33.583701 2.998822 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 08:50:40.587820 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:50:48.589900 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:51:04.592949 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:51:36.598996 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:53:32.396087 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 08:53:32.396281 0.011457 udp 10.0.2.22 60246 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 08:53:32.408049 0.000000 udp 10.0.2.22 60247 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 08:57:40.604869 3.001952 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 08:57:47.611907 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:57:55.615917 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:58:11.616895 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 08:58:43.623236 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:04:47.630065 3.000630 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 09:04:54.636297 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:05:02.638403 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:05:18.640979 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:05:50.648677 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:08:32.399818 0.000118 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 09:08:32.400078 0.010288 udp 10.0.2.22 60248 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 09:08:32.410670 0.000000 udp 10.0.2.22 60249 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 09:23:59.665504 3.001557 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 09:24:06.672834 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:24:14.674318 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:24:30.677494 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:25:02.683399 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:27:32.399338 0.000115 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 09:27:32.399592 0.012574 udp 10.0.2.22 60250 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 09:27:32.412492 0.000000 udp 10.0.2.22 60251 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 09:31:06.689784 3.001221 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 09:31:13.696998 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:31:21.698341 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:31:37.701092 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:32:09.707234 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:38:13.714294 3.000101 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 09:38:20.720807 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:38:28.722347 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:38:32.397814 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 09:38:32.397988 0.011395 udp 10.0.2.22 60252 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 09:38:32.409663 0.000000 udp 10.0.2.22 60253 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 09:38:44.725441 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:39:16.731350 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:45:25.745051 3.001272 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 09:45:32.752246 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:45:40.753195 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:45:56.756055 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:46:28.762237 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:52:32.768523 3.001780 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 09:52:39.777836 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:52:47.777903 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:53:03.781795 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:53:32.401843 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 09:53:32.401985 0.010247 udp 10.0.2.22 60254 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 09:53:32.412595 0.000000 udp 10.0.2.22 60255 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 09:53:35.786247 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:59:39.792078 3.016120 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 09:59:46.809737 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 09:59:54.811442 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:00:10.814193 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:00:42.824169 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:06:46.827520 3.000954 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 10:06:53.834093 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:07:01.835641 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:07:17.838713 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:07:49.844406 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:08:32.395911 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 10:08:32.396052 0.010247 udp 10.0.2.22 60256 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 10:08:32.406564 0.000000 udp 10.0.2.22 60257 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 10:24:59.867522 3.002593 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 10:25:06.875435 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:25:14.876933 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:25:30.879896 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:26:02.886179 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:27:32.405482 0.000103 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 10:27:32.405659 0.011193 udp 10.0.2.22 60258 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 10:27:32.417135 0.000000 udp 10.0.2.22 60259 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 10:32:06.892177 3.002476 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 10:32:13.899277 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:32:21.900908 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:32:37.904042 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:33:09.909940 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:38:32.404044 0.000131 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 10:38:32.404284 0.010227 udp 10.0.2.22 60260 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 10:38:32.414839 0.000000 udp 10.0.2.22 60261 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 10:39:13.915925 3.004095 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 10:39:20.929310 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:39:28.929019 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:39:44.940047 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:40:16.933908 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:46:20.948580 2.993849 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 10:46:27.947292 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:46:35.948846 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:46:51.952027 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:47:23.957951 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:53:27.964265 3.000948 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 10:53:32.398001 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 10:53:32.398145 0.013253 udp 10.0.2.22 60262 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 10:53:32.411683 0.000000 udp 10.0.2.22 60263 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 10:53:34.974339 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:53:42.972753 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:53:58.975366 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 10:54:30.982054 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:00:34.987699 3.001544 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 11:00:41.997216 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:00:49.996795 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:01:06.015789 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:01:38.005792 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:07:42.012331 3.001426 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 11:07:49.019382 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:07:57.020473 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:08:13.023736 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:08:32.401490 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 11:08:32.401640 0.010268 udp 10.0.2.22 60264 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 11:08:32.412178 0.000000 udp 10.0.2.22 60265 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 11:08:45.030244 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:25:28.044463 3.001783 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 11:25:35.051963 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:25:43.053641 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:25:59.056424 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:26:31.062815 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:27:32.400768 0.000090 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 11:27:32.400934 0.015080 udp 10.0.2.22 60266 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 11:27:32.416321 0.000000 udp 10.0.2.22 60267 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 11:32:35.068712 3.001340 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 11:32:42.076372 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:32:50.077649 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:33:06.080436 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:33:38.086432 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:38:32.400075 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 11:38:32.400233 0.012343 udp 10.0.2.22 60268 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 11:38:32.412851 0.000000 udp 10.0.2.22 60269 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 11:39:42.106470 2.991056 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 11:39:49.099976 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:39:57.101797 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:40:13.104123 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:40:45.110555 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:46:49.116266 3.001741 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 11:46:56.124790 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:47:04.125195 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:47:20.128281 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:47:52.134300 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:53:32.403830 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 11:53:32.403922 0.010513 udp 10.0.2.22 60270 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 11:53:32.414720 0.000000 udp 10.0.2.22 60271 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 11:53:57.141558 3.001841 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 11:54:04.149192 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:54:12.153494 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:54:28.162647 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 11:55:00.159392 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:01:04.165937 3.001332 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 12:01:11.173057 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:01:19.179663 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:01:35.182076 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:02:07.183920 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:08:11.190626 3.000706 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 12:08:18.197192 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:08:26.198877 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:08:32.398942 0.000082 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 12:08:32.399105 0.010161 udp 10.0.2.22 60272 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 12:08:32.409592 0.000000 udp 10.0.2.22 60273 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 12:08:42.201849 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:09:14.208205 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:15:18.214568 3.000869 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 12:15:25.220933 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:15:33.222552 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:15:49.226013 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:16:21.231856 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:22:25.237879 3.001922 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 12:22:32.245123 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:22:40.246528 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:22:56.249925 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:23:28.256036 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:27:32.397880 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 12:27:32.398040 0.011598 udp 10.0.2.22 60274 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 12:27:32.409942 0.000000 udp 10.0.2.22 60275 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 12:29:32.261797 3.001830 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 12:29:39.269192 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:29:47.270526 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:30:03.273656 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:30:35.279381 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:36:39.285879 3.001918 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 12:36:46.293594 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:36:54.295141 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:37:10.299577 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:37:42.304128 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:38:32.395837 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 12:38:32.395989 0.011103 udp 10.0.2.22 60276 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 12:38:32.407377 0.000000 udp 10.0.2.22 60277 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 12:43:46.318876 2.998694 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 12:43:53.316968 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:44:01.321088 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:44:17.322958 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:44:49.327711 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:51:01.335659 3.000969 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 12:51:08.342391 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:51:16.344103 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:51:32.347066 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:52:04.352860 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:53:32.400196 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 12:53:32.400296 0.010997 udp 10.0.2.22 60278 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 12:53:32.411616 0.000000 udp 10.0.2.22 60279 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 12:58:08.358852 3.001787 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 12:58:15.366391 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:58:23.368372 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:58:39.370993 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 12:59:11.376728 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:05:15.383625 3.000923 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 13:05:22.390101 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:05:30.394225 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:05:46.394881 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:06:18.400771 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:08:32.393803 0.000097 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 13:08:32.393978 0.010150 udp 10.0.2.22 60280 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 13:08:32.404458 0.000000 udp 10.0.2.22 60281 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 13:24:16.413531 3.001529 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 13:24:23.420652 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:24:31.422668 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:24:47.425421 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:25:19.431363 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:27:32.402545 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 13:27:32.402638 0.022326 udp 10.0.2.22 60282 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 13:27:32.425271 0.000000 udp 10.0.2.22 60283 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 13:31:23.437509 3.001836 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 13:31:30.445026 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:31:38.446265 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:31:54.449785 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:32:26.455633 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:38:30.461247 3.002110 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 13:38:32.401490 0.000093 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 13:38:32.401671 0.011018 udp 10.0.2.22 60284 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 13:38:32.412990 0.000000 udp 10.0.2.22 60285 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 13:38:37.469162 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:38:45.470335 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:39:01.473709 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:39:33.479840 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:45:37.486235 3.000829 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 13:45:44.492499 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:45:52.494000 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:46:08.501852 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:46:40.508450 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:52:44.512004 2.999022 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 13:52:51.516771 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:52:59.518204 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:53:15.521119 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:53:32.395464 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 13:53:32.395680 0.010506 udp 10.0.2.22 60286 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 13:53:32.406453 0.000000 udp 10.0.2.22 60287 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 13:53:47.527708 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 13:59:51.532905 3.001782 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 13:59:58.540829 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:00:06.542066 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:00:22.544929 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:00:54.551139 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:06:58.559062 2.999631 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 14:07:05.564622 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:07:13.566396 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:07:29.569047 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:08:01.574538 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:08:32.399847 0.015038 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 14:08:32.414926 0.010169 udp 10.0.2.22 60288 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 14:08:32.425447 0.000000 udp 10.0.2.22 60289 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 14:25:09.586308 3.001085 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 14:25:16.593172 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:25:24.594720 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:25:40.598022 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:26:12.603899 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:27:32.398724 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 14:27:32.398867 0.023188 udp 10.0.2.22 60290 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 14:27:32.422411 0.000000 udp 10.0.2.22 60291 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 14:32:16.609491 3.002080 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 14:32:23.617465 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:32:31.618690 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:32:47.621910 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:33:19.627943 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:38:32.397634 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 14:38:32.397783 0.010160 udp 10.0.2.22 60292 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 14:38:32.408238 0.000000 udp 10.0.2.22 60293 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 14:39:23.633961 3.001422 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 14:39:30.640815 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:39:38.642840 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:39:54.645646 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:40:26.653131 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:46:30.657199 3.002465 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 14:46:37.665155 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:46:45.666736 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:47:01.669831 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:47:33.685110 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:53:32.401909 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 14:53:32.402062 0.010237 udp 10.0.2.22 60294 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 14:53:32.412612 0.000000 udp 10.0.2.22 60295 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 14:53:37.692805 2.999966 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 14:53:44.699253 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:53:52.700655 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:54:08.703650 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 14:54:40.709731 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:00:44.716255 3.001190 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 15:00:51.726965 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:00:59.726090 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:01:15.728181 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:01:47.733678 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:07:51.740131 3.001026 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 15:07:58.752817 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:08:06.754992 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:08:22.751147 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:08:32.396266 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 15:08:32.396414 0.010246 udp 10.0.2.22 60296 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 15:08:32.406980 0.000000 udp 10.0.2.22 60297 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 15:08:54.757742 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:14:58.762880 3.002898 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 15:15:05.771102 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:15:13.772557 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:15:29.776256 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:16:01.781720 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:22:05.787770 3.001542 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 15:22:12.795152 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:22:20.796613 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:22:36.799782 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:23:08.805926 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:27:32.395281 0.000099 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 15:27:32.395457 0.021725 udp 10.0.2.22 60298 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 15:27:32.417666 0.000000 udp 10.0.2.22 60299 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 15:29:12.812148 3.000691 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 15:29:19.818937 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:29:27.820654 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:29:43.823393 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:30:15.830537 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:36:19.835221 3.005191 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 15:36:26.843153 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:36:34.844440 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:36:50.847288 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:37:22.853675 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:38:32.396447 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 15:38:32.396587 0.010490 udp 10.0.2.22 60300 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 15:38:32.407367 0.000000 udp 10.0.2.22 60301 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 15:43:26.859211 3.001989 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 15:43:33.867172 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:43:41.872067 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:43:57.871260 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:44:29.877555 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:50:35.886054 3.002233 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 15:50:42.894045 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:50:50.895394 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:51:06.898115 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:51:38.904670 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:53:32.397532 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 15:53:32.397630 0.010389 udp 10.0.2.22 60302 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 15:53:32.408302 0.000000 udp 10.0.2.22 60303 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 15:57:42.911219 3.000891 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 15:57:49.917862 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:57:57.919706 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:58:13.922236 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 15:58:45.928321 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:04:49.934446 3.001891 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 16:04:56.941701 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:05:04.943286 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:05:20.946253 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:05:52.954184 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:08:32.402298 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 16:08:32.402448 0.010719 udp 10.0.2.22 60304 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 16:08:32.413478 0.000000 udp 10.0.2.22 60305 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 16:24:00.959356 3.001766 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 16:24:07.966693 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:24:15.968218 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:24:31.971450 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:25:03.977155 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:27:32.404113 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 16:27:32.404257 0.011272 udp 10.0.2.22 60306 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 16:27:32.415832 0.000000 udp 10.0.2.22 60307 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 16:31:07.983231 3.001553 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 16:31:14.990625 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:31:22.992163 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:31:38.995191 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:32:11.001237 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:38:15.006820 3.002047 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 16:38:22.014446 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:38:30.016170 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:38:32.399631 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 16:38:32.399799 0.010631 udp 10.0.2.22 60308 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 16:38:32.410735 0.000000 udp 10.0.2.22 60309 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 16:38:46.019783 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:39:18.025123 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:45:27.039730 3.000317 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 16:45:34.045991 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:45:42.047031 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:45:58.050592 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:46:30.073711 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:52:34.063722 3.000278 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 16:52:41.070024 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:52:49.071230 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:53:05.074187 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:53:32.393799 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 16:53:32.393887 0.010538 udp 10.0.2.22 60310 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 16:53:32.404723 0.000000 udp 10.0.2.22 60311 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 16:53:37.080420 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:59:41.086362 3.001499 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 16:59:48.093943 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 16:59:56.094999 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:00:12.098188 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:00:44.104686 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:06:48.110573 3.001476 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 17:06:55.117782 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:07:03.119184 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:07:19.122524 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:07:51.128492 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:08:32.397650 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 17:08:32.397734 0.010294 udp 10.0.2.22 60312 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 17:08:32.408336 0.000000 udp 10.0.2.22 60313 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 17:25:01.142415 3.001562 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 17:25:08.149119 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:25:16.151147 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:25:32.154391 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:26:04.160236 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:27:32.397166 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 17:27:32.397259 0.012088 udp 10.0.2.22 60314 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 17:27:32.409605 0.000000 udp 10.0.2.22 60315 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 17:32:08.166217 3.001159 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 17:32:15.173146 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:32:23.174566 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:32:39.177802 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:33:11.183672 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:38:32.395268 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 17:38:32.395416 0.011915 udp 10.0.2.22 60316 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 17:38:32.407634 0.000000 udp 10.0.2.22 60317 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 17:39:15.189580 3.002104 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 17:39:22.197144 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:39:30.198387 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:39:46.204768 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:40:18.207759 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:46:22.223817 2.997677 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 17:46:29.234798 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:46:37.228731 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:46:53.227131 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:47:25.231513 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:53:29.237048 3.002286 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 17:53:32.400058 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 17:53:32.400222 0.010644 udp 10.0.2.22 60318 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 17:53:32.411172 0.000000 udp 10.0.2.22 60319 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 17:53:36.245044 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:53:44.246876 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:54:00.249773 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 17:54:32.255904 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:00:36.261695 3.001442 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 18:00:43.269006 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:00:51.270759 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:01:07.273553 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:01:39.279857 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:07:43.285713 3.001820 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 18:07:50.293711 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:07:58.294855 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:08:14.297540 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:08:32.393792 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 18:08:32.393942 0.010039 udp 10.0.2.22 60320 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 18:08:32.404315 0.000000 udp 10.0.2.22 60321 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 18:08:46.304458 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:25:29.318309 3.002046 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 18:25:36.326052 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:25:44.327061 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:26:00.330347 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:26:32.336398 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:27:32.396246 0.000092 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 18:27:32.396415 0.022466 udp 10.0.2.22 60322 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 18:27:32.419218 0.000000 udp 10.0.2.22 60323 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 18:32:36.342754 3.001135 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 18:32:43.349891 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:32:51.351182 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:33:07.354236 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:33:39.360192 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:38:32.391817 0.000185 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 18:38:32.392102 0.010261 udp 10.0.2.22 60324 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 18:38:32.402772 0.000000 udp 10.0.2.22 60325 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 18:39:43.366245 3.001725 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 18:39:50.375909 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:39:58.375093 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:40:14.378019 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:40:46.390105 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:46:50.390200 3.001918 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 18:46:57.397986 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:47:05.398888 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:47:21.402450 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:47:53.411208 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:53:32.395645 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 18:53:32.395805 0.040050 udp 10.0.2.22 60326 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 18:53:32.436157 0.000000 udp 10.0.2.22 60327 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 18:53:58.415664 3.001604 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 18:54:05.423002 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:54:13.424404 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:54:29.427680 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 18:55:01.433584 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:01:05.439759 3.001390 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 19:01:12.446725 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:01:20.448363 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:01:36.451533 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:02:08.457576 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:08:12.464032 3.001222 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 19:08:19.471724 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:08:27.472545 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:08:32.399969 0.000112 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 19:08:32.400230 0.010611 udp 10.0.2.22 60328 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 19:08:32.411158 0.000000 udp 10.0.2.22 60329 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 19:08:43.475634 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:09:15.481723 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:15:19.486748 3.002368 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 19:15:26.494665 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:15:34.496315 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:15:50.499865 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:16:22.505639 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:22:26.511252 3.002363 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 19:22:33.518793 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:22:41.522909 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:22:57.523255 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:23:29.529883 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:27:32.398477 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 19:27:32.398633 0.011466 udp 10.0.2.22 60330 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 19:27:32.410343 0.000000 udp 10.0.2.22 60331 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 19:29:33.535441 3.001480 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 19:29:40.542730 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:29:48.544191 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:30:04.547247 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:30:36.553379 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:36:40.559749 3.001213 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 19:36:47.566672 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:36:55.568288 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:37:11.570633 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:37:43.581342 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:38:32.397506 0.000092 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 19:38:32.397683 0.012998 udp 10.0.2.22 60332 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 19:38:32.410953 0.000000 udp 10.0.2.22 60333 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 19:43:47.583295 3.001695 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 19:43:54.590837 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:44:02.591589 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:44:18.595183 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:44:50.602549 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:51:01.607008 3.001922 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 19:51:08.614606 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:51:16.616258 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:51:32.619156 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:52:04.625122 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:53:32.396036 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 19:53:32.396272 0.010571 udp 10.0.2.22 60334 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 19:53:32.407193 0.000000 udp 10.0.2.22 60335 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 19:58:08.631187 3.001104 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 19:58:15.638800 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:58:23.640486 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:58:39.646554 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 19:59:11.649244 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:05:15.655632 3.001345 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 20:05:22.662710 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:05:30.663832 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:05:46.668318 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:06:18.675142 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:08:32.395600 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 20:08:32.395749 0.010821 udp 10.0.2.22 60336 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 20:08:32.406904 0.000000 udp 10.0.2.22 60337 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 20:24:17.687492 3.001466 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 20:24:24.694340 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:24:32.695756 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:24:48.699540 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:25:20.705135 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:27:32.394811 0.000149 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 20:27:32.395046 0.013224 udp 10.0.2.22 60338 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 20:27:32.408584 0.000000 udp 10.0.2.22 60339 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 20:31:24.711105 3.001669 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 20:31:31.718704 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:31:39.720074 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:31:55.723168 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:32:27.729145 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:38:31.735446 3.001301 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 20:38:32.393999 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 20:38:32.394089 0.021550 udp 10.0.2.22 60340 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 20:38:32.415951 0.000000 udp 10.0.2.22 60341 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 20:38:38.745192 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:38:46.744082 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:39:02.747084 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:39:34.752524 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:45:38.758381 3.002325 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 20:45:45.766292 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:45:53.768146 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:46:09.771077 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:46:41.780931 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:52:45.783475 3.001219 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 20:52:52.790547 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:53:00.792357 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:53:16.795196 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:53:32.397890 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 20:53:32.398044 0.021419 udp 10.0.2.22 60342 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 20:53:32.419811 0.000000 udp 10.0.2.22 60343 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 20:53:48.804776 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 20:59:52.808596 3.000093 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 20:59:59.814840 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:00:07.815941 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:00:23.819154 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:00:55.824787 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:06:59.830875 3.015419 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 21:07:06.848394 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:07:14.850794 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:07:30.852910 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:08:02.864576 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:08:32.391864 0.000101 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 21:08:32.392060 0.010551 udp 10.0.2.22 60344 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 21:08:32.402924 0.000000 udp 10.0.2.22 60345 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 21:25:09.868658 3.001441 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 21:25:16.876016 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:25:24.881943 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:25:40.880823 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:26:12.886570 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:27:32.393074 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 21:27:32.393212 0.014539 udp 10.0.2.22 60346 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 21:27:32.408068 0.000000 udp 10.0.2.22 60347 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 21:32:16.892299 3.001396 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 21:32:23.900333 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:32:31.901666 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:32:47.904411 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:33:19.910375 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:38:32.389989 0.000116 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 21:38:32.390207 0.022874 udp 10.0.2.22 60348 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 21:38:32.413457 0.000000 udp 10.0.2.22 60349 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 21:39:23.917064 3.001420 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 21:39:30.923743 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:39:38.925325 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:39:54.928242 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:40:26.936080 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:46:30.941156 3.000376 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 21:46:37.947837 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:46:45.956297 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:47:01.960883 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:47:33.962058 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:53:32.394173 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 21:53:32.394320 0.011502 udp 10.0.2.22 60350 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 21:53:32.406184 0.000000 udp 10.0.2.22 60351 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 21:53:37.964360 3.001288 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 21:53:44.971904 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:53:52.973238 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:54:08.976185 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 21:54:40.982157 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:00:44.987969 3.001952 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 22:00:51.995059 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:00:59.997017 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:01:16.002808 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:01:48.006138 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:07:52.012161 3.001617 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 22:07:59.019917 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:08:07.021146 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:08:23.024125 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:08:32.397922 0.000141 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 22:08:32.398210 0.010342 udp 10.0.2.22 60352 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 22:08:32.408833 0.000000 udp 10.0.2.22 60353 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 22:08:55.030292 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:14:59.035994 3.001535 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 22:15:06.043357 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:15:14.046481 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:15:30.048036 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:16:02.054154 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:22:06.060991 3.001822 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 22:22:13.067536 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:22:21.069520 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:22:37.071923 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:23:09.078392 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:27:32.396705 0.000136 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 22:27:32.396940 0.014633 udp 10.0.2.22 60354 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 22:27:32.411918 0.000000 udp 10.0.2.22 60355 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 22:29:13.083801 3.002234 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 22:29:20.092286 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:29:28.093151 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:29:44.095950 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:30:16.101900 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:36:20.108465 3.001461 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 22:36:27.115531 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:36:35.116980 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:36:51.120221 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:37:23.126047 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:38:32.395957 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 22:38:32.396053 0.011215 udp 10.0.2.22 60356 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 22:38:32.407611 0.000000 udp 10.0.2.22 60357 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 22:43:27.131801 3.002159 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 22:43:34.139486 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:43:42.141031 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:43:58.143889 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:44:30.150034 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:50:36.158789 3.001919 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 22:50:43.166188 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:50:51.167718 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:51:07.170610 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:51:39.177005 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:53:32.389581 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 22:53:32.389736 0.023490 udp 10.0.2.22 60358 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 22:53:32.413594 0.000000 udp 10.0.2.22 60359 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 22:57:43.182698 3.022798 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 22:57:50.200301 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:57:58.201802 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:58:14.204544 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 22:58:46.210878 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:04:50.216733 3.001501 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 23:04:57.224064 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:05:05.225780 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:05:21.228842 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:05:53.234620 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:08:32.398664 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 23:08:32.398797 0.010998 udp 10.0.2.22 60360 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 23:08:32.410136 0.000000 udp 10.0.2.22 60361 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 23:24:01.242509 3.000703 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 23:24:08.249059 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:24:16.250850 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:24:32.253658 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:25:04.261765 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:27:32.392747 0.000118 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 23:27:32.392961 0.011401 udp 10.0.2.22 60362 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 23:27:32.404658 0.000000 udp 10.0.2.22 60363 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 23:31:08.265440 3.001646 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 23:31:15.272911 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:31:23.274489 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:31:39.277521 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:32:11.284486 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:38:15.290161 3.001066 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 23:38:22.296902 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:38:30.298576 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:38:32.391505 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 23:38:32.391646 0.021485 udp 10.0.2.22 60364 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 23:38:32.413488 0.000000 udp 10.0.2.22 60365 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 23:38:46.300945 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:39:18.307420 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:45:27.521434 3.012605 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 23:45:34.538349 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:45:42.540217 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:45:58.542964 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:46:30.550512 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:52:34.554632 3.002017 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 23:52:41.562300 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:52:49.563944 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:53:05.567030 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:53:32.595987 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 23:53:32.596084 0.012016 udp 10.0.2.22 60366 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/02 23:53:32.608393 0.000000 udp 10.0.2.22 60367 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/02 23:53:37.572765 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:59:41.579442 3.001116 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/02 23:59:48.586821 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/02 23:59:56.588308 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:00:12.590423 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:00:44.597490 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:06:48.603117 3.001378 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 00:06:55.610203 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:07:03.612144 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:07:19.614785 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:07:51.620906 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:08:32.589888 0.000101 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 00:08:32.590077 0.010464 udp 10.0.2.22 60368 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 00:08:32.600861 0.000000 udp 10.0.2.22 60369 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 00:25:01.633572 3.002924 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 00:25:08.641810 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:25:16.643702 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:25:32.646521 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:26:04.652412 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:27:32.590234 0.000118 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 00:27:32.590445 0.024354 udp 10.0.2.22 60370 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 00:27:32.615141 0.000000 udp 10.0.2.22 60371 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 00:32:08.658474 3.001891 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 00:32:15.665929 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:32:23.667283 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:32:39.670269 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:33:11.676013 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:38:32.588179 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 00:38:32.588330 0.010188 udp 10.0.2.22 60372 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 00:38:32.598826 0.000000 udp 10.0.2.22 60373 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 00:39:15.684207 2.999783 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 00:39:22.691477 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:39:30.691156 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:39:46.694057 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:40:18.708853 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:46:22.706018 3.001970 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 00:46:29.716335 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:46:37.717225 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:46:53.718277 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:47:25.727225 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:53:29.730513 3.001168 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 00:53:32.591449 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 00:53:32.591618 0.011305 udp 10.0.2.22 60374 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 00:53:32.603176 0.000000 udp 10.0.2.22 60375 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 00:53:36.737725 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:53:44.739722 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:54:00.742224 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 00:54:32.748450 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:00:36.756268 2.999571 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 01:00:43.761298 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:00:51.762684 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:01:07.766302 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:01:39.772226 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:07:43.778490 3.002373 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 01:07:50.785977 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:07:58.787247 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:08:14.790452 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:08:32.595236 0.000106 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 01:08:32.595438 0.010350 udp 10.0.2.22 60376 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 01:08:32.606080 0.000000 udp 10.0.2.22 60377 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 01:08:46.796119 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:25:30.822219 3.001975 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 01:25:37.830316 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:25:45.831596 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:26:01.835089 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:26:33.841056 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:27:32.614755 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 01:27:32.614915 0.011415 udp 10.0.2.22 60378 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 01:27:32.626634 0.000000 udp 10.0.2.22 60379 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 01:32:37.846066 3.002030 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 01:32:44.855938 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:32:52.855004 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:33:08.858421 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:33:40.864607 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:38:32.615887 0.000149 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 01:38:32.616146 0.021728 udp 10.0.2.22 60380 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 01:38:32.638176 0.000000 udp 10.0.2.22 60381 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 01:39:44.887566 3.001565 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 01:39:51.885751 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:39:59.881780 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:40:15.882209 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:40:47.888162 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:46:51.905223 3.036226 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 01:46:58.942622 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:47:06.913413 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:47:22.916282 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:47:54.922219 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:53:32.608246 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 01:53:32.608411 0.011730 udp 10.0.2.22 60382 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 01:53:32.620454 0.000000 udp 10.0.2.22 60383 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 01:53:58.928309 3.001659 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 01:54:05.936121 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:54:13.937232 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:54:29.940350 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 01:55:01.946207 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:01:05.952387 3.001766 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 02:01:12.960160 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:01:20.961398 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:01:36.964273 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:02:08.970281 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:08:12.976522 3.001814 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 02:08:19.984019 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:08:27.985303 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:08:32.615326 0.000121 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 02:08:32.615542 0.010332 udp 10.0.2.22 60384 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 02:08:32.626166 0.000000 udp 10.0.2.22 60385 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 02:08:43.988423 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:09:15.995198 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:15:20.000574 3.001429 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 02:15:27.012070 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:15:35.009028 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:15:51.012060 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:16:23.018555 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:22:27.027317 2.998604 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 02:22:34.031688 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:22:42.033031 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:22:58.036243 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:23:30.042399 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:27:32.611080 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 02:27:32.611175 0.012613 udp 10.0.2.22 60386 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 02:27:32.624042 0.000000 udp 10.0.2.22 60387 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 02:29:34.047189 3.002685 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 02:29:41.055053 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:29:49.057091 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:30:05.060001 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:30:37.065890 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:36:41.082470 3.001449 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 02:36:48.089802 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:36:56.091072 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:37:12.093871 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:37:44.100971 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:38:32.613977 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 02:38:32.614104 0.011976 udp 10.0.2.22 60388 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 02:38:32.626396 0.000000 udp 10.0.2.22 60389 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 02:43:48.106412 3.002010 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 02:43:55.113259 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:44:03.115095 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:44:19.118170 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:44:51.124217 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:51:09.130455 3.001476 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 02:51:16.137698 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:51:24.139017 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:51:40.142193 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:52:12.148069 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:53:32.613363 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 02:53:32.613556 0.015300 udp 10.0.2.22 60390 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 02:53:32.629180 0.000000 udp 10.0.2.22 60391 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 02:58:16.154449 3.000802 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 02:58:23.161363 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:58:31.163171 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:58:47.166012 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 02:59:19.172148 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:05:23.180401 3.004631 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 03:05:30.185652 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:05:38.187139 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:05:54.200204 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:06:26.206466 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:08:32.608359 0.000085 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 03:08:32.608525 0.012662 udp 10.0.2.22 60392 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 03:08:32.621578 0.000000 udp 10.0.2.22 60393 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 03:24:21.215192 3.001534 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 03:24:28.222014 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:24:36.223700 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:24:52.226379 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:25:24.232279 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:27:32.606866 0.000142 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 03:27:32.607102 0.012090 udp 10.0.2.22 60394 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 03:27:32.619518 0.000000 udp 10.0.2.22 60395 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 03:31:28.238575 3.002124 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 03:31:35.245945 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:31:43.247361 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:31:59.250331 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:32:31.256265 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:38:32.610429 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 03:38:32.610595 0.011308 udp 10.0.2.22 60396 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 03:38:32.622204 0.000000 udp 10.0.2.22 60397 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 03:38:35.263361 3.000651 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 03:38:42.269818 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:38:50.270924 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:39:06.274244 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:39:38.280247 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:45:42.287684 3.000759 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 03:45:49.293565 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:45:57.295162 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:46:13.298585 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:46:45.313730 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:52:49.310943 3.000916 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 03:52:56.318027 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:53:04.319145 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:53:20.322046 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:53:32.610363 0.000085 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 03:53:32.610530 0.011401 udp 10.0.2.22 60398 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 03:53:32.622206 0.000000 udp 10.0.2.22 60399 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 03:53:52.328594 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 03:59:56.340565 2.995084 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 04:00:03.342530 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:00:11.343138 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:00:27.346222 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:00:59.352154 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:07:03.358171 3.001724 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 04:07:10.366281 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:07:18.366993 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:07:34.370251 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:08:06.376706 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:08:32.614025 0.000097 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 04:08:32.614207 0.010279 udp 10.0.2.22 60400 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 04:08:32.624778 0.000000 udp 10.0.2.22 60401 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 04:25:07.386877 3.001737 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 04:25:14.394586 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:25:22.396099 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:25:38.398573 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:26:10.404937 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:27:32.612946 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 04:27:32.613105 0.012616 udp 10.0.2.22 60402 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 04:27:32.625985 0.000000 udp 10.0.2.22 60403 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 04:32:14.411635 3.000855 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 04:32:21.418329 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:32:29.419477 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:32:45.422690 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:33:17.428630 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:38:32.611291 0.000082 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 04:38:32.611468 0.012663 udp 10.0.2.22 60404 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 04:38:32.624453 0.000000 udp 10.0.2.22 60405 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 04:39:21.434792 3.001460 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 04:39:28.442692 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:39:36.443582 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:39:52.446594 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:40:24.452407 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:46:28.459501 3.000921 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 04:46:35.466225 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:46:43.468169 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:46:59.473687 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:47:31.476643 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:53:32.606046 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 04:53:32.606201 0.013308 udp 10.0.2.22 60406 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 04:53:32.619785 0.000000 udp 10.0.2.22 60407 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 04:53:35.482643 3.001102 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 04:53:42.491711 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:53:50.491352 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:54:06.493992 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 04:54:38.500829 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:00:46.512217 3.001635 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 05:00:53.519768 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:01:01.521127 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:01:17.524369 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:01:49.530323 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:07:53.535993 3.002280 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 05:08:00.543378 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:08:08.545012 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:08:24.548750 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:08:32.610119 0.000147 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 05:08:32.610363 0.010524 udp 10.0.2.22 60408 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 05:08:32.621215 0.000000 udp 10.0.2.22 60409 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 05:08:56.554128 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:15:00.561280 3.000960 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 05:15:07.568001 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:15:15.569191 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:15:31.573423 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:16:03.578807 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:22:07.584020 3.001763 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 05:22:14.591150 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:22:22.593487 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:22:38.595628 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:23:10.602172 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:27:32.608903 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 05:27:32.609063 0.010158 udp 10.0.2.22 60410 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 05:27:32.619495 0.000000 udp 10.0.2.22 60411 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 05:29:14.608300 3.001957 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 05:29:21.615197 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:29:29.616869 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:29:45.623291 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:30:17.626051 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:36:21.632314 3.002183 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 05:36:28.639939 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:36:36.640941 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:36:52.644397 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:37:24.649686 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:38:32.608489 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 05:38:32.608657 0.018962 udp 10.0.2.22 60412 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 05:38:32.627939 0.000000 udp 10.0.2.22 60413 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 05:43:28.656318 3.003834 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 05:43:35.663650 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:43:43.665024 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:43:59.668594 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:44:31.674186 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:50:42.690772 3.001308 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 05:50:49.697583 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:50:57.700004 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:51:13.701882 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:51:45.708158 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:53:32.611932 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 05:53:32.612012 0.010089 udp 10.0.2.22 60414 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 05:53:32.622374 0.000000 udp 10.0.2.22 60415 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 05:57:50.714599 3.002409 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 05:57:57.722740 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:58:05.725253 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:58:21.727192 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 05:58:53.733176 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:04:58.744400 3.000273 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 06:05:05.759651 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:05:13.758415 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:05:29.753218 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:06:01.758847 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:08:32.605256 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 06:08:32.605463 0.010200 udp 10.0.2.22 60416 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 06:08:32.615960 0.000000 udp 10.0.2.22 60417 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 06:24:07.773284 3.001438 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 06:24:14.780723 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:24:22.781773 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:24:38.784975 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:25:10.791059 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:27:32.605122 0.000166 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 06:27:32.605424 0.011044 udp 10.0.2.22 60418 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 06:27:32.616733 0.000000 udp 10.0.2.22 60419 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 06:31:14.796637 3.002051 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 06:31:21.804479 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:31:29.806079 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:31:45.809057 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:32:17.815076 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:38:21.824142 2.998349 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 06:38:28.828512 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:38:32.613376 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 06:38:32.613549 0.011814 udp 10.0.2.22 60420 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 06:38:32.625667 0.000000 udp 10.0.2.22 60421 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 06:38:36.831646 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:38:52.832925 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:39:24.838824 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:45:29.846187 3.002002 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 06:45:36.853955 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:45:44.856038 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:46:00.858339 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:46:32.864526 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:52:36.871361 2.999960 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 06:52:43.878057 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:52:51.879086 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:53:07.882265 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:53:32.608469 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 06:53:32.608605 0.011384 udp 10.0.2.22 60422 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 06:53:32.620329 0.000000 udp 10.0.2.22 60423 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 06:53:39.888580 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:59:43.894435 3.052673 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 06:59:50.929552 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 06:59:58.923606 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:00:14.926071 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:00:46.932337 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:06:50.937780 3.002424 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 07:06:57.945377 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:07:05.947134 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:07:21.950694 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:07:53.956211 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:08:32.611826 0.000114 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 07:08:32.612088 0.010202 udp 10.0.2.22 60424 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 07:08:32.622599 0.000000 udp 10.0.2.22 60425 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 07:25:03.971040 3.001299 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 07:25:10.977136 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:25:18.978583 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:25:34.982077 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:26:06.988180 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:27:32.610819 0.000115 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 07:27:32.611046 0.011211 udp 10.0.2.22 60426 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 07:27:32.622523 0.000000 udp 10.0.2.22 60427 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 07:32:10.993817 3.001373 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 07:32:18.001199 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:32:26.002916 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:32:42.006325 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:33:14.012157 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:38:32.609987 0.000138 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 07:38:32.610221 0.011451 udp 10.0.2.22 60428 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 07:38:32.621966 0.000000 udp 10.0.2.22 60429 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 07:39:18.017716 3.001671 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 07:39:25.028198 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:39:33.026656 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:39:49.030291 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:40:21.036007 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:46:25.041715 3.001458 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 07:46:32.049111 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:46:40.051895 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:46:56.053641 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:47:28.062816 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:53:32.065398 3.009069 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 07:53:32.603822 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 07:53:32.603989 0.010242 udp 10.0.2.22 60430 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 07:53:32.614516 0.000000 udp 10.0.2.22 60431 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 07:53:39.074582 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:53:47.076470 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:54:03.077868 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 07:54:35.084476 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:00:44.096519 3.002540 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 08:00:51.104448 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:00:59.106548 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:01:15.109238 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:01:47.114770 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:07:51.120815 3.001989 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 08:07:58.128194 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:08:06.129878 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:08:22.133241 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:08:32.608032 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 08:08:32.608119 0.000000 udp 10.0.2.22 60432 -> 8.8.8.8 53 INT 0 1 74 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 08:08:54.139200 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:09:32.604264 0.011133 udp 10.0.2.22 60433 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 08:09:32.615710 0.000000 udp 10.0.2.22 60434 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 08:09:37.156355 0.000136 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 08:14:58.144921 3.001785 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 08:15:05.152153 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:15:13.153801 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:15:29.156953 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:16:01.162950 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:22:05.168794 3.002181 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 08:22:12.175996 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:22:20.177706 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:22:36.181071 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:23:08.186440 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:28:32.604124 0.000115 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 08:28:32.604335 0.013326 udp 10.0.2.22 60435 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 08:28:32.617970 0.000000 udp 10.0.2.22 60436 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 08:29:12.192906 3.001521 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 08:29:19.200463 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:29:27.202073 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:29:43.204515 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:30:15.211042 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:36:19.216416 3.002013 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 08:36:26.224315 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:36:34.225815 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:36:50.228682 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:37:22.234672 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:39:32.612084 0.000155 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 08:39:32.612354 0.015274 udp 10.0.2.22 60437 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 08:39:32.627933 0.000000 udp 10.0.2.22 60438 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 08:43:26.241344 3.000988 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 08:43:33.248014 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:43:41.250143 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:43:57.252728 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:44:29.258693 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:50:34.277127 3.000980 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 08:50:41.283633 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:50:49.284919 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:51:05.287934 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:51:37.294582 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:54:32.605531 0.000107 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 08:54:32.605715 0.011542 udp 10.0.2.22 60439 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 08:54:32.617534 0.000000 udp 10.0.2.22 60440 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 08:57:45.308886 2.998537 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 08:57:52.315900 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:58:00.321803 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:58:16.322376 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 08:58:48.323979 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:04:55.335140 3.000086 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 09:05:02.347589 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:05:10.342818 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:05:26.346393 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:05:58.352066 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:09:32.610187 0.000108 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 09:09:32.610387 0.010140 udp 10.0.2.22 60441 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 09:09:32.620842 0.000000 udp 10.0.2.22 60442 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 09:24:07.361933 3.000015 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 09:24:14.368282 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:24:22.370422 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:24:38.372488 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:25:10.378778 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:28:32.609196 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 09:28:32.609507 0.011039 udp 10.0.2.22 60443 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 09:28:32.620877 0.000000 udp 10.0.2.22 60444 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 09:31:14.384140 3.002144 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 09:31:21.391805 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:31:29.393467 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:31:45.396138 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:32:17.402398 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:38:21.417555 3.014164 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 09:38:28.421865 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:38:36.417316 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:38:52.420330 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:39:24.426389 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:39:32.608747 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 09:39:32.608862 0.012239 udp 10.0.2.22 60445 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 09:39:32.621577 0.000000 udp 10.0.2.22 60446 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 09:45:33.440675 3.000691 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 09:45:40.446781 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:45:48.448780 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:46:04.451289 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:46:36.457606 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:52:40.463332 3.001998 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 09:52:47.470825 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:52:55.472221 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:53:11.475270 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:53:43.481537 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 09:54:32.612184 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 09:54:32.612368 0.010117 udp 10.0.2.22 60447 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 09:54:32.622798 0.000000 udp 10.0.2.22 60448 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 09:59:47.487680 3.001452 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 09:59:54.494717 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:00:02.496970 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:00:18.499699 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:00:50.506022 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:06:54.511567 3.001307 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 10:07:01.518740 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:07:09.520430 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:07:25.523159 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:07:57.530855 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:09:32.606408 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 10:09:32.606576 0.010719 udp 10.0.2.22 60449 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 10:09:32.617571 0.000000 udp 10.0.2.22 60450 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 10:25:07.543042 3.001737 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 10:25:14.554401 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:25:22.551894 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:25:38.554500 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:26:10.560650 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:28:32.604672 0.000098 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 10:28:32.604858 0.011786 udp 10.0.2.22 60451 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 10:28:32.616966 0.000000 udp 10.0.2.22 60452 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 10:32:14.566510 3.002339 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 10:32:21.574080 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:32:29.575808 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:32:45.579102 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:33:17.584721 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:39:21.591130 3.001438 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 10:39:28.598296 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:39:32.604119 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 10:39:32.604207 0.011522 udp 10.0.2.22 60453 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 10:39:32.616002 0.000000 udp 10.0.2.22 60454 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 10:39:36.599893 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:39:52.602849 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:40:24.615204 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:46:28.614878 3.001572 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 10:46:35.622210 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:46:43.623843 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:46:59.626863 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:47:31.634119 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:53:35.638406 3.001942 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 10:53:42.645992 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:53:50.647802 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:54:06.655705 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 10:54:32.608521 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 10:54:32.608703 0.010209 udp 10.0.2.22 60455 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 10:54:32.619236 0.000000 udp 10.0.2.22 60456 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 10:54:38.656959 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:00:47.669823 3.001902 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 11:00:54.677658 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:01:02.678873 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:01:18.681744 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:01:50.688290 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:07:54.695127 3.000545 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 11:08:01.701261 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:08:09.702841 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:08:25.706065 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:08:57.711267 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:09:32.601931 0.015454 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 11:09:32.617454 0.010873 udp 10.0.2.22 60457 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 11:09:32.628609 0.000000 udp 10.0.2.22 60458 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 11:15:01.717190 3.002433 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 11:15:08.725085 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:15:16.727216 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:15:32.730433 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:16:04.735798 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:22:08.742407 3.000941 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 11:22:15.749169 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:22:23.751672 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:22:39.753884 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:23:11.760210 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:28:32.611069 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 11:28:32.611214 0.011336 udp 10.0.2.22 60459 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 11:28:32.623009 0.000000 udp 10.0.2.22 60460 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 11:29:15.765174 3.002291 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 11:29:22.777298 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:29:30.774862 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:29:46.783959 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:30:18.786155 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:36:22.790445 3.001193 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 11:36:29.797463 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:36:37.798969 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:36:53.803866 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:37:25.807907 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:39:32.610155 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 11:39:32.610296 0.010139 udp 10.0.2.22 60461 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 11:39:32.620726 0.000000 udp 10.0.2.22 60462 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 11:43:29.813900 3.001532 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 11:43:36.820701 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:43:44.822468 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:44:00.825486 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:44:32.831717 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:50:44.839096 3.001835 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 11:50:51.846186 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:50:59.848182 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:51:15.850966 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:51:47.856935 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:54:32.603546 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 11:54:32.603702 0.010267 udp 10.0.2.22 60463 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 11:54:32.614254 0.000000 udp 10.0.2.22 60464 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 11:57:51.865946 2.999035 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 11:57:58.874109 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:58:06.871979 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:58:22.875246 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 11:58:54.884202 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:04:59.888942 3.001347 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 12:05:06.896157 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:05:14.897875 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:05:30.901703 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:06:02.906445 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:09:32.608690 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 12:09:32.608849 0.010727 udp 10.0.2.22 60465 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 12:09:32.619916 0.000000 udp 10.0.2.22 60466 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 12:24:07.919921 3.001077 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 12:24:14.926479 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:24:22.928275 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:24:38.931314 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:25:10.937853 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:28:32.607233 0.000117 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 12:28:32.607451 0.013718 udp 10.0.2.22 60467 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 12:28:32.621603 0.000000 udp 10.0.2.22 60468 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 12:31:14.943168 3.001607 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 12:31:21.950588 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:31:29.951841 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:31:45.955143 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:32:17.961314 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:38:21.978935 2.994654 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 12:38:28.974963 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:38:36.975380 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:38:52.979040 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:39:24.984873 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:39:32.606208 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 12:39:32.606367 0.010870 udp 10.0.2.22 60469 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 12:39:32.617518 0.000000 udp 10.0.2.22 60470 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 12:45:28.995403 3.095121 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 12:45:36.063956 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:45:44.009999 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:46:00.013192 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:46:32.019257 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:52:36.024979 3.001849 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 12:52:43.032766 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:52:51.033914 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:53:07.037043 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:53:39.043186 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:54:32.610491 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 12:54:32.610673 0.011905 udp 10.0.2.22 60471 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 12:54:32.622886 0.000000 udp 10.0.2.22 60472 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 12:59:43.052241 2.998415 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 12:59:50.056680 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 12:59:58.058811 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:00:14.061008 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:00:46.066805 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:06:50.072750 3.002059 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 13:06:57.080759 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:07:05.082377 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:07:21.086075 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:07:53.091110 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:09:32.604113 0.000160 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 13:09:32.604417 0.010111 udp 10.0.2.22 60473 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 13:09:32.614785 0.000000 udp 10.0.2.22 60474 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 13:25:03.108629 2.999081 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 13:25:10.112435 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:25:18.113724 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:25:34.119193 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:26:06.122675 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:28:32.603257 0.000107 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 13:28:32.603459 0.012738 udp 10.0.2.22 60475 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 13:28:32.616519 0.000000 udp 10.0.2.22 60476 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 13:32:10.129314 3.001108 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 13:32:17.135347 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:32:25.137400 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:32:41.140477 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:33:13.146530 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:39:17.152819 3.001427 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 13:39:24.160093 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:39:32.161578 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:39:32.602270 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 13:39:32.602376 0.010067 udp 10.0.2.22 60477 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 13:39:32.612761 0.000000 udp 10.0.2.22 60478 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 13:39:48.164283 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:40:20.171099 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:46:24.180340 3.002303 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 13:46:31.183776 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:46:39.185038 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:46:55.188716 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:47:27.205862 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:53:31.200845 3.001444 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 13:53:38.207893 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:53:46.209420 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:54:02.212396 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 13:54:32.606147 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 13:54:32.606304 0.010219 udp 10.0.2.22 60479 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 13:54:32.616846 0.000000 udp 10.0.2.22 60480 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 13:54:34.218361 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:00:43.231719 3.001704 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 14:00:50.239047 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:00:58.240800 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:01:14.243358 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:01:46.249888 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:07:50.256098 3.001040 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 14:07:57.262869 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:08:05.268556 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:08:21.267708 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:08:53.273875 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:09:32.600708 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 14:09:32.600878 0.011006 udp 10.0.2.22 60481 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 14:09:32.612219 0.000000 udp 10.0.2.22 60482 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 14:14:57.281571 2.999938 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 14:15:04.287058 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:15:12.288719 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:15:28.291269 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:16:00.297552 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:22:04.304174 3.000866 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 14:22:11.314281 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:22:19.312581 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:22:35.315230 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:23:07.323843 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:28:32.609225 0.000272 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 14:28:32.609583 0.011843 udp 10.0.2.22 60483 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 14:28:32.621735 0.000000 udp 10.0.2.22 60484 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 14:29:11.327393 3.001827 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 14:29:18.334560 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:29:26.336283 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:29:42.339395 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:30:14.345182 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:36:18.352529 3.000643 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 14:36:25.358805 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:36:33.360027 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:36:49.363522 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:37:21.369389 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:39:32.608106 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 14:39:32.608259 0.010576 udp 10.0.2.22 60485 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 14:39:32.619125 0.000000 udp 10.0.2.22 60486 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 14:43:25.376352 3.000411 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 14:43:32.386886 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:43:40.386726 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:43:56.387109 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:44:28.393382 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:50:33.401952 3.004482 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 14:50:40.408219 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:50:48.409759 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:51:04.412960 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:51:36.418814 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:54:32.602032 0.000134 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 14:54:32.602260 0.013501 udp 10.0.2.22 60487 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 14:54:32.616077 0.000000 udp 10.0.2.22 60488 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 14:57:43.428864 3.002257 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 14:57:50.438185 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:57:58.438107 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:58:14.441494 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 14:58:46.447036 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:04:53.456921 3.002101 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 15:05:00.464615 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:05:08.466399 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:05:24.469233 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:05:56.475207 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:09:32.606080 0.000117 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 15:09:32.606291 0.010222 udp 10.0.2.22 60489 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 15:09:32.616825 0.000000 udp 10.0.2.22 60490 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 15:24:06.485271 3.001474 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 15:24:13.492806 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:24:21.494151 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:24:37.497620 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:25:09.502706 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:28:32.604607 0.000124 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 15:28:32.604817 0.022219 udp 10.0.2.22 60491 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 15:28:32.627351 0.000000 udp 10.0.2.22 60492 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 15:31:13.509056 3.002767 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 15:31:20.516343 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:31:28.518014 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:31:44.521173 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:32:16.527000 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:38:20.532786 3.001954 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 15:38:27.540305 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:38:35.542323 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:38:51.544943 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:39:23.551159 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:39:32.603923 0.000092 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 15:39:32.604093 0.010248 udp 10.0.2.22 60493 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 15:39:32.614623 0.000000 udp 10.0.2.22 60494 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 15:45:32.569295 2.997937 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 15:45:39.572558 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:45:47.573174 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:46:03.576128 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:46:35.581557 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:52:39.588225 3.001722 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 15:52:46.595171 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:52:54.597172 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:53:10.599767 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:53:42.606031 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 15:54:32.608266 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 15:54:32.608368 0.010714 udp 10.0.2.22 60495 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 15:54:32.619376 0.000000 udp 10.0.2.22 60496 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 15:59:46.612317 3.001402 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 15:59:53.619894 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:00:01.621166 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:00:17.623611 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:00:49.630154 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:06:53.636116 3.001653 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 16:07:00.643025 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:07:08.645059 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:07:24.648244 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:07:56.654465 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:09:32.602135 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 16:09:32.602293 0.011027 udp 10.0.2.22 60497 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 16:09:32.613630 0.000000 udp 10.0.2.22 60498 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 16:25:07.669439 3.001453 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 16:25:14.676483 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:25:22.678358 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:25:38.680995 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:26:10.686932 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:28:32.601248 0.000113 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 16:28:32.601473 0.011469 udp 10.0.2.22 60499 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 16:28:32.613253 0.000000 udp 10.0.2.22 60500 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 16:32:14.693547 3.001299 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 16:32:21.700567 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:32:29.702065 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:32:45.704889 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:33:17.710871 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:39:21.717259 3.001426 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 16:39:28.724423 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:39:32.600046 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 16:39:32.600162 0.010191 udp 10.0.2.22 60501 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 16:39:32.610668 0.000000 udp 10.0.2.22 60502 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 16:39:36.725434 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:39:52.728944 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:40:24.734568 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:46:28.741150 3.001374 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 16:46:35.748462 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:46:43.750005 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:46:59.752970 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:47:31.758838 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:53:35.765992 3.000748 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 16:53:42.772249 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:53:50.773584 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:54:06.777126 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 16:54:32.603949 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 16:54:32.604094 0.010525 udp 10.0.2.22 60503 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 16:54:32.614943 0.000000 udp 10.0.2.22 60504 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 16:54:38.782860 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:00:47.796126 3.001681 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 17:00:54.803556 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:01:02.804511 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:01:18.808199 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:01:50.814118 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:07:54.820587 3.001455 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 17:08:01.827313 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:08:09.830584 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:08:25.832690 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:08:57.838659 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:09:32.609026 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 17:09:32.609176 0.010398 udp 10.0.2.22 60505 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 17:09:32.619878 0.000000 udp 10.0.2.22 60506 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 17:15:01.843912 3.001323 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 17:15:08.851588 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:15:16.853159 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:15:32.855368 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:16:04.862013 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:22:08.868043 3.002122 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 17:22:15.875459 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:22:23.877093 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:22:39.880574 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:23:11.885990 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:28:32.607424 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 17:28:32.607614 0.011929 udp 10.0.2.22 60507 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 17:28:32.619874 0.000000 udp 10.0.2.22 60508 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 17:29:15.892114 3.001193 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 17:29:22.899278 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:29:30.900827 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:29:46.903464 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:30:18.910219 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:36:22.917056 3.001016 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 17:36:29.923499 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:36:37.924727 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:36:53.928062 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:37:25.933955 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:39:32.606167 0.000118 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 17:39:32.606390 0.010464 udp 10.0.2.22 60509 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 17:39:32.617195 0.000000 udp 10.0.2.22 60510 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 17:43:29.940354 3.001248 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 17:43:36.947676 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:43:44.949069 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:44:00.952015 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:44:32.958111 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:50:46.968223 3.001923 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 17:50:53.975330 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:51:01.977208 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:51:17.980635 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:51:49.986158 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:54:32.600047 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 17:54:32.600230 0.010284 udp 10.0.2.22 60511 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 17:54:32.610853 0.000000 udp 10.0.2.22 60512 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 17:57:53.992379 3.001854 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 17:58:00.999830 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:58:09.006302 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:58:25.004232 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 17:58:57.010571 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:05:02.017892 3.001473 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 18:05:09.024910 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:05:17.026455 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:05:33.034172 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:06:05.035486 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:09:32.603900 0.000148 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 18:09:32.604138 0.010443 udp 10.0.2.22 60513 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 18:09:32.614875 0.000000 udp 10.0.2.22 60514 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 18:24:08.046646 3.000747 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 18:24:15.052656 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:24:23.056371 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:24:39.057500 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:25:11.063822 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:28:32.602889 0.000103 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 18:28:32.603080 0.011630 udp 10.0.2.22 60515 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 18:28:32.615018 0.000000 udp 10.0.2.22 60516 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 18:31:15.070793 3.000164 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 18:31:22.076684 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:31:30.078173 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:31:46.081059 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:32:18.087758 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:38:22.094115 3.004168 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 18:38:29.101137 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:38:37.104444 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:38:53.105150 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:39:25.111416 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:39:32.602144 0.000111 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 18:39:32.602343 0.010146 udp 10.0.2.22 60517 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 18:39:32.612867 0.000000 udp 10.0.2.22 60518 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 18:45:29.118093 3.000750 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 18:45:36.124824 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:45:44.136338 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:46:00.139401 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:46:32.145217 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:52:36.151597 3.001472 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 18:52:43.158648 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:52:51.160134 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:53:07.163405 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:53:39.169234 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:54:32.605497 0.000092 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 18:54:32.605680 0.012802 udp 10.0.2.22 60519 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 18:54:32.618758 0.000000 udp 10.0.2.22 60520 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 18:59:43.175110 3.001647 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 18:59:50.182976 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 18:59:58.184151 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:00:14.186976 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:00:46.193045 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:06:50.200063 3.001355 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 19:06:57.206516 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:07:05.208836 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:07:21.211205 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:07:53.216900 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:09:32.600159 0.000118 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 19:09:32.600379 0.010153 udp 10.0.2.22 60521 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 19:09:32.610844 0.000000 udp 10.0.2.22 60522 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 19:25:03.230964 3.001972 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 19:25:10.238500 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:25:18.240268 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:25:34.243238 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:26:06.248929 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:28:32.599804 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 19:28:32.599976 0.022802 udp 10.0.2.22 60523 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 19:28:32.623171 0.000000 udp 10.0.2.22 60524 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 19:32:10.254854 3.001660 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 19:32:17.262231 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:32:25.263572 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:32:41.266543 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:33:13.272869 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:39:17.278784 3.001617 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 19:39:24.286194 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:39:32.287698 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:39:32.598063 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 19:39:32.598197 0.010546 udp 10.0.2.22 60525 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 19:39:32.609069 0.000000 udp 10.0.2.22 60526 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 19:39:48.290724 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:40:20.301569 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:46:24.303514 3.002255 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 19:46:31.310181 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:46:39.311635 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:46:55.314483 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:47:27.325313 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:53:31.326687 3.001504 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 19:53:38.334166 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:53:46.335155 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:54:02.338607 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 19:54:32.602216 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 19:54:32.602356 0.010285 udp 10.0.2.22 60527 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 19:54:32.612922 0.000000 udp 10.0.2.22 60528 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 19:54:34.344614 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:00:43.357523 3.001683 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 20:00:50.365092 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:00:58.367690 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:01:14.370195 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:01:46.375914 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:07:50.383461 2.999792 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 20:07:57.389228 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:08:05.391031 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:08:21.393866 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:08:53.400005 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:09:32.606328 0.000120 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 20:09:32.606548 0.011747 udp 10.0.2.22 60529 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 20:09:32.618606 0.000000 udp 10.0.2.22 60530 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 20:14:57.405339 3.002168 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 20:15:04.413719 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:15:12.414518 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:15:28.417620 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:16:00.423816 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:22:04.429298 3.002018 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 20:22:11.437036 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:22:19.439242 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:22:35.445924 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:23:07.447527 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:28:32.605269 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 20:28:32.605374 0.021682 udp 10.0.2.22 60531 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 20:28:32.627365 0.000000 udp 10.0.2.22 60532 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 20:29:11.456206 2.998978 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 20:29:18.461121 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:29:26.462598 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:29:42.465512 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:30:14.471624 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:36:18.477594 3.001499 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 20:36:25.484917 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:36:33.486590 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:36:49.489220 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:37:21.495692 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:39:32.604175 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 20:39:32.604310 0.010112 udp 10.0.2.22 60533 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 20:39:32.614717 0.000000 udp 10.0.2.22 60534 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 20:43:25.501521 3.001710 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 20:43:32.508845 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:43:40.510332 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:43:56.513681 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:44:28.519271 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:50:32.525692 3.001508 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 20:50:39.532507 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:50:47.534483 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:51:03.537278 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:51:35.543219 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:54:32.598555 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 20:54:32.598709 0.010016 udp 10.0.2.22 60535 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 20:54:32.609053 0.000000 udp 10.0.2.22 60536 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 20:57:39.548997 3.001954 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 20:57:46.556934 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:57:54.558229 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:58:10.561356 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 20:58:42.567622 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:04:46.573540 3.000872 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 21:04:53.580685 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:05:01.582199 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:05:17.585083 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:05:49.591251 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:09:32.602652 0.000093 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 21:09:32.602820 0.010939 udp 10.0.2.22 60537 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 21:09:32.614083 0.000000 udp 10.0.2.22 60538 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 21:24:03.606686 3.002215 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 21:24:10.614407 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:24:18.616309 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:24:34.618676 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:25:06.624912 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:28:32.601236 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 21:28:32.601478 0.021634 udp 10.0.2.22 60539 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 21:28:32.623448 0.000000 udp 10.0.2.22 60540 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 21:31:10.631305 3.001303 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 21:31:17.638704 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:31:25.640014 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:31:41.643098 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:32:13.649048 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:38:17.654917 3.003806 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 21:38:24.662153 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:38:32.663356 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:38:48.666960 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:39:20.673395 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:39:32.604782 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 21:39:32.604973 0.026581 udp 10.0.2.22 60541 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 21:39:32.631894 0.000000 udp 10.0.2.22 60542 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 21:45:32.680150 3.001917 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 21:45:39.688027 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:45:47.689785 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:46:03.691880 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:46:35.698449 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:52:39.704894 3.011163 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 21:52:46.721961 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:52:54.722614 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:53:10.726276 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:53:42.732290 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 21:54:32.604151 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 21:54:32.604325 0.010128 udp 10.0.2.22 60543 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 21:54:32.614726 0.000000 udp 10.0.2.22 60544 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 21:59:46.738659 3.001618 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 21:59:53.745925 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:00:01.747011 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:00:17.750112 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:00:49.756048 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:06:53.762790 3.000863 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 22:07:00.770029 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:07:08.771315 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:07:24.774457 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:07:56.780622 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:09:32.598357 0.000126 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 22:09:32.598574 0.010176 udp 10.0.2.22 60545 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 22:09:32.609059 0.000000 udp 10.0.2.22 60546 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 22:25:07.794898 3.002041 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 22:25:14.802675 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:25:22.804506 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:25:38.807329 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:26:10.813392 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:28:32.597197 0.000270 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 22:28:32.597547 0.021667 udp 10.0.2.22 60547 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 22:28:32.619552 0.000000 udp 10.0.2.22 60548 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 22:32:14.819068 3.001885 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 22:32:21.826737 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:32:29.828045 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:32:45.831097 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:33:17.837038 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:39:21.843383 3.001045 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 22:39:28.850899 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:39:32.596271 0.000103 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 22:39:32.596461 0.011384 udp 10.0.2.22 60549 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 22:39:32.608150 0.000000 udp 10.0.2.22 60550 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 22:39:36.857678 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:39:52.855725 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:40:24.861462 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:46:28.867490 3.001252 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 22:46:35.881738 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:46:43.881153 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:46:59.879176 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:47:31.885208 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:53:35.891240 3.001349 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 22:53:42.898701 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:53:50.900144 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:54:06.903011 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 22:54:32.600217 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 22:54:32.600348 0.012793 udp 10.0.2.22 60551 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 22:54:32.613450 0.000000 udp 10.0.2.22 60552 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 22:54:38.909237 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:00:42.914565 3.002275 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 23:00:49.922698 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:00:57.924023 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:01:13.927044 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:01:45.933118 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:07:49.939944 3.000549 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 23:07:56.946402 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:08:04.948469 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:08:20.951122 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:08:52.956999 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:09:32.604140 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 23:09:32.604293 0.010431 udp 10.0.2.22 60553 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 23:09:32.615030 0.000000 udp 10.0.2.22 60554 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 23:14:56.963111 3.001542 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 23:15:03.970517 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:15:11.972233 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:15:27.975133 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:15:59.981129 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:22:03.987209 3.001427 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 23:22:10.994319 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:22:18.995918 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:22:34.999269 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:23:07.004907 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:28:32.603147 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 23:28:32.603310 0.011502 udp 10.0.2.22 60555 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 23:28:32.615119 0.000000 udp 10.0.2.22 60556 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 23:29:11.011180 3.001581 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 23:29:18.018501 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:29:26.020007 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:29:42.023094 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:30:14.028845 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:36:18.034676 3.001971 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 23:36:25.042137 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:36:33.044092 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:36:49.046722 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:37:21.052904 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:39:32.602187 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 23:39:32.602337 0.021496 udp 10.0.2.22 60557 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 23:39:32.624217 0.000000 udp 10.0.2.22 60558 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 23:43:25.058772 3.001710 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 23:43:32.065972 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:43:40.067972 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:43:56.070864 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:44:28.076754 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:50:32.083858 3.000437 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 23:50:39.090601 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:50:47.092359 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:51:03.095288 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:51:35.101083 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:54:32.596074 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 23:54:32.596208 0.010289 udp 10.0.2.22 60559 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/03 23:54:32.606764 0.000000 udp 10.0.2.22 60560 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/03 23:57:39.106518 3.001953 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/03 23:57:46.114726 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:57:54.115728 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:58:10.118808 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/03 23:58:42.125036 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:04:46.131311 3.003571 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 00:04:53.143206 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:05:01.139977 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:05:17.142674 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:05:49.148869 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:09:32.600081 0.000099 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 00:09:32.600265 0.010251 udp 10.0.2.22 60561 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 00:09:32.610824 0.000000 udp 10.0.2.22 60562 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 00:24:00.159549 3.002530 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 00:24:07.170174 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:24:15.168771 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:24:31.175888 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:25:03.177892 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:28:32.599908 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 00:28:32.600045 0.011460 udp 10.0.2.22 60563 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 00:28:32.611826 0.000000 udp 10.0.2.22 60564 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 00:31:07.184966 3.001028 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 00:31:14.191748 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:31:22.192937 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:31:38.196132 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:32:10.201856 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:38:14.233321 2.996475 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 00:38:21.237584 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:38:29.236948 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:38:45.240327 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:39:17.245401 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:39:32.618194 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 00:39:32.618318 0.011256 udp 10.0.2.22 60565 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 00:39:32.629902 0.000000 udp 10.0.2.22 60566 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 00:45:27.263304 2.998932 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 00:45:34.267985 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:45:42.269884 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:45:58.272694 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:46:30.278496 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:52:34.285393 3.000484 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 00:52:41.292171 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:52:49.293702 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:53:05.296366 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:53:37.303066 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:54:32.621776 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 00:54:32.621963 0.010116 udp 10.0.2.22 60567 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 00:54:32.632387 0.000000 udp 10.0.2.22 60568 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 00:59:41.308801 3.001395 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 00:59:48.315656 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 00:59:56.317478 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:00:12.325898 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:00:44.326443 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:06:48.332525 3.001669 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 01:06:55.340125 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:07:03.341751 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:07:19.344406 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:07:51.350364 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:09:32.616160 0.000149 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 01:09:32.616405 0.011607 udp 10.0.2.22 60569 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 01:09:32.628313 0.000000 udp 10.0.2.22 60570 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 01:25:01.365175 3.000650 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 01:25:08.371485 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:25:16.372948 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:25:32.375384 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:26:04.381980 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:28:32.615264 0.000130 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 01:28:32.615497 0.021660 udp 10.0.2.22 60571 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 01:28:32.637511 0.000000 udp 10.0.2.22 60572 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 01:32:08.387468 3.002139 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 01:32:15.395117 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:32:23.396854 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:32:39.399863 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:33:11.406196 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:39:15.412743 3.001231 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 01:39:22.419242 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:39:30.420943 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:39:32.613899 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 01:39:32.613997 0.011020 udp 10.0.2.22 60573 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 01:39:32.625336 0.000000 udp 10.0.2.22 60574 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 01:39:46.424215 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:40:18.437772 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:46:22.436161 3.001160 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 01:46:29.443526 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:46:37.444938 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:46:53.447851 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:47:25.453889 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:53:29.460252 3.001404 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 01:53:36.467023 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:53:44.468664 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:54:00.472064 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:54:32.478532 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 01:54:32.618686 0.000082 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 01:54:32.618856 0.022052 udp 10.0.2.22 60575 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 01:54:32.641263 0.000000 udp 10.0.2.22 60576 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 02:00:36.483076 3.002076 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 02:00:43.490966 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:00:51.492791 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:01:07.495664 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:01:39.501780 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:07:43.507758 3.002103 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 02:07:50.515405 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:07:58.518535 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:08:14.519840 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:08:46.525665 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:09:32.625962 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 02:09:32.626109 0.010281 udp 10.0.2.22 60577 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 02:09:32.636702 0.000000 udp 10.0.2.22 60578 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 02:25:30.532262 3.001457 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 02:25:37.539791 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:25:45.540977 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:26:01.544052 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:26:33.550288 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:28:32.621705 0.000124 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 02:28:32.621970 0.011960 udp 10.0.2.22 60579 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 02:28:32.634205 0.000000 udp 10.0.2.22 60580 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 02:32:37.556197 3.001440 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 02:32:44.563177 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:32:52.564724 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:33:08.568522 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:33:40.573809 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:39:32.620217 0.000136 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 02:39:32.620465 0.013194 udp 10.0.2.22 60581 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 02:39:32.633980 0.000000 udp 10.0.2.22 60582 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 02:39:44.580146 3.000713 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 02:39:51.587097 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:39:59.588636 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:40:15.591792 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:40:47.598021 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:46:51.605101 3.000926 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 02:46:58.613885 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:47:06.620501 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:47:22.615695 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:47:54.622685 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:53:58.627821 3.013164 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 02:54:05.645095 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:54:13.646695 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:54:29.649940 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 02:54:32.614160 0.000132 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 02:54:32.614394 0.011974 udp 10.0.2.22 60583 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 02:54:32.626685 0.000000 udp 10.0.2.22 60584 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 02:55:01.656036 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:01:05.661674 3.001908 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 03:01:12.669249 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:01:20.670757 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:01:36.673076 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:02:08.684409 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:08:12.685262 3.002036 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 03:08:19.693601 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:08:27.694888 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:08:43.702158 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:09:15.704640 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:09:32.618771 0.000143 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 03:09:32.619054 0.011719 udp 10.0.2.22 60585 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 03:09:32.631051 0.000000 udp 10.0.2.22 60586 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 03:15:19.709171 3.002792 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 03:15:26.716929 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:15:34.723133 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:15:50.722188 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:16:22.727753 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:22:26.733537 3.004675 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 03:22:33.743799 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:22:41.742745 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:22:57.746532 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:23:29.755899 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:28:32.616998 0.000112 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 03:28:32.617219 0.022495 udp 10.0.2.22 60587 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 03:28:32.640055 0.000000 udp 10.0.2.22 60588 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 03:29:33.757800 3.001227 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 03:29:40.765016 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:29:48.766710 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:30:04.769770 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:30:36.775256 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:36:40.782584 3.000391 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 03:36:47.789049 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:36:55.790595 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:37:11.793784 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:37:43.799682 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:39:32.616188 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 03:39:32.616321 0.012203 udp 10.0.2.22 60589 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 03:39:32.628880 0.000000 udp 10.0.2.22 60590 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 03:43:47.805344 3.002096 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 03:43:54.813115 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:44:02.814540 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:44:18.817747 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:44:50.823095 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:51:01.829159 3.001923 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 03:51:08.837051 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:51:16.839297 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:51:32.841904 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:52:04.847825 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:54:32.620391 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 03:54:32.620561 0.011986 udp 10.0.2.22 60591 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 03:54:32.632871 0.000000 udp 10.0.2.22 60592 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 03:58:08.853668 3.002036 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 03:58:15.861011 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:58:23.862695 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:58:39.865308 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 03:59:11.881823 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:05:15.876930 3.002838 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 04:05:22.884852 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:05:30.886624 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:05:46.889974 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:06:18.895723 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:09:32.614540 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 04:09:32.614692 0.010466 udp 10.0.2.22 60593 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 04:09:32.625494 0.000000 udp 10.0.2.22 60594 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 04:24:17.909464 3.001682 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 04:24:24.916780 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:24:32.918743 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:24:48.921426 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:25:20.927698 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:28:32.613975 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 04:28:32.614133 0.011395 udp 10.0.2.22 60595 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 04:28:32.625801 0.000000 udp 10.0.2.22 60596 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 04:31:24.933645 3.001617 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 04:31:31.941075 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:31:39.942417 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:31:55.945126 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:32:27.951682 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:38:31.958500 3.003699 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 04:38:38.968553 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:38:46.966357 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:39:02.969648 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:39:32.612283 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 04:39:32.612378 0.012007 udp 10.0.2.22 60597 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 04:39:32.624712 0.000000 udp 10.0.2.22 60598 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 04:39:34.975461 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:45:38.981467 3.003410 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 04:45:45.988612 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:45:53.990317 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:46:09.993403 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:46:41.999502 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:52:46.005281 3.001532 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 04:52:53.012581 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:53:01.014389 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:53:17.017282 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:53:49.023336 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 04:54:32.615564 0.000115 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 04:54:32.615787 0.011179 udp 10.0.2.22 60599 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 04:54:32.627303 0.000000 udp 10.0.2.22 60600 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 04:59:53.029589 3.001545 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 05:00:00.036707 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:00:08.038263 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:00:24.041687 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:00:56.047194 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:07:00.053573 3.001597 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 05:07:07.060871 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:07:15.062102 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:07:31.065129 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:08:03.074457 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:09:32.621054 0.000107 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 05:09:32.621263 0.010819 udp 10.0.2.22 60601 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 05:09:32.632404 0.000000 udp 10.0.2.22 60602 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 05:25:11.081948 3.002018 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 05:25:18.089843 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:25:26.091965 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:25:42.094704 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:26:14.102812 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:28:32.619333 0.000121 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 05:28:32.619552 0.013133 udp 10.0.2.22 60603 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 05:28:32.632963 0.000000 udp 10.0.2.22 60604 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 05:32:18.106055 3.001861 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 05:32:25.113684 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:32:33.115022 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:32:49.118380 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:33:21.124060 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:39:25.130109 3.001373 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 05:39:32.137162 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:39:32.618247 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 05:39:32.618356 0.011399 udp 10.0.2.22 60605 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 05:39:32.630120 0.000000 udp 10.0.2.22 60606 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 05:39:40.140889 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:39:56.142133 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:40:28.148466 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:46:32.154035 3.001299 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 05:46:39.161655 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:46:47.162808 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:47:03.165158 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:47:35.172153 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:53:39.178207 3.001475 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 05:53:46.195525 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:53:54.196759 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:54:10.200404 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 05:54:32.611613 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 05:54:32.611794 0.010954 udp 10.0.2.22 60607 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 05:54:32.623019 0.000000 udp 10.0.2.22 60608 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 05:54:42.205171 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:00:46.214664 2.998873 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 06:00:53.219155 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:01:01.227229 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:01:17.227897 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:01:49.229936 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:07:53.236831 3.000652 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 06:08:00.242968 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:08:08.244793 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:08:24.247981 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:08:56.253999 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:09:32.616178 0.000147 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 06:09:32.616429 0.011978 udp 10.0.2.22 60609 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 06:09:32.628731 0.000000 udp 10.0.2.22 60610 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 06:15:00.259705 3.002495 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 06:15:07.267046 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:15:15.268657 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:15:31.272446 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:16:03.278484 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:22:07.284339 3.001448 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 06:22:14.291814 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:22:22.293223 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:22:38.295835 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:23:10.302376 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:28:32.615058 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 06:28:32.615252 0.011722 udp 10.0.2.22 60611 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 06:28:32.627278 0.000000 udp 10.0.2.22 60612 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 06:29:14.308450 3.001249 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 06:29:21.315128 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:29:29.316629 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:29:45.319808 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:30:17.325479 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:36:21.332713 3.000542 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 06:36:28.339977 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:36:36.340572 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:36:52.343286 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:37:24.349929 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:39:32.614116 0.000117 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 06:39:32.614329 0.010187 udp 10.0.2.22 60613 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 06:39:32.624822 0.000000 udp 10.0.2.22 60614 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 06:43:28.356225 3.001074 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 06:43:35.363171 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:43:43.364659 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:43:59.367613 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:44:31.373710 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:50:37.382785 3.001111 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 06:50:44.390365 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:50:52.391365 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:51:08.394564 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:51:40.400292 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:54:32.618295 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 06:54:32.618460 0.021816 udp 10.0.2.22 60615 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 06:54:32.640596 0.000000 udp 10.0.2.22 60616 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 06:57:44.407286 3.001277 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 06:57:51.414192 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:57:59.415004 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:58:15.418305 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 06:58:47.424366 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:04:51.430188 3.001821 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 07:04:58.438018 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:05:06.440144 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:05:22.442527 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:05:54.454257 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:09:32.612106 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 07:09:32.612198 0.010651 udp 10.0.2.22 60617 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 07:09:32.623161 0.000000 udp 10.0.2.22 60618 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 07:24:02.456207 3.000703 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 07:24:09.462959 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:24:17.465016 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:24:33.467243 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:25:05.473721 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:28:32.611447 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 07:28:32.611627 0.011867 udp 10.0.2.22 60619 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 07:28:32.623801 0.000000 udp 10.0.2.22 60620 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 07:31:09.479938 3.000858 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 07:31:16.486860 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:31:24.488404 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:31:40.490986 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:32:12.497544 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:38:16.502731 3.002826 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 07:38:23.511006 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:38:31.514152 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:38:47.515155 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:39:19.521221 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:39:32.620029 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 07:39:32.620123 0.011413 udp 10.0.2.22 60621 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 07:39:32.631860 0.000000 udp 10.0.2.22 60622 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 07:45:28.536493 2.999273 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 07:45:35.541831 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:45:43.545272 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:45:59.546353 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:46:31.552181 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:52:35.558044 3.002040 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 07:52:42.565118 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:52:50.567229 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:53:06.570545 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:53:38.576205 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:54:32.613895 0.000123 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 07:54:32.614127 0.022274 udp 10.0.2.22 60623 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 07:54:32.636720 0.000000 udp 10.0.2.22 60624 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 07:59:42.583483 3.000424 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 07:59:49.590082 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 07:59:57.590576 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:00:13.594203 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:00:45.600469 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:06:49.607067 3.000875 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 08:06:56.613674 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:07:04.615192 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:07:20.618534 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:07:52.624137 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:09:32.618360 0.000116 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 08:09:32.618621 0.010206 udp 10.0.2.22 60625 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 08:09:32.629154 0.000000 udp 10.0.2.22 60626 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 08:25:03.639198 3.001865 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 08:25:10.646200 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:25:18.648810 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:25:34.651227 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:26:06.657015 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:28:32.617078 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 08:28:32.617272 0.023045 udp 10.0.2.22 60627 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 08:28:32.640598 0.000000 udp 10.0.2.22 60628 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 08:32:10.663225 3.001253 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 08:32:17.671082 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:32:25.672910 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:32:41.674551 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:33:13.680665 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:39:17.687101 3.001851 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 08:39:24.697196 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:39:32.617266 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 08:39:32.617387 0.010847 udp 10.0.2.22 60629 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 08:39:32.628571 0.000000 udp 10.0.2.22 60630 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 08:39:32.697108 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:39:48.702321 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:40:20.704920 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:46:24.711235 3.001924 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 08:46:31.718359 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:46:39.720246 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:46:55.724237 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:47:27.729168 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:53:31.734530 3.002289 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 08:53:38.742562 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:53:46.744251 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:54:02.747013 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 08:54:32.610356 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 08:54:32.610553 0.010107 udp 10.0.2.22 60631 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 08:54:32.620973 0.000000 udp 10.0.2.22 60632 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 08:54:34.762673 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:00:38.769128 3.001738 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 09:00:45.776393 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:00:53.782229 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:01:09.781531 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:01:41.786985 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:07:45.792490 3.002109 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 09:07:52.800642 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:08:00.801903 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:08:16.805062 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:08:48.810841 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:09:32.614080 0.000149 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 09:09:32.614325 0.010760 udp 10.0.2.22 60633 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 09:09:32.625353 0.000000 udp 10.0.2.22 60634 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 09:25:31.826272 3.001165 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 09:25:38.833179 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:25:46.835024 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:26:02.837748 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:26:34.843990 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:28:32.613212 0.000120 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 09:28:32.613484 0.011716 udp 10.0.2.22 60635 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 09:28:32.625497 0.000000 udp 10.0.2.22 60636 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 09:32:38.849842 3.001191 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 09:32:45.857567 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:32:53.858786 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:33:09.861763 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:33:41.868180 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:39:32.615441 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 09:39:32.615522 0.011920 udp 10.0.2.22 60637 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 09:39:32.627743 0.000000 udp 10.0.2.22 60638 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 09:39:45.876403 2.998744 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 09:39:52.881058 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:40:00.883006 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:40:16.885146 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:40:48.895576 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:46:52.897663 3.105829 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 09:46:59.973209 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:47:07.916438 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:47:23.919989 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:47:55.925543 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:53:59.932349 3.000844 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 09:54:06.939128 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:54:14.940763 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:54:30.943707 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 09:54:32.616189 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 09:54:32.616291 0.010782 udp 10.0.2.22 60639 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 09:54:32.627375 0.000000 udp 10.0.2.22 60640 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 09:55:02.949322 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:01:06.956401 3.006459 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 10:01:13.963379 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:01:21.964492 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:01:37.967994 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:02:09.973281 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:08:13.979022 3.061194 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 10:08:21.023964 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:08:29.001235 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:08:45.005571 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:09:17.007784 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:09:32.613936 0.000106 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 10:09:32.614138 0.010205 udp 10.0.2.22 60641 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 10:09:32.624662 0.000000 udp 10.0.2.22 60642 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 10:15:21.013065 3.002292 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 10:15:28.020940 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:15:36.022443 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:15:52.025249 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:16:24.031874 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:22:28.037533 3.001600 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 10:22:35.049618 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:22:43.048106 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:22:59.049248 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:23:31.055776 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:28:32.611750 0.000103 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 10:28:32.611914 0.011360 udp 10.0.2.22 60643 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 10:28:32.623656 0.000000 udp 10.0.2.22 60644 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 10:29:35.062757 3.000516 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 10:29:42.068813 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:29:50.070223 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:30:06.073776 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:30:38.079217 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:36:42.087918 2.999315 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 10:36:49.092915 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:36:57.094625 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:37:13.097761 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:37:45.103552 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:39:32.618161 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 10:39:32.618313 0.013000 udp 10.0.2.22 60645 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 10:39:32.631608 0.000000 udp 10.0.2.22 60646 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 10:43:49.110650 3.000471 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 10:43:56.116865 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:44:04.118350 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:44:20.120800 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:44:52.127629 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:51:03.135426 2.999823 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 10:51:10.140740 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:51:18.142708 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:51:34.145978 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:52:06.151510 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:54:32.612323 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 10:54:32.612414 0.010711 udp 10.0.2.22 60647 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 10:54:32.623462 0.000000 udp 10.0.2.22 60648 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 10:58:10.158276 3.000836 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 10:58:17.164815 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:58:25.167950 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:58:41.170870 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 10:59:13.175276 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:05:17.182342 3.000822 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 11:05:24.188850 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:05:32.312681 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:05:48.203375 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:06:20.211914 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:09:32.616178 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 11:09:32.616309 0.011140 udp 10.0.2.22 60649 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 11:09:32.627747 0.000000 udp 10.0.2.22 60650 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 11:24:18.229338 2.996466 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 11:24:25.234039 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:24:33.230791 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:24:49.234133 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:25:21.244680 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:28:32.615211 0.000097 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 11:28:32.615405 0.011558 udp 10.0.2.22 60651 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 11:28:32.627296 0.000000 udp 10.0.2.22 60652 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 11:31:25.246677 3.001019 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 11:31:32.253609 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:31:40.254984 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:31:56.258005 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:32:28.264218 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:38:32.269329 3.002282 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 11:38:39.277429 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:38:47.283727 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:39:03.284017 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:39:32.613570 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 11:39:32.613707 0.010092 udp 10.0.2.22 60653 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 11:39:32.624047 0.000000 udp 10.0.2.22 60654 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 11:39:35.287936 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:45:39.296020 2.999659 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 11:45:46.301173 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:45:54.306175 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:46:10.305808 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:46:42.312201 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:52:46.317742 3.002034 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 11:52:53.325254 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:53:01.326636 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:53:17.329935 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:53:49.335601 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 11:54:32.608238 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 11:54:32.608380 0.010172 udp 10.0.2.22 60655 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 11:54:32.618863 0.000000 udp 10.0.2.22 60656 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 11:59:53.342082 3.019418 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 12:00:00.359354 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:00:08.361059 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:00:24.363978 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:00:56.375702 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:07:00.376743 3.000800 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 12:07:07.383559 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:07:15.384726 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:07:31.387665 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:08:03.393862 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:09:32.612089 0.000143 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 12:09:32.612327 0.010606 udp 10.0.2.22 60657 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 12:09:32.623213 0.000000 udp 10.0.2.22 60658 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 12:25:05.405854 3.001699 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 12:25:12.413423 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:25:20.414699 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:25:36.417544 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:26:08.424767 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:28:32.612213 0.000121 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 12:28:32.612411 0.011799 udp 10.0.2.22 60659 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 12:28:32.624575 0.000000 udp 10.0.2.22 60660 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 12:32:12.429888 3.001485 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 12:32:19.437074 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:32:27.438646 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:32:43.441884 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:33:15.447787 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:39:19.453794 3.001424 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 12:39:26.470970 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:39:32.611914 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 12:39:32.612074 0.010889 udp 10.0.2.22 60661 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 12:39:32.623267 0.000000 udp 10.0.2.22 60662 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 12:39:34.476246 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:39:50.476050 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:40:22.481450 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:46:26.487140 3.002088 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 12:46:33.495026 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:46:41.496769 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:46:57.499921 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:47:29.506225 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:53:33.511828 3.001327 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 12:53:40.519142 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:53:48.520524 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:54:04.523788 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 12:54:32.613505 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 12:54:32.613704 0.010089 udp 10.0.2.22 60663 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 12:54:32.624107 0.000000 udp 10.0.2.22 60664 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 12:54:36.529775 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:00:40.535892 3.001451 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 13:00:47.542814 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:00:55.544708 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:01:11.549581 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:01:43.559205 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:07:47.560803 3.002042 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 13:07:54.567108 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:08:02.571920 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:08:18.574695 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:08:50.577658 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:09:32.608426 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 13:09:32.608604 0.010265 udp 10.0.2.22 60665 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 13:09:32.619249 0.000000 udp 10.0.2.22 60666 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 13:25:30.588189 3.001417 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 13:25:37.595263 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:25:45.596908 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:26:01.600021 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:26:33.607981 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:28:32.607260 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 13:28:32.607414 0.011872 udp 10.0.2.22 60667 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 13:28:32.619653 0.000000 udp 10.0.2.22 60668 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 13:32:37.613250 3.000433 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 13:32:44.619622 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:32:52.620903 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:33:08.623804 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:33:40.629672 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:39:32.616042 0.017145 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 13:39:32.633255 0.010787 udp 10.0.2.22 60669 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 13:39:32.644353 0.000000 udp 10.0.2.22 60670 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 13:39:44.636662 3.001010 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 13:39:51.646320 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:39:59.644793 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:40:15.647766 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:40:47.653876 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:46:51.661382 3.000641 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 13:46:58.667260 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:47:06.673931 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:47:22.671893 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:47:54.677776 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:53:58.684393 3.000732 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 13:54:05.690976 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:54:13.692691 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:54:29.696004 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 13:54:32.610004 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 13:54:32.610180 0.010085 udp 10.0.2.22 60671 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 13:54:32.620619 0.000000 udp 10.0.2.22 60672 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 13:55:01.701971 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:01:05.714265 2.997336 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 14:01:12.726571 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:01:20.716621 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:01:36.719768 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:02:08.726126 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:08:12.734674 2.998981 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 14:08:19.739012 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:08:27.740457 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:08:43.743087 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:09:15.752189 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:09:32.614195 0.000112 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 14:09:32.614397 0.010081 udp 10.0.2.22 60673 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 14:09:32.624819 0.000000 udp 10.0.2.22 60674 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 14:15:19.755681 3.001986 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 14:15:26.763222 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:15:34.764012 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:15:50.767666 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:16:22.777853 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:22:26.781163 3.000253 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 14:22:33.787022 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:22:41.792489 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:22:57.792599 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:23:29.798535 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:28:32.612966 0.000104 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 14:28:32.613165 0.021754 udp 10.0.2.22 60675 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 14:28:32.635298 0.000000 udp 10.0.2.22 60676 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 14:29:33.803252 3.001612 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 14:29:40.810873 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:29:48.812378 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:30:04.815632 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:30:36.821671 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:36:40.827596 3.001924 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 14:36:47.835055 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:36:55.836460 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:37:11.839563 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:37:43.845998 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:39:32.612001 0.000118 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 14:39:32.612211 0.010896 udp 10.0.2.22 60677 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 14:39:32.623402 0.000000 udp 10.0.2.22 60678 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 14:43:47.852849 3.000327 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 14:43:54.862582 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:44:02.860601 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:44:18.863103 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:44:50.869600 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:50:54.876416 3.000724 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 14:51:01.882989 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:51:09.884549 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:51:25.887622 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:51:57.893803 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:54:32.626073 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 14:54:32.626263 0.010194 udp 10.0.2.22 60679 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 14:54:32.636821 0.000000 udp 10.0.2.22 60680 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 14:58:01.899362 3.001896 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 14:58:08.906825 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:58:16.908361 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:58:32.915639 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 14:59:04.917426 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:05:08.925827 2.999094 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 15:05:15.930827 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:05:23.932944 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:05:39.935248 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:06:11.941666 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:09:32.610172 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 15:09:32.610360 0.010027 udp 10.0.2.22 60681 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 15:09:32.620754 0.000000 udp 10.0.2.22 60682 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 15:24:12.948317 3.001628 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 15:24:19.955936 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:24:27.957820 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:24:43.968229 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:25:15.966695 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:28:32.609706 0.000104 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 15:28:32.609896 0.011616 udp 10.0.2.22 60683 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 15:28:32.621820 0.000000 udp 10.0.2.22 60684 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 15:31:19.972408 3.001764 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 15:31:26.979879 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:31:34.980966 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:31:50.984206 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:32:22.990113 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:38:26.996236 3.002252 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 15:38:34.005932 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:38:42.005608 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:38:58.008066 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:39:30.014729 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:39:32.607983 0.069875 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 15:39:32.678209 0.010312 udp 10.0.2.22 60685 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 15:39:32.688864 0.000000 udp 10.0.2.22 60686 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 15:45:34.020868 3.001200 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 15:45:41.028545 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:45:49.029070 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:46:05.032405 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:46:37.038073 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:52:41.045298 3.000521 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 15:52:48.056755 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:52:56.052952 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:53:12.056180 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:53:44.062396 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 15:54:32.612327 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 15:54:32.612428 0.010105 udp 10.0.2.22 60687 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 15:54:32.622845 0.000000 udp 10.0.2.22 60688 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 15:59:48.068827 3.000908 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 15:59:55.075714 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:00:03.077474 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:00:19.080641 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:00:51.093020 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:06:55.092417 3.001591 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 16:07:02.099995 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:07:10.101681 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:07:26.110450 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:07:58.110061 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:09:32.605793 0.000121 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 16:09:32.606012 0.010222 udp 10.0.2.22 60689 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 16:09:32.616557 0.000000 udp 10.0.2.22 60690 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 16:25:06.120561 3.012972 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 16:25:13.129594 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:25:21.129751 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:25:37.132730 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:26:09.138705 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:28:32.617298 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 16:28:32.617459 0.011166 udp 10.0.2.22 60691 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 16:28:32.628937 0.000000 udp 10.0.2.22 60692 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 16:32:13.144409 3.001944 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 16:32:20.152139 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:32:28.153372 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:32:44.156675 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:33:16.162821 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:39:20.168400 3.006346 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 16:39:27.176001 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:39:32.613525 0.000101 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 16:39:32.613724 0.009982 udp 10.0.2.22 60693 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 16:39:32.623989 0.000000 udp 10.0.2.22 60694 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 16:39:35.177882 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:39:51.181626 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:40:23.186756 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:46:27.192625 3.001812 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 16:46:34.199979 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:46:42.202267 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:46:58.204780 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:47:30.219821 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:53:34.217824 3.000548 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 16:53:41.224360 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:53:49.228433 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:54:05.228645 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 16:54:32.608331 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 16:54:32.608442 0.010188 udp 10.0.2.22 60695 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 16:54:32.618962 0.000000 udp 10.0.2.22 60696 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 16:54:37.234514 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:00:41.240505 3.001790 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 17:00:48.251182 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:00:56.249794 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:01:12.252901 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:01:44.258762 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:07:48.264899 3.001392 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 17:07:55.271863 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:08:03.273848 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:08:19.276516 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:08:51.282846 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:09:32.611925 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 17:09:32.612027 0.010643 udp 10.0.2.22 60697 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 17:09:32.623016 0.000000 udp 10.0.2.22 60698 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 17:25:33.295950 3.001492 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 17:25:40.305715 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:25:48.304919 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:26:04.307956 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:26:36.314203 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:28:32.611389 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 17:28:32.611558 0.021677 udp 10.0.2.22 60699 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 17:28:32.633704 0.000000 udp 10.0.2.22 60700 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 17:32:40.319321 3.002492 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 17:32:47.327207 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:32:55.328813 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:33:11.332218 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:33:43.338112 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:39:32.610206 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 17:39:32.610348 0.010008 udp 10.0.2.22 60701 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 17:39:32.620683 0.000000 udp 10.0.2.22 60702 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 17:39:47.344196 3.001661 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 17:39:54.351588 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:40:02.353074 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:40:18.356014 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:40:50.362124 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:46:54.368248 3.001408 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 17:47:01.375491 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:47:09.376738 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:47:25.379816 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:47:57.387998 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:54:01.391274 3.002084 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 17:54:08.399075 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:54:16.400533 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:54:32.403938 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 17:54:32.614105 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 17:54:32.614273 0.010082 udp 10.0.2.22 60703 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 17:54:32.624660 0.000000 udp 10.0.2.22 60704 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 17:55:04.409948 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:01:08.415756 3.001833 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 18:01:15.427946 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:01:23.424506 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:01:39.427436 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:02:11.433942 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:08:15.439550 3.001709 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 18:08:22.447013 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:08:30.448909 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:08:46.451653 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:09:18.457693 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:09:32.608974 0.000140 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 18:09:32.609452 0.010360 udp 10.0.2.22 60705 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 18:09:32.620148 0.000000 udp 10.0.2.22 60706 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 18:15:22.463372 3.002360 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 18:15:29.471878 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:15:37.472544 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:15:53.476331 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:16:25.484366 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:22:29.489022 3.002607 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 18:22:36.494945 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:22:44.496458 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:23:00.500136 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:23:32.506099 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:28:32.608291 0.000110 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 18:28:32.608485 0.011541 udp 10.0.2.22 60707 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 18:28:32.620378 0.000000 udp 10.0.2.22 60708 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 18:29:36.513751 2.999395 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 18:29:43.519649 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:29:51.520481 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:30:07.523644 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:30:39.529660 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:36:43.535606 3.002131 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 18:36:50.544680 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:36:58.543969 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:37:14.547670 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:37:46.553514 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:39:32.610123 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 18:39:32.610228 0.009990 udp 10.0.2.22 60709 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 18:39:32.620597 0.000000 udp 10.0.2.22 60710 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 18:43:50.560859 3.000151 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 18:43:57.566934 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:44:05.568514 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:44:21.571697 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:44:53.577616 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:50:57.583991 3.001010 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 18:51:04.590839 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:51:12.593868 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:51:28.595276 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:52:00.601799 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:54:32.610314 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 18:54:32.610472 0.010281 udp 10.0.2.22 60711 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 18:54:32.621100 0.000000 udp 10.0.2.22 60712 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 18:58:04.606583 3.002619 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 18:58:11.614809 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:58:19.616463 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:58:35.619425 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 18:59:07.627257 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:05:11.631369 3.001547 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 19:05:18.638672 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:05:26.639878 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:05:42.643358 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:06:14.652290 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:09:32.603467 0.000128 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 19:09:32.603697 0.045501 udp 10.0.2.22 60713 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 19:09:32.649585 0.000000 udp 10.0.2.22 60714 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 19:24:12.661887 3.002056 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 19:24:19.669256 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:24:27.672916 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:24:43.674115 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:25:15.680465 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:28:32.612987 0.000140 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 19:28:32.613260 0.012258 udp 10.0.2.22 60715 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 19:28:32.625830 0.000000 udp 10.0.2.22 60716 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 19:31:19.687623 3.000337 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 19:31:26.693495 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:31:34.694935 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:31:50.697851 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:32:22.703904 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:38:26.709317 3.001971 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 19:38:33.717457 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:38:41.718520 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:38:57.723764 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:39:29.729846 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:39:32.611860 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 19:39:32.612024 0.010146 udp 10.0.2.22 60717 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 19:39:32.622460 0.000000 udp 10.0.2.22 60718 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 19:45:33.736962 3.016703 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 19:45:40.752522 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:45:48.748215 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:46:04.746137 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:46:36.752218 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:52:40.758008 3.001156 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 19:52:47.764903 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:52:55.766578 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:53:11.770121 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:53:43.776233 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 19:54:32.606130 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 19:54:32.606324 0.010269 udp 10.0.2.22 60719 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 19:54:32.616895 0.000000 udp 10.0.2.22 60720 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 19:59:47.781689 3.012556 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 19:59:54.799244 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:00:02.800692 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:00:18.803195 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:00:50.811927 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:06:54.815606 3.001979 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 20:07:01.823068 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:07:09.824741 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:07:25.827850 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:07:57.834041 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:09:32.616918 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 20:09:32.617022 0.010326 udp 10.0.2.22 60721 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 20:09:32.627663 0.000000 udp 10.0.2.22 60722 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 20:25:04.844804 2.999819 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 20:25:11.851093 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:25:19.857810 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:25:35.855271 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:26:07.861703 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:28:32.611223 0.000109 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 20:28:32.611475 0.011512 udp 10.0.2.22 60723 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 20:28:32.623330 0.000000 udp 10.0.2.22 60724 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 20:32:11.866927 3.001734 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 20:32:18.874532 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:32:26.875506 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:32:42.878711 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:33:14.884729 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:39:18.890592 3.002098 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 20:39:25.904238 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:39:32.607999 0.000146 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 20:39:32.608242 0.010178 udp 10.0.2.22 60725 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 20:39:32.618703 0.000000 udp 10.0.2.22 60726 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 20:39:33.900299 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:39:49.903681 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:40:21.908889 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:46:25.915312 3.001202 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 20:46:32.922406 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:46:40.924005 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:46:56.926750 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:47:28.937811 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:53:32.939053 3.001576 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 20:53:39.946114 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:53:47.947879 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:54:03.950828 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 20:54:32.615785 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 20:54:32.615965 0.010407 udp 10.0.2.22 60727 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 20:54:32.626680 0.000000 udp 10.0.2.22 60728 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 20:54:35.956854 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:00:39.963524 3.000791 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 21:00:46.970198 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:00:54.971818 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:01:10.977320 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:01:42.980689 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:07:46.986396 3.002083 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 21:07:53.996115 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:08:01.995867 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:08:17.998667 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:08:50.004885 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:09:32.605555 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 21:09:32.605690 0.010390 udp 10.0.2.22 60729 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 21:09:32.616409 0.000000 udp 10.0.2.22 60730 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 21:25:31.018592 3.000231 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 21:25:38.024281 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:25:46.025634 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:26:02.029296 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:26:34.034620 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:28:32.605418 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 21:28:32.605574 0.012111 udp 10.0.2.22 60731 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 21:28:32.617961 0.000000 udp 10.0.2.22 60732 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 21:32:38.040681 3.001765 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 21:32:45.047991 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:32:53.049822 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:33:09.052583 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:33:41.058496 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:39:32.607658 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 21:39:32.607797 0.010636 udp 10.0.2.22 60733 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 21:39:32.618804 0.000000 udp 10.0.2.22 60734 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 21:39:45.064818 3.001097 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 21:39:52.072128 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:40:00.074097 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:40:16.076334 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:40:48.082480 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:46:52.089566 3.000461 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 21:46:59.095526 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:47:07.097940 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:47:23.101144 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:47:55.106511 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:53:59.113408 3.000581 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 21:54:06.120089 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:54:14.121621 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:54:30.124289 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 21:54:32.608361 0.000040 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 21:54:32.608449 0.010510 udp 10.0.2.22 60735 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 21:54:32.619214 0.000000 udp 10.0.2.22 60736 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 21:55:02.131028 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:01:06.136543 3.072543 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 22:01:13.182087 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:01:21.155317 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:01:37.165611 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:02:09.164307 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:08:13.170459 3.001458 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 22:08:20.178281 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:08:28.179421 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:08:44.182410 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:09:16.188315 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:09:32.612197 0.000099 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 22:09:32.612383 0.010970 udp 10.0.2.22 60737 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 22:09:32.623719 0.000000 udp 10.0.2.22 60738 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 22:15:20.194696 3.001520 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 22:15:27.202239 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:15:35.203369 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:15:51.206331 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:16:23.212636 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:22:27.219716 3.000804 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 22:22:34.226128 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:22:42.233023 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:22:58.230457 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:23:30.236456 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:28:32.611087 0.000114 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 22:28:32.611298 0.011453 udp 10.0.2.22 60739 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 22:28:32.623062 0.000000 udp 10.0.2.22 60740 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 22:29:34.242525 3.001623 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 22:29:41.249793 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:29:49.255626 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:30:05.254313 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:30:37.260259 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:36:41.266805 3.001017 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 22:36:48.273715 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:36:56.275905 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:37:12.278212 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:37:44.284356 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:39:32.611969 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 22:39:32.612118 0.010245 udp 10.0.2.22 60741 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 22:39:32.622722 0.000000 udp 10.0.2.22 60742 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 22:43:48.290382 3.037591 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 22:43:55.307790 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:44:03.309328 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:44:19.314202 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:44:51.318047 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:50:55.324283 3.001601 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 22:51:02.331741 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:51:10.333037 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:51:26.336630 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:51:58.342453 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:54:32.604090 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 22:54:32.604244 0.010568 udp 10.0.2.22 60743 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 22:54:32.615102 0.000000 udp 10.0.2.22 60744 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 22:58:02.348300 3.001688 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 22:58:09.355745 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:58:17.357061 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:58:33.360544 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 22:59:05.368936 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:05:09.372457 3.001685 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 23:05:16.379874 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:05:24.381154 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:05:40.384155 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:06:12.390045 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:09:32.608207 0.000134 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 23:09:32.608450 0.010306 udp 10.0.2.22 60745 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 23:09:32.619092 0.000000 udp 10.0.2.22 60746 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 23:24:13.397126 3.002356 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 23:24:20.404742 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:24:28.406072 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:24:44.408810 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:25:16.415303 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:28:32.610645 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 23:28:32.610805 0.014969 udp 10.0.2.22 60747 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 23:28:32.626113 0.000000 udp 10.0.2.22 60748 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 23:31:20.421177 3.001389 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 23:31:27.428341 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:31:35.436093 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:31:51.432963 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:32:23.438886 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:38:27.517064 2.988119 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 23:38:34.501522 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:38:42.499031 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:38:58.466967 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:39:30.473026 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:39:32.615484 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 23:39:32.615630 0.010994 udp 10.0.2.22 60749 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 23:39:32.626960 0.000000 udp 10.0.2.22 60750 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 23:45:34.480088 3.000233 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 23:45:41.486027 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:45:49.487967 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:46:05.491071 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:46:37.503067 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:52:41.502851 3.001421 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 23:52:48.510602 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:52:56.511987 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:53:12.515307 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:53:44.520955 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/04 23:54:32.620234 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 23:54:32.620336 0.012352 udp 10.0.2.22 60751 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/04 23:54:32.632971 0.000000 udp 10.0.2.22 60752 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/04 23:59:48.526893 3.001569 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/04 23:59:55.534207 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:00:03.542576 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:00:19.541142 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:00:51.544981 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:06:55.550247 3.002234 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 00:07:02.558464 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:07:10.559932 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:07:26.563031 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:07:58.571989 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:09:32.613495 0.000114 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 00:09:32.613701 0.010675 udp 10.0.2.22 60753 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 00:09:32.642192 0.000000 udp 10.0.2.22 60754 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 00:25:08.584486 2.998875 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 00:25:15.589913 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:25:23.591607 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:25:39.599147 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:26:11.600337 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:28:32.613139 0.000120 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 00:28:32.613339 0.011376 udp 10.0.2.22 60755 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 00:28:32.625024 0.000000 udp 10.0.2.22 60756 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 00:32:15.607007 3.000331 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 00:32:22.613976 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:32:30.615302 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:32:46.618448 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:33:18.624296 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:39:22.629786 3.002336 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 00:39:29.637895 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:39:32.612274 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 00:39:32.612403 0.013361 udp 10.0.2.22 60757 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 00:39:32.626104 0.000000 udp 10.0.2.22 60758 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 00:39:37.639622 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:39:53.642278 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:40:25.648464 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:46:29.653882 3.001458 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 00:46:36.661981 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:46:44.662732 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:47:00.666107 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:47:32.671643 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:53:36.679766 2.999992 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 00:53:43.685756 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:53:51.687341 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:54:07.690311 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 00:54:32.615720 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 00:54:32.615810 0.010766 udp 10.0.2.22 60759 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 00:54:32.626881 0.000000 udp 10.0.2.22 60760 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 00:54:39.695526 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:00:43.703273 3.002562 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 01:00:50.709476 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:00:58.710806 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:01:14.713967 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:01:46.720101 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:07:50.727108 3.000979 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 01:07:57.733275 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:08:05.734824 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:08:21.742250 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:08:53.744192 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:09:32.619730 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 01:09:32.619862 0.010361 udp 10.0.2.22 60761 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 01:09:32.630505 0.000000 udp 10.0.2.22 60762 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 01:14:57.750205 3.001790 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 01:15:04.758568 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:15:12.761209 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:15:28.762239 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:16:00.774993 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:22:04.871883 3.003873 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 01:22:11.884380 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:22:19.882992 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:22:35.886257 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:23:07.892236 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:28:32.699445 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 01:28:32.699604 0.011293 udp 10.0.2.22 60763 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 01:28:32.711228 0.000000 udp 10.0.2.22 60764 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 01:29:11.898549 3.001688 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 01:29:18.905532 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:29:26.907246 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:29:42.910216 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:30:14.916292 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:36:18.922310 3.001886 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 01:36:25.929612 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:36:33.931321 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:36:49.934176 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:37:21.939962 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:39:32.698551 0.000041 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 01:39:32.698654 0.010138 udp 10.0.2.22 60765 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 01:39:32.709089 0.000000 udp 10.0.2.22 60766 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 01:43:25.946928 3.014997 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 01:43:32.963594 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:43:40.965027 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:43:56.968040 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:44:28.974434 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:50:32.980584 3.001218 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 01:50:39.987599 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:50:47.988975 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:51:03.991717 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:51:35.998326 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:54:32.692260 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 01:54:32.692424 0.010798 udp 10.0.2.22 60767 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 01:54:32.703538 0.000000 udp 10.0.2.22 60768 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 01:57:40.004267 3.001473 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 01:57:47.012061 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:57:55.012964 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:58:11.016279 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 01:58:43.022022 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:04:47.028254 3.001509 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 02:04:54.035678 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:05:02.036987 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:05:18.039888 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:05:50.046016 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:09:32.695549 0.000108 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 02:09:32.695760 0.010490 udp 10.0.2.22 60769 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 02:09:32.706550 0.000000 udp 10.0.2.22 60770 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 02:24:00.056050 3.002051 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 02:24:07.063142 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:24:15.065624 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:24:31.068183 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:25:03.074000 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:28:32.695885 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 02:28:32.696045 0.011376 udp 10.0.2.22 60771 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 02:28:32.707697 0.000000 udp 10.0.2.22 60772 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 02:31:07.079602 3.002036 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 02:31:14.087676 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:31:22.088692 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:31:38.092133 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:32:10.097880 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:38:14.114013 2.991738 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 02:38:21.111054 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:38:29.112742 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:38:45.115792 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:39:17.121828 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:39:32.693967 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 02:39:32.694116 0.011469 udp 10.0.2.22 60773 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 02:39:32.705826 0.000000 udp 10.0.2.22 60774 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 02:45:21.127911 3.001310 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 02:45:28.135111 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:45:36.136598 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:45:52.139831 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:46:24.145496 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:52:28.152505 3.000778 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 02:52:35.159351 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:52:43.162046 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:52:59.173681 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:53:31.179820 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:54:32.697998 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 02:54:32.698092 0.011439 udp 10.0.2.22 60775 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 02:54:32.709795 0.000000 udp 10.0.2.22 60776 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 02:59:35.185475 3.002491 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 02:59:42.193415 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 02:59:50.194560 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:00:06.205915 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:00:38.206467 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:06:42.209657 3.001626 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 03:06:49.216905 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:06:57.224041 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:07:13.221636 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:07:45.227535 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:09:32.694599 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 03:09:32.694758 0.010011 udp 10.0.2.22 60777 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 03:09:32.705065 0.000000 udp 10.0.2.22 60778 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 03:24:58.237859 2.999401 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 03:25:05.243232 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:25:13.244619 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:25:29.247599 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:26:01.253569 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:28:32.691114 0.000107 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 03:28:32.691314 0.012033 udp 10.0.2.22 60779 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 03:28:32.703729 0.000000 udp 10.0.2.22 60780 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 03:32:05.259521 3.001451 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 03:32:12.266876 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:32:20.268461 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:32:36.271158 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:33:08.277440 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:39:12.283416 3.002270 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 03:39:19.296139 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:39:27.292286 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:39:32.690175 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 03:39:32.690329 0.011946 udp 10.0.2.22 60781 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 03:39:32.702590 0.000000 udp 10.0.2.22 60782 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 03:39:43.295315 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:40:15.301681 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:46:19.307049 3.001798 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 03:46:26.314887 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:46:34.316342 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:46:50.319148 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:47:22.325809 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:53:26.331181 3.001755 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 03:53:33.338669 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:53:41.340263 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:53:57.343314 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:54:29.349346 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 03:54:32.694372 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 03:54:32.694541 0.010122 udp 10.0.2.22 60783 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 03:54:32.704977 0.000000 udp 10.0.2.22 60784 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 04:00:33.355567 3.079490 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 04:00:40.410381 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:00:48.374201 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:01:04.376956 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:01:36.383185 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:07:40.390839 3.000097 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 04:07:47.396508 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:07:55.398207 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:08:11.401082 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:08:43.406956 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:09:32.698517 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 04:09:32.698603 0.013208 udp 10.0.2.22 60785 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 04:09:32.712152 0.000000 udp 10.0.2.22 60786 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 04:25:28.414909 3.001911 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 04:25:35.422982 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:25:43.425334 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:25:59.426755 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:26:31.432958 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:28:32.697176 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 04:28:32.697337 0.011495 udp 10.0.2.22 60787 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 04:28:32.709142 0.000000 udp 10.0.2.22 60788 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 04:32:35.439604 3.000773 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 04:32:42.446363 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:32:50.447825 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:33:06.454345 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:33:38.456792 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:39:32.695914 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 04:39:32.696005 0.011339 udp 10.0.2.22 60789 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 04:39:32.707650 0.000000 udp 10.0.2.22 60790 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 04:39:42.463029 3.001434 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 04:39:49.473427 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:39:57.472085 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:40:13.474537 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:40:45.480841 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:46:49.486639 3.001587 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 04:46:56.493486 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:47:04.495374 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:47:20.498746 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:47:52.504451 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:53:56.511378 3.001077 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 04:54:03.518162 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:54:11.519727 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:54:27.522561 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 04:54:32.689685 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 04:54:32.689780 0.010879 udp 10.0.2.22 60791 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 04:54:32.700947 0.000000 udp 10.0.2.22 60792 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 04:54:59.528765 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:01:03.534427 3.001767 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 05:01:10.542238 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:01:18.543550 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:01:34.546354 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:02:06.552523 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:08:10.558886 3.001310 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 05:08:17.567143 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:08:25.567211 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:08:41.570639 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:09:13.576633 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:09:32.694346 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 05:09:32.694493 0.011415 udp 10.0.2.22 60793 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 05:09:32.721019 0.000000 udp 10.0.2.22 60794 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 05:15:17.582705 3.002070 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 05:15:24.590682 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:15:32.594057 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:15:48.594530 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:16:20.601232 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:22:24.606742 3.000915 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 05:22:31.614260 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:22:39.616021 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:22:55.617845 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:23:27.623927 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:28:32.693759 0.000156 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 05:28:32.694016 0.011917 udp 10.0.2.22 60795 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 05:28:32.706447 0.000000 udp 10.0.2.22 60796 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 05:29:31.630984 3.001145 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 05:29:38.637950 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:29:46.639724 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:30:02.647704 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:30:34.650013 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:36:38.654769 3.001299 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 05:36:45.662131 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:36:53.663623 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:37:09.666650 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:37:41.671969 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:39:32.692228 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 05:39:32.692312 0.011376 udp 10.0.2.22 60797 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 05:39:32.704012 0.000000 udp 10.0.2.22 60798 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 05:43:45.677807 3.002344 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 05:43:52.685840 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:44:00.687265 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:44:16.690634 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:44:48.696442 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:50:52.702668 3.000995 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 05:50:59.709862 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:51:07.711208 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:51:23.713961 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:51:55.720355 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:54:32.696271 0.000114 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 05:54:32.696479 0.011417 udp 10.0.2.22 60799 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 05:54:32.708195 0.000000 udp 10.0.2.22 60800 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 05:57:59.726281 3.005902 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 05:58:06.735293 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:58:14.735173 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:58:30.738477 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 05:59:02.744297 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:05:06.750791 3.001258 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 06:05:13.757780 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:05:21.759329 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:05:37.762482 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:06:09.768691 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:09:32.690371 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 06:09:32.690524 0.010267 udp 10.0.2.22 60801 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 06:09:32.701080 0.000000 udp 10.0.2.22 60802 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 06:24:13.781515 3.000132 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 06:24:20.786873 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:24:28.788978 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:24:44.791280 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:25:16.797332 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:28:32.689967 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 06:28:32.690108 0.013688 udp 10.0.2.22 60803 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 06:28:32.704074 0.000000 udp 10.0.2.22 60804 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 06:31:20.804039 3.000644 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 06:31:27.810838 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:31:35.812401 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:31:51.814776 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:32:23.821543 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:38:27.827241 3.002036 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 06:38:34.834806 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:38:42.836203 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:38:58.841685 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:39:30.845756 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:39:32.688097 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 06:39:32.688246 0.015125 udp 10.0.2.22 60805 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 06:39:32.703699 0.000000 udp 10.0.2.22 60806 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 06:45:34.853838 2.999329 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 06:45:41.858792 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:45:49.860158 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:46:05.863428 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:46:37.869528 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:52:41.875717 3.001276 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 06:52:48.882790 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:52:56.884483 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:53:12.887117 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:53:44.893646 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 06:54:32.692308 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 06:54:32.692463 0.013710 udp 10.0.2.22 60807 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 06:54:32.706477 0.000000 udp 10.0.2.22 60808 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 06:59:48.899432 3.001981 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 06:59:55.906641 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:00:03.908178 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:00:19.911424 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:00:51.917082 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:06:55.924827 3.000165 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 07:07:02.933967 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:07:10.937716 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:07:26.935093 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:07:58.941600 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:09:32.700156 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 07:09:32.700305 0.018330 udp 10.0.2.22 60809 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 07:09:32.718971 0.000000 udp 10.0.2.22 60810 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 07:25:03.947934 3.002428 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 07:25:10.955354 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:25:18.956488 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:25:34.959874 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:26:06.965916 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:28:32.695322 0.000142 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 07:28:32.695604 0.011354 udp 10.0.2.22 60811 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 07:28:32.707268 0.000000 udp 10.0.2.22 60812 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 07:32:10.971320 3.002412 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 07:32:17.978987 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:32:25.980589 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:32:41.983457 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:33:13.989964 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:39:18.000399 2.997597 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 07:39:25.003172 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:39:32.694138 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 07:39:32.694240 0.019637 udp 10.0.2.22 60813 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 07:39:32.714196 0.000000 udp 10.0.2.22 60814 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 07:39:33.004445 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:39:49.007314 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:40:21.013745 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:46:25.021637 2.999524 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 07:46:32.026957 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:46:40.028582 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:46:56.031308 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:47:28.037917 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:53:32.044480 3.000763 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 07:53:39.050875 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:53:47.052322 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:54:03.055305 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 07:54:32.688059 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 07:54:32.688214 0.011184 udp 10.0.2.22 60815 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 07:54:32.699978 0.000000 udp 10.0.2.22 60816 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 07:54:35.061158 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:00:39.068534 3.000819 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 08:00:46.075071 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:00:54.076304 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:01:10.079749 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:01:42.085625 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:07:46.091505 3.001517 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 08:07:53.098752 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:08:01.100886 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:08:17.103633 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:08:49.112186 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:09:32.692325 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 08:09:32.692497 0.011108 udp 10.0.2.22 60817 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 08:09:32.703946 0.000000 udp 10.0.2.22 60818 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 08:25:29.119863 3.002450 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 08:25:36.127065 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:25:44.129905 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:26:00.131861 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:26:32.138354 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:28:32.695778 0.000097 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 08:28:32.695949 0.012528 udp 10.0.2.22 60819 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 08:28:32.708808 0.000000 udp 10.0.2.22 60820 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 08:32:36.145219 3.000023 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 08:32:43.151485 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:32:51.152673 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:33:07.155839 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:33:39.161740 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:39:32.692134 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 08:39:32.692218 0.021920 udp 10.0.2.22 60821 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 08:39:32.714486 0.000000 udp 10.0.2.22 60822 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 08:39:43.167970 3.001739 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 08:39:50.175219 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:39:58.176699 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:40:14.179700 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:40:46.186079 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:46:50.192468 3.001193 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 08:46:57.202600 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:47:05.200726 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:47:21.203679 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:47:53.210074 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:53:57.216595 3.000665 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 08:54:04.222983 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:54:12.224732 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:54:28.227689 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 08:54:32.693962 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 08:54:32.694152 0.013998 udp 10.0.2.22 60823 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 08:54:32.708414 0.000000 udp 10.0.2.22 60824 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 08:55:00.234247 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:01:04.239237 3.022365 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 09:01:11.257194 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:01:19.258764 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:01:35.261838 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:02:07.267623 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:08:11.273955 3.001349 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 09:08:18.281461 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:08:26.283294 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:08:42.285867 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:09:14.291768 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:09:32.688236 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 09:09:32.688334 0.010285 udp 10.0.2.22 60825 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 09:09:32.698922 0.000000 udp 10.0.2.22 60826 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 09:15:18.298413 3.001156 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 09:15:25.304968 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:15:33.306730 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:15:49.315419 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:16:21.315579 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:22:25.321423 3.001525 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 09:22:32.329289 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:22:40.331147 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:22:56.334112 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:23:28.339769 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:28:32.687259 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 09:28:32.687345 0.016051 udp 10.0.2.22 60827 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 09:28:32.703673 0.000000 udp 10.0.2.22 60828 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 09:29:32.345786 3.001241 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 09:29:39.352964 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:29:47.354431 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:30:03.357389 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:30:35.363882 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:36:39.369623 3.001382 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 09:36:46.376780 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:36:54.378402 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:37:10.381644 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:37:42.391419 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:39:32.685988 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 09:39:32.686155 0.010887 udp 10.0.2.22 60829 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 09:39:32.697318 0.000000 udp 10.0.2.22 60830 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 09:43:46.393409 3.001593 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 09:43:53.400630 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:44:01.402619 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:44:17.405475 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:44:49.411663 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:50:53.418010 3.001053 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 09:51:00.424863 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:51:08.426165 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:51:24.429271 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:51:56.435008 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:54:32.690611 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 09:54:32.690771 0.010899 udp 10.0.2.22 60831 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 09:54:32.701964 0.000000 udp 10.0.2.22 60832 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 09:58:00.441013 3.002019 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 09:58:07.449113 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:58:15.450226 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:58:31.453668 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 09:59:03.459628 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:05:07.468931 2.998262 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 10:05:14.475680 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:05:22.474381 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:05:38.477176 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:06:10.483334 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:09:32.694420 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 10:09:32.694517 0.010067 udp 10.0.2.22 60833 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 10:09:32.704863 0.000000 udp 10.0.2.22 60834 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 10:24:11.490659 3.001652 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 10:24:18.497840 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:24:26.499240 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:24:42.502223 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:25:14.508109 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:28:32.692745 0.000102 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 10:28:32.692932 0.011218 udp 10.0.2.22 60835 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 10:28:32.704457 0.000000 udp 10.0.2.22 60836 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 10:31:18.514828 3.000808 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 10:31:25.521827 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:31:33.523031 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:31:49.526164 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:32:21.532076 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:38:25.537636 3.002584 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 10:38:32.545704 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:38:40.547138 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:38:56.550125 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:39:28.556006 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:39:32.694067 0.000098 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 10:39:32.694248 0.010083 udp 10.0.2.22 60837 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 10:39:32.704635 0.000000 udp 10.0.2.22 60838 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 10:45:32.562635 3.001070 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 10:45:39.569959 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:45:47.570977 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:46:03.577041 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:46:35.580596 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:52:39.586419 3.001833 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 10:52:46.593119 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:52:54.594864 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:53:10.597931 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:53:42.603989 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 10:54:32.686162 0.000101 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 10:54:32.686350 0.010210 udp 10.0.2.22 60839 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 10:54:32.696859 0.000000 udp 10.0.2.22 60840 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 10:59:46.613546 3.012579 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 10:59:53.635316 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:00:01.632817 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:00:17.631351 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:00:49.638172 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:06:53.645109 3.010700 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 11:07:00.656332 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:07:08.652769 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:07:24.657648 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:07:56.661888 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:09:32.692138 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 11:09:32.692229 0.010289 udp 10.0.2.22 60841 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 11:09:32.702829 0.000000 udp 10.0.2.22 60842 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 11:25:04.673730 3.000354 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 11:25:11.680684 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:25:19.681885 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:25:35.685588 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:26:07.691026 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:28:32.689767 0.000108 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 11:28:32.689969 0.011799 udp 10.0.2.22 60843 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 11:28:32.702119 0.000000 udp 10.0.2.22 60844 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 11:32:11.696992 3.001362 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 11:32:18.703761 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:32:26.705500 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:32:42.708455 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:33:14.716620 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:39:18.728330 2.993947 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 11:39:25.728032 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:39:32.688276 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 11:39:32.688364 0.010739 udp 10.0.2.22 60845 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 11:39:32.699382 0.000000 udp 10.0.2.22 60846 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 11:39:33.729823 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:39:49.732688 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:40:21.748564 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:46:25.754771 3.001216 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 11:46:32.762088 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:46:40.767625 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:46:56.766771 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:47:28.773884 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:53:32.778680 3.001516 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 11:53:39.785457 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:53:47.787641 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:54:03.790768 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 11:54:32.691914 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 11:54:32.692051 0.010146 udp 10.0.2.22 60847 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 11:54:32.702495 0.000000 udp 10.0.2.22 60848 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 11:54:35.796404 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:00:39.802759 3.001470 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 12:00:46.809985 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:00:54.811389 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:01:10.814542 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:01:42.820421 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:07:46.826336 3.001963 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 12:07:53.833734 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:08:01.835922 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:08:17.838343 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:08:49.844191 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:09:32.686337 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 12:09:32.686486 0.013546 udp 10.0.2.22 60849 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 12:09:32.700354 0.000000 udp 10.0.2.22 60850 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 12:25:32.860352 3.000705 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 12:25:39.866511 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:25:47.868517 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:26:03.871234 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:26:35.877050 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:28:32.685964 0.000129 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 12:28:32.686189 0.011470 udp 10.0.2.22 60851 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 12:28:32.698020 0.000000 udp 10.0.2.22 60852 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 12:32:39.884349 3.000547 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 12:32:46.890667 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:32:54.892019 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:33:10.895264 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:33:42.901286 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:39:32.694374 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 12:39:32.694538 0.010200 udp 10.0.2.22 60853 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 12:39:32.705048 0.000000 udp 10.0.2.22 60854 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 12:39:46.907179 3.005084 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 12:39:53.915304 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:40:01.920800 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:40:17.919024 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:40:49.925239 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:46:53.932008 3.000989 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 12:47:00.938504 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:47:08.939981 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:47:24.945135 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:47:56.948887 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:54:00.957619 3.000482 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 12:54:07.962475 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:54:15.964355 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:54:31.966795 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 12:54:32.688329 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 12:54:32.688478 0.010056 udp 10.0.2.22 60855 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 12:54:32.698875 0.000000 udp 10.0.2.22 60856 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 12:55:03.972933 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:01:07.978912 3.004874 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 13:01:14.986673 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:01:22.988008 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:01:38.990968 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:02:10.996900 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:08:15.003091 3.001573 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 13:08:22.010344 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:08:30.011878 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:08:46.021534 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:09:18.020982 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:09:32.692250 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 13:09:32.692414 0.010107 udp 10.0.2.22 60857 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 13:09:32.702798 0.000000 udp 10.0.2.22 60858 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 13:15:22.026861 3.002015 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 13:15:29.044431 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:15:37.045393 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:15:53.050729 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:16:25.054837 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:22:29.061313 3.001273 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 13:22:36.068544 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:22:44.070074 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:23:00.076956 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:23:32.079276 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:28:32.695326 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 13:28:32.695473 0.011647 udp 10.0.2.22 60859 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 13:28:32.707411 0.000000 udp 10.0.2.22 60860 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 13:29:36.086567 3.000138 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 13:29:43.096140 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:29:51.094953 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:30:07.098731 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:30:39.104090 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:36:43.108524 3.002224 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 13:36:50.116133 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:36:58.117915 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:37:14.120946 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:37:46.126722 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:39:32.690247 0.000119 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 13:39:32.690452 0.010856 udp 10.0.2.22 60861 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 13:39:32.701597 0.000000 udp 10.0.2.22 60862 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 13:43:50.133082 3.001482 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 13:43:57.140307 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:44:05.141863 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:44:21.145106 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:44:53.150848 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:50:57.158526 3.000019 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 13:51:04.164282 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:51:12.165771 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:51:28.173535 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:52:00.556139 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:54:32.684075 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 13:54:32.684221 0.010068 udp 10.0.2.22 60863 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 13:54:32.694611 0.000000 udp 10.0.2.22 60864 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 13:58:04.191096 3.001327 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 13:58:11.198444 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:58:19.199724 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:58:35.202834 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 13:59:07.208644 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:05:11.216000 3.000273 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 14:05:18.222280 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:05:26.223380 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:05:42.227440 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:06:14.232794 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:09:32.688748 0.000101 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 14:09:32.688932 0.010186 udp 10.0.2.22 60865 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 14:09:32.699425 0.000000 udp 10.0.2.22 60866 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 14:24:12.245493 3.001620 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 14:24:19.252827 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:24:27.254646 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:24:43.257718 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:25:15.263155 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:28:32.688252 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 14:28:32.688408 0.011966 udp 10.0.2.22 60867 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 14:28:32.700720 0.000000 udp 10.0.2.22 60868 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 14:31:19.269043 3.001822 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 14:31:26.276508 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:31:34.278163 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:31:50.281198 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:32:22.286978 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:38:26.293372 3.001847 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 14:38:33.300879 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:38:41.302257 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:38:57.305988 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:39:29.311070 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:39:32.686086 0.000102 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 14:39:32.686278 0.010172 udp 10.0.2.22 60869 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 14:39:32.696736 0.000000 udp 10.0.2.22 60870 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 14:45:33.318643 3.000106 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 14:45:40.324558 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:45:48.325940 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:46:04.328968 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:46:36.335196 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:52:40.341034 3.001785 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 14:52:47.348437 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:52:55.350247 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:53:11.353178 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:53:43.359217 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 14:54:32.690253 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 14:54:32.690449 0.010321 udp 10.0.2.22 60871 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 14:54:32.701069 0.000000 udp 10.0.2.22 60872 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 14:59:47.365063 3.001639 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 14:59:54.372626 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:00:02.373978 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:00:18.378399 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:00:50.382965 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:06:54.390322 3.000426 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 15:07:01.396598 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:07:09.398544 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:07:25.401973 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:07:57.407220 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:09:32.684076 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 15:09:32.684190 0.010670 udp 10.0.2.22 60873 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 15:09:32.695233 0.000000 udp 10.0.2.22 60874 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 15:25:04.415693 3.002859 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 15:25:11.424221 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:25:19.425109 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:25:35.428236 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:26:07.434428 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:28:32.683145 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 15:28:32.683326 0.015269 udp 10.0.2.22 60875 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 15:28:32.698839 0.000000 udp 10.0.2.22 60876 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 15:32:11.441510 3.000668 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 15:32:18.447948 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:32:26.449224 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:32:42.452504 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:33:14.458608 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:39:18.465146 3.000755 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 15:39:25.471901 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:39:32.692039 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 15:39:32.692135 0.010545 udp 10.0.2.22 60877 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 15:39:32.702960 0.000000 udp 10.0.2.22 60878 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 15:39:33.473451 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:39:49.480552 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:40:21.481953 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:46:25.487548 3.002580 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 15:46:32.495383 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:46:40.497204 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:46:56.501618 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:47:28.510955 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:53:32.511593 3.002136 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 15:53:39.519923 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:53:47.521163 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:54:03.523924 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 15:54:32.685957 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 15:54:32.686120 0.010301 udp 10.0.2.22 60879 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 15:54:32.696752 0.000000 udp 10.0.2.22 60880 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 15:54:35.530212 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:00:39.539474 3.038401 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 16:00:46.560275 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:00:54.554907 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:01:10.557992 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:01:42.563799 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:07:46.573635 3.000531 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 16:07:53.584707 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:08:01.579470 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:08:17.586542 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:08:49.588225 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:09:32.690365 0.000109 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 16:09:32.690562 0.010278 udp 10.0.2.22 60881 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 16:09:32.701155 0.000000 udp 10.0.2.22 60882 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 16:25:30.600343 3.001183 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 16:25:37.607415 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:25:45.608804 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:26:01.612036 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:26:33.618166 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:28:32.690041 0.000130 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 16:28:32.690266 0.014895 udp 10.0.2.22 60883 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 16:28:32.705628 0.000000 udp 10.0.2.22 60884 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 16:32:37.624166 3.001948 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 16:32:44.631570 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:32:52.632970 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:33:08.635327 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:33:40.641662 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:39:32.699262 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 16:39:32.699417 0.010137 udp 10.0.2.22 60885 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 16:39:32.709866 0.000000 udp 10.0.2.22 60886 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 16:39:44.647662 3.002057 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 16:39:51.655176 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:39:59.656773 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:40:15.659986 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:40:47.666223 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:46:51.672727 3.000587 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 16:46:58.681776 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:47:06.680380 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:47:22.683801 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:47:54.689845 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:53:58.696273 3.001289 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 16:54:05.703242 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:54:13.704669 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:54:29.707966 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 16:54:32.692252 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 16:54:32.692429 0.010505 udp 10.0.2.22 60887 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 16:54:32.703246 0.000000 udp 10.0.2.22 60888 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 16:55:01.713581 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:01:05.719502 3.002181 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 17:01:12.727389 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:01:20.729116 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:01:36.731212 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:02:08.737967 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:08:12.743953 3.001283 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 17:08:19.750962 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:08:27.752608 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:08:43.755206 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:09:15.761721 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:09:32.685721 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 17:09:32.685893 0.010190 udp 10.0.2.22 60889 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 17:09:32.696364 0.000000 udp 10.0.2.22 60890 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 17:15:19.769850 2.999919 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 17:15:26.774965 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:15:34.776928 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:15:50.779657 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:16:22.786137 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:22:26.791819 3.001703 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 17:22:33.799199 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:22:41.801637 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:22:57.803728 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:23:29.809875 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:28:32.685543 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 17:28:32.685718 0.011681 udp 10.0.2.22 60891 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 17:28:32.697737 0.000000 udp 10.0.2.22 60892 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 17:29:33.815617 3.001695 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 17:29:40.823226 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:29:48.824391 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:30:04.827658 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:30:36.833660 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:36:40.839535 3.001714 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 17:36:47.847172 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:36:55.848646 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:37:11.851442 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:37:43.857669 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:39:32.688253 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 17:39:32.688406 0.010178 udp 10.0.2.22 60893 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 17:39:32.698889 0.000000 udp 10.0.2.22 60894 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 17:43:47.863842 3.001402 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 17:43:54.871013 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:44:02.872567 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:44:18.875390 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:44:50.881656 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:50:54.891038 3.055742 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 17:51:01.927781 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:51:09.906445 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:51:25.909398 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:51:57.917913 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:54:32.688447 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 17:54:32.688572 0.010193 udp 10.0.2.22 60895 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 17:54:32.699088 0.000000 udp 10.0.2.22 60896 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 17:58:01.921484 3.001303 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 17:58:08.928908 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:58:16.930497 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:58:32.934361 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 17:59:04.940362 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:05:08.945638 3.001445 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 18:05:15.952772 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:05:23.954731 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:05:39.958533 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:06:11.963521 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:09:32.683882 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 18:09:32.789019 0.010065 udp 10.0.2.22 60897 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 18:09:32.799440 0.000000 udp 10.0.2.22 60898 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 18:24:13.971845 3.001753 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 18:24:20.979799 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:24:28.980704 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:24:44.983852 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:25:16.989939 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:28:32.691072 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 18:28:32.691219 0.021279 udp 10.0.2.22 60899 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 18:28:32.712852 0.000000 udp 10.0.2.22 60900 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 18:31:20.995791 3.001882 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 18:31:28.003016 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:31:36.008178 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:31:52.007911 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:32:24.013930 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:38:28.020052 3.001774 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 18:38:35.027048 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:38:43.028584 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:38:59.032282 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:39:31.037766 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:39:32.689628 0.000125 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 18:39:32.689857 0.010335 udp 10.0.2.22 60901 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 18:39:32.700486 0.000000 udp 10.0.2.22 60902 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 18:45:35.044497 3.001232 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 18:45:42.051115 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:45:50.052963 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:46:06.055930 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:46:38.061892 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:52:42.068730 3.000802 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 18:52:49.075301 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:52:57.076685 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:53:13.079697 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:53:45.085986 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 18:54:32.684182 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 18:54:32.684313 0.010108 udp 10.0.2.22 60903 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 18:54:32.694739 0.000000 udp 10.0.2.22 60904 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 18:59:49.091528 3.001855 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 18:59:56.099056 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:00:04.100593 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:00:20.105010 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:00:52.109786 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:06:56.115382 3.002066 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 19:07:03.122918 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:07:11.124420 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:07:27.127648 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:07:59.133684 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:09:32.688027 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 19:09:32.688158 0.010145 udp 10.0.2.22 60905 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 19:09:32.698596 0.000000 udp 10.0.2.22 60906 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 19:25:08.145299 3.001874 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 19:25:15.152910 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:25:23.154999 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:25:39.157876 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:26:11.163569 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:28:32.687189 0.000150 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 19:28:32.687436 0.012614 udp 10.0.2.22 60907 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 19:28:32.700353 0.000000 udp 10.0.2.22 60908 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 19:32:15.169613 3.001786 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 19:32:22.177628 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:32:30.178686 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:32:46.182160 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:33:18.187732 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:39:22.195686 3.001857 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 19:39:29.201123 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:39:32.685637 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 19:39:32.685718 0.011043 udp 10.0.2.22 60909 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 19:39:32.697045 0.000000 udp 10.0.2.22 60910 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 19:39:37.206029 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:39:53.205373 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:40:25.221925 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:46:29.228437 3.001325 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 19:46:36.236386 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:46:44.236489 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:47:00.239642 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:47:32.248635 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:53:36.251582 3.002078 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 19:53:43.259013 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:53:51.260601 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:54:07.263743 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 19:54:32.690171 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 19:54:32.690330 0.010237 udp 10.0.2.22 60911 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 19:54:32.700842 0.000000 udp 10.0.2.22 60912 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 19:54:39.269458 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:00:47.281193 3.002191 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 20:00:54.288584 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:01:02.290293 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:01:18.293173 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:01:50.299337 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:07:54.309706 2.997049 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 20:08:01.314187 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:08:09.314171 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:08:25.316991 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:08:57.323274 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:09:32.685275 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 20:09:32.685398 0.010141 udp 10.0.2.22 60913 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 20:09:32.695841 0.000000 udp 10.0.2.22 60914 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 20:15:01.330288 3.000623 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 20:15:08.336428 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:15:16.338188 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:15:32.342332 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:16:04.347286 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:22:08.357702 2.997083 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 20:22:15.364592 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:22:23.362189 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:22:39.364707 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:23:11.371083 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:28:32.684619 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 20:28:32.684784 0.011764 udp 10.0.2.22 60915 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 20:28:32.696839 0.000000 udp 10.0.2.22 60916 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 20:29:15.377654 3.001226 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 20:29:22.384657 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:29:30.386141 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:29:46.389375 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:30:18.394961 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:36:22.401545 3.001175 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 20:36:29.408675 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:36:37.410306 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:36:53.412944 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:37:25.418852 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:39:32.682170 0.000120 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 20:39:32.682384 0.010712 udp 10.0.2.22 60917 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 20:39:32.693618 0.000000 udp 10.0.2.22 60918 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 20:43:29.425854 3.000901 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 20:43:36.432675 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:43:44.433979 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:44:00.437044 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:44:32.443100 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:50:49.457872 3.001573 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 20:50:56.474917 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:51:04.476844 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:51:20.479730 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:51:52.490352 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:54:32.686152 0.000117 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 20:54:32.686365 0.010210 udp 10.0.2.22 60919 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 20:54:32.696898 0.000000 udp 10.0.2.22 60920 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 20:58:08.498938 3.001626 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 20:58:15.506407 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:58:23.508230 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:58:39.510748 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 20:59:11.516996 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:05:15.523202 3.001122 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 21:05:22.531535 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:05:30.531786 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:05:46.534522 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:06:18.540909 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:09:32.680155 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 21:09:32.680257 0.010152 udp 10.0.2.22 60921 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 21:09:32.690769 0.000000 udp 10.0.2.22 60922 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 21:24:14.552924 2.999439 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 21:24:21.558601 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:24:29.559338 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:24:45.562728 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:25:17.568738 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:28:32.690029 0.000101 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 21:28:32.690221 0.011557 udp 10.0.2.22 60923 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 21:28:32.702075 0.000000 udp 10.0.2.22 60924 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 21:31:21.576225 3.001900 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 21:31:28.582504 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:31:36.583435 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:31:52.586591 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:32:24.592548 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:38:28.598589 3.001675 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 21:38:35.606048 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:38:43.607291 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:38:59.610819 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:39:31.616381 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:39:32.688155 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 21:39:32.688321 0.011701 udp 10.0.2.22 60925 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 21:39:32.700314 0.000000 udp 10.0.2.22 60926 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 21:45:35.623496 3.010324 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 21:45:42.639830 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:45:50.641968 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:46:06.644476 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:46:38.651740 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:52:42.657525 3.000801 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 21:52:49.663418 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:52:57.665072 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:53:13.668325 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:53:45.673966 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 21:54:32.682361 0.000124 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 21:54:32.682594 0.012053 udp 10.0.2.22 60927 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 21:54:32.694941 0.000000 udp 10.0.2.22 60928 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 21:59:49.681682 3.001265 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 21:59:56.691983 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:00:04.693983 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:00:20.692260 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:00:52.698695 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:06:56.704622 3.001062 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 22:07:03.711591 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:07:11.712855 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:07:27.715778 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:07:59.724179 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:09:32.685771 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 22:09:32.685933 0.010289 udp 10.0.2.22 60929 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 22:09:32.696546 0.000000 udp 10.0.2.22 60930 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 22:25:05.733112 2.999075 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 22:25:12.737897 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:25:20.739671 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:25:36.742641 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:26:08.748506 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:28:32.685282 0.000082 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 22:28:32.685496 0.019227 udp 10.0.2.22 60931 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 22:28:32.705115 0.000000 udp 10.0.2.22 60932 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 22:32:12.753818 3.001363 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 22:32:19.760988 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:32:27.762991 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:32:43.765853 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:33:15.772066 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:39:19.778377 3.001858 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 22:39:26.785255 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:39:32.684055 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 22:39:32.684154 0.023634 udp 10.0.2.22 60933 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 22:39:32.708126 0.000000 udp 10.0.2.22 60934 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 22:39:34.787212 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:39:50.790143 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:40:22.798025 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:46:26.803314 3.000479 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 22:46:33.809856 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:46:41.813751 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:46:57.814006 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:47:29.819981 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:53:33.825757 3.002407 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 22:53:40.833007 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:53:48.835003 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:54:04.838391 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 22:54:32.688279 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 22:54:32.688376 0.013959 udp 10.0.2.22 60935 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 22:54:32.702675 0.000000 udp 10.0.2.22 60936 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 22:54:36.844194 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:00:47.860275 3.001764 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 23:00:54.867810 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:01:02.869121 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:01:18.872241 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:01:50.878481 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:07:56.886458 3.002027 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 23:08:03.894601 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:08:11.896121 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:08:27.898798 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:08:59.905022 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:09:32.681995 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 23:09:32.682142 0.073146 udp 10.0.2.22 60937 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 23:09:32.755620 0.000000 udp 10.0.2.22 60938 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 23:15:03.910676 3.002032 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 23:15:10.918300 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:15:18.920092 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:15:34.922846 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:16:06.929239 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:22:10.935150 3.001356 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 23:22:17.942307 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:22:25.944547 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:22:41.946658 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:23:13.952717 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:28:32.681468 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 23:28:32.681567 0.012511 udp 10.0.2.22 60939 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 23:28:32.694404 0.000000 udp 10.0.2.22 60940 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 23:29:17.959029 3.001548 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 23:29:24.966306 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:29:32.974029 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:29:48.970733 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:30:20.976907 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:36:24.982989 3.001472 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 23:36:31.990151 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:36:39.994219 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:36:55.994798 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:37:28.000954 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:39:32.686778 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 23:39:32.686921 0.009584 udp 10.0.2.22 60941 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 23:39:32.696815 0.000000 udp 10.0.2.22 60942 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 23:43:32.006630 3.001757 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 23:43:39.014406 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:43:47.015818 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:44:03.019194 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:44:35.024620 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:50:51.037904 3.001947 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 23:50:58.045238 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:51:06.046595 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:51:22.049794 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:51:54.055756 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:54:32.683649 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 23:54:32.683745 0.010252 udp 10.0.2.22 60943 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/05 23:54:32.694238 0.000000 udp 10.0.2.22 60944 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/05 23:58:09.074643 2.994990 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/05 23:58:16.075231 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:58:24.076621 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:58:40.080200 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/05 23:59:12.085140 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:05:19.096780 3.000966 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 00:05:26.108297 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:05:34.109852 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:05:50.108353 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:06:22.114252 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:09:32.688822 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 00:09:32.688961 0.011730 udp 10.0.2.22 60945 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 00:09:32.701025 0.000000 udp 10.0.2.22 60946 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 00:24:19.125523 3.001148 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 00:24:26.132730 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:24:34.135706 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:24:50.137125 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:25:22.143124 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:28:32.687118 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 00:28:32.687262 0.010434 udp 10.0.2.22 60947 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 00:28:32.697997 0.000000 udp 10.0.2.22 60948 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 00:31:26.149067 3.002158 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 00:31:33.156570 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:31:41.158469 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:31:57.161024 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:32:29.167073 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:38:33.173049 3.001866 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 00:38:40.181025 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:38:48.182186 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:39:04.185079 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:39:32.685561 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 00:39:32.685694 0.018321 udp 10.0.2.22 60949 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 00:39:32.704393 0.000000 udp 10.0.2.22 60950 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 00:39:36.194271 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:45:40.375046 3.003279 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 00:45:47.350225 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:45:55.346620 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:46:11.349348 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:46:43.365230 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:52:47.371288 3.001429 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 00:52:54.378643 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:53:02.380220 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:53:18.383190 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:53:50.389300 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 00:54:32.690203 0.000133 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 00:54:32.690439 0.011570 udp 10.0.2.22 60951 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 00:54:32.702316 0.000000 udp 10.0.2.22 60952 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 00:59:54.395318 3.001651 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 01:00:01.402362 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:00:09.404255 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:00:25.406972 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:00:57.413040 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:07:03.421745 3.012118 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 01:07:10.439804 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:07:18.441344 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:07:34.444502 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:08:06.451852 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:09:32.694337 0.000109 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 01:09:32.694546 0.010507 udp 10.0.2.22 60953 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 01:09:32.705501 0.000000 udp 10.0.2.22 60954 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 01:25:11.463558 2.995040 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 01:25:18.464301 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:25:26.466165 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:25:42.468603 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:26:14.474581 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:28:32.693087 0.000103 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 01:28:32.693297 0.011269 udp 10.0.2.22 60955 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 01:28:32.704871 0.000000 udp 10.0.2.22 60956 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 01:32:18.481292 3.000945 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 01:32:25.488143 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:32:33.489187 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:32:49.492206 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:33:21.498565 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:39:25.504720 3.061552 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 01:39:32.572228 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:39:32.692440 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 01:39:32.692578 0.014440 udp 10.0.2.22 60957 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 01:39:32.707346 0.000000 udp 10.0.2.22 60958 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 01:39:40.583567 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:39:56.576315 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:40:28.582829 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:46:32.588973 3.001685 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 01:46:39.595958 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:46:47.597704 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:47:03.604350 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:47:35.606688 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:53:39.613627 3.000309 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 01:53:46.619944 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:53:54.631351 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:54:10.634013 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 01:54:32.695594 0.000125 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 01:54:32.695817 0.023758 udp 10.0.2.22 60959 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 01:54:32.719836 0.000000 udp 10.0.2.22 60960 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 01:54:42.640370 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:00:52.664607 2.994349 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 02:00:59.664493 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:01:07.664036 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:01:23.678642 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:01:55.675240 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:08:00.680452 3.001416 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 02:08:07.688134 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:08:15.689788 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:08:31.695785 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:09:03.698369 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:09:32.690538 0.000106 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 02:09:32.690725 0.015846 udp 10.0.2.22 60961 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 02:09:32.706884 0.000000 udp 10.0.2.22 60962 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 02:15:07.704748 3.001248 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 02:15:14.712356 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:15:22.713412 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:15:38.716415 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:16:10.722384 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:22:14.728488 3.004267 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 02:22:21.736078 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:22:29.737646 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:22:45.740951 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:23:17.746337 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:28:32.689854 0.000099 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 02:28:32.690027 0.011388 udp 10.0.2.22 60963 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 02:28:32.701752 0.000000 udp 10.0.2.22 60964 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 02:29:21.751964 3.001789 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 02:29:28.759774 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:29:36.761284 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:29:52.770233 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:30:24.770411 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:36:28.777202 3.000715 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 02:36:35.783703 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:36:43.785148 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:36:59.788567 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:37:31.794285 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:39:32.688092 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 02:39:32.688188 0.010252 udp 10.0.2.22 60965 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 02:39:32.698710 0.000000 udp 10.0.2.22 60966 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 02:43:35.799636 3.002481 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 02:43:42.807897 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:43:50.808983 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:44:06.812100 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:44:38.818387 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:51:00.841419 3.000212 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 02:51:07.837188 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:51:15.839039 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:51:31.842018 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:52:03.847941 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:54:32.692104 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 02:54:32.692268 0.012399 udp 10.0.2.22 60967 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 02:54:32.705006 0.000000 udp 10.0.2.22 60968 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 02:58:18.860014 3.001113 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 02:58:25.867261 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:58:33.868677 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:58:49.871368 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 02:59:21.877824 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:05:28.887603 3.002314 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 03:05:35.894911 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:05:43.896932 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:05:59.900432 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:06:31.906218 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:09:32.696073 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 03:09:32.696226 0.010321 udp 10.0.2.22 60969 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 03:09:32.706875 0.000000 udp 10.0.2.22 60970 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 03:24:20.915688 3.001986 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 03:24:27.925871 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:24:35.924819 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:24:51.927709 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:25:23.933891 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:28:32.695331 0.000131 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 03:28:32.695571 0.011316 udp 10.0.2.22 60971 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 03:28:32.707177 0.000000 udp 10.0.2.22 60972 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 03:31:27.939568 3.001936 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 03:31:34.947260 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:31:42.948560 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:31:58.952355 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:32:30.957753 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:38:34.963783 3.001803 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 03:38:41.974373 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:38:49.972692 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:39:05.976422 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:39:32.694692 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 03:39:32.694787 0.014672 udp 10.0.2.22 60973 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 03:39:32.709782 0.000000 udp 10.0.2.22 60974 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 03:39:37.991862 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:45:41.987664 3.052755 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 03:45:49.020372 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:45:57.006375 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:46:13.009679 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:46:45.123105 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:52:49.031373 3.002043 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 03:52:56.039444 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:53:04.040785 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:53:20.043781 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:53:52.049724 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 03:54:32.687980 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 03:54:32.688078 0.021562 udp 10.0.2.22 60975 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 03:54:32.709980 0.000000 udp 10.0.2.22 60976 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 03:59:56.056278 3.000921 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 04:00:03.063178 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:00:11.064669 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:00:27.067694 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:00:59.073688 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:07:04.081039 3.001560 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 04:07:11.088839 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:07:19.089850 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:07:35.092709 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:08:07.115534 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:09:32.692251 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 04:09:32.692418 0.011940 udp 10.0.2.22 60977 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 04:09:32.704680 0.000000 udp 10.0.2.22 60978 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 04:25:09.111258 3.001461 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 04:25:16.118471 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:25:24.120200 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:25:40.123029 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:26:12.129040 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:28:32.691354 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 04:28:32.691501 0.010327 udp 10.0.2.22 60979 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 04:28:32.702139 0.000000 udp 10.0.2.22 60980 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 04:32:16.135841 3.001036 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 04:32:23.142469 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:32:31.143854 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:32:47.146765 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:33:19.152739 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:39:23.158868 3.001716 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 04:39:30.166256 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:39:32.689870 0.000122 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 04:39:32.690117 0.016462 udp 10.0.2.22 60981 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 04:39:32.706882 0.000000 udp 10.0.2.22 60982 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 04:39:38.168131 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:39:54.171028 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:40:26.182072 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:46:30.184945 2.999845 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 04:46:37.190843 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:46:45.192085 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:47:01.196074 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:47:33.201932 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:53:37.207038 3.063367 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 04:53:44.242728 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:53:52.225912 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:54:08.228650 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 04:54:32.693752 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 04:54:32.693848 0.011695 udp 10.0.2.22 60983 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 04:54:32.705821 0.000000 udp 10.0.2.22 60984 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 04:54:40.234766 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:00:50.250396 3.001199 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 05:00:57.257009 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:01:05.258460 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:01:21.261873 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:01:53.267860 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:07:59.275959 3.002099 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 05:08:06.283671 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:08:14.285203 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:08:30.288191 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:09:02.294389 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:09:32.688510 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 05:09:32.688667 0.010352 udp 10.0.2.22 60985 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 05:09:32.699310 0.000000 udp 10.0.2.22 60986 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 05:15:06.301455 3.001146 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 05:15:13.308101 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:15:21.319539 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:15:37.322489 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:16:09.328930 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:22:13.334804 3.001450 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 05:22:20.342848 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:22:28.343207 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:22:44.346479 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:23:16.352572 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:28:32.687228 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 05:28:32.687388 0.010301 udp 10.0.2.22 60987 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 05:28:32.697990 0.000000 udp 10.0.2.22 60988 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 05:29:20.358686 3.001294 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 05:29:27.365662 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:29:35.367287 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:29:51.370874 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:30:25.616371 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:36:27.392296 3.001778 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 05:36:34.399913 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:36:42.400972 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:36:58.404135 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:37:30.410691 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:39:32.685634 0.000100 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 05:39:32.685830 0.013087 udp 10.0.2.22 60989 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 05:39:32.699194 0.000000 udp 10.0.2.22 60990 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 05:43:34.415770 3.002651 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 05:43:41.423603 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:43:49.425098 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:44:05.436422 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:44:37.434272 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:50:55.450072 3.002226 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 05:51:02.457436 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:51:10.459707 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:51:26.462735 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:51:58.468407 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:54:32.690290 0.000135 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 05:54:32.690544 0.022816 udp 10.0.2.22 60991 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 05:54:32.713712 0.000000 udp 10.0.2.22 60992 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 05:58:14.482055 3.001061 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 05:58:21.489468 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:58:29.490343 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:58:45.493582 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 05:59:17.499975 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:05:25.512494 3.000615 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 06:05:32.518736 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:05:40.519978 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:05:56.523040 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:06:28.529079 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:09:32.694001 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 06:09:32.694179 0.010045 udp 10.0.2.22 60993 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 06:09:32.704535 0.000000 udp 10.0.2.22 60994 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 06:24:21.544674 3.001846 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 06:24:28.555772 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:24:36.553678 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:24:52.556414 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:25:24.562391 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:28:32.695322 0.000097 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 06:28:32.695505 0.030177 udp 10.0.2.22 60995 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 06:28:32.725958 0.000000 udp 10.0.2.22 60996 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 06:31:28.568568 3.001499 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 06:31:35.575816 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:31:43.577952 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:31:59.581000 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:32:31.587184 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:38:35.592940 3.001375 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 06:38:42.600010 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:38:50.601402 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:39:06.603866 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:39:32.692189 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 06:39:32.692300 0.011637 udp 10.0.2.22 60997 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 06:39:32.704255 0.000000 udp 10.0.2.22 60998 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 06:39:38.610743 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:45:42.615882 3.002349 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 06:45:49.624105 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:45:57.625204 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:46:13.638660 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:46:45.644198 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:52:49.653240 2.999047 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 06:52:56.658239 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:53:04.659223 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:53:20.662104 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:53:52.668762 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 06:54:32.686191 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 06:54:32.686341 0.011871 udp 10.0.2.22 60999 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 06:54:32.698491 0.000000 udp 10.0.2.22 61000 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 06:59:56.674661 3.001287 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 07:00:03.681375 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:00:11.683044 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:00:27.686027 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:00:59.697683 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:07:04.700003 3.001541 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 07:07:11.707319 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:07:19.709087 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:07:35.711842 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:08:07.720912 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:09:32.689467 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 07:09:32.689632 0.010312 udp 10.0.2.22 61001 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 07:09:32.700239 0.000000 udp 10.0.2.22 61002 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 07:25:12.727325 2.998306 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 07:25:19.732083 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:25:27.732875 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:25:43.736255 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:26:15.742977 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:28:32.689795 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 07:28:32.689980 0.010222 udp 10.0.2.22 61003 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 07:28:32.700508 0.000000 udp 10.0.2.22 61004 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 07:32:19.748049 3.001779 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 07:32:26.755680 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:32:34.756818 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:32:50.759713 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:33:22.765996 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:39:26.773091 3.000593 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 07:39:32.688255 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 07:39:32.688430 0.011233 udp 10.0.2.22 61005 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 07:39:32.700049 0.000000 udp 10.0.2.22 61006 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 07:39:33.779766 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:39:41.781077 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:39:57.787888 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:40:29.790279 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:46:33.795514 3.002716 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 07:46:40.803958 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:46:48.804859 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:47:04.808436 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:47:36.818237 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:53:40.820336 3.002016 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 07:53:47.827472 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:53:55.828985 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:54:11.832248 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 07:54:32.692369 0.000103 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 07:54:32.692556 0.013535 udp 10.0.2.22 61007 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 07:54:32.706413 0.000000 udp 10.0.2.22 61008 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 07:54:43.837960 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:00:53.852771 3.208440 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 08:01:01.032740 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:01:08.969463 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:01:24.875085 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:01:56.880982 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:08:02.889715 3.001508 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 08:08:09.897232 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:08:17.898664 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:08:33.901650 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:09:05.908361 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:09:32.685632 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 08:09:32.685827 0.011097 udp 10.0.2.22 61009 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 08:09:32.697220 0.000000 udp 10.0.2.22 61010 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 08:15:09.913353 3.001692 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 08:15:16.921018 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:15:24.922899 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:15:40.925665 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:16:12.931872 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:22:16.937637 3.002127 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 08:22:23.945168 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:22:31.946642 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:22:47.951108 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:23:19.955403 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:28:32.685066 0.000120 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 08:28:32.685342 0.012605 udp 10.0.2.22 61011 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 08:28:32.698245 0.000000 udp 10.0.2.22 61012 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 08:29:23.961639 3.003437 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 08:29:30.968765 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:29:38.972823 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:29:54.973691 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:30:26.979808 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:36:30.985549 3.001532 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 08:36:37.993112 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:36:45.994427 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:37:01.997906 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:37:34.003546 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:39:32.684466 0.000108 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 08:39:32.684667 0.016251 udp 10.0.2.22 61013 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 08:39:32.701283 0.000000 udp 10.0.2.22 61014 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 08:43:38.010278 3.000639 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 08:43:45.016855 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:43:53.024708 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:44:09.021376 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:44:41.027379 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:50:57.040933 3.001651 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 08:51:04.048261 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:51:12.053486 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:51:28.052472 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:52:00.058499 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:54:32.688635 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 08:54:32.688722 0.011588 udp 10.0.2.22 61015 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 08:54:32.700596 0.000000 udp 10.0.2.22 61016 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 08:58:15.074955 2.999131 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 08:58:22.077868 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:58:30.092674 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:58:46.092232 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 08:59:18.098552 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:05:26.110364 3.001653 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 09:05:33.117493 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:05:41.119079 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:05:57.122067 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:06:29.128848 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:09:32.692350 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 09:09:32.692504 0.010458 udp 10.0.2.22 61017 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 09:09:32.703310 0.000000 udp 10.0.2.22 61018 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 09:24:19.139402 3.001263 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 09:24:26.146697 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:24:34.148333 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:24:50.151590 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:25:22.157213 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:28:32.691120 0.000133 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 09:28:32.691389 0.012079 udp 10.0.2.22 61019 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 09:28:32.703945 0.000000 udp 10.0.2.22 61020 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 09:31:26.163067 3.001785 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 09:31:33.170731 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:31:41.172470 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:31:57.175171 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:32:29.181720 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:38:33.187610 3.001095 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 09:38:40.194459 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:38:49.770287 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:39:05.585796 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:39:33.715589 0.000142 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 09:39:33.715826 0.011402 udp 10.0.2.22 61021 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 09:39:33.727550 0.000000 udp 10.0.2.22 61022 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 09:39:37.195252 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:45:40.221285 3.001282 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 09:45:47.228616 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:45:55.230114 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:46:11.232941 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:46:43.239942 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:52:47.246086 3.010618 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 09:52:54.262430 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:53:02.263828 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:53:18.267038 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:53:50.274668 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 09:54:32.684054 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 09:54:32.684156 0.011565 udp 10.0.2.22 61023 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 09:54:32.696037 0.000000 udp 10.0.2.22 61024 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 09:59:54.279168 3.001389 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 10:00:01.286650 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:00:09.287959 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:00:25.290857 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:00:57.296989 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:07:02.304090 3.059210 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 10:07:09.346057 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:07:17.323417 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:07:33.326248 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:08:05.332219 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:09:32.688192 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 10:09:32.688302 0.011103 udp 10.0.2.22 61025 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 10:09:32.699796 0.000000 udp 10.0.2.22 61026 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 10:25:08.346020 3.011883 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 10:25:15.363269 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:25:23.365000 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:25:39.367901 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:26:11.373897 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:28:32.687384 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 10:28:32.687571 0.010512 udp 10.0.2.22 61027 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 10:28:32.698485 0.000000 udp 10.0.2.22 61028 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 10:32:15.379778 3.001975 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 10:32:22.387145 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:32:30.388808 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:32:46.391988 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:33:18.398057 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:39:22.404139 3.001644 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 10:39:29.411185 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:39:32.685546 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 10:39:32.685670 0.010187 udp 10.0.2.22 61029 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 10:39:32.696260 0.000000 udp 10.0.2.22 61030 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 10:39:37.412557 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:39:53.415749 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:40:25.422200 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:46:29.428010 3.001542 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 10:46:36.436651 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:46:44.436792 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:47:00.440222 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:47:32.446121 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:53:36.452304 3.000947 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 10:53:43.459094 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:53:51.460812 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:54:07.463598 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 10:54:32.690137 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 10:54:32.690328 0.012258 udp 10.0.2.22 61031 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 10:54:32.702998 0.000000 udp 10.0.2.22 61032 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 10:54:39.470034 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:00:50.485304 3.002430 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 11:00:57.493085 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:01:05.494321 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:01:21.497829 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:01:53.503642 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:08:00.514947 3.000215 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 11:08:07.521419 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:08:15.523225 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:08:31.525935 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:09:03.531793 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:09:32.684030 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 11:09:32.684203 0.011286 udp 10.0.2.22 61033 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 11:09:32.695990 0.000000 udp 10.0.2.22 61034 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 11:15:07.538166 3.001564 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 11:15:14.545710 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:15:22.547055 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:15:38.550143 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:16:10.556026 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:22:14.563548 3.000139 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 11:22:21.569560 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:22:29.570947 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:22:45.574006 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:23:17.580695 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:28:32.682754 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 11:28:32.682916 0.012543 udp 10.0.2.22 61035 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 11:28:32.695816 0.000000 udp 10.0.2.22 61036 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 11:29:21.587189 3.000650 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 11:29:28.593423 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:29:36.594800 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:29:52.598067 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:30:24.603992 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:36:28.610849 3.001139 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 11:36:35.617151 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:36:43.618983 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:36:59.622029 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:37:31.628179 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:39:32.681664 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 11:39:32.681810 0.012504 udp 10.0.2.22 61037 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 11:39:32.694688 0.000000 udp 10.0.2.22 61038 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 11:43:35.634166 3.025024 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 11:43:42.651605 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:43:50.652920 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:44:06.655427 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:44:38.661917 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:50:57.679914 3.000633 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 11:51:04.687120 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:51:12.688476 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:51:28.692117 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:52:00.697808 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:54:32.685971 0.000124 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 11:54:32.686193 0.010792 udp 10.0.2.22 61039 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 11:54:32.697386 0.000000 udp 10.0.2.22 61040 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 11:58:16.711514 3.000831 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 11:58:23.718141 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:58:31.719732 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:58:47.722594 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 11:59:19.728657 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:05:27.741395 3.000169 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 12:05:34.747754 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:05:42.749773 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:05:58.752248 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:06:30.758445 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:09:32.690249 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 12:09:32.690413 0.010201 udp 10.0.2.22 61041 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 12:09:32.701016 0.000000 udp 10.0.2.22 61042 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 12:24:22.773612 3.000451 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 12:24:29.780021 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:24:37.781440 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:24:53.784365 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:25:25.790308 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:28:32.689451 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 12:28:32.689642 0.012261 udp 10.0.2.22 61043 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 12:28:32.702325 0.000000 udp 10.0.2.22 61044 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 12:31:29.796614 3.001159 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 12:31:36.803651 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:31:44.804771 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:32:00.808359 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:32:32.814623 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:38:36.954639 2.997735 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 12:38:43.958119 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:38:51.959661 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:39:07.962550 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:39:32.688064 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 12:39:32.688170 0.010203 udp 10.0.2.22 61045 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 12:39:32.698767 0.000000 udp 10.0.2.22 61046 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 12:39:39.968351 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:45:44.000185 2.996064 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 12:45:51.001931 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:45:59.003467 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:46:15.006673 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:46:47.012693 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:52:51.019096 3.001145 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 12:52:58.025736 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:53:06.027376 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:53:22.030515 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:53:54.036308 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 12:54:32.682196 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 12:54:32.682362 0.010273 udp 10.0.2.22 61047 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 12:54:32.693020 0.000000 udp 10.0.2.22 61048 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 12:59:58.042796 3.001120 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 13:00:05.050018 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:00:13.051490 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:00:29.054395 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:01:01.060467 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:07:06.069117 3.000672 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 13:07:13.075116 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:07:21.076858 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:07:37.079828 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:08:09.085824 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:09:32.685752 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 13:09:32.685853 0.010290 udp 10.0.2.22 61049 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 13:09:32.696498 0.000000 udp 10.0.2.22 61050 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 13:25:13.100772 3.001750 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 13:25:20.108344 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:25:28.110056 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:25:44.112672 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:26:16.118871 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:28:32.684829 0.000122 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 13:28:32.685106 0.014466 udp 10.0.2.22 61051 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 13:28:32.699940 0.000000 udp 10.0.2.22 61052 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 13:32:20.124269 3.002124 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 13:32:27.132020 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:32:35.133468 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:32:51.136693 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:33:23.142648 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:39:27.150139 3.000317 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 13:39:32.684136 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 13:39:32.684233 0.010163 udp 10.0.2.22 61053 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 13:39:32.694804 0.000000 udp 10.0.2.22 61054 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 13:39:34.156159 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:39:42.157727 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:39:58.160851 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:40:30.166358 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:46:34.172653 3.002034 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 13:46:41.180315 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:46:49.182487 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:47:05.184747 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:47:37.190760 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:53:41.197077 3.001239 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 13:53:48.204114 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:53:56.205838 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:54:12.208446 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 13:54:32.688357 0.000107 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 13:54:32.688552 0.010174 udp 10.0.2.22 61055 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 13:54:32.699135 0.000000 udp 10.0.2.22 61056 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 13:54:44.214858 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:00:48.220740 3.001491 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 14:00:55.228049 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:01:03.229795 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:01:19.232638 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:01:51.238737 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:07:55.244124 3.002239 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 14:08:02.252057 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:08:10.253687 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:08:26.256468 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:08:58.262491 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:09:32.682301 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 14:09:32.682495 0.010026 udp 10.0.2.22 61057 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 14:09:32.692915 0.000000 udp 10.0.2.22 61058 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 14:15:02.269489 3.001033 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 14:15:09.275858 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:15:17.277221 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:15:33.280808 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:16:05.286384 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:22:09.292961 3.001452 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 14:22:16.300087 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:22:24.301420 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:22:40.304525 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:23:12.310837 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:28:32.681488 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 14:28:32.681642 0.011372 udp 10.0.2.22 61059 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 14:28:32.693605 0.000000 udp 10.0.2.22 61060 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 14:29:16.316710 3.001569 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 14:29:23.323792 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:29:31.325175 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:29:47.556682 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:30:19.344497 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:36:23.350796 3.001468 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 14:36:30.358188 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:36:38.359511 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:36:54.362580 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:37:26.368341 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:39:32.690041 0.000119 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 14:39:32.690259 0.013125 udp 10.0.2.22 61061 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 14:39:32.703760 0.000000 udp 10.0.2.22 61062 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 14:43:30.374837 3.001685 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 14:43:37.381797 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:43:45.383254 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:44:01.386330 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:44:33.392424 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:50:37.398912 3.001080 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 14:50:44.405849 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:50:52.407197 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:51:08.410903 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:51:40.416482 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:54:32.684050 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 14:54:32.684149 0.010238 udp 10.0.2.22 61063 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 14:54:32.694740 0.000000 udp 10.0.2.22 61064 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 14:57:44.422017 3.001788 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 14:57:51.432093 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:57:59.431681 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:58:15.434157 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 14:58:47.440087 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:04:51.446614 3.001298 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 15:04:58.454047 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:05:06.455047 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:05:22.458257 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:05:54.464266 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:09:32.688459 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 15:09:32.688647 0.010373 udp 10.0.2.22 61065 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 15:09:32.699442 0.000000 udp 10.0.2.22 61066 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 15:24:02.471647 3.001740 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 15:24:09.478529 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:24:17.480263 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:24:33.483155 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:25:05.489173 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:28:32.687049 0.000134 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 15:28:32.687822 0.011438 udp 10.0.2.22 61067 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 15:28:32.699637 0.000000 udp 10.0.2.22 61068 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 15:31:09.494873 3.002124 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 15:31:16.502496 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:31:24.503739 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:31:40.507192 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:32:12.513058 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:38:16.520770 3.000450 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 15:38:23.526495 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:38:31.528155 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:38:47.531097 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:39:19.537128 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:39:32.685612 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 15:39:32.685823 0.010223 udp 10.0.2.22 61069 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 15:39:32.696447 0.000000 udp 10.0.2.22 61070 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 15:45:26.547662 3.001425 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 15:45:33.554311 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:45:41.556585 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:45:57.559338 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:46:29.564977 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:52:33.572223 3.001564 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 15:52:40.579129 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:52:48.580845 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:53:04.583258 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:53:36.609597 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:54:32.679465 0.000124 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 15:54:32.679685 0.010177 udp 10.0.2.22 61071 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 15:54:32.690216 0.000000 udp 10.0.2.22 61072 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 15:59:40.615126 3.001786 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 15:59:47.622944 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 15:59:55.624322 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:00:11.627361 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:00:43.633289 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:06:47.639563 3.064890 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 16:06:54.675019 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:07:02.658310 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:07:18.661617 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:07:50.667356 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:09:32.684389 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 16:09:32.684496 0.010350 udp 10.0.2.22 61073 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 16:09:32.695271 0.000000 udp 10.0.2.22 61074 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 16:25:01.682814 3.001295 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 16:25:08.690418 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:25:16.691128 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:25:32.694370 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:26:04.700449 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:28:32.682732 0.000092 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 16:28:32.682906 0.021842 udp 10.0.2.22 61075 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 16:28:32.705110 0.000000 udp 10.0.2.22 61076 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 16:32:08.706565 3.001234 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 16:32:15.714189 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:32:23.715551 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:32:39.718430 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:33:11.724520 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:39:15.731039 3.000811 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 16:39:22.738010 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:39:30.739233 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:39:32.682251 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 16:39:32.682384 0.010250 udp 10.0.2.22 61077 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 16:39:32.693062 0.000000 udp 10.0.2.22 61078 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 16:39:46.742067 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:40:18.748470 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:46:22.753733 3.024881 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 16:46:29.781870 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:46:37.783233 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:46:53.786091 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:47:25.792340 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:53:29.798192 3.001720 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 16:53:36.805798 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:53:44.807100 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:54:00.810160 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 16:54:32.685532 0.000106 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 16:54:32.685731 0.010657 udp 10.0.2.22 61079 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 16:54:32.696768 0.000000 udp 10.0.2.22 61080 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 16:54:32.815699 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:00:36.822517 3.001399 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 17:00:43.829875 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:00:51.831255 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:01:07.834317 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:01:39.840280 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:07:43.847289 3.010687 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 17:07:50.863648 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:07:58.865062 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:08:14.867910 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:08:46.874590 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:09:32.679532 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 17:09:32.679637 0.010132 udp 10.0.2.22 61081 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 17:09:32.690184 0.000000 udp 10.0.2.22 61082 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 17:25:29.889270 3.001453 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 17:25:36.897009 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:25:44.897841 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:26:00.901061 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:26:32.906937 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:28:32.679068 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 17:28:32.679226 0.011853 udp 10.0.2.22 61083 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 17:28:32.691520 0.000000 udp 10.0.2.22 61084 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 17:32:36.913714 3.000940 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 17:32:43.920332 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:32:51.921774 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:33:07.924785 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:33:39.931096 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:39:32.688023 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 17:39:32.688125 0.010799 udp 10.0.2.22 61085 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 17:39:32.699300 0.000000 udp 10.0.2.22 61086 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 17:39:43.937133 3.001206 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 17:39:50.944259 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:39:58.945229 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:40:14.948572 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:40:46.954744 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:46:50.961820 3.000486 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 17:46:57.968073 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:47:05.969856 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:47:21.972875 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:47:53.978703 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:53:58.986544 3.001245 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 17:54:05.994080 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:54:13.995206 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:54:29.998149 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 17:54:32.682119 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 17:54:32.682246 0.010386 udp 10.0.2.22 61087 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 17:54:32.693039 0.000000 udp 10.0.2.22 61088 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 17:55:02.004289 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:01:06.009793 3.017823 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 18:01:13.029757 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:01:21.029233 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:01:37.032341 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:02:09.037917 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:08:13.043965 3.002463 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 18:08:20.051708 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:08:28.053051 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:08:44.056165 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:09:16.062169 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:09:32.685846 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 18:09:32.686045 0.010602 udp 10.0.2.22 61089 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 18:09:32.697013 0.000000 udp 10.0.2.22 61090 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 18:15:20.068082 3.002026 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 18:15:27.075656 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:15:35.076843 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:15:51.080795 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:16:23.086095 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:22:27.093509 3.000514 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 18:22:34.099807 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:22:42.101289 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:22:58.104228 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:23:30.110237 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:28:32.684968 0.000143 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 18:28:32.685250 0.011808 udp 10.0.2.22 61091 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 18:28:32.697465 0.000000 udp 10.0.2.22 61092 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 18:29:34.116245 3.001511 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 18:29:41.124615 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:29:49.124898 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:30:05.127926 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:30:37.134735 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:36:41.143709 2.998039 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 18:36:48.147511 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:36:56.149935 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:37:12.152345 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:37:44.157856 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:39:32.684625 0.000192 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 18:39:32.684924 0.010371 udp 10.0.2.22 61093 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 18:39:32.695658 0.000000 udp 10.0.2.22 61094 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 18:43:48.164245 3.001465 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 18:43:55.171251 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:44:03.173734 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:44:19.175985 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:44:51.182163 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:51:03.190063 3.001022 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 18:51:10.197000 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:51:18.198177 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:51:34.201759 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:52:06.207601 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:54:32.678071 0.000085 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 18:54:32.678274 0.010140 udp 10.0.2.22 61095 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 18:54:32.695326 0.000000 udp 10.0.2.22 61096 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 18:58:10.213494 3.001414 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 18:58:17.220940 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:58:25.222296 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:58:41.225522 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 18:59:13.231702 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:05:17.237621 3.001325 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 19:05:24.244967 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:05:32.246433 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:05:48.249250 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:06:20.255281 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:09:32.681860 0.000082 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 19:09:32.682038 0.010129 udp 10.0.2.22 61097 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 19:09:32.692514 0.000000 udp 10.0.2.22 61098 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 19:24:18.268212 3.001623 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 19:24:25.275814 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:24:33.276770 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:24:49.280455 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:25:21.286103 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:28:32.681266 0.000233 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 19:28:32.681574 0.021911 udp 10.0.2.22 61099 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 19:28:32.703945 0.000000 udp 10.0.2.22 61100 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 19:31:25.291529 3.002174 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 19:31:32.299300 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:31:40.300853 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:31:56.303909 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:32:28.310176 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:38:32.316405 3.001163 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 19:38:39.323172 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:38:47.324660 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:39:03.327614 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:39:32.680247 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 19:39:32.680440 0.010469 udp 10.0.2.22 61101 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 19:39:32.691284 0.000000 udp 10.0.2.22 61102 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 19:39:35.334096 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:45:39.340838 3.000723 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 19:45:46.347091 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:45:54.348563 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:46:10.351875 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:46:42.357730 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:52:46.363791 3.001899 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 19:52:53.371366 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:53:01.372819 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:53:17.375713 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:53:49.381835 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 19:54:32.683539 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 19:54:32.683663 0.010933 udp 10.0.2.22 61103 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 19:54:32.695021 0.000000 udp 10.0.2.22 61104 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 19:59:53.387923 3.001717 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 20:00:00.395043 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:00:08.396647 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:00:24.400149 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:00:56.405744 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:07:00.411779 3.001686 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 20:07:07.419249 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:07:15.420740 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:07:31.423862 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:08:03.429951 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:09:32.678224 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 20:09:32.678312 0.010159 udp 10.0.2.22 61105 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 20:09:32.688871 0.000000 udp 10.0.2.22 61106 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 20:25:10.439771 3.001221 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 20:25:17.446517 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:25:25.447817 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:25:41.450726 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:26:13.457172 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:28:32.677886 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 20:28:32.678048 0.022056 udp 10.0.2.22 61107 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 20:28:32.700524 0.000000 udp 10.0.2.22 61108 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 20:32:17.465445 2.999202 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 20:32:24.470491 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:32:32.471774 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:32:48.474787 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:33:20.480785 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:39:24.486226 3.002031 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 20:39:31.494196 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:39:32.685750 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 20:39:32.685854 0.010627 udp 10.0.2.22 61109 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 20:39:32.696867 0.000000 udp 10.0.2.22 61110 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 20:39:39.495945 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:39:55.498672 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:40:27.504430 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:46:31.511885 3.000244 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 20:46:38.518184 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:46:46.519672 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:47:02.522757 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:47:34.528774 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:53:38.534361 3.002165 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 20:53:45.542134 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:53:53.543677 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:54:09.546787 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 20:54:32.680075 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 20:54:32.680257 0.010432 udp 10.0.2.22 61111 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 20:54:32.691153 0.000000 udp 10.0.2.22 61112 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 20:54:41.552776 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:00:45.558575 3.001644 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 21:00:52.566074 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:01:00.568043 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:01:16.571076 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:01:48.577154 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:07:52.583148 3.001060 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 21:07:59.589837 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:08:07.591774 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:08:23.594741 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:08:55.610695 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:09:32.684269 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 21:09:32.684387 0.010043 udp 10.0.2.22 61113 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 21:09:32.694760 0.000000 udp 10.0.2.22 61114 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 21:14:59.616189 3.002511 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 21:15:06.624063 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:15:14.625926 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:15:30.628770 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:16:02.634805 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:22:06.641138 3.001172 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 21:22:13.648454 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:22:21.649809 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:22:37.652848 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:23:09.658744 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:28:32.683130 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 21:28:32.683289 0.011817 udp 10.0.2.22 61115 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 21:28:32.695477 0.000000 udp 10.0.2.22 61116 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 21:29:13.664297 3.001385 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 21:29:20.671908 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:29:28.673654 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:29:44.881836 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:30:16.691979 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:36:20.699166 3.001024 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 21:36:27.706040 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:36:35.707786 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:36:51.710297 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:37:23.716645 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:39:32.682173 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 21:39:32.682292 0.012619 udp 10.0.2.22 61117 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 21:39:32.695330 0.000000 udp 10.0.2.22 61118 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 21:43:27.722123 3.027446 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 21:43:34.740140 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:43:42.741445 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:43:58.744624 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:44:30.750163 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:50:36.759055 3.001733 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 21:50:43.766789 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:50:51.768538 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:51:07.771278 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:51:39.777302 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:54:32.686113 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 21:54:32.686252 0.014051 udp 10.0.2.22 61119 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 21:54:32.700663 0.000000 udp 10.0.2.22 61120 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 21:57:43.783642 3.001420 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 21:57:50.790879 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:57:58.792483 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:58:14.795119 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 21:58:46.801004 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:04:50.807838 3.001001 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 22:04:57.814605 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:05:05.816376 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:05:21.819190 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:05:53.825503 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:09:32.680240 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 22:09:32.680387 0.010142 udp 10.0.2.22 61121 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 22:09:32.690937 0.000000 udp 10.0.2.22 61122 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 22:24:02.833658 3.001444 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 22:24:09.841103 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:24:17.842633 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:24:33.845435 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:25:05.851749 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:28:32.679150 0.000109 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 22:28:32.679356 0.028903 udp 10.0.2.22 61123 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 22:28:32.708647 0.000000 udp 10.0.2.22 61124 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 22:31:09.857607 3.001669 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 22:31:16.865070 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:31:24.866703 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:31:40.869673 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:32:12.875030 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:38:16.882933 3.000136 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 22:38:23.889276 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:38:31.890639 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:38:47.893819 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:39:19.899747 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:39:32.678367 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 22:39:32.678480 0.015995 udp 10.0.2.22 61125 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 22:39:32.694839 0.000000 udp 10.0.2.22 61126 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 22:45:27.911898 3.001382 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 22:45:34.918885 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:45:42.920566 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:45:58.923509 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:46:30.929139 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:52:34.935190 3.001979 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 22:52:41.942897 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:52:49.944161 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:53:05.947411 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:53:37.953539 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:54:32.681954 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 22:54:32.682125 0.010221 udp 10.0.2.22 61127 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 22:54:32.692716 0.000000 udp 10.0.2.22 61128 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 22:59:41.959632 3.001313 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 22:59:48.966716 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 22:59:56.968429 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:00:12.971000 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:00:44.977449 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:06:48.984226 3.000732 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 23:06:55.990723 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:07:03.992294 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:07:19.995376 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:07:52.001062 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:09:32.675690 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 23:09:32.675847 0.010247 udp 10.0.2.22 61129 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 23:09:32.686493 0.000000 udp 10.0.2.22 61130 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 23:25:02.015568 3.001013 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 23:25:09.022216 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:25:17.023998 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:25:33.026541 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:26:05.032846 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:28:32.685498 0.000102 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 23:28:32.685702 0.011605 udp 10.0.2.22 61131 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 23:28:32.697812 0.000000 udp 10.0.2.22 61132 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 23:32:09.038609 3.001921 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 23:32:16.046333 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:32:24.047763 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:32:40.050803 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:33:12.056707 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:39:16.072844 3.001629 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 23:39:23.080117 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:39:31.081668 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:39:32.694118 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 23:39:32.694253 0.011449 udp 10.0.2.22 61133 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 23:39:32.706082 0.000000 udp 10.0.2.22 61134 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 23:39:47.084651 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:40:19.090837 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:46:23.096398 3.002083 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 23:46:30.104216 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:46:38.105787 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:46:54.108739 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:47:26.114536 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:53:30.120709 3.001671 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/06 23:53:37.128074 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:53:45.130104 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:54:01.132716 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/06 23:54:32.688395 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 23:54:32.688551 0.012039 udp 10.0.2.22 61135 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/06 23:54:32.700988 0.000000 udp 10.0.2.22 61136 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/06 23:54:33.138843 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:00:37.144644 3.001686 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 00:00:44.152282 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:00:52.153787 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:01:08.156625 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:01:40.162831 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:07:44.168650 3.001403 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 00:07:51.175527 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:07:59.177807 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:08:15.180949 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:08:47.186795 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:09:32.692379 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 00:09:32.692574 0.010173 udp 10.0.2.22 61137 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 00:09:32.703190 0.000000 udp 10.0.2.22 61138 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 00:25:30.200925 3.002408 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 00:25:37.208748 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:25:45.210361 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:26:01.213274 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:26:33.219218 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:28:32.690923 0.000134 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 00:28:32.691145 0.011401 udp 10.0.2.22 61139 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 00:28:32.702971 0.000000 udp 10.0.2.22 61140 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 00:32:37.225015 3.001956 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 00:32:44.232928 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:32:52.234116 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:33:08.237491 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:33:40.243329 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:39:32.690254 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 00:39:32.690385 0.010246 udp 10.0.2.22 61141 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 00:39:32.701060 0.000000 udp 10.0.2.22 61142 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 00:39:44.248877 3.001871 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 00:39:51.256662 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:39:59.258157 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:40:15.261248 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:40:47.267030 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:46:51.274573 3.000254 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 00:46:58.280689 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:47:06.282124 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:47:22.285122 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:47:54.291214 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:53:59.300100 3.000338 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 00:54:06.306107 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:54:14.307739 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:54:30.310563 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 00:54:32.694256 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 00:54:32.694346 0.021431 udp 10.0.2.22 61143 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 00:54:32.716164 0.000000 udp 10.0.2.22 61144 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 00:55:02.316681 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:01:06.322999 3.001087 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 01:01:13.329967 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:01:21.331594 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:01:37.334789 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:02:09.340522 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:08:13.346308 3.001920 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 01:08:20.353911 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:08:28.355268 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:08:44.358570 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:09:16.364389 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:09:32.688248 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 01:09:32.688355 0.010203 udp 10.0.2.22 61145 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 01:09:32.698924 0.000000 udp 10.0.2.22 61146 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 01:15:20.371454 3.001041 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 01:15:27.378210 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:15:35.379292 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:15:51.382462 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:16:23.388707 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:22:27.394638 3.001752 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 01:22:34.402077 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:22:42.403481 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:22:58.406507 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:23:30.412587 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:28:32.687164 0.000121 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 01:28:32.687375 0.011815 udp 10.0.2.22 61147 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 01:28:32.699548 0.000000 udp 10.0.2.22 61148 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 01:29:34.439434 3.000711 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 01:29:41.446314 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:29:49.447620 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:30:05.450570 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:30:37.456454 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:36:41.462780 3.001305 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 01:36:48.469771 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:36:56.471365 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:37:12.474347 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:37:44.480468 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:39:32.686197 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 01:39:32.686347 0.011773 udp 10.0.2.22 61149 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 01:39:32.698550 0.000000 udp 10.0.2.22 61150 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 01:43:48.486302 3.001817 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 01:43:55.493797 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:44:03.494913 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:44:19.498222 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:44:51.504181 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:51:03.512132 3.001201 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 01:51:10.519305 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:51:18.520840 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:51:34.523726 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:52:06.539612 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:54:32.690001 0.000107 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 01:54:32.690218 0.013892 udp 10.0.2.22 61151 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 01:54:32.704553 0.000000 udp 10.0.2.22 61152 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 01:58:10.545704 3.001883 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 01:58:17.553134 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:58:25.554702 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:58:41.557803 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 01:59:13.563783 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:05:17.570479 3.001178 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 02:05:24.577042 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:05:32.579094 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:05:48.582330 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:06:20.587923 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:09:32.683487 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 02:09:32.683588 0.012790 udp 10.0.2.22 61153 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 02:09:32.696765 0.000000 udp 10.0.2.22 61154 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 02:24:19.601745 3.028930 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 02:24:26.629379 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:24:34.630731 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:24:50.633754 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:25:22.639841 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:28:32.693633 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 02:28:32.693727 0.021489 udp 10.0.2.22 61155 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 02:28:32.715617 0.000000 udp 10.0.2.22 61156 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 02:31:26.645876 3.001582 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 02:31:33.653078 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:31:41.654663 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:31:57.657440 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:32:29.663169 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:38:33.670750 3.000470 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 02:38:40.687105 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:38:48.688810 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:39:04.691665 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:39:32.692203 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 02:39:32.692319 0.013528 udp 10.0.2.22 61157 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 02:39:32.706290 0.000000 udp 10.0.2.22 61158 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 02:39:36.697427 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:45:40.703710 3.001500 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 02:45:47.711185 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:45:55.712873 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:46:11.715270 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:46:43.721693 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:52:47.726847 3.002762 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 02:52:54.735238 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:53:02.736680 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:53:18.739808 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:53:50.745174 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 02:54:32.686043 0.000120 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 02:54:32.686252 0.011304 udp 10.0.2.22 61159 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 02:54:32.697974 0.000000 udp 10.0.2.22 61160 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 02:59:54.751387 3.001946 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 03:00:01.759069 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:00:09.760366 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:00:25.764003 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:00:57.769911 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:07:01.776580 3.000808 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 03:07:08.783164 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:07:16.784822 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:07:32.787890 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:08:04.793660 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:09:32.690295 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 03:09:32.690402 0.010405 udp 10.0.2.22 61161 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 03:09:32.701186 0.000000 udp 10.0.2.22 61162 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 03:25:11.803004 3.001176 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 03:25:18.810289 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:25:26.811947 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:25:42.815050 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:26:14.821155 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:28:32.689089 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 03:28:32.689251 0.010197 udp 10.0.2.22 61163 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 03:28:32.711391 0.000000 udp 10.0.2.22 61164 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 03:32:18.826981 3.001566 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 03:32:25.833843 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:32:33.835780 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:32:49.838814 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:33:21.844175 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:39:25.851360 3.001097 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 03:39:32.688393 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 03:39:32.688545 0.010898 udp 10.0.2.22 61165 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 03:39:32.699864 0.000000 udp 10.0.2.22 61166 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 03:39:32.858275 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:39:40.859936 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:39:56.862773 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:40:28.868767 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:46:32.874830 3.001518 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 03:46:39.882062 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:46:47.883688 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:47:03.886293 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:47:35.892739 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:53:39.899045 3.001624 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 03:53:46.906016 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:53:54.907810 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:54:10.910525 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 03:54:32.692223 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 03:54:32.692403 0.011558 udp 10.0.2.22 61167 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 03:54:32.704376 0.000000 udp 10.0.2.22 61168 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 03:54:42.916614 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:00:46.923045 3.001256 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 04:00:53.929891 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:01:01.931917 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:01:17.934819 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:01:49.940666 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:07:53.947296 3.000983 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 04:08:00.954511 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:08:08.955212 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:08:24.958571 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:08:56.964639 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:09:32.685598 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 04:09:32.685706 0.010871 udp 10.0.2.22 61169 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 04:09:32.696966 0.000000 udp 10.0.2.22 61170 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 04:15:00.970922 3.001356 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 04:15:07.978203 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:15:15.979892 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:15:31.982677 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:16:03.988864 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:22:07.995886 3.000473 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 04:22:15.002336 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:22:23.003748 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:22:39.006405 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:23:11.012738 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:28:32.684993 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 04:28:32.685197 0.011600 udp 10.0.2.22 61171 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 04:28:32.697195 0.000000 udp 10.0.2.22 61172 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 04:29:15.018940 3.001381 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 04:29:22.026506 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:29:30.027369 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:29:46.030455 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:30:18.036649 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:36:22.042526 3.001685 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 04:36:29.050790 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:36:37.051581 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:36:53.054477 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:37:25.060830 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:39:32.683918 0.000113 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 04:39:32.684130 0.012245 udp 10.0.2.22 61173 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 04:39:32.696780 0.000000 udp 10.0.2.22 61174 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 04:43:29.067132 3.000962 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 04:43:36.073913 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:43:44.075115 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:44:00.078537 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:44:32.085664 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:50:38.092989 3.002329 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 04:50:45.100817 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:50:53.102285 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:51:09.105187 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:51:41.111494 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:54:32.688457 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 04:54:32.688580 0.021549 udp 10.0.2.22 61175 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 04:54:32.710490 0.000000 udp 10.0.2.22 61176 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 04:57:45.116925 3.001961 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 04:57:52.124924 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:58:00.126453 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:58:16.129288 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 04:58:48.135400 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:04:52.141751 3.000949 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 05:04:59.148603 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:05:07.150002 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:05:23.152993 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:05:55.159308 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:09:32.691761 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 05:09:32.691966 0.010957 udp 10.0.2.22 61177 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 05:09:32.703306 0.000000 udp 10.0.2.22 61178 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 05:24:03.167539 3.010372 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 05:24:10.184023 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:24:18.185491 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:24:34.188676 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:25:06.194166 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:28:32.691026 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 05:28:32.691124 0.011489 udp 10.0.2.22 61179 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 05:28:32.703010 0.000000 udp 10.0.2.22 61180 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 05:31:10.199792 3.001944 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 05:31:17.207342 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:31:25.209287 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:31:41.212051 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:32:13.218337 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:38:17.224452 3.001188 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 05:38:24.231708 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:38:32.233031 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:38:48.236135 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:39:20.242199 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:39:32.690146 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 05:39:32.690303 0.013306 udp 10.0.2.22 61181 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 05:39:32.703999 0.000000 udp 10.0.2.22 61182 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 05:45:29.256072 3.072747 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 05:45:36.303315 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:45:44.274221 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:46:00.277244 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:46:32.283394 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:52:36.289892 3.000820 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 05:52:43.296632 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:52:51.298113 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:53:07.301224 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:53:39.307220 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:54:32.683601 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 05:54:32.683744 0.013955 udp 10.0.2.22 61183 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 05:54:32.698100 0.000000 udp 10.0.2.22 61184 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 05:59:43.313713 3.001089 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 05:59:50.320786 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 05:59:58.322005 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:00:14.325153 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:00:46.331128 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:06:50.337406 3.001324 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 06:06:57.344707 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:07:05.346160 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:07:21.348914 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:07:53.355088 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:09:32.688488 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 06:09:32.688581 0.010850 udp 10.0.2.22 61185 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 06:09:32.699809 0.000000 udp 10.0.2.22 61186 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 06:25:03.368740 3.001515 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 06:25:10.375973 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:25:18.378042 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:25:34.380608 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:26:06.386974 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:28:32.687465 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 06:28:32.687608 0.010581 udp 10.0.2.22 61187 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 06:28:32.698612 0.000000 udp 10.0.2.22 61188 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 06:32:10.392742 3.001483 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 06:32:17.400184 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:32:25.402017 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:32:41.404723 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:33:13.410994 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:39:17.417794 3.000611 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 06:39:24.424035 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:39:32.425933 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:39:32.686386 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 06:39:32.686556 0.021785 udp 10.0.2.22 61189 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 06:39:32.708737 0.000000 udp 10.0.2.22 61190 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 06:39:48.428641 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:40:20.434648 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:46:24.440948 3.001559 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 06:46:31.447911 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:46:39.449764 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:46:55.452706 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:47:27.458497 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:53:31.464634 3.001529 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 06:53:38.472058 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:53:46.473702 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:54:02.476692 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 06:54:32.690225 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 06:54:32.690366 0.011852 udp 10.0.2.22 61191 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 06:54:32.702625 0.000000 udp 10.0.2.22 61192 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 06:54:34.482359 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:00:38.488673 3.001435 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 07:00:45.495942 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:00:53.497391 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:01:09.500316 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:01:41.506536 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:07:45.511938 3.002117 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 07:07:52.519785 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:08:00.521568 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:08:16.524552 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:08:48.530352 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:09:32.683905 0.000174 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 07:09:32.684158 0.012950 udp 10.0.2.22 61193 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 07:09:32.787343 0.000000 udp 10.0.2.22 61194 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 07:25:31.545712 3.011248 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 07:25:38.562778 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:25:46.564378 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:26:02.567036 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:26:34.573164 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:28:32.682704 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 07:28:32.682869 0.022232 udp 10.0.2.22 61195 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 07:28:32.705633 0.000000 udp 10.0.2.22 61196 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 07:32:38.579895 3.001457 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 07:32:45.586716 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:32:53.588227 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:33:09.591219 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:33:41.597181 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:39:32.682165 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 07:39:32.682329 0.024145 udp 10.0.2.22 61197 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 07:39:32.706868 0.000000 udp 10.0.2.22 61198 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 07:39:45.603198 3.001610 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 07:39:52.610567 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:40:00.612185 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:40:16.615270 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:40:48.621119 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:46:52.627694 3.001324 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 07:46:59.634648 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:47:07.635890 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:47:23.639300 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:47:55.644961 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:53:59.651030 3.001714 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 07:54:06.658572 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:54:14.659991 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:54:30.662418 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 07:54:32.685500 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 07:54:32.685621 0.011899 udp 10.0.2.22 61199 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 07:54:32.697881 0.000000 udp 10.0.2.22 61200 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 07:55:02.669114 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:01:06.675416 3.001516 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 08:01:13.682438 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:01:21.683986 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:01:37.687061 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:02:09.693077 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:08:13.699217 3.000876 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 08:08:20.706799 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:08:28.708417 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:08:44.710983 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:09:16.717191 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:09:32.690156 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 08:09:32.690358 0.010336 udp 10.0.2.22 61201 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 08:09:32.701153 0.000000 udp 10.0.2.22 61202 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 08:15:20.722267 3.002622 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 08:15:27.730427 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:15:35.732033 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:15:51.734366 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:16:23.741206 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:22:27.747324 3.001264 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 08:22:34.754253 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:22:42.756390 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:22:58.759165 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:23:30.764861 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:28:32.689141 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 08:28:32.689254 0.011433 udp 10.0.2.22 61203 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 08:28:32.701065 0.000000 udp 10.0.2.22 61204 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 08:29:34.772094 3.000032 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 08:29:41.778463 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:29:49.779865 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:30:05.782598 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:30:37.789015 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:36:41.795019 3.001742 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 08:36:48.802509 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:36:56.803990 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:37:12.806941 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:37:44.812421 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:39:32.688450 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 08:39:32.688549 0.011263 udp 10.0.2.22 61205 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 08:39:32.700219 0.000000 udp 10.0.2.22 61206 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 08:43:48.818502 3.069854 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 08:43:55.855735 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:44:03.837847 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:44:19.840595 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:44:51.847058 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:51:02.853384 3.001007 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 08:51:09.860259 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:51:17.862023 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:51:33.864709 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:52:05.871026 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:54:32.681687 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 08:54:32.681818 0.011322 udp 10.0.2.22 61207 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 08:54:32.693645 0.000000 udp 10.0.2.22 61208 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 08:58:09.876430 3.002260 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 08:58:16.884630 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:58:24.886453 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:58:40.888963 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 08:59:12.894799 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:05:16.902101 3.000371 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 09:05:23.908443 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:05:31.910177 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:05:47.912651 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:06:19.918622 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:09:32.686159 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 09:09:32.686329 0.011064 udp 10.0.2.22 61209 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 09:09:32.697757 0.000000 udp 10.0.2.22 61210 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 09:24:18.932448 3.001920 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 09:24:25.940249 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:24:33.942090 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:24:49.944657 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:25:21.950706 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:28:32.684610 0.000109 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 09:28:32.684812 0.010501 udp 10.0.2.22 61211 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 09:28:32.695715 0.000000 udp 10.0.2.22 61212 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 09:31:25.956238 3.002321 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 09:31:32.964377 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:31:40.965986 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:31:56.968785 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:32:28.974804 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:38:32.980894 3.001757 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 09:38:39.988398 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:38:47.989737 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:39:03.992827 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:39:32.683524 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 09:39:32.683684 0.011103 udp 10.0.2.22 61213 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 09:39:32.695161 0.000000 udp 10.0.2.22 61214 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 09:39:35.998663 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:45:40.004751 3.001541 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 09:45:47.011976 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:45:55.013760 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:46:11.016817 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:46:43.022752 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:52:47.028298 3.002035 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 09:52:54.035681 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:53:02.037632 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:53:18.040744 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:53:50.046826 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 09:54:32.688128 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 09:54:32.688300 0.012095 udp 10.0.2.22 61215 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 09:54:32.700806 0.000000 udp 10.0.2.22 61216 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 09:59:54.053778 3.000771 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 10:00:01.060020 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:00:09.061587 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:00:25.064626 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:00:57.070754 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:07:01.077133 3.001319 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 10:07:08.084024 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:07:16.085509 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:07:32.088683 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:08:04.094768 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:09:32.682165 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 10:09:32.682365 0.010116 udp 10.0.2.22 61217 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 10:09:32.692822 0.000000 udp 10.0.2.22 61218 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 10:25:07.108246 3.014577 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 10:25:14.125855 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:25:22.126943 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:25:38.130112 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:26:10.136336 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:28:32.681638 0.000093 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 10:28:32.681813 0.011133 udp 10.0.2.22 61219 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 10:28:32.693492 0.000000 udp 10.0.2.22 61220 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 10:32:14.142518 3.001464 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 10:32:21.149533 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:32:29.151137 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:32:45.153971 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:33:17.160105 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:39:21.166379 3.001348 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 10:39:28.173540 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:39:32.679978 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 10:39:32.680091 0.021760 udp 10.0.2.22 61221 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 10:39:32.702188 0.000000 udp 10.0.2.22 61222 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 10:39:36.175084 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:39:52.178461 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:40:24.184161 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:46:28.190482 3.001260 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 10:46:35.197461 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:46:43.199076 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:46:59.201990 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:47:31.208090 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:53:35.214165 3.001836 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 10:53:42.221660 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:53:50.222754 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:54:06.225713 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 10:54:32.684090 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 10:54:32.684259 0.010287 udp 10.0.2.22 61223 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 10:54:32.694930 0.000000 udp 10.0.2.22 61224 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 10:54:38.233994 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:00:42.238204 3.001605 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 11:00:49.245227 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:00:57.246814 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:01:13.249743 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:01:45.256000 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:07:49.262053 3.001522 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 11:07:56.269612 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:08:04.270849 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:08:20.273877 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:08:52.279875 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:09:32.688326 0.000097 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 11:09:32.688501 0.010653 udp 10.0.2.22 61225 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 11:09:32.699528 0.000000 udp 10.0.2.22 61226 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 11:25:31.289024 3.001519 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 11:25:38.296462 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:25:46.297849 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:26:02.300846 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:26:34.306697 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:28:32.686969 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 11:28:32.687135 0.011283 udp 10.0.2.22 61227 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 11:28:32.698789 0.000000 udp 10.0.2.22 61228 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 11:32:38.314381 3.000005 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 11:32:45.320237 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:32:53.322065 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:33:09.324600 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:33:41.330833 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:39:32.685839 0.000106 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 11:39:32.686035 0.012382 udp 10.0.2.22 61229 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 11:39:32.698825 0.000000 udp 10.0.2.22 61230 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 11:39:45.336842 3.001807 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 11:39:52.344381 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:40:00.345989 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:40:16.348829 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:40:48.354951 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:46:52.360402 3.002112 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 11:46:59.368393 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:47:07.369744 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:47:23.372614 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:47:55.378778 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:54:02.389907 3.000847 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 11:54:09.407697 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:54:17.407954 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:54:32.680151 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 11:54:32.680338 0.014045 udp 10.0.2.22 61231 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 11:54:32.694831 0.000000 udp 10.0.2.22 61232 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 11:54:33.410889 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 11:55:05.417048 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:01:09.423314 3.001477 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 12:01:16.430332 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:01:24.431919 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:01:40.434877 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:02:12.440834 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:08:16.447287 3.001495 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 12:08:23.454558 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:08:31.455848 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:08:47.458772 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:09:19.464991 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:09:32.683617 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 12:09:32.683776 0.010659 udp 10.0.2.22 61233 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 12:09:32.694808 0.000000 udp 10.0.2.22 61234 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 12:15:23.470784 3.001859 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 12:15:30.478385 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:15:38.480072 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:15:54.482602 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:16:26.489111 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:22:30.494748 3.002119 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 12:22:37.502301 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:22:45.503787 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:23:01.506818 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:23:33.512855 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:28:32.682999 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 12:28:32.683137 0.011284 udp 10.0.2.22 61235 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 12:28:32.694802 0.000000 udp 10.0.2.22 61236 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 12:29:37.519111 3.001235 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 12:29:44.526431 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:29:52.527747 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:30:08.530764 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:30:40.536594 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:36:44.543028 3.001269 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 12:36:51.550344 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:36:59.551799 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:37:15.554500 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:37:47.560912 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:39:32.682252 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 12:39:32.682363 0.010460 udp 10.0.2.22 61237 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 12:39:32.693229 0.000000 udp 10.0.2.22 61238 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 12:43:55.571985 3.002631 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 12:44:02.580403 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:44:10.581896 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:44:26.584617 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:44:58.590466 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:51:12.601815 3.000122 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 12:51:19.608279 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:51:27.619882 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:51:43.622690 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:52:15.628920 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:54:32.685558 0.000147 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 12:54:32.685816 0.010250 udp 10.0.2.22 61239 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 12:54:32.696484 0.000000 udp 10.0.2.22 61240 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 12:58:19.634902 3.001583 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 12:58:26.642386 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:58:34.643285 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:58:50.646778 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 12:59:22.653345 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:05:26.660948 2.999503 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 13:05:33.666206 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:05:41.667969 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:05:57.670209 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:06:29.676966 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:09:32.680217 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 13:09:32.680316 0.010360 udp 10.0.2.22 61241 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 13:09:32.691081 0.000000 udp 10.0.2.22 61242 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 13:24:22.692103 3.001930 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 13:24:29.699881 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:24:37.711113 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:24:53.714200 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:25:25.720116 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:28:32.679254 0.000106 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 13:28:32.679466 0.011511 udp 10.0.2.22 61243 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 13:28:32.691367 0.000000 udp 10.0.2.22 61244 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 13:31:29.726216 3.001624 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 13:31:36.733038 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:31:44.735008 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:32:00.738462 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:32:32.743903 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:38:36.750975 3.000934 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 13:38:43.757680 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:38:51.758868 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:39:07.762369 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:39:32.678375 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 13:39:32.678497 0.010263 udp 10.0.2.22 61245 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 13:39:32.689173 0.000000 udp 10.0.2.22 61246 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 13:39:39.768452 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:45:43.776702 2.998492 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 13:45:50.781897 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:45:58.783079 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:46:14.785675 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:46:46.792162 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:52:50.799159 3.000704 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 13:52:57.805195 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:53:05.807015 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:53:21.810034 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:53:53.815431 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 13:54:32.682197 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 13:54:32.682338 0.011680 udp 10.0.2.22 61247 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 13:54:32.694397 0.000000 udp 10.0.2.22 61248 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 13:59:57.821961 3.001983 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 14:00:04.828968 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:00:12.831275 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:00:28.833872 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:01:00.840052 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:07:04.845800 3.001910 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 14:07:11.853039 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:07:19.855026 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:07:35.858361 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:08:07.864013 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:09:32.685516 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 14:09:32.685658 0.010152 udp 10.0.2.22 61249 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 14:09:32.696228 0.000000 udp 10.0.2.22 61250 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 14:25:11.878978 3.001801 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 14:25:18.886477 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:25:26.888371 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:25:42.890787 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:26:14.896911 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:28:32.685337 0.000121 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 14:28:32.685548 0.011187 udp 10.0.2.22 61251 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 14:28:32.697122 0.000000 udp 10.0.2.22 61252 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 14:32:18.903341 3.000838 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 14:32:25.910063 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:32:33.912002 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:32:49.914801 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:33:21.920936 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:39:25.927855 3.000576 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 14:39:32.683567 0.000147 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 14:39:32.683827 0.010121 udp 10.0.2.22 61253 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 14:39:32.694348 0.000000 udp 10.0.2.22 61254 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 14:39:32.934443 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:39:40.935793 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:39:56.939047 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:40:28.944573 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:46:32.951425 3.001113 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 14:46:39.958461 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:46:47.960469 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:47:03.963024 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:47:35.968754 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:53:39.974766 3.001838 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 14:53:46.982306 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:53:54.984126 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:54:10.986747 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 14:54:32.678142 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 14:54:32.678245 0.010170 udp 10.0.2.22 61255 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 14:54:32.688795 0.000000 udp 10.0.2.22 61256 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 14:54:43.002885 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:00:47.010058 3.000398 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 15:00:54.016160 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:01:02.017933 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:01:18.020889 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:01:50.026753 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:07:54.033525 3.021962 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 15:08:01.050244 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:08:09.051547 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:08:25.054688 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:08:57.060936 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:09:32.682125 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 15:09:32.682234 0.009929 udp 10.0.2.22 61257 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 15:09:32.692598 0.000000 udp 10.0.2.22 61258 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 15:15:01.066658 3.001716 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 15:15:08.074046 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:15:16.075810 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:15:32.078766 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:16:04.084732 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:22:08.090961 3.001594 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 15:22:15.098210 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:22:23.099808 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:22:39.102277 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:23:11.108952 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:28:32.681089 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 15:28:32.681235 0.021738 udp 10.0.2.22 61259 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 15:28:32.703342 0.000000 udp 10.0.2.22 61260 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 15:29:15.114918 3.001317 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 15:29:22.122168 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:29:30.123991 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:29:46.126542 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:30:18.132425 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:36:22.138649 3.001613 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 15:36:29.146506 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:36:37.147676 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:36:53.150442 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:37:25.156854 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:39:32.679479 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 15:39:32.679679 0.010496 udp 10.0.2.22 61261 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 15:39:32.690561 0.000000 udp 10.0.2.22 61262 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 15:43:29.163781 3.000527 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 15:43:36.170400 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:43:44.171980 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:44:00.174624 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:44:32.180524 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:50:36.186843 3.001376 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 15:50:43.193546 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:50:51.195780 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:51:07.198528 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:51:39.204832 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:54:32.683490 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 15:54:32.683608 0.010616 udp 10.0.2.22 61263 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 15:54:32.694643 0.000000 udp 10.0.2.22 61264 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 15:57:43.210924 3.001076 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 15:57:50.217915 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:57:58.219459 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:58:14.222563 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 15:58:46.228514 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:04:50.234707 3.001376 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 16:04:57.241942 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:05:05.243196 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:05:21.246499 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:05:53.252622 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:09:32.678197 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 16:09:32.678386 0.010829 udp 10.0.2.22 61265 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 16:09:32.689660 0.000000 udp 10.0.2.22 61266 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 16:24:01.259074 3.001966 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 16:24:08.266634 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:24:16.268547 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:24:32.271686 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:25:04.277748 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:28:32.677241 0.000141 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 16:28:32.677469 0.011957 udp 10.0.2.22 61267 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 16:28:32.689860 0.000000 udp 10.0.2.22 61268 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 16:31:08.293415 3.001625 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 16:31:15.300719 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:31:23.302297 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:31:39.305186 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:32:11.311574 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:38:15.318482 3.000534 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 16:38:22.324762 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:38:30.326296 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:38:46.329345 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:39:18.335188 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:39:32.676061 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 16:39:32.676163 0.010114 udp 10.0.2.22 61269 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 16:39:32.686653 0.000000 udp 10.0.2.22 61270 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 16:45:26.346995 3.001877 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 16:45:33.354744 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:45:41.356114 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:45:57.359186 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:46:29.366565 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:52:33.371434 3.001410 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 16:52:40.378784 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:52:48.380041 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:53:04.382980 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:53:36.389102 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:54:32.680005 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 16:54:32.680172 0.010564 udp 10.0.2.22 61271 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 16:54:32.691151 0.000000 udp 10.0.2.22 61272 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 16:59:40.395233 3.001393 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 16:59:47.402352 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 16:59:55.403946 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:00:11.406966 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:00:43.413078 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:06:47.420123 3.000576 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 17:06:54.426490 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:07:02.428176 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:07:18.430922 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:07:50.436997 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:09:32.683922 0.000037 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 17:09:32.684028 0.010900 udp 10.0.2.22 61273 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 17:09:32.695299 0.000000 udp 10.0.2.22 61274 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 17:25:00.451594 3.000742 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 17:25:07.458007 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:25:15.459635 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:25:31.462252 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:26:03.468557 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:28:32.683173 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 17:28:32.683289 0.011269 udp 10.0.2.22 61275 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 17:28:32.694969 0.000000 udp 10.0.2.22 61276 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 17:32:07.475814 3.000356 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 17:32:14.481830 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:32:22.483298 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:32:38.486343 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:33:10.491976 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:39:14.498501 3.001766 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 17:39:21.505438 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:39:29.507310 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:39:32.682075 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 17:39:32.682196 0.010028 udp 10.0.2.22 61277 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 17:39:32.692637 0.000000 udp 10.0.2.22 61278 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 17:39:45.510332 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:40:17.516494 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:46:21.523548 3.000261 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 17:46:28.539782 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:46:36.541281 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:46:52.544142 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:47:24.550303 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:53:28.556376 3.001684 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 17:53:35.563769 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:53:43.565484 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:53:59.568377 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:54:31.574858 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 17:54:32.675486 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 17:54:32.675576 0.010299 udp 10.0.2.22 61279 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 17:54:32.686254 0.000000 udp 10.0.2.22 61280 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 18:00:35.580743 3.001395 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 18:00:42.587763 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:00:50.589467 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:01:06.592087 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:01:38.604646 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:07:42.604036 3.002182 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 18:07:49.612007 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:07:57.613163 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:08:13.616302 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:08:45.622310 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:09:32.679955 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 18:09:32.680072 0.009780 udp 10.0.2.22 61281 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 18:09:32.690237 0.000000 udp 10.0.2.22 61282 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 18:25:28.636691 3.001940 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 18:25:35.644470 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:25:43.645943 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:25:59.648889 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:26:31.654707 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:28:32.679192 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 18:28:32.679336 0.011233 udp 10.0.2.22 61283 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 18:28:32.690989 0.000000 udp 10.0.2.22 61284 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 18:32:35.661186 3.000950 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 18:32:42.669154 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:32:50.669897 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:33:06.672957 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:33:38.679954 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:39:32.678898 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 18:39:32.679016 0.010148 udp 10.0.2.22 61285 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 18:39:32.689586 0.000000 udp 10.0.2.22 61286 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 18:39:42.686615 2.999974 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 18:39:49.692448 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:39:57.693770 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:40:13.696903 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:40:45.703076 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:46:49.709881 3.000441 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 18:46:56.716162 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:47:04.717942 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:47:20.721001 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:47:52.727247 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:53:56.734208 3.000380 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 18:54:03.739968 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:54:11.742025 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:54:27.744746 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 18:54:32.682128 0.000113 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 18:54:32.682327 0.010145 udp 10.0.2.22 61287 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 18:54:32.692849 0.000000 udp 10.0.2.22 61288 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 18:54:59.750927 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:01:03.756595 3.001748 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 19:01:10.763689 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:01:18.766067 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:01:34.768725 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:02:06.774706 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:08:10.781015 3.017206 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 19:08:17.798228 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:08:25.799809 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:08:41.802843 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:09:13.808760 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:09:32.675934 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 19:09:32.676120 0.010072 udp 10.0.2.22 61289 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 19:09:32.686569 0.000000 udp 10.0.2.22 61290 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 19:15:17.814826 3.001555 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 19:15:24.822357 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:15:32.823556 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:15:48.826705 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:16:20.832656 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:22:24.839241 3.001564 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 19:22:31.846272 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:22:39.847747 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:22:55.850967 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:23:27.856887 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:28:32.675231 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 19:28:32.675371 0.013374 udp 10.0.2.22 61291 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 19:28:32.689178 0.000000 udp 10.0.2.22 61292 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 19:29:31.862970 3.001455 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 19:29:38.870347 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:29:46.871725 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:30:02.874371 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:30:34.880798 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:36:38.886655 3.001734 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 19:36:45.893923 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:36:53.895635 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:37:09.898496 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:37:41.904097 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:39:32.684276 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 19:39:32.684399 0.010837 udp 10.0.2.22 61293 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 19:39:32.695621 0.000000 udp 10.0.2.22 61294 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 19:43:45.910524 3.001806 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 19:43:52.917936 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:44:00.919790 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:44:16.923022 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:44:48.928606 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:50:59.935254 3.071884 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 19:51:06.981875 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:51:14.953619 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:51:30.956629 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:52:02.962595 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:54:32.678202 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 19:54:32.678312 0.010114 udp 10.0.2.22 61295 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 19:54:32.688801 0.000000 udp 10.0.2.22 61296 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 19:58:06.968419 3.002055 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 19:58:13.976178 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:58:21.977761 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:58:37.980694 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 19:59:09.986790 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:05:13.992678 3.001712 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 20:05:21.000227 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:05:29.001794 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:05:45.004391 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:06:17.010914 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:09:32.682035 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 20:09:32.682202 0.010170 udp 10.0.2.22 61297 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 20:09:32.692747 0.000000 udp 10.0.2.22 61298 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 20:24:16.024865 3.001550 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 20:24:23.032080 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:24:31.033748 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:24:47.036615 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:25:19.042645 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:28:32.680625 0.000113 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 20:28:32.680824 0.021113 udp 10.0.2.22 61299 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 20:28:32.702445 0.000000 udp 10.0.2.22 61300 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 20:31:23.048054 3.002346 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 20:31:30.055913 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:31:38.057799 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:31:54.060460 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:32:26.068165 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:38:30.073732 3.000513 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 20:38:37.079849 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:38:45.081059 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:39:01.084591 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:39:32.680205 0.000090 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 20:39:32.680374 0.021765 udp 10.0.2.22 61301 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 20:39:32.702580 0.000000 udp 10.0.2.22 61302 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 20:39:33.090757 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:45:37.096004 3.002342 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 20:45:44.103595 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:45:52.105404 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:46:08.108416 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:46:40.114265 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:52:44.120638 3.001686 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 20:52:51.127892 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:52:59.129577 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:53:15.132559 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:53:47.138621 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 20:54:32.674009 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 20:54:32.674174 0.011554 udp 10.0.2.22 61303 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 20:54:32.686144 0.000000 udp 10.0.2.22 61304 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 20:59:51.144648 3.001571 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 20:59:58.151930 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:00:06.153424 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:00:22.156516 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:00:54.162511 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:06:58.168560 3.002010 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 21:07:05.176142 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:07:13.177205 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:07:29.180394 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:08:01.186392 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:09:32.678188 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 21:09:32.678345 0.010277 udp 10.0.2.22 61305 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 21:09:32.689027 0.000000 udp 10.0.2.22 61306 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 21:25:09.196859 3.002327 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 21:25:16.204433 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:25:24.206526 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:25:40.208939 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:26:12.215264 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:28:32.676912 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 21:28:32.677089 0.011310 udp 10.0.2.22 61307 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 21:28:32.688766 0.000000 udp 10.0.2.22 61308 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 21:32:16.220674 3.001835 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 21:32:23.228566 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:32:31.230061 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:32:47.232873 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:33:19.239248 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:39:23.245863 3.000785 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 21:39:30.252225 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:39:32.675462 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 21:39:32.675563 0.011758 udp 10.0.2.22 61309 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 21:39:32.687739 0.000000 udp 10.0.2.22 61310 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 21:39:38.253882 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:39:54.256986 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:40:26.263155 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:46:30.269536 3.001209 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 21:46:37.276443 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:46:45.277946 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:47:01.280935 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:47:33.286962 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:53:37.292712 3.001945 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 21:53:44.300254 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:53:52.301934 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:54:08.304756 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 21:54:32.680044 0.000082 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 21:54:32.680218 0.026552 udp 10.0.2.22 61311 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 21:54:32.707190 0.000000 udp 10.0.2.22 61312 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 21:54:40.311074 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:00:44.316926 3.001755 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 22:00:51.324502 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:00:59.326063 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:01:15.329026 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:01:47.334897 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:07:51.340727 3.001806 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 22:07:58.348178 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:08:06.350293 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:08:22.362862 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:08:54.368843 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:09:32.674128 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 22:09:32.674278 0.010170 udp 10.0.2.22 61313 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 22:09:32.685100 0.000000 udp 10.0.2.22 61314 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 22:14:58.374855 3.001408 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 22:15:05.382225 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:15:13.383337 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:15:29.386942 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:16:01.392866 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:22:05.398850 3.002204 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 22:22:12.406603 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:22:20.407939 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:22:36.411101 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:23:08.416798 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:28:32.673012 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 22:28:32.673194 0.021866 udp 10.0.2.22 61315 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 22:28:32.695409 0.000000 udp 10.0.2.22 61316 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 22:29:12.422563 3.002016 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 22:29:19.430096 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:29:27.432041 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:29:43.434707 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:30:15.440910 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:36:19.447621 3.000721 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 22:36:26.454126 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:36:34.455852 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:36:50.458657 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:37:22.464724 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:39:32.682315 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 22:39:32.682425 0.011836 udp 10.0.2.22 61317 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 22:39:32.694681 0.000000 udp 10.0.2.22 61318 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 22:43:26.471776 3.000771 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 22:43:33.478083 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:43:41.479767 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:43:57.482473 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:44:29.488900 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:50:33.494639 3.001904 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 22:50:40.502024 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:50:48.503440 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:51:04.506623 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:51:36.512518 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:54:32.676019 0.000125 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 22:54:32.676241 0.021787 udp 10.0.2.22 61319 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 22:54:32.698444 0.000000 udp 10.0.2.22 61320 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 22:57:40.517928 3.002110 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 22:57:47.525831 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:57:55.527778 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:58:11.530328 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 22:58:43.536638 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:04:47.542760 3.001430 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 23:04:54.550059 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:05:02.551677 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:05:18.554182 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:05:50.560676 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:09:32.680144 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 23:09:32.680320 0.011767 udp 10.0.2.22 61321 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 23:09:32.692493 0.000000 udp 10.0.2.22 61322 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 23:23:59.569182 3.001766 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 23:24:06.576598 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:24:14.578102 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:24:30.580921 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:25:02.587147 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:28:32.679783 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 23:28:32.679904 0.012692 udp 10.0.2.22 61323 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 23:28:32.693015 0.000000 udp 10.0.2.22 61324 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 23:31:06.593118 3.001506 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 23:31:13.599702 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:31:21.601899 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:31:37.604768 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:32:09.611271 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:38:13.688322 3.028393 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 23:38:20.722010 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:38:28.696138 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:38:44.628848 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:39:16.634981 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:39:32.678100 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 23:39:32.678269 0.011932 udp 10.0.2.22 61325 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 23:39:32.690640 0.000000 udp 10.0.2.22 61326 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 23:45:26.650020 3.001475 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 23:45:33.657004 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:45:41.658393 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:45:57.661628 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:46:29.667787 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:52:33.673144 3.001992 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 23:52:40.680286 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:52:48.683616 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:53:04.757419 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:53:36.804562 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:54:32.820343 0.000085 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/07 23:54:32.820545 0.011868 udp 10.0.2.22 61327 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/07 23:54:32.832816 0.000000 udp 10.0.2.22 61328 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/07 23:59:40.787128 3.001996 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/07 23:59:47.795015 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/07 23:59:55.796349 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:00:11.799571 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:00:43.805840 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:06:47.811102 3.002029 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 00:06:54.819053 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:07:02.820417 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:07:18.823384 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:07:50.829557 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:09:32.765999 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 00:09:32.766193 0.010243 udp 10.0.2.22 61329 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 00:09:32.776824 0.000000 udp 10.0.2.22 61330 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 00:25:01.844633 3.001696 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 00:25:08.851896 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:25:16.853298 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:25:32.856366 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:26:04.862792 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:28:32.764609 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 00:28:32.764770 0.011627 udp 10.0.2.22 61331 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 00:28:32.776787 0.000000 udp 10.0.2.22 61332 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 00:32:08.867602 3.002612 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 00:32:15.876221 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:32:23.877420 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:32:39.880695 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:33:11.886571 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:39:15.891981 3.002110 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 00:39:22.899918 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:39:30.901170 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:39:32.764319 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 00:39:32.764451 0.010837 udp 10.0.2.22 61333 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 00:39:32.775706 0.000000 udp 10.0.2.22 61334 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 00:39:46.904276 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:40:18.910984 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:46:22.915920 3.002121 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 00:46:29.923169 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:46:37.924678 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:46:53.928297 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:47:25.934402 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:53:29.940111 3.093149 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 00:53:37.002446 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:53:44.959187 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:54:00.961882 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 00:54:32.768584 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 00:54:32.768687 0.012210 udp 10.0.2.22 61335 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 00:54:32.781269 0.000000 udp 10.0.2.22 61336 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 00:54:32.968628 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:00:36.973863 3.002040 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 01:00:43.982145 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:00:51.983215 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:01:07.986065 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:01:39.992156 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:07:43.998006 3.002385 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 01:07:51.005214 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:07:59.007356 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:08:15.010861 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:08:47.016271 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:09:32.762148 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 01:09:32.857759 0.010094 udp 10.0.2.22 61337 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 01:09:32.868264 0.000000 udp 10.0.2.22 61338 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 01:25:30.031451 3.011267 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 01:25:37.048749 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:25:45.050175 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:26:01.053061 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:26:33.059096 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:28:32.771094 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 01:28:32.771245 0.010217 udp 10.0.2.22 61339 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 01:28:32.781855 0.000000 udp 10.0.2.22 61340 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 01:32:37.064931 3.001304 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 01:32:44.072343 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:32:52.073978 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:33:08.076960 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:33:40.082607 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:39:32.769993 0.000108 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 01:39:32.770200 0.011581 udp 10.0.2.22 61341 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 01:39:32.782165 0.000000 udp 10.0.2.22 61342 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 01:39:44.090217 3.000414 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 01:39:51.096535 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:39:59.098196 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:40:15.100929 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:40:47.107002 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:46:51.116779 2.997948 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 01:46:58.120409 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:47:06.122275 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:47:22.124874 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:47:54.130935 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:53:58.137839 3.000542 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 01:54:05.144226 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:54:13.145805 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:54:29.148841 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 01:54:32.764362 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 01:54:32.764568 0.013487 udp 10.0.2.22 61343 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 01:54:32.778499 0.000000 udp 10.0.2.22 61344 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 01:55:01.154744 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:01:05.160498 3.001982 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 02:01:12.168316 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:01:20.170732 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:01:36.172706 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:02:08.178717 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:08:12.185540 3.000888 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 02:08:19.192195 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:08:27.193260 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:08:43.196763 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:09:15.202855 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:09:32.768297 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 02:09:32.768403 0.010213 udp 10.0.2.22 61345 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 02:09:32.779028 0.000000 udp 10.0.2.22 61346 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 02:15:19.208629 3.002007 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 02:15:26.216132 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:15:34.218326 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:15:50.220679 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:16:22.226583 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:22:26.232843 3.001566 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 02:22:33.240266 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:22:41.241999 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:22:57.245166 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:23:29.250786 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:28:32.767172 0.000098 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 02:28:32.767346 0.013988 udp 10.0.2.22 61347 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 02:28:32.781783 0.000000 udp 10.0.2.22 61348 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 02:29:33.256895 3.002404 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 02:29:40.264350 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:29:48.265300 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:30:04.268509 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:30:36.274751 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:36:40.281126 3.001291 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 02:36:47.288372 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:36:55.289621 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:37:11.292427 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:37:43.298631 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:39:32.766333 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 02:39:32.766491 0.013199 udp 10.0.2.22 61349 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 02:39:32.780097 0.000000 udp 10.0.2.22 61350 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 02:43:47.305417 3.001043 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 02:43:54.312119 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:44:02.313583 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:44:18.316583 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:44:50.322550 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:51:08.338685 3.001948 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 02:51:15.346389 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:51:23.347857 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:51:39.350823 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:52:11.356839 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:54:32.770210 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 02:54:32.770294 0.031880 udp 10.0.2.22 61351 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 02:54:32.802593 0.000000 udp 10.0.2.22 61352 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 02:58:15.362683 3.001918 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 02:58:22.370381 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:58:30.371529 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:58:46.374975 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 02:59:18.380661 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:05:22.386739 3.001966 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 03:05:29.394200 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:05:37.396227 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:05:53.398641 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:06:25.404757 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:09:32.763545 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 03:09:32.763642 0.018693 udp 10.0.2.22 61353 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 03:09:32.782722 0.000000 udp 10.0.2.22 61354 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 03:24:20.414170 3.000491 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 03:24:27.420620 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:24:35.422097 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:24:51.424931 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:25:23.431518 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:28:32.763245 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 03:28:32.763451 0.013187 udp 10.0.2.22 61355 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 03:28:32.777045 0.000000 udp 10.0.2.22 61356 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 03:31:27.437923 3.000661 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 03:31:34.444220 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:31:42.445226 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:31:58.448733 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:32:30.454943 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:38:34.460310 3.002216 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 03:38:50.843791 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:38:58.732669 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:39:14.507626 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:39:41.392928 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 03:39:41.393060 0.018935 udp 10.0.2.22 61357 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 03:39:41.412392 0.000000 udp 10.0.2.22 61358 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 03:39:46.049253 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:45:44.855921 2.956157 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 03:45:51.765047 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:45:59.652717 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:46:15.427524 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:46:46.973510 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:52:48.517994 3.002378 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 03:52:55.546078 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:53:03.547887 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:53:19.550786 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:53:51.556649 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 03:54:32.765728 0.000129 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 03:54:32.765954 0.011524 udp 10.0.2.22 61359 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 03:54:32.777923 0.000000 udp 10.0.2.22 61360 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 03:59:55.562898 3.001579 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 04:00:02.570241 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:00:10.571689 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:00:26.574693 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:00:58.580547 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:07:02.586549 3.001765 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 04:07:09.594407 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:07:17.595601 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:07:33.598631 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:08:05.604743 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:09:32.760155 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 04:09:32.760319 0.044368 udp 10.0.2.22 61361 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 04:09:32.805091 0.000000 udp 10.0.2.22 61362 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 04:25:11.612524 3.011759 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 04:25:18.629863 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:25:26.631372 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:25:42.633867 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:26:14.640915 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:28:32.769118 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 04:28:32.769279 0.010806 udp 10.0.2.22 61363 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 04:28:32.780483 0.000000 udp 10.0.2.22 61364 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 04:32:18.647200 3.000922 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 04:32:25.654430 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:32:33.656116 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:32:49.659191 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:33:21.664055 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:39:25.671012 3.000490 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 04:39:32.677989 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:39:32.768093 0.000137 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 04:39:32.768337 0.011541 udp 10.0.2.22 61365 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 04:39:32.780314 0.000000 udp 10.0.2.22 61366 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 04:39:40.679700 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:39:56.682417 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:40:28.688407 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:46:32.693778 3.002357 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 04:46:39.702116 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:46:47.703377 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:47:03.706392 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:47:35.712581 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:53:39.717634 3.002624 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 04:53:46.725459 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:53:54.727347 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:54:10.730011 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 04:54:32.761737 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 04:54:32.761899 0.022443 udp 10.0.2.22 61367 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 04:54:32.784740 0.000000 udp 10.0.2.22 61368 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 04:54:42.736450 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:00:46.742111 3.002131 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 05:00:53.750256 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:01:01.750932 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:01:17.754490 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:01:49.760419 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:07:53.766767 3.001274 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 05:08:00.773228 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:08:08.775120 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:08:24.778425 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:08:56.784172 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:09:32.766130 0.000106 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 05:09:32.766320 0.013225 udp 10.0.2.22 61369 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 05:09:32.779969 0.000000 udp 10.0.2.22 61370 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 05:15:00.791118 3.000798 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 05:15:07.797774 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:15:15.799087 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:15:31.802511 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:16:03.808375 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:22:07.814788 3.000565 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 05:22:14.821708 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:22:22.823518 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:22:38.826091 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:23:10.832338 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:28:32.765098 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 05:28:32.765249 0.010272 udp 10.0.2.22 61371 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 05:28:32.775895 0.000000 udp 10.0.2.22 61372 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 05:29:14.838495 3.001790 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 05:29:21.845476 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:29:29.847373 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:29:45.850090 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:30:18.698754 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:36:21.871871 3.001541 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 05:36:28.879933 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:36:36.881418 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:36:52.884148 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:37:24.890142 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:39:32.764113 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 05:39:32.764285 0.011230 udp 10.0.2.22 61373 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 05:39:32.775874 0.000000 udp 10.0.2.22 61374 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 05:43:28.896238 3.001640 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 05:43:35.903701 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:43:43.905037 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:43:59.908398 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:44:31.914310 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:50:43.921910 3.001451 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 05:50:50.929177 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:50:58.930433 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:51:14.933875 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:51:46.939787 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:54:32.768088 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 05:54:32.768185 0.010948 udp 10.0.2.22 61375 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 05:54:32.779513 0.000000 udp 10.0.2.22 61376 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 05:57:50.945511 3.001812 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 05:57:57.953011 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:58:05.954646 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:58:21.957696 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 05:58:53.963354 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:04:57.969767 3.023334 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 06:05:04.997182 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:05:12.998451 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:05:29.001770 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:06:01.007853 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:09:32.761847 0.000166 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 06:09:32.762116 0.010165 udp 10.0.2.22 61377 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 06:09:32.772651 0.000000 udp 10.0.2.22 61378 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 06:24:06.020151 3.001759 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 06:24:13.027985 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:24:21.029593 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:24:37.032402 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:25:09.038141 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:28:32.761144 0.000114 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 06:28:32.761375 0.010444 udp 10.0.2.22 61379 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 06:28:32.772223 0.000000 udp 10.0.2.22 61380 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 06:31:13.044496 3.000762 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 06:31:20.051889 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:31:28.053153 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:31:44.055821 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:32:16.062188 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:38:20.068871 3.001045 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 06:38:27.075272 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:38:35.077088 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:38:51.080071 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:39:23.085993 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:39:32.760241 0.000092 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 06:39:32.760415 0.015401 udp 10.0.2.22 61381 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 06:39:32.776254 0.000000 udp 10.0.2.22 61382 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 06:45:28.094554 3.000651 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 06:45:35.101243 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:45:43.102417 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:45:59.105945 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:46:31.111723 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:52:35.117650 3.001390 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 06:52:42.125005 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:52:50.126656 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:53:06.129273 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:53:38.135485 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:54:32.764116 0.000092 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 06:54:32.764298 0.010325 udp 10.0.2.22 61383 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 06:54:32.775027 0.000000 udp 10.0.2.22 61384 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 06:59:42.142080 3.001268 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 06:59:49.148898 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 06:59:57.150446 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:00:13.153649 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:00:45.159391 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:06:49.166262 3.000823 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 07:06:56.172903 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:07:04.174626 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:07:20.177526 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:07:52.183218 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:09:32.768451 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 07:09:32.768606 0.010188 udp 10.0.2.22 61385 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 07:09:32.779194 0.000000 udp 10.0.2.22 61386 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 07:25:02.197902 3.000853 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 07:25:09.204559 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:25:17.206249 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:25:33.209246 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:26:05.214881 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:28:32.767213 0.000082 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 07:28:32.767382 0.011440 udp 10.0.2.22 61387 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 07:28:32.779240 0.000000 udp 10.0.2.22 61388 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 07:32:09.222100 3.000634 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 07:32:16.228491 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:32:24.229743 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:32:40.232688 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:33:12.238923 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:39:16.245909 3.000646 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 07:39:23.252306 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:39:31.254226 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:39:32.766011 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 07:39:32.766217 0.015624 udp 10.0.2.22 61389 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 07:39:32.782274 0.000000 udp 10.0.2.22 61390 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 07:39:47.257181 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:40:19.262981 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:46:23.269374 3.001217 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 07:46:30.276192 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:46:38.278286 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:46:54.280843 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:47:26.286824 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:53:30.293712 3.000915 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 07:53:37.300225 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:53:45.301968 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:54:01.304693 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 07:54:32.760131 0.000197 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 07:54:32.760439 0.017730 udp 10.0.2.22 61391 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 07:54:32.778666 0.000000 udp 10.0.2.22 61392 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 07:54:33.310986 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:00:37.317654 3.000729 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 08:00:44.324298 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:00:52.325263 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:01:08.328719 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:01:40.334708 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:07:44.340825 3.011308 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 08:07:51.358137 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:07:59.359759 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:08:15.362873 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:08:47.368777 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:09:32.763966 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 08:09:32.764070 0.010269 udp 10.0.2.22 61393 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 08:09:32.774699 0.000000 udp 10.0.2.22 61394 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 08:25:30.383159 3.001957 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 08:25:37.390828 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:25:45.392402 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:26:01.395293 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:26:33.402100 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:28:32.763121 0.000129 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 08:28:32.763347 0.011974 udp 10.0.2.22 61395 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 08:28:32.775688 0.000000 udp 10.0.2.22 61396 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 08:32:37.408157 3.001063 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 08:32:44.414927 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:32:52.416364 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:33:08.419572 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:33:40.425604 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:39:32.763025 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 08:39:32.763139 0.011343 udp 10.0.2.22 61397 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 08:39:32.774926 0.000000 udp 10.0.2.22 61398 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 08:39:44.431577 3.001572 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 08:39:51.438853 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:39:59.440421 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:40:15.443434 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:40:47.449458 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:46:51.455589 3.001582 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 08:46:58.462892 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:47:06.464307 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:47:22.467188 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:47:54.473556 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:53:58.480436 3.000422 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 08:54:05.486942 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:54:13.488622 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:54:29.491625 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 08:54:32.765845 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 08:54:32.766002 0.018261 udp 10.0.2.22 61399 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 08:54:32.784670 0.000000 udp 10.0.2.22 61400 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 08:55:01.497299 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:01:05.504706 2.999902 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 09:01:12.510909 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:01:20.512248 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:01:36.514786 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:02:08.521221 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:08:12.527394 3.001655 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 09:08:19.534706 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:08:27.536084 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:08:43.539306 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:09:15.544905 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:09:32.760322 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 09:09:32.760472 0.010237 udp 10.0.2.22 61401 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 09:09:32.771105 0.000000 udp 10.0.2.22 61402 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 09:15:19.550751 3.018791 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 09:15:26.568587 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:15:34.570212 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:15:50.573037 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:16:22.579230 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:22:26.584834 3.001982 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 09:22:33.592676 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:22:41.594230 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:22:57.597086 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:23:29.603120 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:28:32.759407 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 09:28:32.759576 0.010412 udp 10.0.2.22 61403 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 09:28:32.770369 0.000000 udp 10.0.2.22 61404 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 09:29:33.610107 3.000563 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 09:29:40.616593 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:29:48.618235 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:30:04.621278 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:30:36.627157 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:36:40.633127 3.001663 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 09:36:47.640750 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:36:55.642303 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:37:11.644884 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:37:43.651589 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:39:32.758244 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 09:39:32.758369 0.012155 udp 10.0.2.22 61405 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 09:39:32.770988 0.000000 udp 10.0.2.22 61406 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 09:43:47.656751 3.002385 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 09:43:54.664710 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:44:02.666087 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:44:18.669097 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:44:50.675282 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:51:08.691754 3.001434 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 09:51:15.698638 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:51:23.700133 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:51:39.703202 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:52:11.709227 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:54:32.762296 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 09:54:32.762422 0.015777 udp 10.0.2.22 61407 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 09:54:32.778631 0.000000 udp 10.0.2.22 61408 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 09:58:15.714756 3.002190 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 09:58:22.722526 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:58:30.723882 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:58:46.727177 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 09:59:18.733082 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:05:22.739261 3.001049 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 10:05:29.746692 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:05:37.747940 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:05:53.750650 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:06:25.757172 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:09:32.766332 0.000085 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 10:09:32.766495 0.010166 udp 10.0.2.22 61409 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 10:09:32.777043 0.000000 udp 10.0.2.22 61410 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 10:24:21.766904 3.001815 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 10:24:28.774261 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:24:36.775297 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:24:52.778713 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:25:24.784648 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:28:32.765252 0.000227 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 10:28:32.765572 0.012452 udp 10.0.2.22 61411 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 10:28:32.778443 0.000000 udp 10.0.2.22 61412 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 10:31:28.790711 3.001600 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 10:31:35.798449 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:31:43.799756 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:31:59.802998 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:32:31.808759 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:38:35.815865 3.000385 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 10:38:42.822393 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:38:50.823660 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:39:06.826810 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:39:32.764077 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 10:39:32.764294 0.031321 udp 10.0.2.22 61413 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 10:39:32.796010 0.000000 udp 10.0.2.22 61414 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 10:39:38.833124 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:45:42.839027 3.011562 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 10:45:49.855949 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:45:57.857784 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:46:13.860864 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:46:45.866777 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:52:49.873671 3.000460 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 10:52:56.880065 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:53:04.881692 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:53:20.884529 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:53:52.890621 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 10:54:32.758324 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 10:54:32.758442 0.042501 udp 10.0.2.22 61415 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 10:54:32.801488 0.000000 udp 10.0.2.22 61416 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 10:59:56.897202 3.001178 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 11:00:03.904226 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:00:11.905711 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:00:27.908596 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:00:59.914416 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:07:03.920851 3.001439 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 11:07:10.927868 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:07:18.929604 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:07:34.932689 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:08:08.032267 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:09:32.764964 0.000085 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 11:09:32.765127 0.011235 udp 10.0.2.22 61417 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 11:09:32.776726 0.000000 udp 10.0.2.22 61418 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 11:25:07.959288 3.001737 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 11:25:14.966840 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:25:22.968284 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:25:38.971153 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:26:10.977213 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:28:32.761197 0.000092 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 11:28:32.761422 0.010106 udp 10.0.2.22 61419 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 11:28:32.771941 0.000000 udp 10.0.2.22 61420 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 11:32:14.995288 2.999587 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 11:32:22.000760 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:32:30.002415 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:32:46.005067 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:33:18.011348 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:39:22.016827 3.001963 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 11:39:29.024714 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:39:32.760290 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 11:39:32.760454 0.010142 udp 10.0.2.22 61421 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 11:39:32.770984 0.000000 udp 10.0.2.22 61422 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 11:39:37.026416 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:39:53.028980 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:40:25.035342 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:46:29.041320 3.001738 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 11:46:36.048591 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:46:44.050141 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:47:00.053223 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:47:32.059239 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:53:36.065042 3.001595 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 11:53:43.072676 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:53:51.073859 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:54:07.076872 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 11:54:32.764356 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 11:54:32.764520 0.023615 udp 10.0.2.22 61423 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 11:54:32.788583 0.000000 udp 10.0.2.22 61424 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 11:54:39.082956 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:00:45.092027 3.001734 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 12:00:52.099565 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:01:00.100824 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:01:16.104126 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:01:48.110264 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:07:52.116463 3.001446 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 12:07:59.123268 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:08:07.124812 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:08:23.128157 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:08:55.133870 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:09:32.758163 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 12:09:32.758315 0.011100 udp 10.0.2.22 61425 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 12:09:32.769833 0.000000 udp 10.0.2.22 61426 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 12:14:59.140401 3.001247 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 12:15:06.147546 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:15:14.158647 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:15:30.162086 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:16:02.168254 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:22:06.174578 3.001274 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 12:22:13.181222 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:22:21.182854 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:22:37.185857 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:23:09.191848 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:28:32.757203 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 12:28:32.757334 0.022250 udp 10.0.2.22 61427 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 12:28:32.780008 0.000000 udp 10.0.2.22 61428 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 12:29:13.197568 3.002074 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 12:29:20.205427 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:29:28.206742 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:29:44.209970 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:30:16.216055 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:36:20.221841 3.001769 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 12:36:27.229065 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:36:35.230890 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:36:51.233813 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:37:23.239751 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:39:32.755965 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 12:39:32.756173 0.010088 udp 10.0.2.22 61429 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 12:39:32.766654 0.000000 udp 10.0.2.22 61430 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 12:43:27.246363 3.001288 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 12:43:34.253719 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:43:42.254731 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:43:58.258081 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:44:30.263896 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:50:40.279581 3.000575 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 12:50:47.285821 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:50:55.287394 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:51:11.290654 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:51:43.295774 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:54:32.760313 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 12:54:32.760418 0.010154 udp 10.0.2.22 61431 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 12:54:32.770980 0.000000 udp 10.0.2.22 61432 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 12:57:47.303481 3.000873 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 12:57:54.309731 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:58:02.311172 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:58:18.314166 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 12:58:50.320543 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:04:54.326852 3.068430 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 13:05:01.376016 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:05:09.345239 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:05:25.348450 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:05:57.364355 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:09:32.763794 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 13:09:32.763918 0.011009 udp 10.0.2.22 61433 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 13:09:32.775370 0.000000 udp 10.0.2.22 61434 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 13:24:04.379559 3.001899 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 13:24:11.387549 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:24:19.388834 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:24:35.391931 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:25:07.397990 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:28:32.762570 0.000152 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 13:28:32.762823 0.023723 udp 10.0.2.22 61435 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 13:28:32.787006 0.000000 udp 10.0.2.22 61436 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 13:31:11.404332 3.001121 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 13:31:18.411138 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:31:26.412716 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:31:42.415951 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:32:14.421939 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:38:18.427611 3.002540 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 13:38:25.435048 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:38:33.436568 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:38:49.439804 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:39:21.446144 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:39:32.761965 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 13:39:32.762063 0.011253 udp 10.0.2.22 61437 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 13:39:32.773702 0.000000 udp 10.0.2.22 61438 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 13:45:29.457361 3.001918 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 13:45:36.465005 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:45:44.466323 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:46:00.469303 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:46:32.475294 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:52:36.481013 3.002423 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 13:52:43.488914 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:52:51.490307 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:53:07.493510 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:53:39.499465 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:54:32.756073 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 13:54:32.756213 0.011193 udp 10.0.2.22 61439 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 13:54:32.767759 0.000000 udp 10.0.2.22 61440 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 13:59:43.504785 3.002448 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 13:59:50.512749 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 13:59:58.514230 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:00:14.517387 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:00:46.523444 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:06:50.529916 3.001156 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 14:06:57.536878 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:07:05.538284 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:07:21.541156 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:07:53.547602 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:09:32.759990 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 14:09:32.760107 0.010407 udp 10.0.2.22 61441 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 14:09:32.770909 0.000000 udp 10.0.2.22 61442 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 14:25:03.561759 3.000760 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 14:25:10.568165 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:25:18.569755 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:25:34.572680 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:26:06.578802 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:28:32.759220 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 14:28:32.759395 0.011672 udp 10.0.2.22 61443 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 14:28:32.771433 0.000000 udp 10.0.2.22 61444 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 14:32:10.585101 3.001500 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 14:32:17.591773 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:32:25.593664 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:32:41.596787 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:33:13.604540 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:39:17.608716 3.001980 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 14:39:24.616132 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:39:32.617885 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:39:32.758230 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 14:39:32.758361 0.010261 udp 10.0.2.22 61445 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 14:39:32.768940 0.000000 udp 10.0.2.22 61446 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 14:39:48.620747 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:40:20.626836 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:46:24.632445 3.024225 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 14:46:31.650973 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:46:39.652409 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:46:55.654605 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:47:27.660925 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:53:31.667607 3.000751 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 14:53:38.674301 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:53:46.675217 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:54:02.678819 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 14:54:32.762107 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 14:54:32.762223 0.010812 udp 10.0.2.22 61447 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 14:54:32.773501 0.000000 udp 10.0.2.22 61448 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 14:54:34.684164 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:00:43.698004 3.001003 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 15:00:50.705730 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:00:58.706966 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:01:14.710070 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:01:46.715364 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:07:50.722050 3.001608 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 15:07:57.729267 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:08:05.730554 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:08:21.733420 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:08:53.740238 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:09:32.756139 0.000108 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 15:09:32.756339 0.010439 udp 10.0.2.22 61449 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 15:09:32.767177 0.000000 udp 10.0.2.22 61450 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 15:14:57.746014 3.001559 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 15:15:04.753118 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:15:12.754933 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:15:28.757938 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:16:00.773985 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:22:04.779884 3.001920 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 15:22:11.787178 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:22:19.788690 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:22:35.791767 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:23:07.797900 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:28:32.755245 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 15:28:32.755441 0.011554 udp 10.0.2.22 61451 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 15:28:32.767413 0.000000 udp 10.0.2.22 61452 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 15:29:11.804443 3.000875 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 15:29:18.811287 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:29:26.812839 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:29:42.815192 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:30:14.821927 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:36:18.828369 3.001408 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 15:36:25.834881 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:36:33.836588 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:36:49.839424 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:37:21.845968 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:39:32.754147 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 15:39:32.754293 0.010490 udp 10.0.2.22 61453 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 15:39:32.765162 0.000000 udp 10.0.2.22 61454 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 15:43:25.851595 3.001997 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 15:43:32.859176 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:43:40.861169 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:43:56.863770 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:44:28.869425 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:50:32.876206 3.001077 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 15:50:39.882978 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:50:47.884589 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:51:03.887882 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:51:35.893974 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:54:32.758224 0.000162 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 15:54:32.758514 0.010789 udp 10.0.2.22 61455 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 15:54:32.769711 0.000000 udp 10.0.2.22 61456 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 15:57:43.906432 3.000763 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 15:57:50.912859 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:57:58.914363 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:58:14.917284 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 15:58:46.923386 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:04:52.932301 3.001557 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 16:04:59.941860 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:05:07.940939 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:05:23.944184 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:05:55.950469 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:09:32.761990 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 16:09:32.762134 0.010206 udp 10.0.2.22 61457 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 16:09:32.772726 0.000000 udp 10.0.2.22 61458 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 16:24:06.961100 3.002089 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 16:24:13.969227 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:24:21.970443 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:24:37.973560 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:25:09.979706 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:28:32.761135 0.000099 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 16:28:32.761349 0.023032 udp 10.0.2.22 61459 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 16:28:32.784774 0.000000 udp 10.0.2.22 61460 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 16:31:13.985851 3.001523 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 16:31:20.992833 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:31:28.994303 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:31:44.997555 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:32:17.003175 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:38:21.009071 3.002142 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 16:38:28.016765 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:38:36.018449 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:38:52.021681 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:39:24.027436 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:39:32.760476 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 16:39:32.760630 0.010847 udp 10.0.2.22 61461 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 16:39:32.771919 0.000000 udp 10.0.2.22 61462 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 16:45:34.042582 3.001311 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 16:45:41.049506 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:45:49.050932 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:46:05.054182 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:46:37.060272 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:52:41.066096 3.045150 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 16:52:48.091386 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:52:56.084938 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:53:12.088087 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:53:44.094041 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 16:54:32.754234 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 16:54:32.754410 0.010507 udp 10.0.2.22 61463 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 16:54:32.765425 0.000000 udp 10.0.2.22 61464 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 16:59:48.100383 3.001538 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 16:59:55.107808 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:00:03.108912 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:00:19.111912 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:00:51.117944 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:06:55.124436 3.000801 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 17:07:02.131529 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:07:10.133025 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:07:26.136171 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:07:58.141867 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:09:32.758316 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 17:09:32.758466 0.010238 udp 10.0.2.22 61465 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 17:09:32.769130 0.000000 udp 10.0.2.22 61466 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 17:25:08.155687 3.011328 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 17:25:15.173085 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:25:23.174467 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:25:39.177851 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:26:11.183730 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:28:32.757307 0.000098 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 17:28:32.757484 0.012884 udp 10.0.2.22 61467 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 17:28:32.770783 0.000000 udp 10.0.2.22 61468 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 17:32:15.189844 3.001191 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 17:32:22.196846 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:32:30.198294 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:32:46.201937 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:33:18.207273 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:39:22.214483 3.000645 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 17:39:29.220849 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:39:32.755517 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 17:39:32.755696 0.010598 udp 10.0.2.22 61469 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 17:39:32.766688 0.000000 udp 10.0.2.22 61470 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 17:39:37.222398 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:39:53.225192 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:40:25.231407 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:46:29.237724 3.001358 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 17:46:36.244924 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:46:44.246238 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:47:00.249385 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:47:32.255351 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:53:36.261292 3.001726 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 17:53:43.268722 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:53:51.270581 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:54:07.273450 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 17:54:32.760192 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 17:54:32.760374 0.010120 udp 10.0.2.22 61471 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 17:54:32.770914 0.000000 udp 10.0.2.22 61472 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 17:54:39.279246 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:00:48.292525 3.001943 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 18:00:55.300119 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:01:03.301846 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:01:19.304550 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:01:51.310433 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:07:55.317021 3.001170 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 18:08:02.324094 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:08:10.325772 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:08:26.328470 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:08:58.334616 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:09:32.754490 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 18:09:32.754726 0.010074 udp 10.0.2.22 61473 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 18:09:32.765190 0.000000 udp 10.0.2.22 61474 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 18:15:02.340645 3.001441 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 18:15:09.348160 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:15:17.349456 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:15:33.352433 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:16:05.358687 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:22:09.364458 3.001888 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 18:22:16.372366 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:22:24.373610 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:22:40.376375 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:23:12.382406 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:28:32.753119 0.000103 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 18:28:32.753518 0.022015 udp 10.0.2.22 61475 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 18:28:32.775916 0.000000 udp 10.0.2.22 61476 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 18:29:16.389273 3.000732 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 18:29:23.395579 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:29:31.397637 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:29:47.405021 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:30:19.406347 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:36:23.412891 3.001268 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 18:36:30.419305 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:36:38.421268 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:36:54.426378 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:37:26.431103 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:39:32.752192 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 18:39:32.752317 0.010222 udp 10.0.2.22 61477 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 18:39:32.763008 0.000000 udp 10.0.2.22 61478 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 18:43:30.436336 3.004711 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 18:43:37.444199 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:43:45.445602 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:44:01.448626 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:44:33.454331 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:50:46.463566 3.001321 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 18:50:53.470849 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:51:01.472130 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:51:17.475258 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:51:49.481585 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:54:32.756231 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 18:54:32.756344 0.010267 udp 10.0.2.22 61479 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 18:54:32.766991 0.000000 udp 10.0.2.22 61480 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 18:57:53.487693 3.001054 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 18:58:00.494585 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:58:08.496265 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:58:24.499213 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 18:58:56.505176 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:05:01.512630 3.001682 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 19:05:08.519919 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:05:16.521492 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:05:32.524512 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:06:04.530426 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:09:32.760162 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 19:09:32.760341 0.010795 udp 10.0.2.22 61481 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 19:09:32.771531 0.000000 udp 10.0.2.22 61482 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 19:24:07.540597 3.001495 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 19:24:14.548112 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:24:22.549479 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:24:38.552392 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:25:10.558436 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:28:32.758890 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 19:28:32.759033 0.011145 udp 10.0.2.22 61483 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 19:28:32.770595 0.000000 udp 10.0.2.22 61484 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 19:31:14.565397 3.000224 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 19:31:21.571685 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:31:29.572991 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:31:45.576278 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:32:17.582311 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:38:21.588734 3.001227 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 19:38:28.595916 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:38:36.597321 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:38:52.600403 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:39:24.606509 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:39:32.758390 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 19:39:32.758539 0.010236 udp 10.0.2.22 61485 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 19:39:32.769256 0.000000 udp 10.0.2.22 61486 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 19:45:28.612616 3.001615 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 19:45:35.619728 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:45:43.621314 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:45:59.623778 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:46:31.630268 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:52:35.637305 3.001064 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 19:52:42.643690 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:52:50.666114 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:53:06.658299 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:53:38.663885 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:54:32.751751 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 19:54:32.751852 0.010211 udp 10.0.2.22 61487 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 19:54:32.762477 0.000000 udp 10.0.2.22 61488 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 19:59:42.670549 3.001633 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 19:59:49.677861 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 19:59:57.679348 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:00:13.682275 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:00:45.688109 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:06:49.693924 3.002116 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 20:06:56.701647 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:07:04.703372 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:07:20.705813 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:07:52.712001 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:09:32.755628 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 20:09:32.755824 0.010177 udp 10.0.2.22 61489 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 20:09:32.766745 0.000000 udp 10.0.2.22 61490 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 20:25:03.728398 3.010518 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 20:25:10.744225 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:25:18.746266 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:25:34.749357 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:26:06.754939 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:28:32.754762 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 20:28:32.754975 0.011471 udp 10.0.2.22 61491 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 20:28:32.766865 0.000000 udp 10.0.2.22 61492 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 20:32:10.761226 3.001525 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 20:32:17.768447 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:32:25.770590 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:32:41.772909 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:33:13.779024 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:39:17.785638 3.001242 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 20:39:24.792349 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:39:32.753973 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 20:39:32.754067 0.011860 udp 10.0.2.22 61493 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 20:39:32.766298 0.000000 udp 10.0.2.22 61494 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 20:39:32.793915 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:39:48.797089 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:40:20.803113 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:46:24.808257 3.002507 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 20:46:31.816484 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:46:39.818196 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:46:55.820932 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:47:27.836924 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:53:31.844508 2.999952 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 20:53:38.851706 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:53:46.852000 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:54:02.854880 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 20:54:32.758184 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 20:54:32.758340 0.025665 udp 10.0.2.22 61495 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 20:54:32.784457 0.000000 udp 10.0.2.22 61496 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 20:54:34.861074 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:00:43.874842 3.001011 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 21:00:50.881552 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:00:58.882955 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:01:14.886193 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:01:46.892188 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:07:50.898685 3.001314 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 21:07:57.905232 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:08:05.907151 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:08:21.910154 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:08:53.916115 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:09:32.752087 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 21:09:32.752231 0.010374 udp 10.0.2.22 61497 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 21:09:32.762994 0.000000 udp 10.0.2.22 61498 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 21:14:57.922520 3.001077 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 21:15:04.929715 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:15:12.931157 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:15:28.934123 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:16:00.940470 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:22:04.945820 3.002174 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 21:22:11.953864 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:22:19.955411 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:22:35.958120 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:23:07.964195 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:28:32.751359 0.000102 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 21:28:32.751546 0.011433 udp 10.0.2.22 61499 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 21:28:32.763428 0.000000 udp 10.0.2.22 61500 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 21:29:11.970739 3.000822 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 21:29:18.977636 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:29:26.978914 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:29:42.982175 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:30:14.988265 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:36:18.994147 3.001179 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 21:36:26.001948 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:36:34.002933 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:36:50.005952 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:37:22.012142 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:39:32.760447 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 21:39:32.760639 0.011631 udp 10.0.2.22 61501 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 21:39:32.772650 0.000000 udp 10.0.2.22 61502 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 21:43:26.018985 3.001032 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 21:43:33.025185 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:43:41.026716 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:43:57.030413 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:44:29.035468 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:50:34.044283 3.000802 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 21:50:41.051153 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:50:49.052178 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:51:05.055098 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:51:37.061494 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:54:32.754176 0.000174 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 21:54:32.754468 0.012289 udp 10.0.2.22 61503 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 21:54:32.767175 0.000000 udp 10.0.2.22 61504 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 21:57:45.073937 3.001004 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 21:57:52.081101 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:58:00.081997 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:58:16.085230 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 21:58:48.091215 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:04:54.100138 3.001666 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 22:05:01.107824 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:05:09.108998 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:05:25.112035 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:05:57.118262 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:09:32.758181 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 22:09:32.758295 0.010780 udp 10.0.2.22 61505 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 22:09:32.769596 0.000000 udp 10.0.2.22 61506 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 22:24:07.127582 3.002266 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 22:24:14.135157 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:24:22.136581 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:24:38.140154 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:25:10.145235 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:28:32.757047 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 22:28:32.757215 0.013792 udp 10.0.2.22 61507 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 22:28:32.771373 0.000000 udp 10.0.2.22 61508 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 22:31:14.152572 3.001167 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 22:31:21.159198 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:31:29.160791 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:31:45.163934 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:32:17.170136 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:38:21.176939 3.000465 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 22:38:28.183176 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:38:36.184606 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:38:52.187883 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:39:24.193906 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:39:32.755658 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 22:39:32.755864 0.012124 udp 10.0.2.22 61509 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 22:39:32.768444 0.000000 udp 10.0.2.22 61510 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 22:45:33.208273 3.000370 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 22:45:40.214281 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:45:48.215826 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:46:04.219065 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:46:36.224922 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:52:40.231661 3.000999 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 22:52:47.238419 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:52:55.240241 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:53:11.242643 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:53:43.258894 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 22:54:32.750003 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 22:54:32.750178 0.010279 udp 10.0.2.22 61511 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 22:54:32.760818 0.000000 udp 10.0.2.22 61512 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 22:59:47.264733 3.001743 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 22:59:54.271863 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:00:02.273976 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:00:18.276836 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:00:50.282650 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:06:54.289095 3.001462 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 23:07:01.296132 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:07:09.297793 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:07:25.300567 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:07:57.306840 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:09:32.754105 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 23:09:32.754305 0.011503 udp 10.0.2.22 61513 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 23:09:32.766170 0.000000 udp 10.0.2.22 61514 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 23:25:07.320512 3.001390 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 23:25:14.327841 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:25:22.329139 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:25:38.332282 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:26:10.338291 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:28:32.752845 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 23:28:32.753014 0.010632 udp 10.0.2.22 61515 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 23:28:32.764024 0.000000 udp 10.0.2.22 61516 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 23:32:14.345078 3.001505 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 23:32:21.351678 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:32:29.353350 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:32:45.356410 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:33:17.362053 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:39:21.368273 3.001507 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 23:39:28.375698 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:39:32.752121 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 23:39:32.752234 0.014293 udp 10.0.2.22 61517 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 23:39:32.766937 0.000000 udp 10.0.2.22 61518 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 23:39:36.377054 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:39:52.380674 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:40:24.386413 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:46:28.392602 3.011344 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 23:46:35.409618 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:46:43.411375 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:46:59.414189 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:47:31.420355 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:53:35.467975 3.000027 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/08 23:53:42.473700 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:53:50.475032 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:54:06.478073 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/08 23:54:32.795783 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/08 23:54:32.795942 0.011972 udp 10.0.2.22 61519 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/08 23:54:32.808254 0.000000 udp 10.0.2.22 61520 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/08 23:54:38.483754 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:00:47.496616 3.002580 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 00:00:54.504808 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:01:02.506249 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:01:18.509656 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:01:50.515241 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:07:54.521440 3.012593 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 00:08:01.538802 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:08:09.540111 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:08:25.543629 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:08:57.549435 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:09:32.790216 0.000174 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 00:09:32.790495 0.013618 udp 10.0.2.22 61521 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 00:09:32.804546 0.000000 udp 10.0.2.22 61522 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 00:15:01.555709 3.001380 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 00:15:08.562829 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:15:16.564647 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:15:32.567337 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:16:04.573255 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:22:08.579483 3.001356 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 00:22:15.586831 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:22:23.588225 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:22:39.591363 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:23:11.597679 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:28:32.789170 0.000277 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 00:28:32.789524 0.010564 udp 10.0.2.22 61523 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 00:28:32.800500 0.000000 udp 10.0.2.22 61524 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 00:29:15.603568 3.001363 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 00:29:22.610632 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:29:30.612129 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:29:46.615233 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:30:18.621230 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:36:22.626647 3.002356 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 00:36:29.634823 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:36:37.636288 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:36:53.639123 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:37:25.645333 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:39:32.798167 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 00:39:32.798274 0.010316 udp 10.0.2.22 61525 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 00:39:32.808975 0.000000 udp 10.0.2.22 61526 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 00:43:29.651420 3.001784 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 00:43:36.658959 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:43:44.660128 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:44:00.662888 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:44:32.669026 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:50:38.677591 3.002400 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 00:50:45.685764 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:50:53.687366 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:51:09.690617 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:51:41.696081 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:54:32.792227 0.000186 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 00:54:32.792519 0.011408 udp 10.0.2.22 61527 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 00:54:32.804396 0.000000 udp 10.0.2.22 61528 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 00:57:45.702022 3.001495 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 00:57:52.709607 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:58:00.710820 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:58:16.714023 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 00:58:48.719980 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:04:52.726753 3.000851 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 01:04:59.732803 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:05:07.735157 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:05:23.738133 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:05:55.744088 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:09:32.796129 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 01:09:32.796242 0.010311 udp 10.0.2.22 61529 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 01:09:32.806963 0.000000 udp 10.0.2.22 61530 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 01:24:03.850859 3.001670 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 01:24:10.858375 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:24:18.859917 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:24:34.863204 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:25:06.869174 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:28:32.895445 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 01:28:32.895646 0.010160 udp 10.0.2.22 61531 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 01:28:32.906207 0.000000 udp 10.0.2.22 61532 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 01:31:10.875291 3.001292 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 01:31:17.882491 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:31:25.883329 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:31:41.886896 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:32:13.892736 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:38:17.899301 3.001226 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 01:38:24.906325 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:38:32.908093 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:38:48.910824 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:39:20.917107 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:39:32.894112 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 01:39:32.894320 0.011525 udp 10.0.2.22 61533 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 01:39:32.906231 0.000000 udp 10.0.2.22 61534 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 01:45:28.928859 3.001636 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 01:45:35.935893 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:45:43.937952 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:45:59.940532 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:46:31.946527 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:52:35.953238 3.001346 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 01:52:42.960274 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:52:50.961439 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:53:06.964795 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:53:38.970668 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:54:32.888469 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 01:54:32.888618 0.011492 udp 10.0.2.22 61535 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 01:54:32.900638 0.000000 udp 10.0.2.22 61536 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 01:59:42.976718 3.001770 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 01:59:49.984020 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 01:59:57.985186 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:00:13.988633 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:00:45.994520 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:06:50.001026 3.001439 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 02:06:57.008069 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:07:05.009812 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:07:21.012328 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:07:53.018734 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:09:32.892407 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 02:09:32.892564 0.010146 udp 10.0.2.22 61537 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 02:09:32.903071 0.000000 udp 10.0.2.22 61538 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 02:25:02.032392 3.000143 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 02:25:09.038583 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:25:17.039628 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:25:33.042748 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:26:05.058725 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:28:32.891386 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 02:28:32.891551 0.010283 udp 10.0.2.22 61539 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 02:28:32.902176 0.000000 udp 10.0.2.22 61540 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 02:32:09.064809 3.001479 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 02:32:16.072017 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:32:24.073568 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:32:40.076492 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:33:12.082683 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:39:16.088368 3.002052 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 02:39:23.096037 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:39:31.097928 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:39:32.890117 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 02:39:32.890264 0.010444 udp 10.0.2.22 61541 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 02:39:32.901130 0.000000 udp 10.0.2.22 61542 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 02:39:47.100792 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:40:19.106542 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:46:23.113576 3.000528 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 02:46:30.119831 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:46:38.121275 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:46:54.124739 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:47:26.130505 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:53:30.136161 3.002416 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 02:53:37.144003 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:53:45.145621 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:54:01.148631 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 02:54:32.894418 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 02:54:32.894590 0.011485 udp 10.0.2.22 61543 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 02:54:32.906465 0.000000 udp 10.0.2.22 61544 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 02:54:33.154687 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:00:37.160795 3.001455 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 03:00:44.168116 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:00:52.169683 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:01:08.172345 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:01:40.178723 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:07:44.184956 3.001515 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 03:07:51.191947 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:07:59.193323 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:08:15.196725 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:08:47.202735 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:09:32.888336 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 03:09:32.888447 0.010497 udp 10.0.2.22 61545 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 03:09:32.899340 0.000000 udp 10.0.2.22 61546 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 03:25:30.217237 3.002004 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 03:25:37.224786 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:25:45.226397 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:26:01.229528 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:26:33.235467 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:28:32.887340 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 03:28:32.887440 0.010278 udp 10.0.2.22 61547 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 03:28:32.898110 0.000000 udp 10.0.2.22 61548 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 03:32:37.241114 3.001627 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 03:32:44.248752 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:32:52.250131 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:33:08.252907 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:33:40.258892 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:39:32.896455 1.715264 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 03:39:34.611836 0.011000 udp 10.0.2.22 61549 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 03:39:34.623241 0.000000 udp 10.0.2.22 61550 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 03:39:45.833659 2.957412 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 03:39:52.751188 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:40:00.649042 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:40:16.443244 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:40:48.052652 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:46:51.288839 3.002089 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 03:46:58.296783 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:47:06.298084 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:47:22.301070 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:47:54.307124 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:53:58.313067 3.001613 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 03:54:05.320519 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:54:13.322064 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:54:29.324830 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 03:54:32.890355 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 03:54:32.890522 0.012511 udp 10.0.2.22 61551 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 03:54:32.903394 0.000000 udp 10.0.2.22 61552 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 03:55:01.331100 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:01:05.338151 3.000500 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 04:01:12.344541 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:01:20.345873 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:01:36.349129 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:02:08.354975 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:08:12.361221 3.764293 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 04:08:20.078344 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:08:27.978727 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:08:43.779709 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:09:19.406719 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:09:36.656856 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 04:09:36.656966 0.010400 udp 10.0.2.22 61553 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 04:09:36.667734 0.000000 udp 10.0.2.22 61554 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 04:15:19.404839 4.840705 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 04:15:28.207440 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:15:38.497081 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:15:54.269837 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:16:25.816721 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:22:32.277703 2.966430 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 04:22:39.187854 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:22:47.082687 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:23:02.867864 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:23:34.431765 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:28:33.648808 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 04:28:33.648970 0.010188 udp 10.0.2.22 61555 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 04:28:33.659459 0.000000 udp 10.0.2.22 61556 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 04:29:33.484888 2.999827 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 04:29:40.490185 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:29:48.491948 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:30:04.494659 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:30:36.500738 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:36:40.506676 3.002014 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 04:36:47.514087 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:36:55.515877 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:37:11.518814 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:37:43.524618 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:39:32.892261 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 04:39:32.892405 0.010445 udp 10.0.2.22 61557 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 04:39:32.903139 0.000000 udp 10.0.2.22 61558 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 04:43:47.531184 3.001566 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 04:43:54.538378 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:44:02.539642 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:44:18.542943 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:44:50.549698 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:50:54.555102 3.001432 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 04:51:01.562370 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:51:09.563783 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:51:25.567025 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:51:57.572963 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:54:32.896348 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 04:54:32.896443 0.010196 udp 10.0.2.22 61559 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 04:54:32.906943 0.000000 udp 10.0.2.22 61560 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 04:58:01.578866 3.001551 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 04:58:08.588836 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:58:16.587833 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:58:32.590798 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 04:59:04.597600 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:05:08.605418 3.003532 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 05:05:15.614406 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:05:23.616935 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:05:39.614581 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:06:11.620827 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:09:32.890671 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 05:09:32.890753 0.022733 udp 10.0.2.22 61561 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 05:09:32.913841 0.000000 udp 10.0.2.22 61562 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 05:24:14.631798 3.000544 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 05:24:21.638216 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:24:29.639783 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:24:45.642596 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:25:17.648504 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:28:32.889420 0.000161 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 05:28:32.889685 0.024605 udp 10.0.2.22 61563 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 05:28:32.914626 0.000000 udp 10.0.2.22 61564 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 05:31:21.655806 3.000374 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 05:31:28.662093 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:31:36.663614 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:31:52.666374 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:32:24.673210 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:38:28.678433 3.001881 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 05:38:35.686065 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:38:43.687647 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:38:59.690245 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:39:31.696329 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:39:32.888436 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 05:39:32.888535 0.012661 udp 10.0.2.22 61565 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 05:39:32.901535 0.000000 udp 10.0.2.22 61566 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 05:45:35.702465 3.001675 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 05:45:42.713479 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:45:50.711368 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:46:06.715290 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:46:38.720481 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:52:42.726809 3.001224 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 05:52:49.733866 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:52:57.737709 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:53:13.738401 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:53:45.744070 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 05:54:32.892356 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 05:54:32.892536 0.011315 udp 10.0.2.22 61567 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 05:54:32.904211 0.000000 udp 10.0.2.22 61568 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 05:59:49.750935 3.000850 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 05:59:56.757856 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:00:04.759615 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:00:20.762361 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:00:52.768311 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:06:56.775775 3.000375 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 06:07:03.782225 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:07:11.783807 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:07:27.786961 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:07:59.792187 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:09:32.885996 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 06:09:32.886096 0.010075 udp 10.0.2.22 61569 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 06:09:32.896504 0.000000 udp 10.0.2.22 61570 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 06:25:09.805870 3.001487 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 06:25:16.813013 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:25:24.814691 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:25:40.818146 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:26:12.823759 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:28:32.895172 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 06:28:32.895359 0.010406 udp 10.0.2.22 61571 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 06:28:32.906045 0.000000 udp 10.0.2.22 61572 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 06:32:16.830326 3.001146 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 06:32:23.837273 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:32:31.838852 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:32:47.841807 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:33:19.848320 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:39:23.854013 3.001126 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 06:39:30.861314 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:39:32.894372 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 06:39:32.894472 0.011039 udp 10.0.2.22 61573 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 06:39:32.905808 0.000000 udp 10.0.2.22 61574 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 06:39:38.862773 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:39:54.868058 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:40:26.871908 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:46:30.878277 3.003869 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 06:46:37.885058 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:46:45.886873 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:47:01.889866 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:47:33.895838 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:53:37.902714 3.002577 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 06:53:44.909129 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:53:52.910692 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:54:08.913890 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 06:54:32.888940 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 06:54:32.889080 0.022931 udp 10.0.2.22 61575 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 06:54:32.912405 0.000000 udp 10.0.2.22 61576 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 06:54:40.922427 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:00:44.926207 3.001062 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 07:00:51.932717 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:00:59.934784 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:01:15.937779 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:01:47.943908 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:07:51.949189 3.003682 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 07:07:58.957113 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:08:06.958795 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:08:22.961843 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:08:54.968089 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:09:32.892302 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 07:09:32.892425 0.010133 udp 10.0.2.22 61577 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 07:09:32.902914 0.000000 udp 10.0.2.22 61578 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 07:14:58.975817 2.999300 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 07:15:05.981077 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:15:13.982424 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:15:29.985280 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:16:01.994984 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:22:05.998679 3.015633 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 07:22:13.020403 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:22:21.019728 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:22:37.019769 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:23:09.025896 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:28:32.891687 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 07:28:32.891849 0.015491 udp 10.0.2.22 61579 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 07:28:32.907683 0.000000 udp 10.0.2.22 61580 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 07:29:13.036307 2.997652 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 07:29:20.040504 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:29:28.040650 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:29:44.043303 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:30:16.049782 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:36:20.056032 3.001452 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 07:36:27.063120 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:36:35.064381 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:36:51.067520 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:37:23.073326 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:39:32.890545 0.000113 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 07:39:32.890745 0.011240 udp 10.0.2.22 61581 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 07:39:32.902323 0.000000 udp 10.0.2.22 61582 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 07:43:27.079459 3.001736 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 07:43:34.089642 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:43:42.093125 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:43:58.100056 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:44:30.097531 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:50:34.104215 3.000930 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 07:50:41.110941 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:50:49.112606 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:51:05.115613 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:51:37.126908 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:54:32.894314 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 07:54:32.894439 0.013986 udp 10.0.2.22 61583 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 07:54:32.908766 0.000000 udp 10.0.2.22 61584 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 07:57:41.127012 3.001987 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 07:57:48.134956 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:57:56.136379 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:58:12.139378 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 07:58:44.145430 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:04:48.152702 3.000349 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 08:04:55.158833 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:05:03.168950 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:05:19.171563 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:05:51.169390 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:09:32.888262 0.000102 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 08:09:32.888457 0.010986 udp 10.0.2.22 61585 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 08:09:32.899867 0.000000 udp 10.0.2.22 61586 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 08:24:01.179574 3.001467 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 08:24:08.186866 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:24:16.188308 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:24:32.191796 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:25:04.197004 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:28:32.887323 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 08:28:32.887458 0.035890 udp 10.0.2.22 61587 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 08:28:32.923683 0.000000 udp 10.0.2.22 61588 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 08:31:08.203186 3.001833 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 08:31:15.210479 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:31:23.212290 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:31:39.215231 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:32:11.231181 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:38:15.238053 3.000654 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 08:38:22.244568 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:38:30.246246 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:38:46.249091 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:39:18.255237 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:39:32.886004 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 08:39:32.886102 0.011535 udp 10.0.2.22 61589 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 08:39:32.897977 0.000000 udp 10.0.2.22 61590 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 08:45:22.261981 3.000748 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 08:45:29.268458 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:45:37.269999 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:45:53.273202 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:46:25.279177 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:52:29.290543 2.996231 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 08:52:36.292677 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:52:44.294030 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:53:00.296915 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:53:32.312789 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:54:32.890490 0.000102 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 08:54:32.890679 0.013049 udp 10.0.2.22 61591 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 08:54:32.904105 0.000000 udp 10.0.2.22 61592 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 08:59:36.319011 3.001731 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 08:59:43.326608 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 08:59:51.327997 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:00:07.330909 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:00:39.337403 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:06:43.342953 3.001768 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 09:06:50.350391 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:06:58.351815 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:07:14.354974 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:07:46.360950 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:09:32.884189 0.000153 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 09:09:32.884436 0.011054 udp 10.0.2.22 61593 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 09:09:32.895859 0.000000 udp 10.0.2.22 61594 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 09:24:59.384222 3.006443 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 09:25:06.396213 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:25:14.398398 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:25:30.401044 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:26:02.406999 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:28:32.893603 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 09:28:32.893798 0.011976 udp 10.0.2.22 61595 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 09:28:32.906134 0.000000 udp 10.0.2.22 61596 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 09:32:06.414109 3.000449 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 09:32:13.420294 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:32:21.421950 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:32:37.424840 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:33:09.430807 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:39:13.436861 3.001499 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 09:39:20.444071 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:39:28.445851 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:39:32.892008 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 09:39:32.892099 0.016325 udp 10.0.2.22 61597 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 09:39:32.908803 0.000000 udp 10.0.2.22 61598 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 09:39:44.448839 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:40:16.454681 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:46:20.461701 3.000803 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 09:46:27.468195 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:46:35.472564 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:46:51.472770 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:47:23.478870 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:53:27.488416 2.997904 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 09:53:34.492207 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:53:42.493795 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:53:58.496652 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:54:30.502819 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 09:54:32.889858 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 09:54:32.889941 0.014319 udp 10.0.2.22 61599 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 09:54:32.904873 0.000000 udp 10.0.2.22 61600 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 10:00:34.509471 3.001094 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 10:00:41.516277 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:00:49.517705 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:01:05.520638 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:01:37.526579 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:07:41.532920 3.001236 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 10:07:48.541823 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:07:56.541864 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:08:12.544702 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:08:44.550789 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:09:32.890318 0.000182 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 10:09:32.890609 0.010216 udp 10.0.2.22 61601 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 10:09:32.901173 0.000000 udp 10.0.2.22 61602 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 10:25:30.560186 3.001365 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 10:25:37.567077 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:25:45.568614 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:26:01.572105 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:26:33.578339 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:28:32.888843 0.000098 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 10:28:32.889009 0.011433 udp 10.0.2.22 61603 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 10:28:32.900798 0.000000 udp 10.0.2.22 61604 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 10:32:37.583512 3.001713 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 10:32:44.590911 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:32:52.592838 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:33:08.595776 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:33:40.601773 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:39:32.888323 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 10:39:32.888426 0.011462 udp 10.0.2.22 61605 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 10:39:32.900253 0.000000 udp 10.0.2.22 61606 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 10:39:44.607755 3.001247 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 10:39:51.614859 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:39:59.616702 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:40:15.619657 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:40:47.625460 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:46:51.631340 3.001944 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 10:46:58.638978 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:47:06.639868 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:47:22.642982 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:47:54.649471 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:53:58.656064 3.001023 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 10:54:05.664280 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:54:13.664689 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:54:29.667866 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 10:54:32.892353 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 10:54:32.892493 0.011451 udp 10.0.2.22 61607 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 10:54:32.904313 0.000000 udp 10.0.2.22 61608 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 10:55:01.673971 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:01:05.680046 3.001556 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 11:01:12.687100 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:01:20.688540 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:01:36.691548 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:02:08.697317 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:08:12.703923 3.000890 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 11:08:19.711134 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:08:27.712501 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:08:43.715285 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:09:15.721762 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:09:32.886493 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 11:09:32.886664 0.010053 udp 10.0.2.22 61609 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 11:09:32.897040 0.000000 udp 10.0.2.22 61610 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 11:15:19.737745 3.000896 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 11:15:26.745039 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:15:34.746222 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:15:50.749228 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:16:22.755281 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:22:26.761727 3.001421 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 11:22:33.768721 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:22:41.770234 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:22:57.772918 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:23:29.780408 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:28:32.885131 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 11:28:32.885457 0.010177 udp 10.0.2.22 61611 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 11:28:32.895981 0.000000 udp 10.0.2.22 61612 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 11:29:33.786644 3.000410 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 11:29:40.792809 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:29:48.794070 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:30:04.797237 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:30:36.802753 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:36:40.809533 3.001054 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 11:36:47.816865 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:36:55.818437 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:37:11.821656 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:37:43.827816 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:39:32.884534 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 11:39:32.884632 0.012008 udp 10.0.2.22 61613 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 11:39:32.896978 0.000000 udp 10.0.2.22 61614 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 11:43:47.833137 3.001798 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 11:43:54.840678 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:44:02.847206 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:44:18.851646 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:44:50.851472 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:50:54.856881 3.002188 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 11:51:01.864713 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:51:09.866132 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:51:25.873134 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:51:57.875075 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:54:32.888075 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 11:54:32.888177 0.011374 udp 10.0.2.22 61615 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 11:54:32.899839 0.000000 udp 10.0.2.22 61616 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 11:58:01.881257 3.001641 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 11:58:08.888931 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:58:16.890349 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:58:32.893088 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 11:59:04.899405 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:05:08.907258 2.999838 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 12:05:15.913204 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:05:23.915408 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:05:39.917061 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:06:11.923524 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:09:32.892239 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 12:09:32.892419 0.010165 udp 10.0.2.22 61617 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 12:09:32.902927 0.000000 udp 10.0.2.22 61618 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 12:24:14.933114 3.001666 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 12:24:21.940496 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:24:29.941926 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:24:45.945268 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:25:17.950743 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:28:32.891385 0.000113 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 12:28:32.891588 0.014790 udp 10.0.2.22 61619 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 12:28:32.906778 0.000000 udp 10.0.2.22 61620 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 12:31:21.957708 3.000653 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 12:31:28.964315 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:31:36.965690 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:31:52.968842 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:32:24.975169 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:38:28.980970 3.001398 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 12:38:35.988320 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:38:43.990023 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:38:59.992937 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:39:31.999111 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:39:32.890326 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 12:39:32.890430 0.010923 udp 10.0.2.22 61621 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 12:39:32.901733 0.000000 udp 10.0.2.22 61622 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 12:45:36.006360 3.070019 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 12:45:43.051352 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:45:51.024020 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:46:07.026935 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:46:39.032748 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:52:43.044342 3.000047 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 12:52:50.046254 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:52:58.048113 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:53:14.050681 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:53:46.056834 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 12:54:32.884091 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 12:54:32.884191 0.014530 udp 10.0.2.22 61623 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 12:54:32.899129 0.000000 udp 10.0.2.22 61624 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 12:59:50.063061 3.001376 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 12:59:57.070275 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:00:05.071851 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:00:21.074884 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:00:53.080867 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:06:57.086929 3.001660 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 13:07:04.094364 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:07:12.096129 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:07:28.098562 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:08:00.104865 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:09:32.888655 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 13:09:32.888757 0.013355 udp 10.0.2.22 61625 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 13:09:32.902505 0.000000 udp 10.0.2.22 61626 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 13:25:05.111942 3.000835 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 13:25:12.118345 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:25:20.119969 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:25:36.122965 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:26:08.129133 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:28:32.887149 0.000127 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 13:28:32.887373 0.012085 udp 10.0.2.22 61627 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 13:28:32.899823 0.000000 udp 10.0.2.22 61628 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 13:32:12.135042 3.001861 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 13:32:19.142523 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:32:27.144208 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:32:43.147316 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:33:15.152908 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:39:19.159185 3.001441 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 13:39:26.166461 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:39:32.886406 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 13:39:32.886553 0.009962 udp 10.0.2.22 61629 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 13:39:32.896856 0.000000 udp 10.0.2.22 61630 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 13:39:34.167966 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:39:50.170946 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:40:22.176779 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:46:26.182715 3.002046 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 13:46:33.190260 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:46:41.191767 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:46:57.195143 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:47:29.201438 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:53:33.209050 2.999580 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 13:53:40.214407 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:53:48.218100 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:54:04.218854 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 13:54:32.890146 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 13:54:32.890294 0.022773 udp 10.0.2.22 61631 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 13:54:32.913445 0.000000 udp 10.0.2.22 61632 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 13:54:36.224852 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:00:40.230629 3.001858 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 14:00:47.238471 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:00:55.240173 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:01:11.242923 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:01:43.249208 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:07:47.254550 3.001999 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 14:07:54.262535 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:08:02.263903 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:08:18.267054 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:08:50.272792 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:09:32.884459 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 14:09:32.884553 0.010181 udp 10.0.2.22 61633 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 14:09:32.955278 0.000000 udp 10.0.2.22 61634 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 14:25:30.283663 3.001590 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 14:25:37.290917 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:25:45.292366 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:26:01.295460 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:26:33.301282 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:28:32.883045 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 14:28:32.883218 0.022538 udp 10.0.2.22 61635 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 14:28:32.906124 0.000000 udp 10.0.2.22 61636 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 14:32:37.307696 3.001160 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 14:32:44.314833 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:32:52.316542 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:33:08.319011 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:33:40.325783 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:39:32.882462 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 14:39:32.882570 0.009783 udp 10.0.2.22 61637 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 14:39:32.892726 0.000000 udp 10.0.2.22 61638 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 14:39:44.332044 3.000812 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 14:39:51.338919 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:39:59.340201 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:40:15.343164 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:40:47.349161 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:46:51.355208 3.001567 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 14:46:58.362586 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:47:06.364282 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:47:22.366989 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:47:54.373093 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:53:58.382250 2.998774 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 14:54:05.388890 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:54:13.390541 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:54:29.395213 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 14:54:32.896094 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 14:54:32.896244 0.021834 udp 10.0.2.22 61639 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 14:54:32.918492 0.000000 udp 10.0.2.22 61640 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 14:55:01.397014 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:01:05.403038 3.001864 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 15:01:12.410645 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:01:20.412104 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:01:36.415176 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:02:08.421111 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:08:12.427369 3.001364 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 15:08:19.434426 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:08:27.436176 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:08:43.439112 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:09:15.445156 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:09:32.890311 0.000102 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 15:09:32.890498 0.010128 udp 10.0.2.22 61641 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 15:09:32.900943 0.000000 udp 10.0.2.22 61642 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 15:15:19.450712 3.002081 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 15:15:26.458562 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:15:34.460211 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:15:50.462785 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:16:22.469130 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:22:26.476190 3.000709 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 15:22:33.482279 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:22:41.483594 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:22:57.486973 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:23:29.492765 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:28:32.889492 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 15:28:32.889643 0.011465 udp 10.0.2.22 61643 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 15:28:32.901514 0.000000 udp 10.0.2.22 61644 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 15:29:33.499792 3.028683 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 15:29:40.516370 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:29:48.521934 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:30:04.520711 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:30:36.527233 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:36:40.533192 3.001088 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 15:36:47.540286 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:36:55.541818 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:37:11.545073 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:37:43.550774 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:39:32.888589 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 15:39:32.888707 0.010081 udp 10.0.2.22 61645 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 15:39:32.899275 0.000000 udp 10.0.2.22 61646 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 15:43:47.556973 3.023885 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 15:43:54.584238 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:44:02.585852 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:44:18.588811 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:44:50.598911 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:50:54.601359 3.001298 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 15:51:01.608397 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:51:09.610225 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:51:25.612881 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:51:57.618833 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:54:32.886052 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 15:54:32.886174 0.011864 udp 10.0.2.22 61647 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 15:54:32.898417 0.000000 udp 10.0.2.22 61648 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 15:58:01.625270 3.001357 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 15:58:08.631894 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:58:16.633984 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:58:32.636729 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 15:59:04.642544 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:05:08.649220 3.003940 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 16:05:15.656270 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:05:23.657768 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:05:39.671817 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:06:11.666685 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:09:32.886291 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 16:09:32.886396 0.010848 udp 10.0.2.22 61649 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 16:09:32.897751 0.000000 udp 10.0.2.22 61650 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 16:24:13.675070 3.002165 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 16:24:20.682293 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:24:28.684141 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:24:44.687291 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:25:16.693280 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:28:32.885280 0.000189 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 16:28:32.885568 0.021616 udp 10.0.2.22 61651 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 16:28:32.907555 0.000000 udp 10.0.2.22 61652 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 16:31:20.699906 3.000940 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 16:31:27.706691 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:31:35.707981 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:31:51.710668 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:32:23.717062 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:38:27.723892 3.000749 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 16:38:34.730424 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:38:42.731761 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:38:58.734396 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:39:30.744097 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:39:32.884030 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 16:39:32.884229 0.010675 udp 10.0.2.22 61653 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 16:39:32.895276 0.000000 udp 10.0.2.22 61654 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 16:45:34.748224 3.000455 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 16:45:41.754319 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:45:49.756035 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:46:05.759128 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:46:37.769114 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:52:41.772936 2.999655 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 16:52:48.778987 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:52:56.784625 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:53:12.783389 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:53:44.788812 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 16:54:32.888321 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 16:54:32.888422 0.011637 udp 10.0.2.22 61655 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 16:54:32.900490 0.000000 udp 10.0.2.22 61656 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 16:59:48.795237 3.001546 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 16:59:55.802314 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:00:03.804073 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:00:19.807084 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:00:51.812483 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:06:55.819738 3.000907 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 17:07:02.826546 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:07:10.827847 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:07:26.830876 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:07:58.836788 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:09:32.882395 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 17:09:32.882512 0.010408 udp 10.0.2.22 61657 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 17:09:32.893305 0.000000 udp 10.0.2.22 61658 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 17:25:07.849163 3.012260 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 17:25:14.866792 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:25:22.867951 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:25:38.871145 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:26:10.876988 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:28:32.881451 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 17:28:32.881601 0.011429 udp 10.0.2.22 61659 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 17:28:32.893410 0.000000 udp 10.0.2.22 61660 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 17:32:14.883083 3.001651 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 17:32:21.890346 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:32:29.891899 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:32:45.895074 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:33:17.901116 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:39:21.906669 3.001975 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 17:39:28.914437 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:39:32.880170 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 17:39:32.880315 0.010748 udp 10.0.2.22 61661 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 17:39:32.891397 0.000000 udp 10.0.2.22 61662 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 17:39:36.915284 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:39:52.919256 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:40:24.925141 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:46:28.931097 3.001404 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 17:46:35.938313 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:46:43.939991 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:46:59.942295 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:47:31.949231 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:53:35.956084 3.000309 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 17:53:42.962471 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:53:50.966115 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:54:06.966772 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 17:54:32.884265 0.000130 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 17:54:32.884499 0.010168 udp 10.0.2.22 61663 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 17:54:32.895066 0.000000 udp 10.0.2.22 61664 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 17:54:38.973955 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:00:42.979913 3.000593 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 18:00:49.986412 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:00:57.987605 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:01:13.990821 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:01:45.996667 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:07:50.003675 3.000863 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 18:07:57.010445 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:08:05.012016 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:08:21.015084 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:08:53.020938 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:09:32.888102 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 18:09:32.888303 0.010328 udp 10.0.2.22 61665 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 18:09:32.898930 0.000000 udp 10.0.2.22 61666 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 18:25:35.034688 3.001246 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 18:25:42.041681 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:25:50.043030 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:26:06.046317 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:26:38.052815 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:28:32.887202 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 18:28:32.887399 0.012827 udp 10.0.2.22 61667 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 18:28:32.900580 0.000000 udp 10.0.2.22 61668 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 18:32:42.058457 3.001536 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 18:32:49.065334 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:32:57.066857 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:33:13.073887 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:33:45.076156 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:39:32.886382 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 18:39:32.886631 0.009907 udp 10.0.2.22 61669 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 18:39:32.896932 0.000000 udp 10.0.2.22 61670 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 18:39:49.084452 2.999418 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 18:39:56.089586 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:40:04.090955 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:40:20.094099 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:40:52.100092 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:46:56.107782 2.999794 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 18:47:03.117005 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:47:11.115143 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:47:27.120321 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:47:59.124087 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:54:03.141004 2.990981 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 18:54:10.271439 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:54:18.208359 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:54:32.880561 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 18:54:32.880752 0.010300 udp 10.0.2.22 61671 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 18:54:32.891522 0.000000 udp 10.0.2.22 61672 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 18:54:34.151962 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 18:55:06.158005 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:01:10.163736 3.002071 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 19:01:17.171384 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:01:25.172890 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:01:41.176178 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:02:13.181787 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:08:17.188269 3.001449 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 19:08:24.195124 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:08:32.196648 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:08:48.199703 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:09:20.205284 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:09:32.884704 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 19:09:32.884893 0.010858 udp 10.0.2.22 61673 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 19:09:32.896145 0.000000 udp 10.0.2.22 61674 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 19:15:24.212777 3.013665 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 19:15:31.229305 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:15:39.230911 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:15:55.234080 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:16:27.240157 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:22:31.246296 3.001216 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 19:22:38.253525 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:22:46.255024 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:23:02.257923 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:23:34.263937 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:28:32.883474 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 19:28:32.883652 0.011846 udp 10.0.2.22 61675 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 19:28:32.895836 0.000000 udp 10.0.2.22 61676 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 19:29:38.269505 3.002112 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 19:29:45.277375 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:29:53.278795 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:30:09.281973 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:30:41.288138 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:36:45.294836 3.000603 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 19:36:52.301539 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:37:00.302667 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:37:16.305950 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:37:48.311832 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:39:32.882051 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 19:39:32.882235 0.010221 udp 10.0.2.22 61677 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 19:39:32.892798 0.000000 udp 10.0.2.22 61678 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 19:43:52.318119 3.001662 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 19:43:59.325296 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:44:07.326642 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:44:23.334288 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:44:55.341602 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:50:59.341739 3.001856 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 19:51:06.349239 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:51:14.350783 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:51:30.353828 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:52:02.359569 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:54:32.886054 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 19:54:32.886170 0.010619 udp 10.0.2.22 61679 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 19:54:32.897128 0.000000 udp 10.0.2.22 61680 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 19:58:06.366091 3.001188 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 19:58:13.373505 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:58:21.375033 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:58:37.378181 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 19:59:09.383834 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:05:13.390005 3.001326 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 20:05:20.397033 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:05:28.398714 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:05:44.402147 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:06:16.407867 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:09:32.880375 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 20:09:32.880468 0.010313 udp 10.0.2.22 61681 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 20:09:32.891137 0.000000 udp 10.0.2.22 61682 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 20:24:13.419386 3.001004 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 20:24:20.426521 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:24:28.437961 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:24:44.440708 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:25:16.446673 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:28:32.879328 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 20:28:32.879493 0.011837 udp 10.0.2.22 61683 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 20:28:32.891676 0.000000 udp 10.0.2.22 61684 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 20:31:20.452794 3.001528 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 20:31:27.460158 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:31:35.461538 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:31:51.464993 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:32:23.471132 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:38:27.477134 3.001194 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 20:38:34.483832 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:38:42.485595 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:38:58.488496 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:39:30.494450 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:39:32.878510 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 20:39:32.878613 0.010335 udp 10.0.2.22 61685 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 20:39:32.889338 0.000000 udp 10.0.2.22 61686 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 20:45:34.501425 3.000733 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 20:45:41.508332 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:45:49.509488 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:46:05.512572 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:46:37.518650 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:52:41.524869 3.008349 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 20:52:48.533624 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:52:56.535178 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:53:12.536379 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:53:44.542770 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 20:54:32.884328 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 20:54:32.884432 0.013720 udp 10.0.2.22 61687 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 20:54:32.898508 0.000000 udp 10.0.2.22 61688 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 20:59:48.549103 3.001211 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 20:59:55.556192 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:00:03.557626 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:00:19.560303 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:00:51.566549 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:06:55.572058 3.002086 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 21:07:02.579995 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:07:10.581125 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:07:26.584497 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:07:58.590507 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:09:32.886469 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 21:09:32.886633 0.012841 udp 10.0.2.22 61689 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 21:09:32.899834 0.000000 udp 10.0.2.22 61690 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 21:25:05.600181 3.001258 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 21:25:12.607290 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:25:20.608707 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:25:36.611998 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:26:08.617854 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:28:32.885522 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 21:28:32.885620 0.022994 udp 10.0.2.22 61691 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 21:28:32.908976 0.000000 udp 10.0.2.22 61692 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 21:32:12.623454 3.001650 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 21:32:19.631141 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:32:27.632541 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:32:43.635932 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:33:15.641837 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:39:19.647544 3.001877 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 21:39:26.655057 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:39:32.884450 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 21:39:32.884550 0.021572 udp 10.0.2.22 61693 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 21:39:32.906514 0.000000 udp 10.0.2.22 61694 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 21:39:34.656626 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:39:50.659725 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:40:22.665289 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:46:26.671340 3.001941 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 21:46:33.679104 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:46:41.680667 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:46:57.683808 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:47:29.689814 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:53:33.696346 3.012264 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 21:53:40.705860 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:53:48.704762 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:54:04.707744 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 21:54:32.878454 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 21:54:32.878571 0.010729 udp 10.0.2.22 61695 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 21:54:32.889692 0.000000 udp 10.0.2.22 61696 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 21:54:36.723655 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:00:40.730405 3.000734 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 22:00:47.737165 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:00:55.738565 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:01:11.741606 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:01:43.747677 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:07:47.753584 3.001835 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 22:07:54.760900 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:08:02.762467 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:08:18.765282 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:08:50.772553 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:09:32.881869 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 22:09:32.881969 0.011567 udp 10.0.2.22 61697 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 22:09:32.893855 0.000000 udp 10.0.2.22 61698 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 22:25:32.784677 3.022144 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 22:25:39.812424 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:25:47.813793 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:26:03.816917 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:26:35.822883 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:28:32.881369 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 22:28:32.881559 0.012169 udp 10.0.2.22 61699 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 22:28:32.894109 0.000000 udp 10.0.2.22 61700 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 22:32:39.828776 3.001747 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 22:32:46.836272 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:32:54.838125 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:33:10.840961 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:33:42.846822 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:39:32.880216 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 22:39:32.880357 0.013883 udp 10.0.2.22 61701 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 22:39:32.894588 0.000000 udp 10.0.2.22 61702 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 22:39:46.853253 3.001282 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 22:39:53.860173 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:40:01.861907 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:40:17.864354 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:40:49.870770 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:46:53.876836 3.001820 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 22:47:00.884424 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:47:08.885585 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:47:24.888717 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:47:56.894648 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:54:00.901454 3.000967 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 22:54:07.908151 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:54:15.909535 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:54:31.912681 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 22:54:32.884401 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 22:54:32.884501 0.024381 udp 10.0.2.22 61703 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 22:54:32.909240 0.000000 udp 10.0.2.22 61704 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 22:55:03.918991 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:01:07.924619 3.001805 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 23:01:14.932229 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:01:22.933855 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:01:38.936732 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:02:10.987513 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:08:14.949542 3.016149 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 23:08:21.965876 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:08:29.967657 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:08:45.970425 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:09:17.976647 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:09:32.878358 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 23:09:32.878543 0.013224 udp 10.0.2.22 61705 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 23:09:32.892164 0.000000 udp 10.0.2.22 61706 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 23:15:21.983063 3.001794 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 23:15:28.990033 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:15:36.991735 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:15:52.994482 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:16:25.006987 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:22:29.007388 3.002454 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 23:22:36.013897 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:22:44.015933 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:23:00.018586 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:23:32.024639 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:28:32.877337 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 23:28:32.877447 0.024696 udp 10.0.2.22 61707 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 23:28:32.902510 0.000000 udp 10.0.2.22 61708 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 23:29:36.031210 3.001203 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 23:29:43.038022 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:29:51.039605 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:30:07.042395 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:30:39.048512 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:36:43.054625 3.001403 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 23:36:50.062121 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:36:58.063590 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:37:14.066554 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:37:46.072548 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:39:32.876211 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 23:39:32.876316 0.012857 udp 10.0.2.22 61709 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 23:39:32.889576 0.000000 udp 10.0.2.22 61710 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 23:43:50.078455 3.001839 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 23:43:57.086084 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:44:05.097392 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:44:21.100533 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:44:53.108640 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:50:57.114352 2.999939 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 23:51:04.119970 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:51:12.121807 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:51:28.124730 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:52:00.130352 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:54:32.880106 0.000149 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/09 23:54:32.880361 0.013602 udp 10.0.2.22 61711 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/09 23:54:32.894290 0.000000 udp 10.0.2.22 61712 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/09 23:58:04.136712 3.001214 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/09 23:58:11.143697 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:58:19.145760 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:58:35.148410 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/09 23:59:07.154655 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:05:11.161125 3.000880 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 00:05:18.167932 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:05:26.168993 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:05:42.172481 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:06:14.178448 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:09:32.884446 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 00:09:32.884549 0.015952 udp 10.0.2.22 61713 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 00:09:32.900919 0.000000 udp 10.0.2.22 61714 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 00:24:15.185075 3.001930 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 00:24:22.192575 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:24:30.194415 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:24:46.197766 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:25:18.203657 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:28:32.883577 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 00:28:32.883681 0.013506 udp 10.0.2.22 61715 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 00:28:32.897697 0.000000 udp 10.0.2.22 61716 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 00:31:22.209576 3.002294 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 00:31:29.216650 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:31:37.218245 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:31:53.221118 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:32:25.227072 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:38:29.232867 3.001843 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 00:38:36.240474 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:38:44.242188 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:39:00.245441 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:39:32.251080 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:39:32.882185 0.000111 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 00:39:32.882388 0.015492 udp 10.0.2.22 61717 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 00:39:32.898287 0.000000 udp 10.0.2.22 61718 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 00:45:36.258275 3.000702 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 00:45:43.264630 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:45:51.266353 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:46:07.268843 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:46:39.275199 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:52:43.281506 3.004969 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 00:52:50.288632 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:52:58.293831 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:53:14.293074 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:53:46.299113 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 00:54:32.876446 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 00:54:32.876575 0.013641 udp 10.0.2.22 61719 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 00:54:32.890561 0.000000 udp 10.0.2.22 61720 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 00:59:50.305557 3.001071 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 00:59:57.312538 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:00:05.314260 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:00:21.317259 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:00:53.323242 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:06:57.329064 3.001574 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 01:07:04.336587 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:07:12.338109 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:07:28.341342 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:08:00.347229 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:09:32.880188 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 01:09:32.880299 0.010162 udp 10.0.2.22 61721 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 01:09:32.890813 0.000000 udp 10.0.2.22 61722 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 01:25:09.360072 3.001002 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 01:25:16.366620 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:25:24.368223 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:25:40.381049 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:26:12.397434 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:28:32.879388 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 01:28:32.879548 0.011650 udp 10.0.2.22 61723 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 01:28:32.891579 0.000000 udp 10.0.2.22 61724 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 01:32:16.403524 3.001348 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 01:32:23.410738 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:32:31.412168 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:32:47.415785 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:33:19.421211 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:39:23.427293 3.001505 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 01:39:30.434693 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:39:32.878057 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 01:39:32.878256 0.011291 udp 10.0.2.22 61725 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 01:39:32.889919 0.000000 udp 10.0.2.22 61726 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 01:39:38.436010 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:39:54.438993 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:40:26.445107 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:46:30.454429 2.998155 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 01:46:37.458730 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:46:45.460024 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:47:01.462972 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:47:33.469066 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:53:37.475930 3.000661 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 01:53:44.482181 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:53:52.483856 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:54:08.486765 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 01:54:32.882476 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 01:54:32.882590 0.011280 udp 10.0.2.22 61727 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 01:54:32.894261 0.000000 udp 10.0.2.22 61728 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 01:54:40.493017 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:00:44.499460 3.001287 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 02:00:51.506655 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:00:59.507783 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:01:15.510806 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:01:47.516855 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:07:51.585520 2.998993 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 02:07:58.590704 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:08:06.592079 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:08:22.594755 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:08:54.600943 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:09:32.876259 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 02:09:32.876373 0.011635 udp 10.0.2.22 61729 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 02:09:32.888364 0.000000 udp 10.0.2.22 61730 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 02:14:58.607234 3.001519 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 02:15:05.614576 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:15:13.615444 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:15:29.619338 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:16:01.624414 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:22:05.631303 3.001494 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 02:22:12.638555 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:22:20.640065 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:22:36.643093 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:23:08.649212 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:28:32.875285 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 02:28:32.875430 0.011371 udp 10.0.2.22 61731 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 02:28:32.887169 0.000000 udp 10.0.2.22 61732 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 02:29:12.655721 3.000810 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 02:29:19.662313 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:29:27.663266 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:29:43.666865 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:30:15.672505 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:36:19.688585 3.002098 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 02:36:26.696225 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:36:34.698186 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:36:50.700922 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:37:22.706826 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:39:32.884303 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 02:39:32.884407 0.011302 udp 10.0.2.22 61733 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 02:39:32.896056 0.000000 udp 10.0.2.22 61734 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 02:43:26.713896 3.000792 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 02:43:33.720436 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:43:41.721897 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:43:57.724271 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:44:29.735492 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:50:33.746010 3.012187 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 02:50:40.764335 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:50:48.768134 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:51:04.769617 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:51:36.775192 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:54:32.880958 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 02:54:32.881113 0.012005 udp 10.0.2.22 61735 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 02:54:32.893460 0.000000 udp 10.0.2.22 61736 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 02:57:40.783769 2.998986 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 02:57:47.788424 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:57:55.789910 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:58:11.792435 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 02:58:43.799083 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:04:47.804906 3.001460 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 03:04:54.812265 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:05:02.813262 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:05:18.816949 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:05:50.825841 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:09:32.882125 0.000131 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 03:09:32.882349 0.012163 udp 10.0.2.22 61737 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 03:09:32.894869 0.000000 udp 10.0.2.22 61738 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 03:24:01.834731 3.000404 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 03:24:08.841962 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:24:16.843206 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:24:32.846086 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:25:04.852054 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:28:32.881359 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 03:28:32.881534 0.014712 udp 10.0.2.22 61739 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 03:28:32.896566 0.000000 udp 10.0.2.22 61740 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 03:31:08.857710 3.002255 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 03:31:15.865334 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:31:23.866850 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:31:39.870082 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:32:11.876091 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:38:15.882260 3.001017 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 03:38:22.888820 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:38:30.890682 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:38:46.893837 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:39:18.900116 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:39:32.880312 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 03:39:32.880428 0.011377 udp 10.0.2.22 61741 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 03:39:32.892257 0.000000 udp 10.0.2.22 61742 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 03:45:22.905646 3.002190 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 03:45:29.913429 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:45:37.914848 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:45:53.918123 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:46:25.924042 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:52:29.930081 3.005752 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 03:52:36.946335 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:52:44.940410 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:53:00.942655 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:53:32.947942 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:54:32.874164 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 03:54:32.874308 0.014494 udp 10.0.2.22 61743 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 03:54:32.889203 0.000000 udp 10.0.2.22 61744 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 03:59:36.954528 3.001270 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 03:59:43.961478 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 03:59:51.962725 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:00:07.965268 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:00:39.972119 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:06:43.977526 3.001888 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 04:06:50.985139 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:06:58.986927 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:07:14.989887 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:07:46.996165 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:09:32.878139 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 04:09:32.878247 0.010309 udp 10.0.2.22 61745 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 04:09:32.888864 0.000000 udp 10.0.2.22 61746 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 04:25:00.003852 3.001631 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 04:25:07.011352 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:25:15.012852 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:25:31.015762 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:26:03.021739 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:28:32.877317 0.000134 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 04:28:32.887752 0.011809 udp 10.0.2.22 61747 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 04:28:32.899957 0.000000 udp 10.0.2.22 61748 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 04:32:07.027609 3.002107 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 04:32:14.035107 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:32:22.036634 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:32:38.039633 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:33:10.045165 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:39:14.052480 3.001345 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 04:39:21.059201 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:39:29.060892 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:39:32.876359 0.000110 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 04:39:32.876554 0.012571 udp 10.0.2.22 61749 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 04:39:32.889553 0.000000 udp 10.0.2.22 61750 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 04:39:45.063554 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:40:17.069705 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:46:21.075524 3.001997 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 04:46:28.083037 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:46:36.084675 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:46:52.087822 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:47:24.100664 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:53:28.100030 3.001265 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 04:53:35.106925 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:53:43.108472 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:53:59.111683 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:54:31.121951 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 04:54:32.882096 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 04:54:32.882188 0.022455 udp 10.0.2.22 61751 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 04:54:32.905022 0.000000 udp 10.0.2.22 61752 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 05:00:35.123500 3.001625 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 05:00:42.130784 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:00:50.132644 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:01:06.135144 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:01:38.141574 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:07:42.147696 3.002585 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 05:07:49.155130 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:07:57.156650 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:08:13.159713 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:08:45.165323 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:09:32.874402 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 05:09:32.874503 0.010249 udp 10.0.2.22 61753 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 05:09:32.885117 0.000000 udp 10.0.2.22 61754 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 05:25:30.173193 3.001555 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 05:25:37.180743 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:25:45.182144 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:26:01.185111 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:26:33.191251 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:28:32.873457 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 05:28:32.873564 0.014017 udp 10.0.2.22 61755 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 05:28:32.887956 0.000000 udp 10.0.2.22 61756 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 05:32:37.197103 3.001515 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 05:32:44.204472 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:32:52.205553 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:33:08.208930 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:33:40.215201 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:39:32.881776 0.000097 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 05:39:32.881959 0.021983 udp 10.0.2.22 61757 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 05:39:32.904354 0.000000 udp 10.0.2.22 61758 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 05:39:44.221180 3.001401 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 05:39:51.228416 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:39:59.229978 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:40:15.232967 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:40:47.239149 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:46:51.244881 3.001830 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 05:46:58.254143 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:47:06.254023 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:47:22.256879 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:47:54.263169 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:53:58.269809 3.000671 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 05:54:05.276346 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:54:13.282058 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:54:29.286181 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 05:54:32.880409 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 05:54:32.880527 0.012276 udp 10.0.2.22 61759 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 05:54:32.893224 0.000000 udp 10.0.2.22 61760 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 05:55:01.286928 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:01:05.293827 3.000717 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 06:01:12.300285 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:01:20.302041 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:01:36.305080 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:02:08.310821 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:08:12.316883 3.001772 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 06:08:19.325053 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:08:27.325601 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:08:43.329065 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:09:15.334923 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:09:32.880219 0.000102 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 06:09:32.880419 0.010440 udp 10.0.2.22 61761 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 06:09:32.891252 0.000000 udp 10.0.2.22 61762 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 06:15:19.340392 3.002142 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 06:15:26.348185 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:15:34.349847 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:15:50.352939 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:16:22.369031 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:22:26.375391 3.001189 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 06:22:33.382521 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:22:41.383928 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:22:57.386874 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:23:29.393173 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:28:32.879541 0.000137 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 06:28:32.879769 0.011857 udp 10.0.2.22 61763 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 06:28:32.891958 0.000000 udp 10.0.2.22 61764 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 06:29:33.399676 3.000757 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 06:29:40.406328 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:29:48.407936 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:30:04.410885 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:30:36.416721 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:36:40.423886 3.000522 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 06:36:47.430239 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:36:55.431847 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:37:11.434643 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:37:43.441031 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:39:32.878078 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 06:39:32.878280 0.024694 udp 10.0.2.22 61765 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 06:39:32.903338 0.000000 udp 10.0.2.22 61766 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 06:43:47.447301 3.001031 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 06:43:54.454000 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:44:02.455303 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:44:18.458751 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:44:50.464622 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:50:54.471505 3.005621 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 06:51:01.478039 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:51:09.479565 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:51:25.482657 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:51:57.488567 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:54:32.882073 0.000156 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 06:54:32.882325 0.011527 udp 10.0.2.22 61767 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 06:54:32.894237 0.000000 udp 10.0.2.22 61768 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 06:58:01.495052 3.001335 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 06:58:08.501849 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:58:16.503238 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:58:32.506714 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 06:59:04.512408 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:05:08.518646 3.007104 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 07:05:15.543073 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:05:23.537605 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:05:39.540460 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:06:11.546734 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:09:32.876460 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 07:09:32.876563 0.010990 udp 10.0.2.22 61769 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 07:09:32.887908 0.000000 udp 10.0.2.22 61770 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 07:24:14.557356 3.000928 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 07:24:21.563841 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:24:29.565688 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:24:45.568480 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:25:17.574187 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:28:32.875537 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 07:28:32.875641 0.015111 udp 10.0.2.22 61771 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 07:28:32.902595 0.000000 udp 10.0.2.22 61772 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 07:31:21.581100 3.000848 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 07:31:28.589811 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:31:36.589234 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:31:52.592335 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:32:24.598305 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:38:28.605176 3.000793 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 07:38:35.611858 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:38:43.613496 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:38:59.615628 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:39:31.622308 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:39:32.874375 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 07:39:32.874545 0.012410 udp 10.0.2.22 61773 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 07:39:32.887353 0.000000 udp 10.0.2.22 61774 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 07:45:35.628915 3.000932 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 07:45:42.635141 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:45:50.637201 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:46:06.641753 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:46:38.646329 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:52:42.660837 3.014892 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 07:52:49.674212 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:52:57.679545 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:53:13.677735 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:53:45.679925 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 07:54:32.879108 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 07:54:32.879213 0.012567 udp 10.0.2.22 61775 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 07:54:32.892155 0.000000 udp 10.0.2.22 61776 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 07:59:49.687234 3.000709 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 07:59:56.693726 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:00:04.695676 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:00:20.698084 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:00:52.704290 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:06:56.715913 2.996014 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 08:07:03.717898 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:07:11.725856 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:07:27.721811 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:07:59.728313 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:09:32.871739 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 08:09:32.922473 0.014654 udp 10.0.2.22 61777 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 08:09:32.937481 0.000000 udp 10.0.2.22 61778 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 08:25:04.734120 3.012308 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 08:25:11.752058 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:25:19.753792 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:25:35.756397 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:26:07.762742 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:28:32.881160 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 08:28:32.881362 0.018293 udp 10.0.2.22 61779 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 08:28:32.900001 0.000000 udp 10.0.2.22 61780 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 08:32:11.768376 3.002344 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 08:32:18.776151 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:32:26.777796 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:32:42.780543 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:33:14.786729 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:39:18.793599 3.000604 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 08:39:25.800010 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:39:32.880166 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 08:39:32.880281 0.011530 udp 10.0.2.22 61781 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 08:39:32.892220 0.000000 udp 10.0.2.22 61782 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 08:39:33.801594 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:39:49.804534 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:40:21.810888 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:46:25.819516 3.000503 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 08:46:32.823823 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:46:40.824749 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:46:56.828769 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:47:28.835842 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:53:32.847877 3.003554 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 08:53:39.850626 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:53:47.849452 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:54:03.852250 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 08:54:32.874296 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 08:54:32.874489 0.011672 udp 10.0.2.22 61783 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 08:54:32.886494 0.000000 udp 10.0.2.22 61784 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 08:54:35.861031 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:00:39.865520 3.000643 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 09:00:46.871333 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:00:54.873480 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:01:10.876521 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:01:42.882174 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:07:46.888197 3.002042 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 09:07:53.895798 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:08:01.897567 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:08:17.903540 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:08:49.906376 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:09:32.878218 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 09:09:32.878366 0.010101 udp 10.0.2.22 61785 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 09:09:32.888813 0.000000 udp 10.0.2.22 61786 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 09:25:30.918550 3.001687 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 09:25:37.925166 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:25:45.927211 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:26:01.930334 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:26:33.936518 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:28:32.877312 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 09:28:32.877438 0.015957 udp 10.0.2.22 61787 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 09:28:32.901958 0.000000 udp 10.0.2.22 61788 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 09:32:37.942368 3.001517 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 09:32:44.949842 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:32:52.951088 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:33:08.954007 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:33:40.960117 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:39:32.876113 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 09:39:32.876277 0.023054 udp 10.0.2.22 61789 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 09:39:32.899687 0.000000 udp 10.0.2.22 61790 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 09:39:44.965180 3.002784 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 09:39:51.973195 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:39:59.975027 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:40:15.978266 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:40:47.983930 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:46:51.990479 3.000798 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 09:46:58.997791 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:47:06.998927 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:47:23.002093 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:47:55.008142 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:53:59.014805 3.001043 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 09:54:06.021468 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:54:14.022680 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:54:30.025796 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 09:54:32.880452 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 09:54:32.880613 0.016521 udp 10.0.2.22 61791 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 09:54:32.897717 0.000000 udp 10.0.2.22 61792 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 09:55:02.032079 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:01:06.038298 3.001502 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 10:01:13.045088 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:01:21.046998 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:01:37.050034 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:02:09.055528 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:08:13.062504 3.000745 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 10:08:20.069565 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:08:28.071055 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:08:44.074086 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:09:16.079920 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:09:32.874253 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 10:09:32.874357 0.010140 udp 10.0.2.22 61793 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 10:09:32.884860 0.000000 udp 10.0.2.22 61794 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 10:15:20.087869 2.999961 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 10:15:27.100559 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:15:35.100970 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:15:51.098011 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:16:23.103980 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:22:27.109611 3.002149 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 10:22:34.117277 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:22:42.118915 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:22:58.121844 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:23:30.128073 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:28:32.873119 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 10:28:32.873220 0.012678 udp 10.0.2.22 61795 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 10:28:32.886251 0.000000 udp 10.0.2.22 61796 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 10:29:34.134212 3.000971 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 10:29:41.141248 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:29:49.142802 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:30:05.145641 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:30:37.151729 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:36:41.157283 3.002502 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 10:36:48.165186 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:36:56.166848 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:37:12.169978 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:37:44.175918 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:39:32.872270 0.000115 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 10:39:32.872481 0.012494 udp 10.0.2.22 61797 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 10:39:32.885534 0.000000 udp 10.0.2.22 61798 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 10:43:48.182590 3.001178 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 10:43:55.189320 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:44:03.190837 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:44:19.193529 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:44:51.200076 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:50:55.205512 3.001783 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 10:51:02.285987 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:51:10.224779 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:51:26.227672 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:51:58.233991 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:54:32.876027 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 10:54:32.876131 0.014180 udp 10.0.2.22 61799 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 10:54:32.890710 0.000000 udp 10.0.2.22 61800 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 10:58:02.240075 3.001760 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 10:58:09.247011 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:58:17.248511 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:58:33.251847 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 10:59:05.257883 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:05:09.263346 3.002299 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 11:05:16.270828 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:05:24.272738 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:05:40.275315 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:06:12.281877 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:09:32.870250 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 11:09:32.870390 0.010187 udp 10.0.2.22 61801 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 11:09:32.880935 0.000000 udp 10.0.2.22 61802 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 11:24:13.290072 3.013066 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 11:24:20.306542 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:24:28.307682 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:24:44.310871 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:25:16.316464 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:28:32.879191 0.000146 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 11:28:32.879435 0.012237 udp 10.0.2.22 61803 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 11:28:32.892045 0.000000 udp 10.0.2.22 61804 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 11:31:20.322925 3.001321 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 11:31:27.330239 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:31:35.331692 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:31:51.334472 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:32:23.340432 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:38:27.347500 3.000667 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 11:38:34.354100 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:38:42.355510 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:38:58.358302 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:39:30.364819 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:39:32.878463 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 11:39:32.878554 0.011344 udp 10.0.2.22 61805 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 11:39:32.890262 0.000000 udp 10.0.2.22 61806 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 11:45:34.371746 3.001158 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 11:45:41.377884 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:45:49.379261 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:46:05.382550 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:46:37.388508 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:52:41.395531 3.002698 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 11:52:48.405436 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:52:56.404266 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:53:12.408624 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:53:44.412347 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 11:54:32.872383 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 11:54:32.872491 0.015597 udp 10.0.2.22 61807 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 11:54:32.888463 0.000000 udp 10.0.2.22 61808 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 11:59:48.420180 3.000133 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 11:59:55.426005 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:00:03.427430 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:00:19.430412 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:00:51.436327 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:06:55.447893 2.996208 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 12:07:02.449400 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:07:10.451651 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:07:26.454460 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:07:58.460470 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:09:32.876415 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 12:09:32.876533 0.011198 udp 10.0.2.22 61809 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 12:09:32.888141 0.000000 udp 10.0.2.22 61810 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 12:25:06.471216 3.001460 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 12:25:13.478470 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:25:21.479988 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:25:37.482856 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:26:09.488962 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:28:32.875432 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 12:28:32.875541 0.017122 udp 10.0.2.22 61811 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 12:28:32.893034 0.000000 udp 10.0.2.22 61812 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 12:32:13.495294 3.001162 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 12:32:20.502279 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:32:28.504076 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:32:44.506979 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:33:16.513171 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:39:20.520159 3.000140 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 12:39:27.526372 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:39:32.874323 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 12:39:32.874488 0.016146 udp 10.0.2.22 61813 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 12:39:32.891013 0.000000 udp 10.0.2.22 61814 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 12:39:35.527821 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:39:51.530628 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:40:23.536849 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:46:27.542946 3.001251 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 12:46:34.550250 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:46:42.551864 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:46:58.554717 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:47:30.560909 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:53:34.574847 2.995957 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 12:53:41.574182 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:53:49.575191 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:54:05.578740 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 12:54:32.878143 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 12:54:32.878313 0.013094 udp 10.0.2.22 61815 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 12:54:32.891748 0.000000 udp 10.0.2.22 61816 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 12:54:37.584288 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:00:41.591819 3.000486 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 13:00:48.598227 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:00:56.599443 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:01:12.602154 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:01:44.608821 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:07:48.615316 3.001096 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 13:07:55.622252 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:08:03.629034 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:08:19.626659 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:08:51.632661 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:09:32.872249 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 13:09:32.872358 0.010721 udp 10.0.2.22 61817 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 13:09:32.883451 0.000000 udp 10.0.2.22 61818 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 13:25:33.646649 3.011206 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 13:25:40.663592 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:25:48.664382 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:26:04.667809 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:26:36.673762 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:28:32.870677 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 13:28:32.870876 0.012569 udp 10.0.2.22 61819 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 13:28:32.883817 0.000000 udp 10.0.2.22 61820 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 13:32:40.679855 3.001878 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 13:32:47.687724 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:32:55.689159 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:33:11.692259 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:33:43.697589 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:39:32.870182 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 13:39:32.870296 0.010383 udp 10.0.2.22 61821 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 13:39:32.881042 0.000000 udp 10.0.2.22 61822 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 13:39:47.704503 3.000676 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 13:39:54.710947 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:40:02.713035 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:40:18.715542 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:40:50.721667 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:46:54.728572 3.000990 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 13:47:01.735211 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:47:09.736998 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:47:25.739888 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:47:57.745380 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:54:01.751344 3.002361 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 13:54:08.759114 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:54:16.760853 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:54:32.764582 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 13:54:32.874287 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 13:54:32.874429 0.009967 udp 10.0.2.22 61823 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 13:54:32.884750 0.000000 udp 10.0.2.22 61824 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 13:55:04.774442 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:01:08.775927 3.001867 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 14:01:15.782711 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:01:23.784328 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:01:39.787713 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:02:11.793316 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:08:15.800247 3.000756 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 14:08:22.810098 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:08:30.808754 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:08:46.811322 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:09:18.817829 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:09:32.878123 0.000213 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 14:09:32.878434 0.010307 udp 10.0.2.22 61825 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 14:09:32.889066 0.000000 udp 10.0.2.22 61826 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 14:15:22.823412 3.002328 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 14:15:29.830853 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:15:37.832432 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:15:53.835160 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:16:25.841987 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:22:29.848834 3.000710 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 14:22:36.854930 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:22:44.856844 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:23:00.859832 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:23:32.865673 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:28:32.877324 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 14:28:32.877491 0.021709 udp 10.0.2.22 61827 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 14:28:32.899555 0.000000 udp 10.0.2.22 61828 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 14:29:36.871571 3.001987 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 14:29:43.878827 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:29:51.880451 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:30:07.883963 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:30:39.889997 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:36:43.896110 3.001159 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 14:36:50.903449 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:36:58.904463 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:37:14.907851 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:37:46.913213 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:39:32.876133 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 14:39:32.876279 0.011132 udp 10.0.2.22 61829 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 14:39:32.887782 0.000000 udp 10.0.2.22 61830 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 14:43:50.924434 2.996654 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 14:43:57.927097 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:44:05.928457 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:44:21.931352 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:44:53.947989 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:50:57.954641 3.000172 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 14:51:04.961504 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:51:12.962444 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:51:28.965264 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:52:00.971781 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:54:32.870365 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 14:54:32.870473 0.012704 udp 10.0.2.22 61831 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 14:54:32.883564 0.000000 udp 10.0.2.22 61832 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 14:58:04.978024 3.001362 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 14:58:11.985120 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:58:19.986704 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:58:35.989232 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 14:59:07.995131 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:05:12.001148 3.002214 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 15:05:19.009241 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:05:27.010599 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:05:43.013163 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:06:15.019238 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:09:32.874040 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 15:09:32.874239 0.010631 udp 10.0.2.22 61833 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 15:09:32.885233 0.000000 udp 10.0.2.22 61834 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 15:24:13.031709 3.002560 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 15:24:20.039796 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:24:28.040988 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:24:44.044149 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:25:16.050217 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:28:32.873474 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 15:28:32.873584 0.022359 udp 10.0.2.22 61835 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 15:28:32.896321 0.000000 udp 10.0.2.22 61836 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 15:31:20.056176 3.001591 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 15:31:27.063685 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:31:35.064989 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:31:51.068253 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:32:23.074058 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:38:27.080565 3.001384 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 15:38:34.087868 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:38:42.089070 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:38:58.092133 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:39:30.098144 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:39:32.872275 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 15:39:32.872383 0.012195 udp 10.0.2.22 61837 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 15:39:32.884973 0.000000 udp 10.0.2.22 61838 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 15:45:34.109528 2.999994 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 15:45:41.121436 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:45:49.123942 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:46:05.118639 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:46:37.123804 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:52:41.127796 3.001851 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 15:52:48.135366 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:52:56.137159 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:53:12.139972 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:53:44.146031 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 15:54:32.876515 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 15:54:32.876655 0.012003 udp 10.0.2.22 61839 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 15:54:32.889024 0.000000 udp 10.0.2.22 61840 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 15:59:48.152513 3.001483 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 15:59:55.159455 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:00:03.160957 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:00:19.163699 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:00:51.169983 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:06:55.176534 3.001283 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 16:07:02.183533 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:07:10.184928 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:07:26.187892 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:07:58.195449 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:09:32.870116 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 16:09:32.870213 0.013988 udp 10.0.2.22 61841 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 16:09:32.884563 0.000000 udp 10.0.2.22 61842 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 16:25:05.203700 3.001041 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 16:25:12.212871 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:25:20.212058 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:25:36.215435 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:26:08.221316 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:28:32.869546 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 16:28:32.869738 0.025517 udp 10.0.2.22 61843 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 16:28:32.895661 0.000000 udp 10.0.2.22 61844 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 16:32:12.227128 3.002776 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 16:32:19.234502 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:32:27.236285 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:32:43.238691 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:33:15.245177 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:39:19.251080 3.001768 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 16:39:26.258374 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:39:32.868192 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 16:39:32.868300 0.012530 udp 10.0.2.22 61845 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 16:39:32.881183 0.000000 udp 10.0.2.22 61846 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 16:39:34.259918 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:39:50.263145 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:40:22.269212 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:46:26.275242 3.001775 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 16:46:33.282526 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:46:41.284067 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:46:57.287033 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:47:29.293018 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:53:33.298870 3.001916 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 16:53:40.306304 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:53:48.308281 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:54:04.310956 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 16:54:32.872249 0.000174 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 16:54:32.872788 0.012040 udp 10.0.2.22 61847 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 16:54:32.885284 0.000000 udp 10.0.2.22 61848 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 16:54:36.316743 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:00:40.322937 3.001629 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 17:00:47.330337 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:00:55.331886 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:01:11.335000 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:01:43.340969 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:07:47.347143 3.001332 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 17:07:54.361653 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:08:02.355707 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:08:18.366426 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:08:50.365052 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:09:32.875814 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 17:09:32.875903 0.010398 udp 10.0.2.22 61849 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 17:09:32.886629 0.000000 udp 10.0.2.22 61850 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 17:25:31.376688 3.001933 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 17:25:38.384390 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:25:46.385915 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:26:02.388592 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:26:34.394880 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:28:32.874888 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 17:28:32.875127 0.021717 udp 10.0.2.22 61851 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 17:28:32.897221 0.000000 udp 10.0.2.22 61852 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 17:32:38.400762 3.001601 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 17:32:45.408234 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:32:53.409782 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:33:09.412855 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:33:41.418913 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:39:32.874262 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 17:39:32.874425 0.010608 udp 10.0.2.22 61853 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 17:39:32.885560 0.000000 udp 10.0.2.22 61854 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 17:39:45.425172 3.001277 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 17:39:52.432109 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:40:00.434596 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:40:16.436574 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:40:48.442711 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:46:52.448515 3.001974 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 17:46:59.456200 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:47:07.457882 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:47:23.461825 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:47:55.466202 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:53:59.474212 3.000149 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 17:54:06.484849 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:54:14.481490 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:54:30.485781 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 17:54:32.868130 0.000183 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 17:54:32.868424 0.021996 udp 10.0.2.22 61855 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 17:54:32.890796 0.000000 udp 10.0.2.22 61856 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 17:55:02.490815 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:01:06.495654 3.002957 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 18:01:13.503974 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:01:21.505184 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:01:37.508502 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:02:09.514279 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:08:13.522391 2.999712 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 18:08:20.528809 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:08:28.531902 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:08:44.532556 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:09:16.542170 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:09:32.871998 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 18:09:32.872102 0.011088 udp 10.0.2.22 61857 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 18:09:32.938546 0.000000 udp 10.0.2.22 61858 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 18:15:20.543972 3.002196 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 18:15:27.551941 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:15:35.553256 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:15:51.556484 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:16:23.562181 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:22:27.569616 3.000709 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 18:22:34.575603 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:22:42.577378 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:22:58.580462 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:23:30.586403 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:28:32.871298 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 18:28:32.871457 0.011558 udp 10.0.2.22 61859 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 18:28:32.883394 0.000000 udp 10.0.2.22 61860 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 18:29:34.592661 3.002620 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 18:29:41.599903 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:29:49.601513 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:30:05.604384 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:30:37.610536 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:36:41.615495 3.002727 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 18:36:48.628376 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:36:56.627128 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:37:12.627767 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:37:44.634362 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:39:32.870068 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 18:39:32.870169 0.010139 udp 10.0.2.22 61861 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 18:39:32.880704 0.000000 udp 10.0.2.22 61862 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 18:43:48.640775 3.000793 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 18:43:55.648072 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:44:03.657061 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:44:19.654907 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:44:51.660817 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:50:55.663585 3.001994 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 18:51:02.671383 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:51:10.673456 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:51:26.676256 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:51:58.682568 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:54:32.874224 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 18:54:32.874320 0.012004 udp 10.0.2.22 61863 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 18:54:32.886659 0.000000 udp 10.0.2.22 61864 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 18:58:02.688943 3.000943 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 18:58:09.695880 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:58:17.697915 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:58:33.699861 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 18:59:05.706377 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:05:09.713231 3.000462 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 19:05:16.719776 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:05:24.721204 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:05:40.723817 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:06:12.730288 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:09:32.868178 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 19:09:32.868352 0.011188 udp 10.0.2.22 61865 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 19:09:32.879871 0.000000 udp 10.0.2.22 61866 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 19:24:15.741264 3.000578 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 19:24:22.747756 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:24:30.749040 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:24:46.752056 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:25:18.757993 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:28:32.867426 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 19:28:32.867524 0.012100 udp 10.0.2.22 61867 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 19:28:32.879998 0.000000 udp 10.0.2.22 61868 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 19:31:22.764431 3.001117 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 19:31:29.771657 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:31:37.773265 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:31:53.775873 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:32:25.782191 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:38:29.788408 3.000854 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 19:38:36.795235 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:38:44.796929 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:39:00.799837 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:39:32.806062 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:39:32.865575 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 19:39:32.865751 0.010392 udp 10.0.2.22 61869 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 19:39:32.876464 0.000000 udp 10.0.2.22 61870 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 19:45:36.813373 3.013292 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 19:45:43.829737 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:45:51.834751 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:46:07.833727 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:46:39.840078 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:52:43.845810 3.001861 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 19:52:50.853662 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:52:58.854749 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:53:14.858224 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:53:46.867517 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 19:54:32.870193 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 19:54:32.870377 0.010440 udp 10.0.2.22 61871 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 19:54:32.881119 0.000000 udp 10.0.2.22 61872 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 19:59:50.870684 3.001152 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 19:59:57.877656 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:00:05.878572 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:00:21.882052 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:00:53.887887 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:06:57.893042 3.002403 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 20:07:04.901428 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:07:12.902766 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:07:28.905193 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:08:00.911420 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:09:32.874407 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 20:09:32.874526 0.010205 udp 10.0.2.22 61873 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 20:09:32.885081 0.000000 udp 10.0.2.22 61874 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 20:25:09.923338 3.001809 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 20:25:16.931469 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:25:24.932943 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:25:40.936071 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:26:12.941554 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:28:32.873118 0.000325 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 20:28:32.873538 0.011024 udp 10.0.2.22 61875 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 20:28:32.884960 0.000000 udp 10.0.2.22 61876 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 20:32:16.947547 3.001687 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 20:32:23.955673 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:32:31.957027 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:32:47.959749 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:33:19.966195 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:39:23.971435 3.001761 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 20:39:30.978927 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:39:32.871857 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 20:39:32.871994 0.022820 udp 10.0.2.22 61877 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 20:39:32.895207 0.000000 udp 10.0.2.22 61878 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 20:39:38.980786 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:39:54.983737 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:40:26.994011 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:46:30.995534 3.002083 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 20:46:38.005789 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:46:46.004622 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:47:02.007910 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:47:34.014053 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:53:38.024459 2.996545 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 20:53:45.031026 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:53:53.031707 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:54:09.036000 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 20:54:32.866264 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 20:54:32.866352 0.011526 udp 10.0.2.22 61879 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 20:54:32.878299 0.000000 udp 10.0.2.22 61880 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 20:54:41.038069 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:00:45.043674 3.001498 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 21:00:52.051045 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:01:00.052554 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:01:16.055097 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:01:48.061402 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:07:52.071073 2.998224 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 21:07:59.075306 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:08:07.077028 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:08:23.079675 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:08:55.085872 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:09:32.870284 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 21:09:32.870435 0.010042 udp 10.0.2.22 61881 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 21:09:32.880867 0.000000 udp 10.0.2.22 61882 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 21:14:59.091963 3.013887 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 21:15:06.109090 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:15:14.110736 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:15:30.113869 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:16:02.119753 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:22:06.126183 3.001307 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 21:22:13.133232 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:22:21.134634 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:22:37.138038 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:23:09.143452 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:28:32.869281 0.000105 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 21:28:32.869481 0.011801 udp 10.0.2.22 61883 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 21:28:32.881622 0.000000 udp 10.0.2.22 61884 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 21:29:13.149197 3.001822 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 21:29:20.157108 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:29:28.158768 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:29:44.625263 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:30:16.240926 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:36:20.184338 3.000970 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 21:36:27.190908 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:36:35.192576 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:36:51.195669 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:37:23.202446 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:39:32.868299 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 21:39:32.868414 0.010237 udp 10.0.2.22 61885 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 21:39:32.879039 0.000000 udp 10.0.2.22 61886 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 21:43:27.208014 3.001028 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 21:43:34.214867 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:43:42.216546 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:43:58.222744 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:44:30.225487 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:50:34.231738 3.001443 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 21:50:41.239028 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:50:49.242106 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:51:05.243684 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:51:37.249878 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:54:32.874023 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 21:54:32.874138 0.017272 udp 10.0.2.22 61887 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 21:54:32.891812 0.000000 udp 10.0.2.22 61888 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 21:57:41.255650 3.001500 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 21:57:48.263042 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:57:56.264404 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:58:12.267636 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 21:58:44.274767 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:04:48.279899 3.001320 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 22:04:55.287100 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:05:03.288275 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:05:19.291621 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:05:51.297993 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:09:32.865798 0.000108 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 22:09:32.866000 0.010249 udp 10.0.2.22 61889 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 22:09:32.876559 0.000000 udp 10.0.2.22 61890 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 22:24:01.308187 3.000902 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 22:24:08.314687 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:24:16.316291 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:24:32.319149 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:25:04.325270 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:28:32.864642 0.000157 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 22:28:32.864904 0.011252 udp 10.0.2.22 61891 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 22:28:32.876524 0.000000 udp 10.0.2.22 61892 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 22:31:08.331676 3.001266 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 22:31:15.339206 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:31:23.340275 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:31:39.344086 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:32:11.349465 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:38:15.355470 3.001476 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 22:38:22.362870 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:38:30.364414 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:38:46.367065 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:39:18.373493 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:39:32.864370 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 22:39:32.864533 0.010872 udp 10.0.2.22 61893 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 22:39:32.875814 0.000000 udp 10.0.2.22 61894 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 22:45:22.378704 3.002180 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 22:45:29.386594 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:45:37.389813 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:45:53.391083 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:46:25.396946 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:52:29.402836 3.002125 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 22:52:36.410666 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:52:44.412240 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:53:00.415120 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:53:32.421159 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:54:32.868084 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 22:54:32.868190 0.010668 udp 10.0.2.22 61895 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 22:54:32.879209 0.000000 udp 10.0.2.22 61896 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 22:59:36.428281 3.001657 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 22:59:43.434503 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 22:59:51.436192 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:00:07.438882 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:00:39.445061 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:06:43.451067 3.001888 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 23:06:50.458699 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:06:58.460056 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:07:14.463147 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:07:46.468920 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:09:32.872120 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 23:09:32.872240 0.010219 udp 10.0.2.22 61897 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 23:09:32.882817 0.000000 udp 10.0.2.22 61898 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 23:24:59.477735 3.001024 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 23:25:06.484433 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:25:14.485417 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:25:30.488909 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:26:02.494452 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:28:32.871340 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 23:28:32.871507 0.011380 udp 10.0.2.22 61899 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 23:28:32.883232 0.000000 udp 10.0.2.22 61900 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 23:32:06.501212 3.000926 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 23:32:13.508501 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:32:21.509746 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:32:37.512776 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:33:09.518983 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:39:13.525491 3.000885 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 23:39:20.532528 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:39:28.533915 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:39:32.870068 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 23:39:32.870257 0.018735 udp 10.0.2.22 61901 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 23:39:32.889395 0.000000 udp 10.0.2.22 61902 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/10 23:39:44.536809 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:40:16.543013 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:46:20.549071 3.001471 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 23:46:27.556350 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:46:35.558291 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:46:51.560818 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:47:23.566882 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:53:27.759053 2.973566 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/10 23:53:34.740457 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:53:42.742099 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:53:58.744865 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:54:30.753922 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/10 23:54:33.116467 0.000098 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/10 23:54:33.116649 0.021725 udp 10.0.2.22 61903 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/10 23:54:33.138782 0.000000 udp 10.0.2.22 61904 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 00:00:34.756967 3.011839 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 00:00:41.774310 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:00:49.775289 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:01:05.779015 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:01:37.784992 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:07:41.791077 3.001334 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 00:07:48.798496 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:07:56.799969 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:08:12.811678 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:08:44.819074 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:09:32.998469 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 00:09:32.998621 0.021890 udp 10.0.2.22 61905 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 00:09:33.020881 0.000000 udp 10.0.2.22 61906 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 00:25:30.828073 3.002094 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 00:25:37.835168 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:25:45.836920 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:26:01.849967 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:26:33.855625 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:28:32.997667 0.000107 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 00:28:32.997864 0.011531 udp 10.0.2.22 61907 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 00:28:33.009673 0.000000 udp 10.0.2.22 61908 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 00:32:37.861691 3.011938 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 00:32:44.879435 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:32:52.881014 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:33:08.884021 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:33:40.890940 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:39:32.996325 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 00:39:32.996418 0.011284 udp 10.0.2.22 61909 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 00:39:33.008120 0.000000 udp 10.0.2.22 61910 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 00:39:44.896137 3.001783 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 00:39:51.903210 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:39:59.905042 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:40:15.907777 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:40:47.913729 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:46:51.920970 3.000922 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 00:46:58.927422 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:47:06.928780 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:47:22.932043 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:47:54.937813 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:53:58.944323 3.000848 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 00:54:05.951409 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:54:13.953097 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:54:29.955283 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 00:54:33.000246 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 00:54:33.000351 0.011592 udp 10.0.2.22 61911 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 00:54:33.012331 0.000000 udp 10.0.2.22 61912 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 00:55:01.964615 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:01:05.968043 3.001525 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 01:01:12.974779 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:01:20.976729 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:01:36.979658 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:02:08.985204 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:08:12.992342 3.000636 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 01:08:19.999455 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:08:28.001024 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:08:44.003297 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:09:16.025138 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:09:32.994493 0.000191 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 01:09:32.994791 0.010043 udp 10.0.2.22 61913 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 01:09:33.005257 0.000000 udp 10.0.2.22 61914 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 01:15:20.028355 2.998988 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 01:15:27.032923 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:15:35.034894 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:15:51.037821 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:16:23.043635 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:22:27.056610 2.995163 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 01:22:34.057232 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:22:42.059133 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:22:58.062019 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:23:30.068137 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:28:32.993664 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 01:28:32.993826 0.010519 udp 10.0.2.22 61915 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 01:28:33.004759 0.000000 udp 10.0.2.22 61916 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 01:29:34.074009 3.001304 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 01:29:41.081039 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:29:49.082845 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:30:05.085143 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:30:37.091762 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:36:41.178651 3.001121 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 01:36:48.185209 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:36:56.186853 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:37:12.189987 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:37:44.195934 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:39:32.992515 0.000109 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 01:39:32.992713 0.012101 udp 10.0.2.22 61917 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 01:39:33.005187 0.000000 udp 10.0.2.22 61918 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 01:43:48.201930 3.001719 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 01:43:55.209731 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:44:03.210948 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:44:19.213987 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:44:51.229891 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:51:02.236361 3.001221 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 01:51:09.243165 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:51:17.244651 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:51:33.247962 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:52:05.253673 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:54:32.996232 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 01:54:32.996326 0.011294 udp 10.0.2.22 61919 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 01:54:33.008003 0.000000 udp 10.0.2.22 61920 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 01:58:09.260574 3.001081 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 01:58:16.267029 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:58:24.268646 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:58:40.271879 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 01:59:12.277896 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:05:16.283745 3.013808 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 02:05:23.291117 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:05:31.292569 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:05:47.295843 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:06:19.301845 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:09:33.000291 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 02:09:33.000460 0.010282 udp 10.0.2.22 61921 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 02:09:33.011095 0.000000 udp 10.0.2.22 61922 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 02:24:18.315932 3.001680 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 02:24:25.323333 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:24:33.324773 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:24:49.327863 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:25:21.333804 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:28:32.999436 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 02:28:32.999596 0.012171 udp 10.0.2.22 61923 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 02:28:33.012107 0.000000 udp 10.0.2.22 61924 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 02:31:25.339626 3.002020 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 02:31:32.347164 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:31:40.348631 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:31:56.351672 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:32:28.357874 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:38:32.364055 3.001698 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 02:38:39.370894 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:38:47.372525 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:39:03.375126 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:39:33.004546 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 02:39:33.004715 0.011641 udp 10.0.2.22 61925 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 02:39:33.016727 0.000000 udp 10.0.2.22 61926 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 02:39:35.384435 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:45:39.388414 3.002460 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 02:45:46.397068 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:45:54.399622 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:46:10.399822 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:46:42.405945 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:52:46.411798 3.001439 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 02:52:53.418841 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:53:01.420506 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:53:17.423309 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:53:49.429872 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 02:54:32.996001 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 02:54:32.996111 0.012193 udp 10.0.2.22 61927 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 02:54:33.008711 0.000000 udp 10.0.2.22 61928 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 02:59:53.435522 3.011860 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 03:00:00.452857 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:00:08.454559 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:00:24.457805 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:00:56.463914 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:07:00.469744 3.001602 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 03:07:07.476862 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:07:15.478486 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:07:31.482234 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:08:03.487737 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:09:32.997294 0.000153 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 03:09:32.997551 0.010118 udp 10.0.2.22 61929 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 03:09:33.008071 0.000000 udp 10.0.2.22 61930 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 03:25:07.501947 3.002146 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 03:25:14.509837 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:25:22.511805 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:25:38.514174 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:26:10.520375 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:28:32.995332 0.000101 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 03:28:32.995525 0.011599 udp 10.0.2.22 61931 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 03:28:33.007478 0.000000 udp 10.0.2.22 61932 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 03:32:14.536291 3.002004 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 03:32:21.543787 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:32:29.545005 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:32:45.548316 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:33:17.554342 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:39:21.560693 3.001205 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 03:39:28.567803 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:39:32.994513 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 03:39:32.994596 0.021777 udp 10.0.2.22 61933 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 03:39:33.016780 0.000000 udp 10.0.2.22 61934 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 03:39:36.569186 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:39:52.572473 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:40:24.578380 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:46:28.584985 3.000877 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 03:46:35.591691 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:46:43.593351 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:46:59.596241 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:47:31.602370 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:53:35.612997 2.996962 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 03:53:42.615800 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:53:50.622255 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:54:06.619767 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 03:54:32.998168 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 03:54:32.998312 0.010713 udp 10.0.2.22 61935 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 03:54:33.009414 0.000000 udp 10.0.2.22 61936 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 03:54:38.636213 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:00:42.643312 3.000165 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 04:00:49.649787 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:00:57.651194 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:01:13.654349 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:01:45.660477 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:07:49.666194 3.002100 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 04:07:56.673090 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:08:04.675408 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:08:20.678262 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:08:52.683634 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:09:32.992555 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 04:09:32.992680 0.010138 udp 10.0.2.22 61937 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 04:09:33.003145 0.000000 udp 10.0.2.22 61938 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 04:25:32.698913 2.997283 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 04:25:39.702221 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:25:47.703315 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:26:03.706474 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:26:35.712628 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:28:32.994148 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 04:28:32.994263 0.021881 udp 10.0.2.22 61939 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 04:28:33.016560 0.000000 udp 10.0.2.22 61940 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 04:32:39.718682 3.001827 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 04:32:46.726041 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:32:54.727914 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:33:10.730547 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:33:42.736931 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:39:33.000428 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 04:39:33.000534 0.010807 udp 10.0.2.22 61941 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 04:39:33.011702 0.000000 udp 10.0.2.22 61942 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 04:39:46.742422 3.002072 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 04:39:53.750100 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:40:01.751669 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:40:17.754646 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:40:49.760311 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:46:53.767445 3.007349 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 04:47:00.774435 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:47:08.775396 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:47:24.778508 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:47:56.784452 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:54:03.794461 3.001628 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 04:54:10.802132 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:54:18.803618 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:54:32.994445 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 04:54:32.994546 0.009917 udp 10.0.2.22 61943 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 04:54:33.004933 0.000000 udp 10.0.2.22 61944 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 04:54:34.806876 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 04:55:06.812431 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:01:10.819202 3.001709 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 05:01:17.826291 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:01:25.827840 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:01:41.830265 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:02:13.836671 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:08:17.843361 3.001034 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 05:08:24.850383 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:08:32.852814 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:08:48.855953 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:09:20.860943 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:09:33.000295 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 05:09:33.000456 0.010417 udp 10.0.2.22 61945 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 05:09:33.011235 0.000000 udp 10.0.2.22 61946 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 05:15:24.866722 3.001728 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 05:15:31.874383 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:15:39.875883 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:15:55.878835 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:16:27.885167 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:22:31.892918 2.999886 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 05:22:38.897980 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:22:46.900151 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:23:02.902961 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:23:34.908684 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:28:32.997466 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 05:28:32.997576 0.024344 udp 10.0.2.22 61947 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 05:28:33.022297 0.000000 udp 10.0.2.22 61948 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 05:29:38.915374 3.001044 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 05:29:45.921995 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:29:53.923454 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:30:09.926564 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:30:41.932662 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:36:45.939061 3.001542 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 05:36:52.945630 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:37:00.947721 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:37:16.950433 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:37:48.956974 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:39:32.996464 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 05:39:32.996580 0.010050 udp 10.0.2.22 61949 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 05:39:33.007021 0.000000 udp 10.0.2.22 61950 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 05:43:57.970755 3.002134 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 05:44:04.981952 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:44:12.980154 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:44:28.981750 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:45:00.987983 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:51:13.997835 3.000754 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 05:51:21.004279 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:51:29.005597 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:51:45.008514 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:52:17.014868 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:54:32.990492 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 05:54:32.990578 0.011190 udp 10.0.2.22 61951 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 05:54:33.002350 0.000000 udp 10.0.2.22 61952 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 05:58:21.020483 3.001853 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 05:58:28.038229 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:58:36.039855 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:58:52.042823 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 05:59:24.048821 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:05:28.054745 3.001453 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 06:05:35.062191 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:05:43.063632 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:05:59.066592 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:06:31.072823 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:09:32.994353 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 06:09:32.994501 0.011956 udp 10.0.2.22 61953 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 06:09:33.006870 0.000000 udp 10.0.2.22 61954 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 06:24:23.086603 3.002040 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 06:24:30.094244 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:24:38.095758 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:24:54.098683 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:25:26.104524 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:28:32.993570 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 06:28:32.993740 0.022084 udp 10.0.2.22 61955 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 06:28:33.016244 0.000000 udp 10.0.2.22 61956 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 06:31:30.112038 3.000298 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 06:31:37.118153 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:31:45.119728 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:32:01.123238 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:32:33.128698 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:38:37.135628 3.000545 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 06:38:44.141834 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:38:52.143728 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:39:08.146522 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:39:32.992499 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 06:39:32.992603 0.018755 udp 10.0.2.22 61957 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 06:39:33.011739 0.000000 udp 10.0.2.22 61958 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 06:39:40.152429 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:45:44.158258 3.003149 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 06:45:51.172036 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:45:59.176102 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:46:15.170398 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:46:47.176429 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:52:51.182429 3.011627 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 06:52:58.200195 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:53:06.201758 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:53:22.204419 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:53:54.211068 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 06:54:32.996408 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 06:54:32.996565 0.011550 udp 10.0.2.22 61959 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 06:54:33.008459 0.000000 udp 10.0.2.22 61960 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 06:59:58.217545 3.000462 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 07:00:05.223869 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:00:13.226297 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:00:29.228388 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:01:01.234257 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:07:05.241208 3.000903 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 07:07:12.247973 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:07:20.249641 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:07:36.252451 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:08:08.260379 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:09:32.990371 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 07:09:32.990563 0.013189 udp 10.0.2.22 61961 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 07:09:33.004103 0.000000 udp 10.0.2.22 61962 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 07:25:12.284641 3.000434 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 07:25:19.290730 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:25:27.292371 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:25:43.295323 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:26:15.301666 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:28:32.989561 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 07:28:32.989656 0.022164 udp 10.0.2.22 61963 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 07:28:33.012245 0.000000 udp 10.0.2.22 61964 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 07:32:19.307580 3.001117 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 07:32:26.314872 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:32:34.315862 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:32:50.319429 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:33:22.325634 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:39:26.331650 3.001057 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 07:39:32.998407 0.000155 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 07:39:32.998697 0.011335 udp 10.0.2.22 61965 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 07:39:33.010406 0.000000 udp 10.0.2.22 61966 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 07:39:33.338736 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:39:41.340144 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:39:57.343190 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:40:29.359424 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:46:33.364985 3.003235 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 07:46:40.372847 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:46:48.374397 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:47:04.377192 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:47:36.383195 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:53:40.390378 3.000324 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 07:53:47.396567 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:53:55.398125 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:54:11.401380 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 07:54:32.992296 0.000110 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 07:54:32.992497 0.011412 udp 10.0.2.22 61967 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 07:54:33.004291 0.000000 udp 10.0.2.22 61968 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 07:54:43.407238 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:00:47.413994 3.000693 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 08:00:54.420508 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:01:02.422123 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:01:18.425007 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:01:50.431292 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:07:54.437222 3.001594 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 08:08:01.444675 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:08:09.446054 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:08:25.448794 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:08:57.456291 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:09:32.995955 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 08:09:32.996134 0.014823 udp 10.0.2.22 61969 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 08:09:33.011291 0.000000 udp 10.0.2.22 61970 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 08:15:01.461642 3.001062 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 08:15:08.469159 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:15:16.472949 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:15:32.472893 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:16:04.478757 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:22:08.485169 3.002065 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 08:22:15.492176 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:22:23.493489 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:22:39.497121 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:23:11.503056 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:28:32.995339 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 08:28:32.995497 0.012752 udp 10.0.2.22 61971 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 08:28:33.008603 0.000000 udp 10.0.2.22 61972 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 08:29:15.510166 3.000513 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 08:29:22.516410 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:29:30.517848 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:29:46.520831 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:30:18.526846 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:36:22.533259 3.001047 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 08:36:29.540276 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:36:37.541962 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:36:53.544830 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:37:25.551035 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:39:32.994500 0.000092 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 08:39:32.994681 0.010081 udp 10.0.2.22 61973 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 08:39:33.005105 0.000000 udp 10.0.2.22 61974 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 08:43:29.558551 3.003630 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 08:43:36.564600 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:43:44.565670 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:44:00.571791 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:44:32.575158 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:50:36.581147 3.001251 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 08:50:43.588453 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:50:51.589825 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:51:07.592774 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:51:39.598773 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:54:32.988535 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 08:54:32.988734 0.010187 udp 10.0.2.22 61975 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 08:54:32.999277 0.000000 udp 10.0.2.22 61976 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 08:57:43.604068 3.002428 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 08:57:50.612432 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:57:58.613208 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:58:14.616646 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 08:58:46.622662 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:04:50.629352 3.001296 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 09:04:57.636017 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:05:05.637848 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:05:21.640953 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:05:53.646909 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:09:32.993007 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 09:09:32.993161 0.010579 udp 10.0.2.22 61977 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 09:09:33.004096 0.000000 udp 10.0.2.22 61978 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 09:24:01.652762 3.002893 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 09:24:08.661521 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:24:16.662777 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:24:32.665184 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:25:04.671787 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:28:32.991786 0.000099 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 09:28:32.991976 0.012312 udp 10.0.2.22 61979 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 09:28:33.004658 0.000000 udp 10.0.2.22 61980 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 09:31:08.678560 3.000809 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 09:31:15.685340 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:31:23.686928 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:31:39.689829 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:32:11.695223 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:38:15.701838 3.001712 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 09:38:22.709217 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:38:30.710625 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:38:46.713749 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:39:18.719780 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:39:32.990120 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 09:39:32.990208 0.010270 udp 10.0.2.22 61981 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 09:39:33.000840 0.000000 udp 10.0.2.22 61982 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 09:45:27.734157 3.000114 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 09:45:34.740182 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:45:42.741813 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:45:58.745037 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:46:30.750488 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:52:34.756580 3.001977 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 09:52:41.774203 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:52:49.775323 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:53:05.778630 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:53:37.785356 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:54:33.001724 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 09:54:33.001867 0.016599 udp 10.0.2.22 61983 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 09:54:33.018881 0.000000 udp 10.0.2.22 61984 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 09:59:41.791058 3.001150 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 09:59:48.798227 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 09:59:56.799847 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:00:12.802268 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:00:44.808772 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:06:48.815021 3.000788 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 10:06:55.822022 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:07:03.823598 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:07:19.826692 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:07:51.832649 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:09:32.989257 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 10:09:32.989381 0.010704 udp 10.0.2.22 61985 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 10:09:33.000486 0.000000 udp 10.0.2.22 61986 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 10:25:01.846635 3.011455 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 10:25:08.863867 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:25:16.864664 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:25:32.868283 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:26:04.874244 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:28:32.987368 0.000127 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 10:28:32.987592 0.011375 udp 10.0.2.22 61987 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 10:28:32.999334 0.000000 udp 10.0.2.22 61988 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 10:32:08.880454 3.001859 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 10:32:15.888489 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:32:23.889869 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:32:39.892209 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:33:11.898405 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:39:15.905242 3.000740 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 10:39:22.911617 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:39:30.913224 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:39:32.996256 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 10:39:32.996368 0.011317 udp 10.0.2.22 61989 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 10:39:33.008056 0.000000 udp 10.0.2.22 61990 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 10:39:46.916149 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:40:18.922312 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:46:22.928598 3.001381 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 10:46:29.935177 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:46:37.937159 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:46:53.940230 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:47:25.946499 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:53:29.952927 3.000422 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 10:53:36.959832 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:53:44.961085 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:54:00.972766 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:54:32.970258 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 10:54:32.990375 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 10:54:32.990519 0.010314 udp 10.0.2.22 61991 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 10:54:33.001196 0.000000 udp 10.0.2.22 61992 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 11:00:36.979352 2.998497 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 11:00:43.983666 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:00:51.984719 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:01:07.988354 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:01:39.994221 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:07:44.001028 3.000985 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 11:07:51.007671 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:07:59.009110 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:08:15.015738 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:08:47.018076 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:09:32.994271 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 11:09:32.994468 0.010678 udp 10.0.2.22 61993 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 11:09:33.005671 0.000000 udp 10.0.2.22 61994 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 11:25:30.033707 3.000927 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 11:25:37.043259 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:25:45.041927 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:26:01.044906 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:26:33.050739 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:28:32.993504 0.000085 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 11:28:32.993693 0.024243 udp 10.0.2.22 61995 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 11:28:33.018356 0.000000 udp 10.0.2.22 61996 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 11:32:37.057272 3.001305 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 11:32:44.068478 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:32:52.065967 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:33:08.069783 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:33:40.074719 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:39:32.992454 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 11:39:32.992549 0.011008 udp 10.0.2.22 61997 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 11:39:33.003891 0.000000 udp 10.0.2.22 61998 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 11:39:44.081658 3.000810 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 11:39:51.088302 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:39:59.089738 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:40:15.092752 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:40:47.098787 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:46:51.104759 3.001480 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 11:46:58.112178 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:47:06.113801 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:47:22.116533 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:47:54.122841 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:53:59.131288 3.000546 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 11:54:06.137773 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:54:14.143969 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:54:30.150151 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 11:54:32.996476 0.000042 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 11:54:32.996557 0.013520 udp 10.0.2.22 61999 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 11:54:33.010470 0.000000 udp 10.0.2.22 62000 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 11:55:02.149645 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:01:06.154609 3.000590 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 12:01:13.161426 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:01:21.163036 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:01:37.165968 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:02:09.172266 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:08:13.181590 2.998501 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 12:08:20.186012 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:08:28.187075 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:08:44.190291 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:09:16.210906 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:09:32.990252 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 12:09:32.990447 0.010188 udp 10.0.2.22 62001 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 12:09:33.001009 0.000000 udp 10.0.2.22 62002 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 12:15:20.211793 3.011834 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 12:15:27.229578 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:15:35.231199 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:15:51.234007 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:16:23.240007 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:22:27.246640 3.001058 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 12:22:34.253717 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:22:42.255065 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:22:58.257953 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:23:30.264120 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:28:32.989341 0.000109 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 12:28:32.989553 0.013267 udp 10.0.2.22 62003 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 12:28:33.003161 0.000000 udp 10.0.2.22 62004 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 12:29:34.269467 3.002344 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 12:29:41.277799 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:29:49.278785 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:30:05.282173 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:30:37.287915 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:36:41.305530 3.000230 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 12:36:48.311635 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:36:56.312859 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:37:12.315854 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:37:44.322126 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:39:32.988310 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 12:39:32.988469 0.010764 udp 10.0.2.22 62005 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 12:39:32.999608 0.000000 udp 10.0.2.22 62006 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 12:43:48.328197 3.001437 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 12:43:55.335170 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:44:03.336853 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:44:19.339942 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:44:51.346203 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:51:03.353479 3.001799 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 12:51:10.360856 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:51:18.362320 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:51:34.375422 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:52:06.381251 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:54:32.997160 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 12:54:32.997259 0.010109 udp 10.0.2.22 62007 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 12:54:33.007771 0.000000 udp 10.0.2.22 62008 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 12:58:10.387290 3.001927 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 12:58:17.396978 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:58:25.396555 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:58:41.399171 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 12:59:13.405238 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:05:17.411021 3.002016 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 13:05:24.418769 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:05:32.420395 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:05:48.423582 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:06:20.429544 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:09:32.986550 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 13:09:32.986677 0.010791 udp 10.0.2.22 62009 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 13:09:32.997850 0.000000 udp 10.0.2.22 62010 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 13:24:17.440601 3.001710 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 13:24:24.447904 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:24:32.449357 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:24:48.452432 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:25:20.458209 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:28:32.995543 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 13:28:32.995716 0.021431 udp 10.0.2.22 62011 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 13:28:33.017688 0.000000 udp 10.0.2.22 62012 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 13:31:24.464702 3.001294 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 13:31:31.471852 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:31:39.473275 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:31:55.476463 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:32:27.482647 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:38:31.488919 3.000877 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 13:38:38.495598 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:38:46.497257 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:39:02.500468 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:39:32.994353 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 13:39:32.994473 0.010796 udp 10.0.2.22 62013 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 13:39:33.005800 0.000000 udp 10.0.2.22 62014 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 13:39:34.506540 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:45:38.513037 3.018558 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 13:45:45.529795 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:45:53.531231 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:46:09.534091 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:46:41.542073 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:52:45.546592 3.001441 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 13:52:52.553634 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:53:00.555106 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:53:16.558076 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:53:48.564123 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 13:54:32.988162 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 13:54:32.988311 0.010840 udp 10.0.2.22 62015 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 13:54:32.999460 0.000000 udp 10.0.2.22 62016 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 13:59:52.571090 3.002156 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 13:59:59.577802 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:00:07.579279 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:00:23.581638 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:00:55.588169 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:06:59.594956 3.000945 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 14:07:06.601570 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:07:14.606376 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:07:30.606466 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:08:02.612660 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:09:32.996110 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 14:09:32.996217 0.010149 udp 10.0.2.22 62017 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 14:09:33.006774 0.000000 udp 10.0.2.22 62018 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 14:25:10.621964 3.002926 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 14:25:17.630553 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:25:25.631264 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:25:41.634909 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:26:13.640440 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:28:32.991755 0.000102 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 14:28:32.991935 0.011311 udp 10.0.2.22 62019 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 14:28:33.003625 0.000000 udp 10.0.2.22 62020 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 14:32:17.647615 3.001040 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 14:32:24.654273 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:32:32.655859 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:32:48.658991 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:33:20.664876 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:39:24.670595 3.001957 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 14:39:31.678254 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:39:32.990773 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 14:39:32.990883 0.010103 udp 10.0.2.22 62021 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 14:39:33.001375 0.000000 udp 10.0.2.22 62022 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 14:39:39.679756 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:39:55.682828 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:40:27.688231 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:46:31.694440 3.003709 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 14:46:38.707203 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:46:46.703939 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:47:02.709027 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:47:34.713082 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:53:38.719209 3.001540 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 14:53:45.726046 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:53:53.727774 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:54:09.730621 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 14:54:32.994337 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 14:54:32.994419 0.010162 udp 10.0.2.22 62023 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 14:54:33.004943 0.000000 udp 10.0.2.22 62024 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 14:54:41.736707 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:00:45.743250 3.001119 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 15:00:52.750357 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:01:00.751190 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:01:16.754445 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:01:48.760505 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:07:52.766752 3.001635 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 15:07:59.774005 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:08:07.775539 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:08:23.778817 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:08:55.784664 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:09:32.988251 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 15:09:32.988458 0.011323 udp 10.0.2.22 62025 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 15:09:33.000153 0.000000 udp 10.0.2.22 62026 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 15:14:59.790515 3.001724 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 15:15:06.798105 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:15:14.799838 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:15:30.802345 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:16:02.808725 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:22:06.815773 3.000521 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 15:22:13.826975 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:22:21.823224 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:22:37.826383 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:23:09.832465 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:28:32.989040 0.000172 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 15:28:32.989306 0.012254 udp 10.0.2.22 62027 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 15:28:33.001942 0.000000 udp 10.0.2.22 62028 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 15:29:13.837836 3.002359 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 15:29:20.845892 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:29:28.847605 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:29:44.850676 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:30:16.856678 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:36:20.862638 3.001648 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 15:36:27.870030 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:36:35.871656 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:36:51.874089 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:37:23.880976 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:39:32.986054 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 15:39:32.986154 0.010094 udp 10.0.2.22 62029 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 15:39:32.996630 0.000000 udp 10.0.2.22 62030 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 15:43:27.887314 3.000795 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 15:43:34.893755 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:43:42.895373 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:43:58.905783 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:44:30.904583 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:50:34.910793 3.001206 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 15:50:41.918007 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:50:49.918971 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:51:05.922522 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:51:37.928585 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:54:32.990758 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 15:54:32.990944 0.011943 udp 10.0.2.22 62031 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 15:54:33.003286 0.000000 udp 10.0.2.22 62032 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 15:57:41.936166 2.999998 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 15:57:48.941270 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:57:56.943344 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:58:12.946385 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 15:58:44.952474 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:04:48.958287 3.001914 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 16:04:55.965306 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:05:03.969145 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:05:19.970272 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:05:51.976250 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:09:32.985083 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 16:09:32.985269 0.010833 udp 10.0.2.22 62033 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 16:09:32.996495 0.000000 udp 10.0.2.22 62034 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 16:24:01.986530 3.001282 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 16:24:08.994015 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:24:16.995091 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:24:32.998163 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:25:05.004298 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:28:32.993584 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 16:28:32.993780 0.021779 udp 10.0.2.22 62035 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 16:28:33.015904 0.000000 udp 10.0.2.22 62036 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 16:31:09.010647 3.001157 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 16:31:16.017703 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:31:24.019068 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:31:40.022248 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:32:12.028130 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:38:16.034491 3.000712 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 16:38:23.041941 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:38:31.043102 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:38:47.046297 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:39:19.052277 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:39:32.992409 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 16:39:32.992589 0.010259 udp 10.0.2.22 62037 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 16:39:33.003256 0.000000 udp 10.0.2.22 62038 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 16:45:28.065390 3.018421 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 16:45:35.082636 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:45:43.084286 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:45:59.090478 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:46:31.093184 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:52:35.099667 3.001429 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 16:52:42.106744 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:52:50.108219 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:53:06.111617 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:53:38.117595 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:54:32.986501 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 16:54:32.986693 0.010181 udp 10.0.2.22 62039 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 16:54:32.997268 0.000000 udp 10.0.2.22 62040 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 16:59:42.123182 3.001811 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 16:59:49.130728 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 16:59:57.132561 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:00:13.135225 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:00:45.141090 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:06:49.148357 3.003997 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 17:06:56.154762 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:07:04.157832 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:07:20.159447 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:07:52.165557 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:09:32.991003 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 17:09:32.991179 0.010178 udp 10.0.2.22 62041 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 17:09:33.001694 0.000000 udp 10.0.2.22 62042 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 17:25:02.179052 3.001720 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 17:25:09.186195 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:25:17.187901 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:25:33.190800 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:26:05.196767 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:28:32.989987 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 17:28:32.990135 0.011073 udp 10.0.2.22 62043 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 17:28:33.001598 0.000000 udp 10.0.2.22 62044 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 17:32:09.203620 3.000969 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 17:32:16.210201 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:32:24.211657 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:32:40.214501 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:33:12.220674 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:39:16.226876 3.001776 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 17:39:23.234109 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:39:31.235135 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:39:32.988228 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 17:39:32.988383 0.011863 udp 10.0.2.22 62045 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 17:39:33.000641 0.000000 udp 10.0.2.22 62046 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 17:39:47.238790 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:40:19.244597 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:46:23.250955 3.001311 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 17:46:30.258221 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:46:38.259809 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:46:54.262516 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:47:26.268580 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:53:30.274639 3.001914 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 17:53:37.281954 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:53:45.283664 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:54:01.286373 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 17:54:32.995436 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 17:54:32.995542 0.010349 udp 10.0.2.22 62047 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 17:54:33.006243 0.000000 udp 10.0.2.22 62048 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 17:54:33.295091 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:00:37.298523 3.001758 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 18:00:44.306082 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:00:52.307666 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:01:08.310441 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:01:40.316421 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:07:44.323406 3.000921 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 18:07:51.329971 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:07:59.331918 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:08:15.336316 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:08:47.340583 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:09:32.986332 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 18:09:32.986492 0.010681 udp 10.0.2.22 62049 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 18:09:32.997520 0.000000 udp 10.0.2.22 62050 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 18:25:30.355453 3.001345 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 18:25:37.372898 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:25:45.374311 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:26:01.377447 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:26:33.383290 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:28:32.985260 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 18:28:32.985380 0.011248 udp 10.0.2.22 62051 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 18:28:32.996984 0.000000 udp 10.0.2.22 62052 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 18:32:37.389783 3.001060 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 18:32:44.396738 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:32:52.398212 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:33:08.401104 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:33:40.407295 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:39:32.984316 0.000111 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 18:39:32.984523 0.010537 udp 10.0.2.22 62053 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 18:39:32.995461 0.000000 udp 10.0.2.22 62054 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 18:39:44.416175 2.998613 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 18:39:51.424020 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:39:59.422072 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:40:15.425469 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:40:47.431036 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:46:51.437488 3.011285 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 18:46:58.454822 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:47:06.455995 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:47:22.462077 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:47:54.465135 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:53:59.474477 3.001368 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 18:54:06.480344 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:54:14.481889 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:54:30.484419 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 18:54:32.988121 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 18:54:32.988282 0.019308 udp 10.0.2.22 62055 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 18:54:33.007928 0.000000 udp 10.0.2.22 62056 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 18:55:02.490456 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:01:06.498175 3.000311 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 19:01:13.504193 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:01:21.505231 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:01:37.508508 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:02:09.514611 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:08:13.526905 3.030499 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 19:08:20.538272 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:08:28.539944 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:08:44.542417 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:09:16.548546 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:09:32.992272 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 19:09:32.992405 0.010529 udp 10.0.2.22 62057 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 19:09:33.003337 0.000000 udp 10.0.2.22 62058 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 19:15:20.554202 3.001947 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 19:15:27.561928 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:15:35.563324 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:15:51.566601 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:16:23.572488 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:22:27.579508 3.000876 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 19:22:34.585901 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:22:42.587671 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:22:58.590509 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:23:30.596611 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:28:32.991583 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 19:28:32.991790 0.011822 udp 10.0.2.22 62059 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 19:28:33.004023 0.000000 udp 10.0.2.22 62060 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 19:29:34.603157 3.000927 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 19:29:41.610076 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:29:49.610739 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:30:05.614242 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:30:37.620465 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:36:41.626518 3.001929 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 19:36:48.633997 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:36:56.635739 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:37:12.638498 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:37:44.644383 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:39:32.990532 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 19:39:32.990631 0.010900 udp 10.0.2.22 62061 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 19:39:33.001897 0.000000 udp 10.0.2.22 62062 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 19:43:48.654607 2.999064 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 19:43:55.657899 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:44:03.669188 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:44:19.672461 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:44:51.678093 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:51:02.684373 3.001701 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 19:51:09.691705 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:51:17.693622 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:51:33.696263 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:52:05.702448 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:54:32.984604 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 19:54:32.984717 0.010127 udp 10.0.2.22 62063 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 19:54:32.995244 0.000000 udp 10.0.2.22 62064 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 19:58:09.708296 3.001666 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 19:58:16.715647 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:58:24.717247 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:58:40.720359 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 19:59:12.726659 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:05:16.732325 3.001870 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 20:05:23.739837 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:05:31.741140 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:05:47.743829 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:06:19.750299 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:09:32.988284 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 20:09:32.988449 0.010236 udp 10.0.2.22 62065 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 20:09:32.999014 0.000000 udp 10.0.2.22 62066 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 20:24:18.764588 3.001590 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 20:24:25.771540 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:24:33.773098 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:24:49.776192 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:25:21.782369 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:28:32.987320 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 20:28:32.987484 0.010291 udp 10.0.2.22 62067 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 20:28:32.998181 0.000000 udp 10.0.2.22 62068 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 20:31:25.787939 3.002114 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 20:31:32.795142 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:31:40.797217 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:31:56.800228 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:32:28.806499 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:38:32.812767 3.001350 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 20:38:39.819714 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:38:47.820872 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:39:03.824342 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:39:32.986303 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 20:39:32.986483 0.010155 udp 10.0.2.22 62069 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 20:39:32.996986 0.000000 udp 10.0.2.22 62070 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 20:39:35.830231 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:45:39.836941 3.000885 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 20:45:46.843774 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:45:54.844826 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:46:10.848248 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:46:42.854153 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:52:46.861465 3.000379 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 20:52:53.867817 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:53:01.869127 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:53:17.873714 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:53:49.878796 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 20:54:32.990309 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 20:54:32.990473 0.010141 udp 10.0.2.22 62071 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 20:54:33.000976 0.000000 udp 10.0.2.22 62072 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 20:59:53.885522 3.010738 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 21:00:00.901890 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:00:08.903415 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:00:24.906051 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:00:56.912179 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:07:00.919150 3.000649 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 21:07:07.925530 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:07:15.927224 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:07:31.930323 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:08:03.937261 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:09:32.984461 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 21:09:32.984647 0.012741 udp 10.0.2.22 62073 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 21:09:32.997768 0.000000 udp 10.0.2.22 62074 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 21:25:11.946957 3.001596 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 21:25:18.954286 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:25:26.955126 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:25:42.958732 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:26:14.964803 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:28:32.983405 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 21:28:32.983563 0.011261 udp 10.0.2.22 62075 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 21:28:32.995152 0.000000 udp 10.0.2.22 62076 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 21:32:18.971626 3.000950 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 21:32:25.978135 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:32:33.979635 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:32:49.984212 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:33:21.988640 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:39:25.994415 3.001614 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 21:39:32.982285 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 21:39:32.982390 0.010024 udp 10.0.2.22 62077 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 21:39:32.992780 0.000000 udp 10.0.2.22 62078 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 21:39:33.002063 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:39:41.003307 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:39:57.006932 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:40:29.012573 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:46:33.019642 3.000557 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 21:46:40.031720 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:46:48.032849 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:47:04.032235 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:47:36.036824 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:53:40.043033 3.001223 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 21:53:47.050242 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:53:55.051694 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:54:11.054390 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 21:54:32.986192 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 21:54:32.986295 0.012843 udp 10.0.2.22 62079 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 21:54:32.999467 0.000000 udp 10.0.2.22 62080 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 21:54:43.060692 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:00:47.067116 3.001184 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 22:00:54.074422 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:01:02.075329 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:01:18.080107 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:01:50.084631 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:07:54.091006 3.001262 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 22:08:01.097935 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:08:09.099715 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:08:25.102732 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:08:57.108540 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:09:32.990282 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 22:09:32.990417 0.010126 udp 10.0.2.22 62081 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 22:09:33.000886 0.000000 udp 10.0.2.22 62082 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 22:15:01.115043 3.001187 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 22:15:08.122027 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:15:16.123394 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:15:32.127565 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:16:04.132607 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:22:08.138220 3.002149 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 22:22:15.146218 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:22:23.147536 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:22:39.150625 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:23:11.156387 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:28:32.989518 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 22:28:32.989623 0.011878 udp 10.0.2.22 62083 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 22:28:33.001909 0.000000 udp 10.0.2.22 62084 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 22:29:15.162628 3.001663 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 22:29:22.170230 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:29:30.171732 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:29:46.174661 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:30:18.180760 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:36:22.187256 3.000866 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 22:36:29.194104 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:36:37.195178 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:36:53.198530 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:37:25.204920 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:39:32.988213 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 22:39:32.988320 0.010880 udp 10.0.2.22 62085 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 22:39:32.999555 0.000000 udp 10.0.2.22 62086 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 22:43:29.210653 3.001598 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 22:43:36.221106 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:43:44.219254 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:44:00.222543 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:44:32.228722 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:50:38.247067 3.064002 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 22:50:45.281826 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:50:53.266349 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:51:09.269169 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:51:41.275844 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:54:32.994314 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 22:54:32.994401 0.011426 udp 10.0.2.22 62087 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 22:54:33.006195 0.000000 udp 10.0.2.22 62088 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 22:57:45.281585 3.001519 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 22:57:52.288514 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:58:00.290275 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:58:16.293125 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 22:58:48.302987 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:04:52.304891 3.002085 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 23:04:59.313581 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:05:07.314112 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:05:23.317156 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:05:55.324068 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:09:32.986157 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 23:09:32.986299 0.010363 udp 10.0.2.22 62089 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 23:09:32.997011 0.000000 udp 10.0.2.22 62090 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 23:24:03.330836 3.011578 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 23:24:10.347755 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:24:18.349004 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:24:34.352576 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:25:06.357979 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:28:32.985308 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 23:28:32.985537 0.011091 udp 10.0.2.22 62091 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 23:28:32.996988 0.000000 udp 10.0.2.22 62092 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 23:31:10.365024 3.001080 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 23:31:17.371832 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:31:25.372897 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:31:41.376223 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:32:13.382252 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:38:17.388050 3.001736 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 23:38:24.395434 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:38:32.396823 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:38:48.400072 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:39:20.405970 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:39:32.984188 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 23:39:32.984296 0.012817 udp 10.0.2.22 62093 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 23:39:32.997486 0.000000 udp 10.0.2.22 62094 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 23:45:28.417900 3.001738 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 23:45:35.425331 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:45:43.426898 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:45:59.429815 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:46:31.436025 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:52:35.491627 3.002794 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 23:52:42.499252 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:52:50.500641 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:53:06.503829 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:53:38.509858 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:54:33.038671 0.000189 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/11 23:54:33.038985 0.010136 udp 10.0.2.22 62095 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/11 23:54:33.049490 0.000000 udp 10.0.2.22 62096 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/11 23:59:42.515698 3.001936 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/11 23:59:49.523087 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/11 23:59:57.524723 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:00:13.528071 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:00:45.533797 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:06:49.539685 3.001817 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 00:06:56.547283 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:07:04.548681 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:07:20.551460 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:07:52.557591 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:09:33.032357 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 00:09:33.032455 0.010088 udp 10.0.2.22 62097 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 00:09:33.042882 0.000000 udp 10.0.2.22 62098 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 00:25:02.571373 3.001642 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 00:25:09.579110 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:25:17.580272 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:25:33.583326 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:26:05.589372 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:28:33.031182 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 00:28:33.031353 0.011391 udp 10.0.2.22 62099 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 00:28:33.043115 0.000000 udp 10.0.2.22 62100 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 00:32:09.595613 3.001373 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 00:32:16.602583 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:32:24.604346 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:32:40.607405 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:33:12.613192 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:39:16.619566 3.001524 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 00:39:23.626528 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:39:31.628132 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:39:33.030375 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 00:39:33.030461 0.010116 udp 10.0.2.22 62101 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 00:39:33.040998 0.000000 udp 10.0.2.22 62102 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 00:39:47.630862 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:40:19.637130 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:46:23.643344 3.001457 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 00:46:30.650807 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:46:38.651668 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:46:54.655257 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:47:26.662419 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:53:30.667049 3.002897 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 00:53:37.674555 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:53:45.675947 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:54:01.679241 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 00:54:33.034210 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 00:54:33.034392 0.011048 udp 10.0.2.22 62103 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 00:54:33.045778 0.000000 udp 10.0.2.22 62104 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 00:54:33.685018 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:00:37.690952 3.003242 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 01:00:44.698653 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:00:52.700138 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:01:08.702492 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:01:40.709197 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:07:44.714348 3.002530 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 01:07:51.722536 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:07:59.724155 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:08:15.727041 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:08:47.732746 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:09:33.038617 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 01:09:33.038732 0.010285 udp 10.0.2.22 62105 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 01:09:33.049475 0.000000 udp 10.0.2.22 62106 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 01:25:31.739021 3.001767 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 01:25:38.746698 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:25:46.748197 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:26:02.750581 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:26:34.757627 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:28:33.037565 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 01:28:33.037721 0.011580 udp 10.0.2.22 62107 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 01:28:33.049692 0.000000 udp 10.0.2.22 62108 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 01:32:38.762882 3.002075 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 01:32:45.770772 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:32:53.772247 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:33:09.775180 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:33:41.780886 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:39:33.036533 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 01:39:33.036627 0.012895 udp 10.0.2.22 62109 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 01:39:33.049911 0.000000 udp 10.0.2.22 62110 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 01:39:45.787206 3.001679 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 01:39:52.794452 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:40:00.796175 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:40:16.798695 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:40:48.805179 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:46:52.811389 3.001360 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 01:46:59.818387 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:47:07.820174 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:47:23.823255 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:47:55.829137 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:54:00.837692 3.000721 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 01:54:07.844020 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:54:15.845282 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:54:31.848707 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 01:54:33.030272 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 01:54:33.030457 0.009991 udp 10.0.2.22 62111 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 01:54:33.040920 0.000000 udp 10.0.2.22 62112 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 01:55:03.856981 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:01:07.860671 3.001572 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 02:01:14.868611 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:01:22.869214 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:01:38.872644 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:02:10.878611 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:08:14.884914 3.001465 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 02:08:21.892130 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:08:29.895562 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:08:45.895940 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:09:17.902518 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:09:33.034556 0.000104 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 02:09:33.034762 0.010230 udp 10.0.2.22 62113 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 02:09:33.045387 0.000000 udp 10.0.2.22 62114 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 02:15:21.909214 3.000833 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 02:15:28.916031 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:15:36.917842 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:15:52.920568 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:16:24.926540 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:22:28.932872 3.012539 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 02:22:35.950054 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:22:43.951274 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:22:59.954714 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:23:31.960402 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:28:33.033636 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 02:28:33.033752 0.021379 udp 10.0.2.22 62115 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 02:28:33.055534 0.000000 udp 10.0.2.22 62116 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 02:29:35.965628 3.002843 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 02:29:42.973354 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:29:50.975410 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:30:06.978341 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:30:38.984513 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:36:42.991567 3.000558 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 02:36:49.998026 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:36:57.999332 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:37:14.002393 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:37:46.008310 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:39:33.032355 0.000169 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 02:39:33.032632 0.010199 udp 10.0.2.22 62117 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 02:39:33.043242 0.000000 udp 10.0.2.22 62118 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 02:43:50.014753 3.007382 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 02:43:57.021976 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:44:05.023089 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:44:21.026309 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:44:53.032523 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:51:04.037619 3.002575 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 02:51:11.046191 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:51:19.047726 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:51:35.050134 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:52:07.057115 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:54:33.040081 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 02:54:33.040246 0.011368 udp 10.0.2.22 62119 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 02:54:33.051965 0.000000 udp 10.0.2.22 62120 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 02:58:11.062490 3.001842 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 02:58:18.069671 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:58:26.071209 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:58:42.074244 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 02:59:14.080317 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:05:18.087609 3.000370 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 03:05:25.093845 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:05:33.095076 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:05:49.098122 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:06:21.104416 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:09:33.035852 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 03:09:33.035961 0.010282 udp 10.0.2.22 62121 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 03:09:33.046586 0.000000 udp 10.0.2.22 62122 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 03:24:20.117791 3.002282 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 03:24:27.125902 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:24:35.127380 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:24:51.130182 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:25:23.136104 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:28:33.029531 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 03:28:33.029694 0.019294 udp 10.0.2.22 62123 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 03:28:33.049458 0.000000 udp 10.0.2.22 62124 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 03:31:27.141985 3.002190 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 03:31:34.150145 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:31:42.151078 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:31:58.154659 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:32:30.160149 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:38:34.166810 3.001222 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 03:38:41.173839 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:38:49.175153 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:39:05.178014 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:39:33.029072 0.000085 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 03:39:33.029237 0.011165 udp 10.0.2.22 62125 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 03:39:33.040795 0.000000 udp 10.0.2.22 62126 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 03:39:37.184361 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:45:41.191337 3.000781 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 03:45:48.197734 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:45:56.200065 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:46:12.210970 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:46:44.208124 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:52:48.214582 3.024977 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 03:52:55.232115 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:53:03.234236 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:53:19.235917 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:53:51.242333 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 03:54:33.040680 0.000143 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 03:54:33.040920 0.011649 udp 10.0.2.22 62127 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 03:54:33.052949 0.000000 udp 10.0.2.22 62128 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 03:59:55.247848 3.001620 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 04:00:02.255325 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:00:10.257065 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:00:26.260086 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:00:58.266162 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:07:02.275622 2.998251 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 04:07:09.284234 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:07:17.281012 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:07:33.284032 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:08:05.290060 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:09:33.036532 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 04:09:33.036645 0.011665 udp 10.0.2.22 62129 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 04:09:33.048657 0.000000 udp 10.0.2.22 62130 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 04:25:12.299324 3.011740 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 04:25:19.316983 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:25:27.318329 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:25:43.321200 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:26:15.327536 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:28:33.035267 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 04:28:33.035425 0.021994 udp 10.0.2.22 62131 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 04:28:33.057755 0.000000 udp 10.0.2.22 62132 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 04:32:19.332863 3.002193 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 04:32:26.340766 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:32:34.342252 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:32:50.345150 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:33:22.351111 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:39:26.357798 3.001116 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 04:39:33.034356 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 04:39:33.034459 0.010156 udp 10.0.2.22 62133 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 04:39:33.045055 0.000000 udp 10.0.2.22 62134 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 04:39:33.364723 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:39:41.366290 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:39:57.368937 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:40:29.375289 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:46:33.387124 2.995767 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 04:46:40.394145 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:46:48.393958 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:47:04.393848 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:47:36.398784 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:53:40.404852 3.002061 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 04:53:47.412789 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:53:55.616299 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:54:11.455732 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 04:54:33.028469 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 04:54:33.028566 0.018965 udp 10.0.2.22 62135 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 04:54:33.047949 0.000000 udp 10.0.2.22 62136 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 04:54:43.433462 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:00:47.438695 3.002190 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 05:00:54.446574 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:01:02.448093 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:01:18.450978 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:01:50.457020 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:07:54.463243 3.001525 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 05:08:01.470595 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:08:09.472134 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:08:25.474908 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:08:57.481176 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:09:33.036099 0.000106 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 05:09:33.036303 0.010109 udp 10.0.2.22 62137 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 05:09:33.046797 0.000000 udp 10.0.2.22 62138 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 05:15:01.486379 3.002281 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 05:15:08.494253 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:15:16.496104 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:15:32.499118 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:16:04.504800 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:22:08.510998 3.001599 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 05:22:15.518408 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:22:23.520132 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:22:39.523340 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:23:11.529044 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:28:33.031513 0.000118 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 05:28:33.031731 0.011036 udp 10.0.2.22 62139 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 05:28:33.043122 0.000000 udp 10.0.2.22 62140 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 05:29:15.535229 3.001455 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 05:29:22.547590 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:29:30.543698 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:29:46.547015 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:30:18.553116 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:36:22.569196 3.001517 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 05:36:29.576622 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:36:37.578185 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:36:53.581027 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:37:25.586929 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:39:33.030334 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 05:39:33.030534 0.013226 udp 10.0.2.22 62141 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 05:39:33.044128 0.000000 udp 10.0.2.22 62142 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 05:43:29.593347 3.001259 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 05:43:36.600011 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:43:44.601916 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:44:00.605196 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:44:32.615973 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:50:38.619884 3.001672 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 05:50:45.627282 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:50:53.628606 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:51:09.631871 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:51:41.638059 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:54:33.034270 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 05:54:33.034427 0.013333 udp 10.0.2.22 62143 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 05:54:33.048102 0.000000 udp 10.0.2.22 62144 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 05:57:45.643906 3.001224 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 05:57:52.651243 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:58:00.653038 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:58:16.655233 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 05:58:48.661724 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:04:52.668318 3.000967 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 06:04:59.675107 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:05:07.676241 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:05:23.679567 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:05:55.685557 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:09:33.028395 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 06:09:33.028505 0.010891 udp 10.0.2.22 62145 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 06:09:33.039742 0.000000 udp 10.0.2.22 62146 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 06:24:03.692848 3.002020 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 06:24:10.699988 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:24:18.701971 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:24:34.704014 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:25:06.714608 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:28:33.027313 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 06:28:33.027431 0.021472 udp 10.0.2.22 62147 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 06:28:33.049302 0.000000 udp 10.0.2.22 62148 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 06:31:10.716627 3.001571 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 06:31:17.724136 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:31:25.725681 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:31:41.728449 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:32:13.734521 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:38:17.740806 3.001349 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 06:38:24.747916 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:38:32.749417 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:38:48.752303 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:39:20.758746 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:39:33.027440 0.000170 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 06:39:33.027709 0.018093 udp 10.0.2.22 62149 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 06:39:33.046223 0.000000 udp 10.0.2.22 62150 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 06:45:30.774490 2.999857 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 06:45:37.780611 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:45:45.782085 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:46:01.787228 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:46:33.793696 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:52:37.797003 3.001754 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 06:52:44.810833 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:52:52.806075 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:53:08.809089 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:53:40.815054 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:54:33.030233 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 06:54:33.030446 0.010094 udp 10.0.2.22 62151 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 06:54:33.040909 0.000000 udp 10.0.2.22 62152 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 06:59:44.821468 3.001348 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 06:59:51.831850 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 06:59:59.830028 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:00:15.833297 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:00:47.839115 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:06:51.845066 3.001818 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 07:06:58.852516 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:07:06.854117 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:07:22.858201 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:07:54.862958 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:09:33.034416 0.000318 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 07:09:33.034846 0.010894 udp 10.0.2.22 62153 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 07:09:33.046143 0.000000 udp 10.0.2.22 62154 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 07:25:04.879415 2.998970 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 07:25:11.884410 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:25:19.885068 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:25:35.888722 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:26:07.894514 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:28:33.033306 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 07:28:33.033523 0.011225 udp 10.0.2.22 62155 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 07:28:33.045056 0.000000 udp 10.0.2.22 62156 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 07:32:11.900625 3.001660 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 07:32:18.908048 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:32:26.909488 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:32:42.912686 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:33:14.918525 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:39:18.925592 3.001202 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 07:39:25.931773 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:39:33.032387 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 07:39:33.032481 0.012595 udp 10.0.2.22 62157 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 07:39:33.045457 0.000000 udp 10.0.2.22 62158 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 07:39:33.933922 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:39:49.936359 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:40:21.942433 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:46:25.949007 3.003110 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 07:46:32.955643 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:46:40.962077 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:46:56.960464 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:47:28.966610 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:53:32.972405 3.001824 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 07:53:39.979805 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:53:47.981610 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:54:03.984586 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 07:54:33.025992 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 07:54:33.026087 0.010209 udp 10.0.2.22 62159 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 07:54:33.036673 0.000000 udp 10.0.2.22 62160 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 07:54:35.990558 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:00:39.997480 3.000581 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 08:00:47.004012 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:00:55.005129 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:01:11.008547 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:01:43.014498 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:07:47.021237 3.004840 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 08:07:54.031638 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:08:02.029692 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:08:18.034253 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:08:50.038451 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:09:33.030385 0.000097 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 08:09:33.030586 0.019532 udp 10.0.2.22 62161 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 08:09:33.050502 0.000000 udp 10.0.2.22 62162 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 08:25:33.053191 3.001881 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 08:25:40.060560 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:25:48.065725 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:26:04.065055 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:26:36.071335 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:28:33.029488 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 08:28:33.029633 0.011284 udp 10.0.2.22 62163 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 08:28:33.041257 0.000000 udp 10.0.2.22 62164 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 08:32:40.077359 3.001387 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 08:32:47.084610 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:32:55.085951 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:33:11.089202 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:33:43.095097 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:39:33.028474 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 08:39:33.028596 0.011571 udp 10.0.2.22 62165 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 08:39:33.040566 0.000000 udp 10.0.2.22 62166 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 08:39:47.101461 3.001187 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 08:39:54.108168 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:40:02.110048 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:40:18.113205 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:40:50.119096 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:46:54.125302 3.001304 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 08:47:01.134965 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:47:09.134153 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:47:25.136897 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:47:57.142844 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:54:02.150413 3.017089 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 08:54:09.168149 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:54:17.169391 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:54:33.034819 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 08:54:33.034933 0.011448 udp 10.0.2.22 62167 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 08:54:33.046729 0.000000 udp 10.0.2.22 62168 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 08:54:33.177843 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 08:55:05.178440 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:01:09.185603 3.000681 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 09:01:16.191835 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:01:24.193285 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:01:40.196255 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:02:12.202363 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:08:16.209387 3.000489 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 09:08:23.215874 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:08:31.217169 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:08:47.220356 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:09:19.226531 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:09:33.026525 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 09:09:33.026634 0.024013 udp 10.0.2.22 62169 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 09:09:33.051076 0.000000 udp 10.0.2.22 62170 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 09:15:23.231781 3.076103 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 09:15:30.281930 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:15:38.255956 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:15:54.254695 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:16:26.260584 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:22:30.266892 3.001677 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 09:22:37.274104 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:22:45.275132 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:23:01.278367 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:23:33.284459 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:28:33.025576 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 09:28:33.025677 0.018317 udp 10.0.2.22 62171 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 09:28:33.044383 0.000000 udp 10.0.2.22 62172 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 09:29:37.290807 3.001283 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 09:29:44.297902 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:29:52.299383 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:30:08.302336 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:30:40.308429 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:36:44.315269 3.000924 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 09:36:51.322110 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:36:59.323293 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:37:15.355417 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:37:47.342168 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:39:33.034559 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 09:39:33.034664 0.010199 udp 10.0.2.22 62173 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 09:39:33.045285 0.000000 udp 10.0.2.22 62174 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 09:43:51.348927 3.001190 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 09:43:58.355763 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:44:06.357138 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:44:22.360119 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:44:54.366052 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:51:06.373224 3.002160 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 09:51:13.381104 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:51:21.382796 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:51:37.385811 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:52:09.391735 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:54:33.028383 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 09:54:33.028495 0.011361 udp 10.0.2.22 62175 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 09:54:33.040264 0.000000 udp 10.0.2.22 62176 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 09:58:13.407356 3.002158 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 09:58:20.415062 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:58:28.416762 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:58:44.419464 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 09:59:16.425211 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:05:20.431973 3.001238 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 10:05:27.439151 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:05:35.440799 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:05:51.443608 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:06:23.449612 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:09:33.032166 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 10:09:33.032359 0.010316 udp 10.0.2.22 62177 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 10:09:33.043039 0.000000 udp 10.0.2.22 62178 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 10:24:21.462585 3.001581 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 10:24:28.480316 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:24:36.480947 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:24:52.483654 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:25:24.490030 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:28:33.031461 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 10:28:33.031577 0.012203 udp 10.0.2.22 62179 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 10:28:33.044169 0.000000 udp 10.0.2.22 62180 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 10:31:28.496679 3.000945 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 10:31:35.503435 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:31:43.504910 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:31:59.508128 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:32:31.514154 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:38:35.521223 3.000716 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 10:38:42.527635 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:38:50.529654 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:39:06.531988 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:39:33.030118 0.000114 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 10:39:33.030340 0.011262 udp 10.0.2.22 62181 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 10:39:33.042032 0.000000 udp 10.0.2.22 62182 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 10:39:38.538167 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:45:42.544489 3.011087 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 10:45:49.561627 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:45:57.563056 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:46:13.566316 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:46:45.573620 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:52:49.577737 3.001983 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 10:52:56.585173 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:53:04.587024 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:53:20.590463 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:53:52.596098 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 10:54:33.024400 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 10:54:33.024523 0.013671 udp 10.0.2.22 62183 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 10:54:33.038569 0.000000 udp 10.0.2.22 62184 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 10:59:56.607258 2.997460 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 11:00:03.609786 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:00:11.610935 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:00:27.614088 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:00:59.620030 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:07:03.625674 3.002157 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 11:07:10.633589 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:07:18.635027 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:07:34.644111 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:08:06.654231 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:09:33.028587 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 11:09:33.028721 0.010291 udp 10.0.2.22 62185 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 11:09:33.039425 0.000000 udp 10.0.2.22 62186 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 11:25:08.666337 3.001423 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 11:25:15.673788 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:25:23.675342 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:25:39.678148 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:26:11.684062 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:28:33.027413 0.000136 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 11:28:33.027681 0.010202 udp 10.0.2.22 62187 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 11:28:33.038286 0.000000 udp 10.0.2.22 62188 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 11:32:15.690663 3.001077 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 11:32:22.697666 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:32:30.698815 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:32:46.702204 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:33:18.707878 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:39:22.714415 3.001086 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 11:39:29.721300 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:39:33.025674 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 11:39:33.025773 0.010805 udp 10.0.2.22 62189 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 11:39:33.036894 0.000000 udp 10.0.2.22 62190 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 11:39:37.722947 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:39:53.725417 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:40:25.731349 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:46:29.745169 2.997219 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 11:46:36.751831 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:46:44.746961 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:47:00.749839 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:47:32.755456 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:53:36.766827 2.997142 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 11:53:43.769527 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:53:51.770695 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:54:07.783853 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 11:54:33.034887 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 11:54:33.035054 0.018039 udp 10.0.2.22 62191 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 11:54:33.053664 0.000000 udp 10.0.2.22 62192 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 11:54:39.793193 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:00:43.796790 3.000892 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 12:00:50.803304 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:00:58.804896 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:01:14.807801 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:01:46.814074 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:07:50.820076 3.001567 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 12:07:57.827299 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:08:05.828795 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:08:21.832052 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:08:53.838025 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:09:33.024232 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 12:09:33.024338 0.010764 udp 10.0.2.22 62193 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 12:09:33.035474 0.000000 udp 10.0.2.22 62194 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 12:25:33.849193 3.000825 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 12:25:40.856091 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:25:48.857112 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:26:04.859944 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:26:36.866250 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:28:33.023514 0.000100 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 12:28:33.023686 0.011513 udp 10.0.2.22 62195 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 12:28:33.035592 0.000000 udp 10.0.2.22 62196 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 12:32:40.872743 3.962451 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 12:32:48.795467 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:32:56.704700 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:33:12.513605 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:33:44.127814 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:39:33.032510 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 12:39:33.032715 0.011329 udp 10.0.2.22 62197 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 12:39:33.044477 0.000000 udp 10.0.2.22 62198 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 12:39:47.907341 3.000499 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 12:39:54.913835 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:40:02.914800 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:40:18.918718 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:40:50.924707 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:46:54.936230 2.997627 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 12:47:01.938019 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:47:09.943535 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:47:25.946801 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:47:57.948430 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:54:04.960238 2.999920 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 12:54:11.965937 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:54:19.967408 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:54:33.026209 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 12:54:33.026376 0.010035 udp 10.0.2.22 62199 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 12:54:33.036889 0.000000 udp 10.0.2.22 62200 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 12:54:35.970304 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 12:55:07.976506 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:01:11.982902 3.000984 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 13:01:18.989877 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:01:26.991427 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:01:42.994323 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:02:15.013049 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:08:19.017323 3.003422 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 13:08:26.026273 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:08:34.025272 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:08:50.032135 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:09:22.034227 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:09:33.034688 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 13:09:33.034843 0.010841 udp 10.0.2.22 62201 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 13:09:33.046088 0.000000 udp 10.0.2.22 62202 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 13:15:26.040818 3.005467 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 13:15:33.048288 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:15:41.049497 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:15:57.052207 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:16:29.058276 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:22:33.064537 3.001618 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 13:22:40.071871 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:22:48.073187 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:23:04.076216 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:23:36.082246 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:28:33.029507 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 13:28:33.029708 0.011763 udp 10.0.2.22 62203 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 13:28:33.041833 0.000000 udp 10.0.2.22 62204 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 13:29:40.087601 3.002584 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 13:29:47.095183 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:29:55.097280 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:30:11.100187 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:30:43.106402 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:36:47.112422 3.001711 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 13:36:54.120049 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:37:02.121116 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:37:18.124511 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:37:50.130731 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:39:33.028764 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 13:39:33.028872 0.010170 udp 10.0.2.22 62205 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 13:39:33.039419 0.000000 udp 10.0.2.22 62206 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 13:43:59.143644 3.001620 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 13:44:06.150682 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:44:14.152286 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:44:30.155667 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:45:02.161470 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:51:15.170914 3.001337 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 13:51:22.178102 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:51:30.179334 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:51:46.182432 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:52:18.188425 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:54:33.022253 0.000112 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 13:54:33.022461 0.021570 udp 10.0.2.22 62207 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 13:54:33.044405 0.000000 udp 10.0.2.22 62208 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 13:58:22.194679 3.001416 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 13:58:29.201678 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:58:37.203195 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:58:53.206177 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 13:59:25.212372 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:05:29.218568 3.001636 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 14:05:36.225671 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:05:44.227367 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:06:00.230357 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:06:32.236288 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:09:33.026236 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 14:09:33.026337 0.010150 udp 10.0.2.22 62209 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 14:09:33.036826 0.000000 udp 10.0.2.22 62210 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 14:24:24.250519 3.001537 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 14:24:31.258007 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:24:39.259375 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:24:55.262218 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:25:27.268235 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:28:33.025382 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 14:28:33.025565 0.010134 udp 10.0.2.22 62211 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 14:28:33.036075 0.000000 udp 10.0.2.22 62212 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 14:31:31.274748 3.001395 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 14:31:38.281761 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:31:46.283405 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:32:02.286060 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:32:34.292047 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:38:38.299605 3.000565 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 14:38:45.305218 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:38:53.307175 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:39:09.310186 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:39:33.024324 0.000159 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 14:39:33.024582 0.010281 udp 10.0.2.22 62213 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 14:39:33.035194 0.000000 udp 10.0.2.22 62214 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 14:39:41.316096 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:45:45.321707 3.004323 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 14:45:52.330073 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:46:00.330968 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:46:16.334119 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:46:48.340076 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:52:52.347023 3.001222 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 14:52:59.353547 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:53:07.359706 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:53:23.358266 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:53:55.364555 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 14:54:33.028470 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 14:54:33.028571 0.010512 udp 10.0.2.22 62215 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 14:54:33.039418 0.000000 udp 10.0.2.22 62216 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 14:59:59.370752 3.000991 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 15:00:06.377918 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:00:14.389018 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:00:30.391860 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:01:02.398076 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:07:06.404666 3.001446 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 15:07:13.411283 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:07:21.412995 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:07:37.415813 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:08:09.421864 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:09:33.022237 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 15:09:33.022340 0.012156 udp 10.0.2.22 62217 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 15:09:33.034868 0.000000 udp 10.0.2.22 62218 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 15:25:13.437679 3.001126 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 15:25:20.444337 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:25:28.456042 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:25:44.459034 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:26:16.465153 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:28:33.031706 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 15:28:33.031858 0.013826 udp 10.0.2.22 62219 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 15:28:33.046013 0.000000 udp 10.0.2.22 62220 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 15:32:20.470976 3.001364 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 15:32:27.478231 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:32:35.480164 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:32:51.482816 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:33:23.604677 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:39:27.504692 3.001881 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 15:39:33.030291 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 15:39:33.030460 0.010121 udp 10.0.2.22 62221 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 15:39:33.040922 0.000000 udp 10.0.2.22 62222 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 15:39:34.512418 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:39:42.513782 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:39:58.516997 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:40:30.522844 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:46:34.533398 2.998813 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 15:46:41.543527 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:46:49.539968 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:47:05.546722 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:47:37.546758 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:53:41.552770 3.001603 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 15:53:48.560240 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:53:56.561729 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:54:12.564494 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 15:54:33.024456 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 15:54:33.024559 0.010103 udp 10.0.2.22 62223 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 15:54:33.034998 0.000000 udp 10.0.2.22 62224 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 15:54:44.570755 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:00:48.577224 3.001179 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 16:00:55.584234 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:01:03.585763 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:01:19.588883 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:01:51.594893 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:07:55.600972 3.083054 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 16:08:02.662665 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:08:10.619768 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:08:26.622632 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:08:58.628778 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:09:33.028273 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 16:09:33.028468 0.013396 udp 10.0.2.22 62225 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 16:09:33.042240 0.000000 udp 10.0.2.22 62226 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 16:15:02.634728 3.001740 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 16:15:09.642137 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:15:17.643731 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:15:33.646543 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:16:05.657799 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:22:09.659087 3.001177 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 16:22:16.666156 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:22:24.667760 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:22:40.670100 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:23:12.676820 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:28:33.027411 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 16:28:33.027605 0.011510 udp 10.0.2.22 62227 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 16:28:33.039499 0.000000 udp 10.0.2.22 62228 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 16:29:16.700101 2.993842 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 16:29:23.700327 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:29:31.705864 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:29:47.704489 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:30:19.710806 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:36:23.716806 3.001438 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 16:36:30.723826 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:36:38.725087 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:36:54.728394 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:37:26.734601 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:39:33.026235 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 16:39:33.026331 0.010480 udp 10.0.2.22 62229 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 16:39:33.037132 0.000000 udp 10.0.2.22 62230 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 16:43:30.740979 3.001079 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 16:43:37.747966 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:43:45.749684 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:44:01.762007 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:44:33.764029 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:50:39.766920 3.002367 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 16:50:46.774885 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:50:54.777274 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:51:10.779490 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:51:42.785271 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:54:33.030289 0.000105 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 16:54:33.030487 0.010561 udp 10.0.2.22 62231 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 16:54:33.041559 0.000000 udp 10.0.2.22 62232 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 16:57:46.791068 3.001913 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 16:57:53.798889 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:58:01.800335 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:58:17.803443 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 16:58:49.809806 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:04:53.816036 3.000900 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 17:05:00.822405 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:05:08.824249 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:05:24.827591 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:05:56.833004 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:09:33.024067 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 17:09:33.024273 0.010147 udp 10.0.2.22 62233 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 17:09:33.034793 0.000000 udp 10.0.2.22 62234 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 17:24:03.849091 3.001403 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 17:24:10.855682 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:24:18.857730 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:24:34.860809 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:25:06.868104 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:28:33.023435 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 17:28:33.023544 0.011224 udp 10.0.2.22 62235 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 17:28:33.035138 0.000000 udp 10.0.2.22 62236 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 17:31:10.873790 3.000815 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 17:31:17.880216 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:31:25.881362 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:31:41.884756 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:32:13.890818 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:38:17.896465 3.002108 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 17:38:24.904367 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:38:32.905552 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:38:48.908647 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:39:20.914790 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:39:33.022250 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 17:39:33.022435 0.011333 udp 10.0.2.22 62237 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 17:39:33.034125 0.000000 udp 10.0.2.22 62238 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 17:45:27.925541 3.001273 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 17:45:34.932584 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:45:42.933890 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:45:58.937194 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:46:30.943716 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:52:34.949001 3.001530 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 17:52:41.956466 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:52:49.958130 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:53:05.962389 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:53:37.967064 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:54:33.026473 0.000116 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 17:54:33.026689 0.010297 udp 10.0.2.22 62239 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 17:54:33.037300 0.000000 udp 10.0.2.22 62240 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 17:59:41.973233 3.045006 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 17:59:49.002263 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 17:59:56.992208 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:00:12.995977 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:00:45.000981 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:06:49.006581 3.002037 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 18:06:56.014511 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:07:04.015886 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:07:20.018780 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:07:52.026101 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:09:33.020466 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 18:09:33.020662 0.010415 udp 10.0.2.22 62241 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 18:09:33.031462 0.000000 udp 10.0.2.22 62242 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 18:25:02.037857 3.003030 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 18:25:09.045726 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:25:17.047429 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:25:33.051212 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:26:05.056703 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:28:33.029695 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 18:28:33.029837 0.012497 udp 10.0.2.22 62243 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 18:28:33.042721 0.000000 udp 10.0.2.22 62244 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 18:32:09.062915 3.001169 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 18:32:16.069982 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:32:24.071237 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:32:40.078759 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:33:12.080567 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:39:16.086814 3.001448 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 18:39:23.093807 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:39:31.095315 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:39:33.028433 0.000186 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 18:39:33.028726 0.010099 udp 10.0.2.22 62245 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 18:39:33.039230 0.000000 udp 10.0.2.22 62246 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 18:39:47.098322 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:40:19.104479 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:46:23.118524 2.993551 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 18:46:30.117891 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:46:38.142876 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:46:54.132341 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:47:26.138318 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:53:30.144581 3.001288 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 18:53:37.151733 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:53:45.153271 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:54:01.156109 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 18:54:33.022389 0.000116 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 18:54:33.022601 0.012922 udp 10.0.2.22 62247 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 18:54:33.035927 0.000000 udp 10.0.2.22 62248 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 18:54:33.162447 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:00:37.167545 3.002317 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 19:00:44.175791 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:00:52.177237 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:01:08.182616 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:01:40.186333 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:07:44.192834 3.001228 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 19:07:51.199690 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:07:59.201503 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:08:15.204391 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:08:47.210286 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:09:33.027122 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 19:09:33.027213 0.011907 udp 10.0.2.22 62249 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 19:09:33.039481 0.000000 udp 10.0.2.22 62250 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 19:25:30.224841 3.001905 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 19:25:37.232431 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:25:45.233972 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:26:01.236837 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:26:33.243073 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:28:33.025251 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 19:28:33.025412 0.011440 udp 10.0.2.22 62251 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 19:28:33.037217 0.000000 udp 10.0.2.22 62252 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 19:32:37.249048 3.001861 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 19:32:44.256362 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:32:52.257905 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:33:08.261092 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:33:40.266807 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:39:33.024426 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 19:39:33.024585 0.011149 udp 10.0.2.22 62253 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 19:39:33.036124 0.000000 udp 10.0.2.22 62254 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 19:39:44.273130 3.001322 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 19:39:51.280227 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:39:59.281947 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:40:15.284820 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:40:47.291110 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:46:51.305166 3.039820 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 19:46:58.326076 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:47:06.317954 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:47:22.319068 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:47:54.324858 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:53:58.331823 3.000705 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 19:54:05.338367 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:54:13.339804 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:54:29.343167 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 19:54:33.028479 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 19:54:33.028671 0.010299 udp 10.0.2.22 62255 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 19:54:33.039380 0.000000 udp 10.0.2.22 62256 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 19:55:01.350324 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:01:05.354935 3.001662 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 20:01:12.362408 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:01:20.363910 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:01:36.366927 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:02:08.372930 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:08:12.382290 3.009278 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 20:08:19.385666 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:08:27.387776 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:08:43.391018 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:09:15.396817 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:09:33.025200 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 20:09:33.025299 0.010443 udp 10.0.2.22 62257 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 20:09:33.036088 0.000000 udp 10.0.2.22 62258 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 20:15:19.403561 3.000893 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 20:15:26.410602 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:15:34.412015 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:15:50.424694 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:16:22.430958 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:22:26.436843 3.001636 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 20:22:33.443957 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:22:41.445661 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:22:57.448701 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:23:29.454880 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:28:33.024125 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 20:28:33.024279 0.011811 udp 10.0.2.22 62259 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 20:28:33.036407 0.000000 udp 10.0.2.22 62260 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 20:29:33.461060 3.001231 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 20:29:40.469924 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:29:48.469789 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:30:04.472442 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:30:36.478703 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:36:40.484802 3.001690 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 20:36:47.492005 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:36:55.493548 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:37:11.497575 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:37:43.502592 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:39:33.020459 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 20:39:33.020565 0.010183 udp 10.0.2.22 62261 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 20:39:33.031137 0.000000 udp 10.0.2.22 62262 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 20:43:47.507768 3.002486 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 20:43:54.516181 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:44:02.518008 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:44:18.524368 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:44:50.526663 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:51:08.552563 3.001684 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 20:51:15.560221 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:51:23.561824 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:51:39.564643 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:52:11.571170 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:54:33.024453 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 20:54:33.024558 0.011902 udp 10.0.2.22 62263 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 20:54:33.036864 0.000000 udp 10.0.2.22 62264 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 20:58:15.576613 3.001916 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 20:58:22.584208 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:58:30.585113 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:58:46.588819 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 20:59:18.594528 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:05:22.599708 3.002872 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 21:05:29.608294 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:05:37.609818 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:05:53.612692 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:06:25.618645 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:09:33.028433 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 21:09:33.028549 0.010599 udp 10.0.2.22 62265 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 21:09:33.039599 0.000000 udp 10.0.2.22 62266 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 21:24:20.627242 3.001750 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 21:24:27.633935 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:24:35.635976 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:24:51.638286 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:25:23.651725 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:28:33.027172 0.000107 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 21:28:33.027372 0.011324 udp 10.0.2.22 62267 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 21:28:33.047666 0.000000 udp 10.0.2.22 62268 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 21:31:27.650683 3.001990 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 21:31:34.658315 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:31:42.659943 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:31:58.662972 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:32:30.669013 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:38:34.675576 3.000867 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 21:38:41.681962 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:38:49.684028 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:39:05.686638 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:39:33.026529 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 21:39:33.026724 0.012040 udp 10.0.2.22 62269 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 21:39:33.039119 0.000000 udp 10.0.2.22 62270 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 21:39:37.693011 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:45:41.702344 3.007795 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 21:45:48.716253 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:45:56.718093 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:46:12.720893 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:46:44.726963 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:52:48.733038 3.011527 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 21:52:55.750288 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:53:03.751736 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:53:19.754628 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:53:51.760775 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 21:54:33.020364 0.000085 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 21:54:33.020539 0.012681 udp 10.0.2.22 62271 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 21:54:33.033662 0.000000 udp 10.0.2.22 62272 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 21:59:55.767009 3.001519 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 22:00:02.774388 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:00:10.775136 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:00:26.778626 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:00:58.784721 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:07:02.791833 3.000460 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 22:07:09.797998 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:07:17.799880 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:07:33.802129 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:08:05.808716 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:09:33.024624 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 22:09:33.024738 0.010183 udp 10.0.2.22 62273 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 22:09:33.035285 0.000000 udp 10.0.2.22 62274 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 22:25:12.827510 3.002492 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 22:25:19.835246 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:25:27.836987 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:25:43.840065 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:26:15.845820 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:28:33.023831 0.000101 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 22:28:33.024020 0.011406 udp 10.0.2.22 62275 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 22:28:33.035794 0.000000 udp 10.0.2.22 62276 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 22:32:19.852202 3.001565 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 22:32:26.859827 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:32:34.860416 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:32:50.863744 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:33:22.870030 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:39:26.875283 3.002352 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 22:39:33.022507 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 22:39:33.022619 0.010071 udp 10.0.2.22 62277 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 22:39:33.033042 0.000000 udp 10.0.2.22 62278 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 22:39:33.882835 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:39:41.884409 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:39:57.888039 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:40:29.893903 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:46:33.900070 3.001742 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 22:46:40.909890 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:46:48.908705 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:47:04.912231 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:47:36.918451 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:53:40.924482 3.000619 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 22:53:47.931601 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:53:55.932966 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:54:11.936059 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 22:54:33.026296 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 22:54:33.026402 0.010250 udp 10.0.2.22 62279 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 22:54:33.037059 0.000000 udp 10.0.2.22 62280 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 22:54:43.943023 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:00:47.947873 3.011595 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 23:00:54.965075 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:01:02.966325 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:01:18.969939 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:01:50.975287 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:07:54.982038 3.001676 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 23:08:01.989104 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:08:09.990769 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:08:25.993385 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:08:57.999358 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:09:33.020282 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 23:09:33.020436 0.014927 udp 10.0.2.22 62281 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 23:09:33.035746 0.000000 udp 10.0.2.22 62282 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 23:15:02.006087 3.001959 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 23:15:09.013136 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:15:17.015048 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:15:33.018028 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:16:05.024009 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:22:09.029592 3.001750 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 23:22:16.037137 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:22:24.038844 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:22:40.041968 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:23:12.047841 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:28:33.470158 0.000124 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 23:28:33.470381 0.011615 udp 10.0.2.22 62283 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 23:28:33.482368 0.000000 udp 10.0.2.22 62284 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 23:29:16.503937 3.001949 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 23:29:23.516238 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:29:31.512984 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:29:47.516308 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:30:19.522131 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:36:23.528523 3.001429 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 23:36:30.535667 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:36:38.537514 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:36:54.540255 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:37:26.546371 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:39:33.468998 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 23:39:33.469105 0.026301 udp 10.0.2.22 62285 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 23:39:33.495787 0.000000 udp 10.0.2.22 62286 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 23:43:30.552445 3.001622 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 23:43:37.559630 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:43:45.561085 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:44:01.564292 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:44:33.577059 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:50:37.576278 3.001891 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 23:50:44.583703 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:50:52.585031 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:51:08.588320 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:51:40.594018 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:54:33.473207 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/12 23:54:33.473421 0.011719 udp 10.0.2.22 62287 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/12 23:54:33.485663 0.000000 udp 10.0.2.22 62288 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/12 23:57:44.601156 3.000781 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/12 23:57:51.607803 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:57:59.609181 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:58:15.612230 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/12 23:58:47.618414 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:04:51.623656 3.002210 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 00:04:58.631866 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:05:06.633110 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:05:22.636227 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:05:54.642273 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:09:33.476727 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 00:09:33.476924 0.010278 udp 10.0.2.22 62289 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 00:09:33.487570 0.000000 udp 10.0.2.22 62290 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 00:24:02.699001 3.001920 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 00:24:09.706633 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:24:17.708267 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:24:33.711025 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:25:05.717114 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:28:33.526111 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 00:28:33.526205 0.012278 udp 10.0.2.22 62291 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 00:28:33.538839 0.000000 udp 10.0.2.22 62292 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 00:31:09.722582 3.002233 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 00:31:16.730648 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:31:24.732051 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:31:40.735288 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:32:12.741070 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:38:16.746522 3.002604 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 00:38:23.754756 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:38:31.756024 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:38:47.759229 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:39:19.765151 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:39:33.524942 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 00:39:33.525051 0.019043 udp 10.0.2.22 62293 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 00:39:33.544482 0.000000 udp 10.0.2.22 62294 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 00:45:23.771678 3.000796 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 00:45:30.778383 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:45:38.780070 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:45:54.783334 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:46:26.789464 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:52:30.884474 3.002459 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 00:52:37.892701 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:52:45.894378 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:53:01.897134 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:53:33.902543 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:54:33.518936 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 00:54:33.519081 0.016266 udp 10.0.2.22 62295 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 00:54:33.535745 0.000000 udp 10.0.2.22 62296 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 00:59:37.910070 3.000824 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 00:59:44.916554 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 00:59:52.918196 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:00:08.921152 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:00:40.927180 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:06:44.932907 3.001497 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 01:06:51.940500 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:06:59.942258 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:07:15.945140 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:07:47.950884 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:09:33.523040 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 01:09:33.523137 0.016416 udp 10.0.2.22 62297 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 01:09:33.551811 0.000000 udp 10.0.2.22 62298 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 01:25:00.988542 3.002196 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 01:25:07.996207 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:25:15.998282 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:25:32.001038 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:26:04.007026 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:28:33.551998 0.000125 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 01:28:33.552227 0.011383 udp 10.0.2.22 62299 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 01:28:33.563965 0.000000 udp 10.0.2.22 62300 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 01:32:08.013025 3.001917 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 01:32:15.020359 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:32:23.021779 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:32:39.025001 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:33:11.030751 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:39:15.037262 3.001258 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 01:39:22.044680 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:39:30.046022 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:39:33.550885 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 01:39:33.551106 0.011968 udp 10.0.2.22 62301 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 01:39:33.563390 0.000000 udp 10.0.2.22 62302 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 01:39:46.049251 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:40:18.055193 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:46:22.061072 3.001476 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 01:46:29.068232 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:46:37.069958 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:46:53.079594 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:47:25.079016 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:53:29.084671 3.001596 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 01:53:36.092362 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:53:44.095495 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:54:00.096785 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:54:32.102775 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 01:54:33.554769 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 01:54:33.554940 0.021396 udp 10.0.2.22 62303 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 01:54:33.576671 0.000000 udp 10.0.2.22 62304 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 02:00:40.115115 3.001035 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 02:00:47.122213 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:00:55.123394 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:01:11.126544 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:01:43.133980 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:07:47.138402 3.069297 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 02:07:54.176541 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:08:02.161549 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:08:18.174491 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:08:50.166739 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:09:33.549259 0.000188 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 02:09:33.549556 0.010282 udp 10.0.2.22 62305 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 02:09:33.560225 0.000000 udp 10.0.2.22 62306 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 02:25:32.179547 3.001951 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 02:25:39.187257 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:25:47.188600 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:26:03.192075 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:26:35.197996 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:28:33.548292 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 02:28:33.548490 0.023270 udp 10.0.2.22 62307 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 02:28:33.572146 0.000000 udp 10.0.2.22 62308 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 02:32:39.204323 3.001156 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 02:32:46.211399 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:32:54.212767 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:33:10.215232 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:33:42.221772 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:39:33.547065 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 02:39:33.547181 0.027918 udp 10.0.2.22 62309 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 02:39:33.575519 0.000000 udp 10.0.2.22 62310 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 02:39:46.228076 3.001510 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 02:39:53.234898 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:40:01.236732 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:40:17.239817 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:40:49.245141 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:46:53.251947 3.004404 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 02:47:00.259280 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:47:08.261877 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:47:24.266456 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:47:56.269860 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:54:08.297974 3.011051 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 02:54:15.314615 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:54:23.316345 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:54:33.551183 0.000123 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 02:54:33.551394 0.011291 udp 10.0.2.22 62311 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 02:54:33.563071 0.000000 udp 10.0.2.22 62312 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 02:54:39.319022 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 02:55:11.325206 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:01:15.331199 3.001530 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 03:01:22.338484 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:01:30.340328 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:01:46.343095 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:02:18.349132 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:08:22.355893 3.000787 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 03:08:29.362631 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:08:37.363970 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:08:53.367001 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:09:25.373112 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:09:33.554936 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 03:09:33.555073 0.011824 udp 10.0.2.22 62313 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 03:09:33.567236 0.000000 udp 10.0.2.22 62314 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 03:15:29.379095 3.012465 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 03:15:36.396420 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:15:44.398139 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:16:00.401029 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:16:32.407282 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:22:36.412996 3.001930 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 03:22:43.420632 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:22:51.422269 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:23:07.425053 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:23:39.433584 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:28:33.554015 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 03:28:33.554118 0.014851 udp 10.0.2.22 62315 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 03:28:33.569504 0.000000 udp 10.0.2.22 62316 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 03:29:43.437771 3.001199 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 03:29:50.444985 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:29:58.446647 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:30:14.452421 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:30:46.455259 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:36:50.461507 3.001368 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 03:36:57.468559 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:37:05.469931 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:37:21.473053 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:37:53.479138 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:39:33.552928 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 03:39:33.553128 0.031134 udp 10.0.2.22 62317 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 03:39:33.584648 0.000000 udp 10.0.2.22 62318 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 03:44:03.493165 3.001949 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 03:44:10.501167 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:44:18.502289 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:44:34.505878 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:45:06.511515 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:51:34.522141 3.001705 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 03:51:41.529668 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:51:49.530989 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:52:05.557204 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:52:37.560179 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:54:33.547077 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 03:54:33.547174 0.039080 udp 10.0.2.22 62319 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 03:54:33.586664 0.000000 udp 10.0.2.22 62320 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 03:58:42.567975 3.001203 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 03:58:49.575124 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:58:57.576404 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:59:13.579356 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 03:59:45.585107 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:05:49.591989 3.001817 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 04:05:56.599028 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:06:04.600550 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:06:20.603717 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:06:52.609435 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:09:33.551255 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 04:09:33.551372 0.011741 udp 10.0.2.22 62321 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 04:09:33.563500 0.000000 udp 10.0.2.22 62322 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 04:24:35.621062 3.001254 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 04:24:42.627976 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:24:50.629626 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:25:06.632395 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:25:38.638472 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:28:33.550195 0.000106 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 04:28:33.550384 0.011277 udp 10.0.2.22 62323 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 04:28:33.562011 0.000000 udp 10.0.2.22 62324 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 04:31:42.644565 3.001252 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 04:31:49.651975 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:31:57.653592 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:32:13.656473 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:32:45.661888 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:38:49.669217 3.000395 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 04:38:56.675276 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:39:04.677145 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:39:20.681122 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:39:33.548958 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 04:39:33.549136 0.011765 udp 10.0.2.22 62325 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 04:39:33.561237 0.000000 udp 10.0.2.22 62326 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 04:39:52.686625 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:45:56.692072 3.001688 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 04:46:03.699829 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:46:11.703839 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:46:27.703986 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:46:59.710258 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:53:03.716362 3.001642 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 04:53:10.723880 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:53:18.724806 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:53:34.728305 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:54:06.733752 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 04:54:33.556019 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 04:54:33.556194 0.010214 udp 10.0.2.22 62327 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 04:54:33.566823 0.000000 udp 10.0.2.22 62328 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 05:00:10.740711 3.001514 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 05:00:17.747348 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:00:25.749211 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:00:41.752293 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:01:13.758369 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:07:17.764935 3.018620 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 05:07:24.782052 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:07:32.782896 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:07:48.786166 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:08:20.792309 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:09:33.546951 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 05:09:33.547136 0.049766 udp 10.0.2.22 62329 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 05:09:33.597277 0.000000 udp 10.0.2.22 62330 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 05:25:20.800995 3.002098 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 05:25:27.808968 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:25:35.810416 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:25:51.813394 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:26:23.819430 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:28:33.545865 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 05:28:33.545976 0.016172 udp 10.0.2.22 62331 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 05:28:33.562515 0.000000 udp 10.0.2.22 62332 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 05:32:27.825424 3.001611 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 05:32:34.832969 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:32:42.834160 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:32:58.837770 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:33:30.843557 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:39:33.544755 0.000154 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 05:39:33.545007 0.011031 udp 10.0.2.22 62333 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 05:39:33.556403 0.000000 udp 10.0.2.22 62334 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 05:39:34.849426 3.001840 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 05:39:41.856992 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:39:49.858353 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:40:05.861559 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:40:37.867551 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:46:41.873424 3.011550 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 05:46:48.890450 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:46:56.891831 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:47:12.895090 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:47:44.901361 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:53:48.907734 3.001123 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 05:53:55.914824 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:54:03.916284 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:54:19.919063 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 05:54:33.549089 0.000114 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 05:54:33.549299 0.023422 udp 10.0.2.22 62335 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 05:54:33.573077 0.000000 udp 10.0.2.22 62336 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 05:54:51.924790 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:01:00.939666 3.000515 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 06:01:07.945869 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:01:15.947681 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:01:31.955748 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:02:03.956559 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:08:09.966263 3.000870 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 06:08:16.972688 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:08:24.974378 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:08:40.977248 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:09:12.987350 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:09:33.552886 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 06:09:33.552983 0.010349 udp 10.0.2.22 62337 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 06:09:33.600064 0.000000 udp 10.0.2.22 62338 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 06:15:16.989509 3.018971 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 06:15:24.006733 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:15:32.008172 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:15:48.011669 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:16:20.017332 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:22:24.027131 2.997825 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 06:22:31.030926 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:22:39.032034 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:22:55.035283 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:23:27.041521 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:28:33.552147 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 06:28:33.552317 0.013596 udp 10.0.2.22 62339 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 06:28:33.566260 0.000000 udp 10.0.2.22 62340 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 06:29:31.048871 2.999984 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 06:29:38.054526 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:29:46.056265 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:30:02.059158 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:30:34.064890 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:36:38.071594 3.001449 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 06:36:45.081872 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:36:53.080086 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:37:09.085886 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:37:41.089207 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:39:33.551141 0.000103 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 06:39:33.551334 0.015340 udp 10.0.2.22 62341 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 06:39:33.567067 0.000000 udp 10.0.2.22 62342 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 06:43:45.096062 3.001002 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 06:43:52.102409 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:44:00.104071 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:44:16.107270 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:44:48.113116 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:51:14.131792 3.000754 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 06:51:21.138278 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:51:29.139707 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:51:45.143041 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:52:17.148652 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:54:33.544655 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 06:54:33.544853 0.011513 udp 10.0.2.22 62343 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 06:54:33.556742 0.000000 udp 10.0.2.22 62344 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 06:58:29.156599 3.001557 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 06:58:36.166166 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:58:44.165503 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:59:00.168222 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 06:59:32.174213 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:05:38.183578 3.001264 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 07:05:45.190466 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:05:53.192242 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:06:09.195214 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:06:41.201485 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:09:33.548972 0.000102 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 07:09:33.549166 0.010387 udp 10.0.2.22 62345 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 07:09:33.559952 0.000000 udp 10.0.2.22 62346 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 07:24:27.216721 3.001606 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 07:24:34.223994 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:24:42.225367 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:24:58.238339 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:25:30.244805 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:28:33.548136 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 07:28:33.548340 0.013999 udp 10.0.2.22 62347 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 07:28:33.562728 0.000000 udp 10.0.2.22 62348 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 07:31:34.250636 3.001436 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 07:31:41.258035 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:31:49.259250 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:32:05.262259 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:32:37.268365 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:38:41.275279 3.000698 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 07:38:48.281745 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:38:56.284063 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:39:12.286403 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:39:33.547383 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 07:39:33.547488 0.013976 udp 10.0.2.22 62349 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 07:39:33.561818 0.000000 udp 10.0.2.22 62350 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 07:39:44.292604 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:45:48.298194 3.001638 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 07:45:55.305964 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:46:03.307423 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:46:19.310245 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:46:51.321269 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:52:55.323147 3.000957 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 07:53:02.329665 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:53:10.333962 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:53:26.334281 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:53:58.344607 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 07:54:33.550801 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 07:54:33.550964 0.011783 udp 10.0.2.22 62351 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 07:54:33.563112 0.000000 udp 10.0.2.22 62352 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 08:00:02.347795 2.999989 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 08:00:09.353939 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:00:17.355135 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:00:33.358314 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:01:05.364233 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:07:09.370330 3.087455 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 08:07:16.428929 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:07:24.399143 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:07:40.402264 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:08:12.408182 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:09:33.544559 0.000178 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 08:09:33.544846 0.012334 udp 10.0.2.22 62353 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 08:09:33.557709 0.000000 udp 10.0.2.22 62354 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 08:25:13.421575 3.000403 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 08:25:20.426212 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:25:28.427975 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:25:44.430982 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:26:16.437449 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:28:33.544275 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 08:28:33.544369 0.014917 udp 10.0.2.22 62355 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 08:28:33.559662 0.000000 udp 10.0.2.22 62356 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 08:32:20.444922 3.000128 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 08:32:27.450197 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:32:35.451711 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:32:51.454967 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:33:23.460805 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:39:27.467662 3.000812 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 08:39:33.542897 0.000113 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 08:39:33.543139 0.010320 udp 10.0.2.22 62357 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 08:39:33.553796 0.000000 udp 10.0.2.22 62358 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 08:39:34.474076 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:39:42.475633 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:39:58.478941 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:40:30.484774 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:46:34.491017 3.001349 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 08:46:41.498113 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:46:49.499614 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:47:05.502562 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:47:37.521112 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:53:41.514286 3.002134 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 08:53:48.522062 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:53:56.523238 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:54:12.526290 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 08:54:33.547030 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 08:54:33.547132 0.012260 udp 10.0.2.22 62359 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 08:54:33.559710 0.000000 udp 10.0.2.22 62360 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 08:54:44.532628 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:00:54.546973 3.002072 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 09:01:01.554827 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:01:09.556211 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:01:25.558941 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:01:57.564943 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:08:04.576548 3.000586 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 09:08:11.583069 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:08:19.584386 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:08:35.587642 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:09:07.595853 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:09:33.550813 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 09:09:33.550958 0.011358 udp 10.0.2.22 62361 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 09:09:33.562682 0.000000 udp 10.0.2.22 62362 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 09:15:11.599164 3.002127 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 09:15:18.627048 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:15:26.628484 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:15:42.631787 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:16:14.637840 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:22:18.643589 3.001661 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 09:22:25.651206 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:22:33.652492 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:22:49.655707 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:23:21.661282 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:28:33.550050 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 09:28:33.550152 0.022648 udp 10.0.2.22 62363 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 09:28:33.573156 0.000000 udp 10.0.2.22 62364 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 09:29:25.667409 3.001693 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 09:29:32.679881 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:29:40.676494 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:29:56.679780 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:30:28.685206 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:36:32.691640 3.001461 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 09:36:39.698964 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:36:47.700334 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:37:03.703733 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:37:35.709424 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:39:33.549047 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 09:39:33.549195 0.010442 udp 10.0.2.22 62365 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 09:39:33.559953 0.000000 udp 10.0.2.22 62366 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 09:43:39.714927 3.002110 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 09:43:46.724037 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:43:54.723957 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:44:10.727710 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:44:42.733327 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:51:03.754464 3.000793 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 09:51:10.761080 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:51:18.762806 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:51:34.765720 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:52:06.771549 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:54:33.543234 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 09:54:33.543339 0.012383 udp 10.0.2.22 62367 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 09:54:33.612321 0.000000 udp 10.0.2.22 62368 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 09:58:21.783683 3.018995 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 09:58:28.801129 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:58:36.803077 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:58:52.805090 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 09:59:24.811613 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:05:32.822883 3.002121 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 10:05:39.830739 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:05:47.832356 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:06:03.835177 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:06:35.841665 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:09:33.546991 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 10:09:33.547088 0.012272 udp 10.0.2.22 62369 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 10:09:33.559725 0.000000 udp 10.0.2.22 62370 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 10:24:26.853970 3.001624 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 10:24:33.861045 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:24:41.862713 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:24:57.865515 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:25:29.872012 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:28:33.546106 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 10:28:33.546215 0.022914 udp 10.0.2.22 62371 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 10:28:33.569701 0.000000 udp 10.0.2.22 62372 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 10:31:33.887909 3.001689 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 10:31:40.894755 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:31:48.896928 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:32:04.899779 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:32:36.905618 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:38:40.912021 3.001637 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 10:38:47.919307 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:38:55.920851 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:39:11.923652 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:39:33.544957 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 10:39:33.545104 0.010871 udp 10.0.2.22 62373 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 10:39:33.556325 0.000000 udp 10.0.2.22 62374 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 10:39:43.929861 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:45:47.936436 3.001303 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 10:45:54.943345 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:46:02.944871 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:46:18.947687 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:46:50.953626 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:52:54.959358 3.002070 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 10:53:01.973718 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:53:09.968631 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:53:25.971774 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:53:57.978386 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 10:54:33.549073 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 10:54:33.549254 0.011511 udp 10.0.2.22 62375 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 10:54:33.561117 0.000000 udp 10.0.2.22 62376 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 11:00:01.983577 3.004977 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 11:00:08.990774 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:00:16.992722 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:00:32.995891 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:01:05.001697 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:07:10.009614 3.001493 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 11:07:17.016583 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:07:25.018357 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:07:41.020832 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:08:13.027052 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:09:33.543227 0.000140 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 11:09:33.543526 0.011504 udp 10.0.2.22 62377 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 11:09:33.555376 0.000000 udp 10.0.2.22 62378 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 11:25:16.042204 3.000391 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 11:25:23.048316 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:25:31.049797 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:25:47.052558 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:26:19.058475 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:28:33.542048 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 11:28:33.542152 0.013077 udp 10.0.2.22 62379 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 11:28:33.555566 0.000000 udp 10.0.2.22 62380 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 11:32:23.064778 3.001590 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 11:32:30.071420 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:32:38.073859 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:32:54.076642 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:33:26.082685 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:39:30.089629 3.000678 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 11:39:33.550796 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 11:39:33.550931 0.010875 udp 10.0.2.22 62381 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 11:39:33.562212 0.000000 udp 10.0.2.22 62382 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 11:39:37.096157 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:39:45.097538 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:40:01.100707 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:40:33.106696 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:46:37.113445 3.000954 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 11:46:44.119964 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:46:52.121648 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:47:08.130189 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:47:40.130596 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:53:44.136476 3.001793 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 11:53:51.143896 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:53:59.145337 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:54:15.148342 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 11:54:33.545057 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 11:54:33.545152 0.010769 udp 10.0.2.22 62383 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 11:54:33.556292 0.000000 udp 10.0.2.22 62384 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 11:54:47.154401 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:00:57.169236 3.001599 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 12:01:04.176990 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:01:12.180850 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:01:28.181208 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:02:00.187077 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:08:06.196478 3.001306 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 12:08:13.203320 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:08:21.204955 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:08:37.213077 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:09:09.216655 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:09:33.549048 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 12:09:33.549183 0.022360 udp 10.0.2.22 62385 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 12:09:33.571904 0.000000 udp 10.0.2.22 62386 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 12:15:13.219491 3.002060 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 12:15:20.227325 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:15:28.228699 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:15:44.231890 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:16:16.248313 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:22:20.254103 3.000993 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 12:22:27.261112 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:22:35.262641 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:22:51.265389 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:23:23.271947 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:28:33.548362 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 12:28:33.548506 0.010284 udp 10.0.2.22 62387 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 12:28:33.559077 0.000000 udp 10.0.2.22 62388 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 12:29:27.277919 3.003754 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 12:29:34.285454 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:29:42.286975 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:29:58.289790 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:30:30.295950 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:36:34.302382 3.001194 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 12:36:41.309052 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:36:49.310842 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:37:05.313933 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:37:37.320045 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:39:33.546961 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 12:39:33.547066 0.010056 udp 10.0.2.22 62389 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 12:39:33.557629 0.000000 udp 10.0.2.22 62390 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 12:43:41.325936 3.001438 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 12:43:48.333099 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:43:56.334649 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:44:12.337899 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:44:44.343953 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:51:09.360268 3.000850 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 12:51:16.367768 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:51:24.369112 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:51:40.372009 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:52:12.378036 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:54:33.540803 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 12:54:33.540990 0.011397 udp 10.0.2.22 62391 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 12:54:33.552756 0.000000 udp 10.0.2.22 62392 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 12:58:25.387349 3.001120 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 12:58:32.394360 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:58:40.396131 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:58:56.399099 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 12:59:28.404785 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:05:35.416187 3.000702 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 13:05:42.422489 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:05:50.424239 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:06:06.427049 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:06:38.433206 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:09:33.544994 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 13:09:33.545145 0.010946 udp 10.0.2.22 62393 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 13:09:33.556429 0.000000 udp 10.0.2.22 62394 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 13:24:24.448709 3.001601 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 13:24:31.455928 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:24:39.457262 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:24:55.460324 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:25:27.467785 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:28:33.543825 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 13:28:33.543985 0.010897 udp 10.0.2.22 62395 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 13:28:33.571328 0.000000 udp 10.0.2.22 62396 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 13:31:31.473471 3.000952 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 13:31:38.479901 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:31:46.481100 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:32:02.483717 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:32:34.490562 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:38:38.495753 3.002242 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 13:38:45.503286 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:38:53.505186 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:39:09.508257 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:39:33.542947 0.000150 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 13:39:33.543196 0.011381 udp 10.0.2.22 62397 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 13:39:33.554910 0.000000 udp 10.0.2.22 62398 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 13:39:41.514329 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:45:45.521035 3.004528 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 13:45:52.528008 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:46:00.529225 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:46:16.532330 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:46:48.538524 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:52:52.544374 3.018688 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 13:52:59.561956 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:53:07.563338 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:53:23.566151 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:53:55.571966 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 13:54:33.546918 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 13:54:33.547032 0.011369 udp 10.0.2.22 62399 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 13:54:33.558776 0.000000 udp 10.0.2.22 62400 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 13:59:59.578789 3.001143 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 14:00:06.585908 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:00:14.587152 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:00:30.590411 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:01:02.596005 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:07:07.603237 3.002033 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 14:07:14.611098 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:07:22.612737 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:07:38.615687 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:08:10.621735 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:09:33.540988 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 14:09:33.541170 0.011515 udp 10.0.2.22 62401 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 14:09:33.553058 0.000000 udp 10.0.2.22 62402 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 14:25:11.633180 3.000785 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 14:25:18.639877 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:25:26.641198 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:25:42.644066 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:26:14.650393 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:28:33.540571 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 14:28:33.540724 0.010279 udp 10.0.2.22 62403 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 14:28:33.551407 0.000000 udp 10.0.2.22 62404 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 14:32:18.655962 3.002123 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 14:32:25.663896 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:32:33.664833 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:32:49.668573 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:33:21.673577 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:39:25.681861 2.999917 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 14:39:32.687649 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:39:33.548961 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 14:39:33.549071 0.024302 udp 10.0.2.22 62405 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 14:39:33.573777 0.000000 udp 10.0.2.22 62406 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 14:39:40.689251 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:39:56.692352 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:40:28.698135 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:46:32.704499 3.001443 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 14:46:39.711795 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:46:47.712618 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:47:03.716217 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:47:35.722104 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:53:39.728407 3.001282 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 14:53:46.735418 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:53:54.737209 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:54:10.740271 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 14:54:33.545809 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 14:54:33.545931 0.011244 udp 10.0.2.22 62407 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 14:54:33.557669 0.000000 udp 10.0.2.22 62408 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 14:54:42.746165 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:00:53.762239 3.066284 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 15:01:00.802803 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:01:08.780861 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:01:24.783907 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:01:56.790417 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:08:02.799194 3.001403 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 15:08:09.806428 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:08:17.807907 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:08:33.811065 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:09:05.817009 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:09:33.547091 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 15:09:33.547188 0.011306 udp 10.0.2.22 62409 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 15:09:33.558923 0.000000 udp 10.0.2.22 62410 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 15:15:09.822691 3.002007 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 15:15:16.830528 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:15:24.831984 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:15:40.838368 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:16:12.842982 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:22:16.846759 3.030869 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 15:22:23.864194 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:22:31.865972 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:22:47.868908 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:23:19.874724 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:28:33.546000 0.000146 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 15:28:33.546247 0.012049 udp 10.0.2.22 62411 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 15:28:33.558706 0.000000 udp 10.0.2.22 62412 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 15:29:23.883508 2.999120 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 15:29:30.888259 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:29:38.890270 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:29:54.892271 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:30:26.899055 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:36:30.905211 3.001388 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 15:36:37.912326 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:36:45.913768 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:37:01.916930 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:37:33.922896 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:39:33.544586 0.000139 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 15:39:33.544822 0.011407 udp 10.0.2.22 62413 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 15:39:33.556619 0.000000 udp 10.0.2.22 62414 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 15:43:37.929043 3.001437 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 15:43:44.936113 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:43:52.938095 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:44:08.941097 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:44:40.948340 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:51:00.965959 3.001894 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 15:51:07.973005 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:51:15.974195 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:51:31.977891 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:52:03.983637 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:54:33.542597 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 15:54:33.542769 0.010274 udp 10.0.2.22 62415 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 15:54:33.553475 0.000000 udp 10.0.2.22 62416 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 15:58:19.996652 3.005890 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 15:58:27.004527 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:58:35.010709 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:58:51.019445 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 15:59:23.024859 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:05:31.036851 3.001978 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 16:05:38.044254 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:05:46.045168 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:06:02.048828 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:06:34.054291 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:09:33.542705 0.000109 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 16:09:33.542916 0.016929 udp 10.0.2.22 62417 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 16:09:33.560196 0.000000 udp 10.0.2.22 62418 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 16:24:25.067357 3.134417 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 16:24:32.172803 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:24:40.105545 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:24:56.089437 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:25:28.095199 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:28:33.542094 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 16:28:33.542221 0.010159 udp 10.0.2.22 62419 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 16:28:33.552765 0.000000 udp 10.0.2.22 62420 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 16:31:32.101565 3.001461 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 16:31:39.108815 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:31:47.110308 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:32:03.113435 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:32:35.119544 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:38:39.125017 3.001799 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 16:38:46.132741 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:38:54.134492 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:39:10.137024 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:39:33.541130 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 16:39:33.541280 0.022525 udp 10.0.2.22 62421 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 16:39:33.564206 0.000000 udp 10.0.2.22 62422 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 16:39:42.143303 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:45:46.149446 3.001467 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 16:45:53.156577 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:46:01.158576 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:46:17.161372 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:46:49.169999 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:52:53.172736 3.002227 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 16:53:00.180792 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:53:08.182106 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:53:24.185207 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:53:56.191202 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 16:54:33.544747 0.000151 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 16:54:33.544997 0.023373 udp 10.0.2.22 62423 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 16:54:33.568737 0.000000 udp 10.0.2.22 62424 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 17:00:00.197269 3.001568 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 17:00:07.204572 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:00:15.206233 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:00:31.209096 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:01:03.217702 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:07:08.223576 3.000717 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 17:07:15.229902 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:07:23.231962 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:07:39.234666 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:08:11.240753 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:09:33.538999 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 17:09:33.539169 0.011622 udp 10.0.2.22 62425 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 17:09:33.583799 0.000000 udp 10.0.2.22 62426 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 17:25:14.255392 3.021673 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 17:25:21.271702 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:25:29.273022 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:25:45.275987 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:26:17.282252 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:28:33.538456 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 17:28:33.538539 0.010571 udp 10.0.2.22 62427 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 17:28:33.549485 0.000000 udp 10.0.2.22 62428 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 17:32:21.288514 3.001169 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 17:32:28.295241 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:32:36.296988 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:32:52.300046 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:33:24.306147 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:39:28.312106 3.001713 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 17:39:33.547152 0.000043 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 17:39:33.547254 0.010354 udp 10.0.2.22 62429 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 17:39:33.558025 0.000000 udp 10.0.2.22 62430 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 17:39:35.319364 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:39:43.320765 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:39:59.324027 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:40:31.329903 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:46:35.336826 3.000768 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 17:46:42.343389 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:46:50.344972 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:47:06.352197 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:47:38.354087 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:53:42.359898 3.006390 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 17:53:49.367803 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:53:57.368695 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:54:13.371956 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 17:54:33.541120 0.000110 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 17:54:33.541364 0.010142 udp 10.0.2.22 62431 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 17:54:33.551882 0.000000 udp 10.0.2.22 62432 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 17:54:45.378597 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:00:56.394105 3.001542 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 18:01:03.401232 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:01:11.416946 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:01:27.415352 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:01:59.421790 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:08:05.431560 3.001279 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 18:08:12.438673 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:08:20.440246 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:08:36.442436 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:09:08.455857 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:09:33.544893 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 18:09:33.544997 0.012907 udp 10.0.2.22 62433 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 18:09:33.558274 0.000000 udp 10.0.2.22 62434 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 18:15:12.455260 3.001163 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 18:15:19.462041 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:15:27.463892 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:15:43.466759 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:16:15.472704 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:22:19.482407 2.998035 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 18:22:26.486088 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:22:34.487891 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:22:50.490769 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:23:22.496659 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:28:33.544023 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 18:28:33.544188 0.010220 udp 10.0.2.22 62435 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 18:28:33.554774 0.000000 udp 10.0.2.22 62436 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 18:29:26.503458 3.000836 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 18:29:33.510024 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:29:41.514917 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:29:57.514207 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:30:29.520546 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:36:33.526949 3.002875 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 18:36:40.534183 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:36:48.535419 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:37:04.538691 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:37:36.544913 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:39:33.543190 0.000196 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 18:39:33.543515 0.021971 udp 10.0.2.22 62437 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 18:39:33.565903 0.000000 udp 10.0.2.22 62438 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 18:43:40.551540 3.010316 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 18:43:47.569577 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:43:55.570128 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:44:11.572260 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:44:43.578833 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:51:00.595194 2.999606 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 18:51:07.600763 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:51:15.602316 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:51:31.605176 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:52:03.611207 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:54:33.546994 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 18:54:33.547085 0.009951 udp 10.0.2.22 62439 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 18:54:33.557585 0.000000 udp 10.0.2.22 62440 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 18:58:19.625067 3.001036 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 18:58:26.631381 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:58:34.635905 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:58:50.636580 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 18:59:22.642269 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:05:30.655983 2.999783 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 19:05:37.661703 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:05:45.663095 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:06:01.666254 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:06:33.671648 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:09:33.540779 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 19:09:33.540922 0.023138 udp 10.0.2.22 62441 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 19:09:33.564443 0.000000 udp 10.0.2.22 62442 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 19:24:22.681929 3.143831 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 19:24:29.799947 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:24:37.736521 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:24:53.704092 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:25:25.709760 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:28:33.539907 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 19:28:33.540054 0.010287 udp 10.0.2.22 62443 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 19:28:33.550701 0.000000 udp 10.0.2.22 62444 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 19:31:29.716625 3.000902 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 19:31:36.723411 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:31:44.724327 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:32:00.727900 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:32:32.735932 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:38:36.740774 3.000715 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 19:38:43.747425 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:38:51.751663 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:39:07.751774 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:39:33.538935 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 19:39:33.539070 0.024530 udp 10.0.2.22 62445 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 19:39:33.563981 0.000000 udp 10.0.2.22 62446 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 19:39:39.758041 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:45:43.763328 3.002376 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 19:45:50.771308 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:45:58.772648 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:46:14.775859 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:46:46.781851 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:52:50.787464 3.002083 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 19:52:57.794576 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:53:05.796724 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:53:21.809851 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:53:53.815873 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 19:54:33.544318 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 19:54:33.544433 0.022832 udp 10.0.2.22 62447 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 19:54:33.567630 0.000000 udp 10.0.2.22 62448 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 19:59:57.822270 3.000836 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 20:00:04.829502 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:00:12.830934 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:00:28.833842 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:01:00.839635 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:07:04.845760 3.001904 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 20:07:11.853237 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:07:19.854651 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:07:35.857908 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:08:07.863775 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:09:33.548546 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 20:09:33.548643 0.013014 udp 10.0.2.22 62449 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 20:09:33.562025 0.000000 udp 10.0.2.22 62450 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 20:25:10.878583 3.010264 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 20:25:17.894388 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:25:25.895763 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:25:41.899230 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:26:13.905403 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:28:33.545866 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 20:28:33.546074 0.010175 udp 10.0.2.22 62451 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 20:28:33.556663 0.000000 udp 10.0.2.22 62452 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 20:32:17.911278 3.001240 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 20:32:24.918657 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:32:32.919969 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:32:48.923149 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:33:20.929140 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:39:24.934828 3.002095 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 20:39:31.942911 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:39:33.544898 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 20:39:33.545017 0.011258 udp 10.0.2.22 62453 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 20:39:33.556617 0.000000 udp 10.0.2.22 62454 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 20:39:39.943976 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:39:55.947098 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:40:27.952977 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:46:31.958778 3.002926 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 20:46:38.966654 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:46:46.968089 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:47:02.970859 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:47:34.978127 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:53:38.983820 3.001905 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 20:53:45.990582 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:53:53.997265 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:54:09.995069 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 20:54:33.538819 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 20:54:33.538990 0.022400 udp 10.0.2.22 62455 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 20:54:33.561794 0.000000 udp 10.0.2.22 62456 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 20:54:42.001108 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:00:46.006577 3.002198 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 21:00:53.014447 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:01:01.016259 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:01:17.018949 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:01:49.035026 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:07:53.042317 3.000519 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 21:08:00.048562 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:08:08.050126 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:08:24.052888 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:08:56.059000 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:09:33.542726 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 21:09:33.542931 0.015254 udp 10.0.2.22 62457 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 21:09:33.558533 0.000000 udp 10.0.2.22 62458 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 21:15:00.065012 3.011652 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 21:15:07.082168 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:15:15.083706 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:15:31.086974 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:16:03.093087 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:22:07.099439 3.003403 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 21:22:14.106334 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:22:22.108039 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:22:38.111105 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:23:10.116768 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:28:33.541871 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 21:28:33.542030 0.010447 udp 10.0.2.22 62459 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 21:28:33.552789 0.000000 udp 10.0.2.22 62460 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 21:29:14.123141 3.001459 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 21:29:21.132659 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:29:29.132007 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:29:45.135115 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:30:17.140829 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:36:21.147575 3.000941 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 21:36:28.154425 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:36:36.155370 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:36:52.158739 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:37:24.164778 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:39:33.541011 0.000093 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 21:39:33.541178 0.011928 udp 10.0.2.22 62461 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 21:39:33.553503 0.000000 udp 10.0.2.22 62462 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 21:43:28.171096 3.001371 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 21:43:35.178396 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:43:43.189446 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:43:59.193023 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:44:31.198974 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:50:35.205757 3.000782 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 21:50:42.212567 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:50:50.214101 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:51:06.216561 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:51:38.222813 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:54:33.544662 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 21:54:33.544767 0.019840 udp 10.0.2.22 62463 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 21:54:33.564994 0.000000 udp 10.0.2.22 62464 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 21:57:42.238925 3.001462 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 21:57:49.247316 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:57:57.247730 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:58:13.250865 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 21:58:45.256879 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:04:49.264108 3.000555 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 22:04:56.270161 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:05:04.272014 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:05:20.274902 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:05:52.280702 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:09:33.539062 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 22:09:33.539182 0.010335 udp 10.0.2.22 62465 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 22:09:33.549890 0.000000 udp 10.0.2.22 62466 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 22:24:04.293776 3.036058 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 22:24:11.310801 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:24:19.312338 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:24:35.315749 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:25:07.321774 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:28:33.538711 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 22:28:33.538855 0.023143 udp 10.0.2.22 62467 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 22:28:33.562409 0.000000 udp 10.0.2.22 62468 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 22:31:11.327788 3.001398 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 22:31:18.335001 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:31:26.346418 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:31:42.349369 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:32:14.355224 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:38:18.361377 3.001700 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 22:38:25.368871 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:38:33.370525 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:38:49.373579 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:39:21.379324 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:39:33.536886 0.000203 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 22:39:33.537204 0.010128 udp 10.0.2.22 62469 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 22:39:33.547650 0.000000 udp 10.0.2.22 62470 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 22:45:33.386950 3.001669 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 22:45:40.394023 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:45:48.396103 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:46:04.398945 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:46:36.405035 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:52:40.411237 3.001180 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 22:52:47.418272 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:52:55.420256 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:53:11.422938 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:53:43.429679 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 22:54:33.541079 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 22:54:33.541192 0.033867 udp 10.0.2.22 62471 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 22:54:33.575460 0.000000 udp 10.0.2.22 62472 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 22:59:47.434948 3.011657 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 22:59:54.452143 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:00:02.453714 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:00:18.460968 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:00:50.462761 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:06:54.469187 3.001331 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 23:07:01.476063 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:07:09.478041 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:07:25.480538 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:07:57.486659 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:09:33.535148 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 23:09:33.535298 0.018482 udp 10.0.2.22 62473 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 23:09:33.554140 0.000000 udp 10.0.2.22 62474 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 23:25:08.501810 3.001446 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 23:25:15.508990 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:25:23.510633 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:25:39.523675 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:26:11.529848 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:28:33.543997 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 23:28:33.544178 0.011704 udp 10.0.2.22 62475 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 23:28:33.556272 0.000000 udp 10.0.2.22 62476 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 23:32:15.536249 3.001330 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 23:32:22.543746 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:32:30.544544 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:32:46.548314 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:33:18.553650 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:39:22.559949 3.001345 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 23:39:29.567011 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:39:33.542884 0.000106 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 23:39:33.543076 0.014137 udp 10.0.2.22 62477 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 23:39:33.557741 0.000000 udp 10.0.2.22 62478 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 23:39:37.568513 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:39:53.571701 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:40:25.577692 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:46:29.584074 3.001495 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 23:46:36.591164 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:46:44.592824 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:47:00.595267 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:47:32.604795 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:53:36.614776 2.994725 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/13 23:53:43.615091 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:53:51.616553 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:54:07.619722 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/13 23:54:33.536995 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/13 23:54:33.537088 0.011647 udp 10.0.2.22 62479 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/13 23:54:33.549153 0.000000 udp 10.0.2.22 62480 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/13 23:54:39.628994 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:00:43.632121 3.000998 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 00:00:50.639223 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:00:58.640588 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:01:14.643368 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:01:46.649693 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:07:50.656471 3.001043 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 00:07:57.663230 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:08:05.664352 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:08:21.667799 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:08:53.683635 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:09:33.540814 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 00:09:33.540914 0.021690 udp 10.0.2.22 62481 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 00:09:33.562950 0.000000 udp 10.0.2.22 62482 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 00:25:36.698317 3.012437 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 00:25:43.715723 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:25:51.717220 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:26:07.720352 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:26:39.726144 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:28:33.540222 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 00:28:33.540373 0.021661 udp 10.0.2.22 62483 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 00:28:33.562434 0.000000 udp 10.0.2.22 62484 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 00:32:43.734610 2.999344 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 00:32:50.739856 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:32:58.741303 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:33:14.744021 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:33:46.760150 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:39:33.538959 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 00:39:33.539137 0.010278 udp 10.0.2.22 62485 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 00:39:33.549778 0.000000 udp 10.0.2.22 62486 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 00:39:50.767426 3.000570 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 00:39:57.773599 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:40:05.775022 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:40:21.778659 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:40:53.783944 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:46:57.790222 3.001796 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 00:47:04.797712 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:47:12.799342 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:47:28.806722 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:48:00.810507 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:54:05.815847 3.001797 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 00:54:12.823210 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:54:20.823929 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:54:33.542931 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 00:54:33.543102 0.012849 udp 10.0.2.22 62487 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 00:54:33.556306 0.000000 udp 10.0.2.22 62488 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 00:54:36.827530 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 00:55:08.833016 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:01:12.860595 3.000840 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 01:01:19.867262 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:01:27.868484 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:01:43.871119 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:02:15.877743 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:08:19.883822 3.001168 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 01:08:26.890679 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:08:34.892400 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:08:50.895190 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:09:22.901192 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:09:33.557229 0.000230 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 01:09:33.557565 0.012657 udp 10.0.2.22 62489 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 01:09:33.570618 0.000000 udp 10.0.2.22 62490 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 01:15:26.908549 3.000571 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 01:15:33.947079 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:15:41.926488 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:15:57.929731 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:16:29.945698 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:22:33.951714 3.006647 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 01:22:40.958960 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:22:48.960502 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:23:04.965748 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:23:36.969562 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:28:33.556025 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 01:28:33.556210 0.013690 udp 10.0.2.22 62491 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 01:28:33.570278 0.000000 udp 10.0.2.22 62492 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 01:29:40.977958 2.999242 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 01:29:47.982901 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:29:55.984437 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:30:11.987322 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:30:43.996098 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:36:47.999331 3.001697 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 01:36:55.006953 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:37:03.008703 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:37:19.011671 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:37:51.017738 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:39:33.554812 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 01:39:33.554910 0.011488 udp 10.0.2.22 62493 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 01:39:33.566795 0.000000 udp 10.0.2.22 62494 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 01:44:05.028358 3.001566 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 01:44:12.035125 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:44:20.036693 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:44:36.039789 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:45:08.045195 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:51:22.059315 3.012081 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 01:51:29.077656 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:51:37.075277 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:51:53.078055 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:52:25.084283 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:54:33.559139 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 01:54:33.559304 0.011756 udp 10.0.2.22 62495 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 01:54:33.571483 0.000000 udp 10.0.2.22 62496 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 01:58:29.090110 3.001662 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 01:58:36.098156 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:58:44.098914 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:59:00.102222 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 01:59:32.113348 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:05:36.114588 3.001666 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 02:05:43.121700 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:05:51.123217 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:06:07.126083 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:06:39.132338 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:09:33.563128 0.000107 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 02:09:33.563330 0.011749 udp 10.0.2.22 62497 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 02:09:33.575466 0.000000 udp 10.0.2.22 62498 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 02:24:26.140664 3.112691 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 02:24:33.221609 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:24:41.158172 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:24:57.160818 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:25:29.167062 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:28:33.562158 0.000154 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 02:28:33.562419 0.010310 udp 10.0.2.22 62499 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 02:28:33.573047 0.000000 udp 10.0.2.22 62500 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 02:31:33.176013 2.998396 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 02:31:40.180591 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:31:48.182107 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:32:04.184715 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:32:36.190776 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:38:40.197219 3.001103 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 02:38:47.204078 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:38:55.205757 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:39:11.208653 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:39:33.560876 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 02:39:33.561044 0.010755 udp 10.0.2.22 62501 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 02:39:33.572147 0.000000 udp 10.0.2.22 62502 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 02:39:43.215120 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:45:47.221229 3.001214 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 02:45:54.228306 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:46:02.230012 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:46:18.232802 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:46:50.238793 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:52:54.244640 3.001829 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 02:53:01.252229 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:53:09.253781 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:53:25.256793 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:53:57.307382 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 02:54:33.554681 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 02:54:33.554791 0.011494 udp 10.0.2.22 62503 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 02:54:33.566652 0.000000 udp 10.0.2.22 62504 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 03:00:01.278850 3.001471 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 03:00:08.286087 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:00:16.287711 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:00:32.290508 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:01:04.296734 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:07:08.302813 3.001563 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 03:07:15.310154 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:07:23.311696 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:07:39.314621 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:08:11.320815 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:09:33.559960 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 03:09:33.560110 0.012257 udp 10.0.2.22 62505 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 03:09:33.572728 0.000000 udp 10.0.2.22 62506 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 03:25:12.331845 3.049035 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 03:25:19.359598 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:25:27.350301 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:25:43.353142 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:26:15.359043 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:28:33.558150 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 03:28:33.558280 0.010782 udp 10.0.2.22 62507 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 03:28:33.569599 0.000000 udp 10.0.2.22 62508 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 03:32:19.366393 3.000384 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 03:32:26.373043 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:32:34.374189 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:32:50.377065 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:33:22.383268 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:39:26.389737 3.001045 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 03:39:33.396508 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:39:33.556958 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 03:39:33.557055 0.023133 udp 10.0.2.22 62509 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 03:39:33.580548 0.000000 udp 10.0.2.22 62510 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 03:39:41.398194 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:39:57.401080 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:40:29.407242 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:46:33.413778 3.001300 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 03:46:40.420513 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:46:48.422249 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:47:04.425294 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:47:36.431186 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:53:40.437574 3.001101 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 03:53:47.444745 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:53:55.448831 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:54:11.449683 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 03:54:33.560879 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 03:54:33.561058 0.022469 udp 10.0.2.22 62511 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 03:54:33.661834 0.000000 udp 10.0.2.22 62512 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 03:54:43.456174 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:00:47.461748 3.001085 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 04:00:54.468497 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:01:02.469944 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:01:18.473007 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:01:50.479110 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:07:54.484489 3.002222 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 04:08:01.492487 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:08:09.493528 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:08:25.496685 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:08:57.503148 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:09:33.554606 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 04:09:33.554714 0.010186 udp 10.0.2.22 62513 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 04:09:33.565285 0.000000 udp 10.0.2.22 62514 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 04:15:01.508394 3.213598 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 04:15:08.686905 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:15:16.613923 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:15:32.530866 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:16:04.537169 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:22:08.551661 2.993033 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 04:22:15.550418 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:22:23.556054 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:22:39.554805 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:23:11.561064 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:28:33.553956 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 04:28:33.554118 0.017212 udp 10.0.2.22 62515 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 04:28:33.571664 0.000000 udp 10.0.2.22 62516 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 04:29:15.566627 3.001961 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 04:29:22.574322 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:29:30.575962 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:29:46.578825 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:30:18.584907 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:36:22.591034 3.001494 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 04:36:29.598285 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:36:37.601909 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:36:53.602860 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:37:25.608816 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:39:33.552675 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 04:39:33.552841 0.012335 udp 10.0.2.22 62517 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 04:39:33.565539 0.000000 udp 10.0.2.22 62518 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 04:43:29.615525 3.000868 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 04:43:36.621716 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:43:44.623745 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:44:00.626808 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:44:32.632475 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:50:36.639085 3.000804 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 04:50:43.646495 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:50:51.647897 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:51:07.651006 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:51:39.656292 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:54:33.556781 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 04:54:33.556933 0.012637 udp 10.0.2.22 62519 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 04:54:33.569957 0.000000 udp 10.0.2.22 62520 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 04:57:43.668415 2.998655 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 04:57:50.721581 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:57:58.691148 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:58:14.684890 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 04:58:46.690424 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:04:50.696766 3.001844 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 05:04:57.704288 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:05:05.705904 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:05:21.709129 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:05:53.714625 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:09:33.560825 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 05:09:33.560970 0.014617 udp 10.0.2.22 62521 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 05:09:33.575883 0.000000 udp 10.0.2.22 62522 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 05:24:05.727403 3.046155 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 05:24:12.750689 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:24:20.746461 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:24:36.749583 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:25:08.755245 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:28:33.560106 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 05:28:33.560245 0.013642 udp 10.0.2.22 62523 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 05:28:33.574250 0.000000 udp 10.0.2.22 62524 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 05:31:12.761993 3.000613 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 05:31:19.768957 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:31:27.770156 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:31:43.773429 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:32:15.779315 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:38:19.784835 3.002173 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 05:38:26.792605 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:38:34.794389 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:38:50.797361 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:39:22.803347 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:39:33.558787 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 05:39:33.558889 0.010173 udp 10.0.2.22 62525 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 05:39:33.569582 0.000000 udp 10.0.2.22 62526 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 05:45:34.811668 3.000798 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 05:45:41.818492 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:45:49.819719 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:46:05.822718 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:46:37.828940 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:52:41.834858 3.014779 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 05:52:48.852517 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:52:56.853937 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:53:12.856988 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:53:44.863157 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 05:54:33.552785 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 05:54:33.552988 0.010238 udp 10.0.2.22 62527 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 05:54:33.563570 0.000000 udp 10.0.2.22 62528 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 05:59:48.869211 3.001258 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 05:59:55.876265 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:00:03.877825 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:00:19.880802 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:00:51.886895 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:06:55.892808 3.001525 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 06:07:02.899828 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:07:10.901239 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:07:26.904414 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:07:58.910866 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:09:33.557180 0.000277 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 06:09:33.557558 0.014694 udp 10.0.2.22 62529 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 06:09:33.572636 0.000000 udp 10.0.2.22 62530 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 06:25:08.925212 3.087258 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 06:25:15.989592 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:25:23.945866 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:25:39.946141 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:26:11.952265 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:28:33.556173 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 06:28:33.556360 0.012336 udp 10.0.2.22 62531 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 06:28:33.569056 0.000000 udp 10.0.2.22 62532 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 06:32:15.958703 3.001516 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 06:32:22.965263 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:32:30.967292 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:32:46.970233 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:33:18.976286 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:39:22.981521 3.002245 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 06:39:29.989739 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:39:33.555285 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 06:39:33.555398 0.010395 udp 10.0.2.22 62533 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 06:39:33.566185 0.000000 udp 10.0.2.22 62534 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 06:39:37.991085 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:39:53.994515 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:40:26.000523 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:46:30.005247 3.002576 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 06:46:37.013860 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:46:45.015569 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:47:01.018175 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:47:33.024296 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:53:37.029839 3.002092 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 06:53:44.040424 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:53:52.039362 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:54:08.044932 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 06:54:33.559109 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 06:54:33.559283 0.011809 udp 10.0.2.22 62535 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 06:54:33.571468 0.000000 udp 10.0.2.22 62536 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 06:54:40.054103 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:00:44.056075 3.009291 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 07:00:51.071509 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:00:59.072964 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:01:15.076258 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:01:47.082366 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:07:51.087454 3.002629 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 07:07:58.095782 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:08:06.097157 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:08:22.100317 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:08:54.106449 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:09:33.553030 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 07:09:33.553219 0.010142 udp 10.0.2.22 62537 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 07:09:33.563757 0.000000 udp 10.0.2.22 62538 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 07:25:32.114340 3.014007 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 07:25:39.131050 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:25:47.132603 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:26:03.135747 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:26:35.141693 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:28:33.552118 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 07:28:33.552330 0.013510 udp 10.0.2.22 62539 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 07:28:33.566191 0.000000 udp 10.0.2.22 62540 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 07:32:39.147706 3.001897 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 07:32:46.155215 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:32:54.160628 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:33:10.159774 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:33:42.165709 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:39:33.551067 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 07:39:33.551216 0.023183 udp 10.0.2.22 62541 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 07:39:33.574816 0.000000 udp 10.0.2.22 62542 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 07:39:46.171839 3.001373 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 07:39:53.179084 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:40:01.180695 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:40:17.183663 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:40:49.190094 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:46:53.195918 3.001364 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 07:47:00.203032 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:47:08.204651 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:47:24.217595 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:47:56.228373 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:54:03.235000 3.000621 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 07:54:10.241583 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:54:18.242968 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:54:33.554626 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 07:54:33.554726 0.013012 udp 10.0.2.22 62543 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 07:54:33.568119 0.000000 udp 10.0.2.22 62544 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 07:54:34.245232 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 07:55:06.252007 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:01:10.258639 3.000843 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 08:01:17.265464 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:01:25.266824 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:01:41.269635 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:02:13.275900 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:08:17.282408 3.001527 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 08:08:24.289165 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:08:32.290729 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:08:48.294149 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:09:20.299648 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:09:33.559048 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 08:09:33.559135 0.010104 udp 10.0.2.22 62545 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 08:09:33.569714 0.000000 udp 10.0.2.22 62546 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 08:15:24.305918 3.011632 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 08:15:31.323070 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:15:39.324605 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:15:55.327983 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:16:27.333857 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:22:31.340429 3.001252 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 08:22:38.347297 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:22:46.348851 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:23:02.351744 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:23:34.357829 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:28:33.558123 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 08:28:33.558264 0.010150 udp 10.0.2.22 62547 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 08:28:33.568764 0.000000 udp 10.0.2.22 62548 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 08:29:38.363285 3.001808 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 08:29:45.371281 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:29:53.372666 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:30:09.375779 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:30:41.381933 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:36:45.387279 3.002195 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 08:36:52.395126 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:37:00.396548 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:37:16.399954 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:37:48.405091 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:39:33.557135 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 08:39:33.557242 0.014892 udp 10.0.2.22 62549 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 08:39:33.572506 0.000000 udp 10.0.2.22 62550 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 08:43:57.420278 3.000269 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 08:44:04.426508 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:44:12.427356 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:44:28.430981 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:45:00.436498 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:51:14.448231 3.001217 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 08:51:21.464620 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:51:29.466402 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:51:45.469093 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:52:17.475257 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:54:33.550880 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 08:54:33.551073 0.021885 udp 10.0.2.22 62551 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 08:54:33.573322 0.000000 udp 10.0.2.22 62552 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 08:58:21.939166 3.004476 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 08:58:28.949476 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:58:36.953836 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:58:52.953926 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 08:59:24.960077 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:05:28.966143 3.000953 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 09:05:35.973111 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:05:43.975015 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:05:59.977797 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:06:31.984079 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:09:33.554766 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 09:09:33.554939 0.025739 udp 10.0.2.22 62553 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 09:09:33.581078 0.000000 udp 10.0.2.22 62554 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 09:24:22.997533 3.086355 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 09:24:30.055986 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:24:38.014918 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:24:54.018262 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:25:26.024383 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:28:33.554051 0.000141 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 09:28:33.554343 0.021405 udp 10.0.2.22 62555 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 09:28:33.576100 0.000000 udp 10.0.2.22 62556 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 09:31:30.031385 3.000890 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 09:31:37.037783 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:31:45.039042 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:32:01.042412 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:32:33.048558 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:38:37.054765 3.001082 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 09:38:44.061619 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:38:52.063082 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:39:08.066250 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:39:33.553053 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 09:39:33.553204 0.010251 udp 10.0.2.22 62557 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 09:39:33.563838 0.000000 udp 10.0.2.22 62558 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 09:39:40.072420 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:45:44.081063 2.999075 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 09:45:51.085184 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:45:59.087029 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:46:15.091812 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:46:47.106167 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:52:51.112996 3.001083 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 09:52:58.119859 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:53:06.121264 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:53:22.124038 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:53:54.130301 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 09:54:33.556876 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 09:54:33.556976 0.016188 udp 10.0.2.22 62559 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 09:54:33.573536 0.000000 udp 10.0.2.22 62560 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 09:59:58.136459 3.001643 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 10:00:05.143423 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:00:13.154634 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:00:29.157979 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:01:01.164158 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:07:05.171878 3.000039 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 10:07:12.177810 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:07:20.179347 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:07:36.182096 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:08:08.188163 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:09:33.551119 0.000207 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 10:09:33.551432 0.015747 udp 10.0.2.22 62561 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 10:09:33.567590 0.000000 udp 10.0.2.22 62562 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 10:25:12.202997 3.041461 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 10:25:19.227930 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:25:27.222170 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:25:43.225288 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:26:15.230884 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:28:33.550172 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 10:28:33.550363 0.010240 udp 10.0.2.22 62563 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 10:28:33.560967 0.000000 udp 10.0.2.22 62564 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 10:32:19.237169 3.001481 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 10:32:26.244975 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:32:34.245861 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:32:50.249092 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:33:22.255206 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:39:26.279057 3.003518 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 10:39:33.288762 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:39:33.548825 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 10:39:33.548999 0.010658 udp 10.0.2.22 62565 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 10:39:33.559974 0.000000 udp 10.0.2.22 62566 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 10:39:41.290028 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:39:57.292985 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:40:29.298883 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:46:33.305634 3.001163 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 10:46:40.312681 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:46:48.314050 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:47:04.316915 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:47:36.323072 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:53:40.330072 3.018518 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 10:53:47.346722 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:53:55.347954 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:54:11.351066 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 10:54:33.554846 0.000200 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 10:54:33.555154 0.011517 udp 10.0.2.22 62567 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 10:54:33.567088 0.000000 udp 10.0.2.22 62568 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 10:54:43.357685 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:00:47.363840 3.000615 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 11:00:54.374096 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:01:02.372163 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:01:18.374984 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:01:50.381050 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:07:54.387615 3.001039 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 11:08:01.394456 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:08:09.395987 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:08:25.398837 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:08:57.405015 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:09:33.557018 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 11:09:33.557127 0.011600 udp 10.0.2.22 62569 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 11:09:33.569054 0.000000 udp 10.0.2.22 62570 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 11:15:01.410647 3.002061 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 11:15:08.418413 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:15:16.420074 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:15:32.424694 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:16:04.428903 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:22:08.434434 3.002022 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 11:22:15.442664 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:22:23.444266 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:22:39.447189 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:23:12.464947 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:28:33.555763 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 11:28:33.555880 0.016103 udp 10.0.2.22 62571 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 11:28:33.572405 0.000000 udp 10.0.2.22 62572 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 11:29:15.469787 3.000652 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 11:29:22.476242 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:29:30.477649 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:29:46.480572 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:30:18.486784 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:36:22.493687 3.000599 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 11:36:29.500047 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:36:37.501552 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:36:53.504696 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:37:25.510830 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:39:33.554929 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 11:39:33.555043 0.010995 udp 10.0.2.22 62573 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 11:39:33.566438 0.000000 udp 10.0.2.22 62574 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 11:43:29.516332 3.002127 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 11:43:36.524120 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:43:44.525876 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:44:00.528656 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:44:32.534505 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:50:36.540787 3.001318 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 11:50:43.548135 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:50:51.549792 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:51:07.554380 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:51:39.558710 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:54:33.548945 0.000129 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 11:54:33.549200 0.013690 udp 10.0.2.22 62575 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 11:54:33.563321 0.000000 udp 10.0.2.22 62576 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 11:57:43.565682 3.000782 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 11:57:50.572354 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:57:58.573425 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:58:14.576598 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 11:58:46.583021 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:04:50.588769 3.001471 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 12:04:57.596244 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:05:05.597731 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:05:21.600529 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:05:53.606501 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:09:33.552715 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 12:09:33.552897 0.011369 udp 10.0.2.22 62577 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 12:09:33.564595 0.000000 udp 10.0.2.22 62578 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 12:24:06.621415 3.105664 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 12:24:13.699752 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:24:21.639082 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:24:37.642670 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:25:09.648418 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:28:33.551948 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 12:28:33.552128 0.015793 udp 10.0.2.22 62579 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 12:28:33.568273 0.000000 udp 10.0.2.22 62580 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 12:31:13.655768 3.000749 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 12:31:20.662271 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:31:28.663796 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:31:44.666877 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:32:16.965838 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:38:20.687804 3.002446 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 12:38:27.695801 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:38:35.698097 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:38:51.700700 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:39:23.706707 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:39:33.550893 0.000189 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 12:39:33.551195 0.010239 udp 10.0.2.22 62581 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 12:39:33.561881 0.000000 udp 10.0.2.22 62582 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 12:45:35.714302 3.014527 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 12:45:42.731271 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:45:50.732518 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:46:06.736272 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:46:38.742147 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:52:45.575395 1.140031 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 2 292 flow=Background 1970/01/14 12:52:51.344388 4.053150 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 2 292 flow=Background 1970/01/14 12:53:03.291963 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:53:19.073190 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:53:50.662225 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 12:54:37.756806 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 12:54:37.756918 0.010332 udp 10.0.2.22 62583 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 12:54:37.767674 0.000000 udp 10.0.2.22 62584 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 12:59:49.791735 3.002492 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 12:59:56.799901 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:00:04.801107 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:00:20.804220 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:00:52.810347 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:06:56.826547 3.027773 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 13:07:03.843637 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:07:11.845069 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:07:27.858395 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:08:06.949055 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:09:39.912978 0.020933 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 13:09:39.934156 0.011553 udp 10.0.2.22 62585 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 13:09:39.946146 0.000000 udp 10.0.2.22 62586 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 13:25:09.889235 3.077242 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 13:25:16.936068 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:25:24.906642 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:25:40.909842 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:26:12.915092 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:28:33.548078 0.000175 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 13:28:33.548378 0.028023 udp 10.0.2.22 62587 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 13:28:33.576773 0.000000 udp 10.0.2.22 62588 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 13:32:17.188821 3.326341 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 13:32:24.560833 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:32:32.464070 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:32:48.266355 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:33:19.959873 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:39:23.966009 3.047488 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 13:39:30.994392 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:39:33.546964 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 13:39:33.547065 0.011857 udp 10.0.2.22 62589 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 13:39:33.559310 0.000000 udp 10.0.2.22 62590 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 13:39:38.984820 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:39:54.988007 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:40:26.994929 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:46:31.000639 3.000518 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 13:46:38.007094 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:46:46.012306 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:47:02.012576 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:47:34.065660 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:53:38.024362 3.001059 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 13:53:45.031041 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:53:53.032438 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:54:09.035761 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 13:54:33.550875 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 13:54:33.550977 0.021383 udp 10.0.2.22 62591 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 13:54:33.572746 0.000000 udp 10.0.2.22 62592 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 13:54:41.041794 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:00:45.047556 3.001890 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 14:00:52.054720 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:01:00.056746 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:01:16.059733 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:01:48.065769 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:07:52.071132 3.002007 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 14:07:59.078987 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:08:07.080608 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:08:23.083229 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:08:55.093028 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:09:33.558877 0.000099 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 14:09:33.559083 0.022061 udp 10.0.2.22 62593 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 14:09:33.581692 0.000000 udp 10.0.2.22 62594 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 14:14:59.095016 3.002283 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 14:15:06.103166 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:15:14.104469 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:15:30.107846 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:16:02.113722 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:22:06.120265 3.004146 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 14:22:13.126995 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:22:21.128373 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:22:37.131269 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:23:09.137767 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:28:33.553986 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 14:28:33.554070 0.010661 udp 10.0.2.22 62595 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 14:28:33.565100 0.000000 udp 10.0.2.22 62596 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 14:29:13.145743 2.999476 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 14:29:20.150978 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:29:28.152567 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:29:44.155398 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:30:16.162047 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:36:20.177575 3.066430 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 14:36:27.214889 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:36:35.196206 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:36:51.199464 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:37:23.205177 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:39:33.552369 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 14:39:33.552558 0.011422 udp 10.0.2.22 62597 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 14:39:33.564394 0.000000 udp 10.0.2.22 62598 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 14:43:27.212048 3.001289 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 14:43:34.218802 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:43:42.220720 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:43:58.224982 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:44:30.229789 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:50:34.235657 3.078800 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 14:50:41.289184 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:50:49.254370 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:51:05.261949 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:51:37.263697 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:54:33.546803 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 14:54:33.547007 0.052857 udp 10.0.2.22 62599 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 14:54:33.600231 0.000000 udp 10.0.2.22 62600 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 14:57:41.269173 3.001828 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 14:57:48.276758 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:57:56.278205 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:58:12.281556 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 14:58:44.287214 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:04:48.294108 3.000887 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 15:04:55.301020 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:05:03.302177 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:05:19.305122 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:05:51.311225 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:09:33.550864 0.000090 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 15:09:33.551039 0.011185 udp 10.0.2.22 62601 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 15:09:33.562601 0.000000 udp 10.0.2.22 62602 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 15:24:02.323683 3.000555 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 15:24:09.330000 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:24:17.331572 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:24:33.334248 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:25:05.340756 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:28:33.550116 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 15:28:33.550227 0.012300 udp 10.0.2.22 62603 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 15:28:33.562920 0.000000 udp 10.0.2.22 62604 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 15:31:09.346650 3.188313 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 15:31:16.503845 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:31:24.428990 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:31:40.374028 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:32:12.374756 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:38:16.380623 3.001509 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 15:38:23.388205 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:38:31.389658 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:38:47.392435 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:39:19.398600 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:39:33.550953 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 15:39:33.551056 0.022050 udp 10.0.2.22 62605 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 15:39:33.573506 0.000000 udp 10.0.2.22 62606 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 15:45:30.404537 3.085855 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 15:45:37.470511 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:45:45.423694 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:46:01.426363 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:46:33.432725 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:52:37.439540 3.001335 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 15:52:44.446693 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:52:52.447923 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:53:08.452008 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:53:40.456589 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:54:33.552937 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 15:54:33.553139 0.012223 udp 10.0.2.22 62607 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 15:54:33.565620 0.000000 udp 10.0.2.22 62608 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 15:59:44.462661 3.001601 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 15:59:51.469957 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 15:59:59.471489 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:00:15.474607 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:00:47.480250 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:06:51.606593 3.001898 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 16:06:58.642313 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:07:06.625113 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:07:22.628429 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:07:54.634531 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:09:33.546966 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 16:09:33.547161 0.011783 udp 10.0.2.22 62609 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 16:09:33.559386 0.000000 udp 10.0.2.22 62610 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 16:25:05.650268 3.000825 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 16:25:12.657058 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:25:20.660426 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:25:36.664767 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:26:08.667745 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:28:33.545577 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 16:28:33.545684 0.010340 udp 10.0.2.22 62611 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 16:28:33.556382 0.000000 udp 10.0.2.22 62612 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 16:32:12.674091 3.574019 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 16:32:20.210987 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:32:28.119681 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:32:43.921873 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:33:15.711800 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:39:19.728232 3.002731 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 16:39:26.734810 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:39:33.554792 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 16:39:33.554888 0.012895 udp 10.0.2.22 62613 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 16:39:33.568121 0.000000 udp 10.0.2.22 62614 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 16:39:34.736561 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:39:50.739599 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:40:22.744966 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:46:26.753180 3.000285 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 16:46:33.758920 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:46:41.760357 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:46:57.763090 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:47:29.769979 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:53:33.776438 3.000737 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 16:53:40.782584 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:53:48.784389 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:54:04.787528 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 16:54:33.548863 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 16:54:33.549042 0.022178 udp 10.0.2.22 62615 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 16:54:33.571637 0.000000 udp 10.0.2.22 62616 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 16:54:36.793333 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:00:40.799671 3.001565 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 17:00:47.807028 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:00:55.808434 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:01:11.811413 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:01:43.817895 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:07:47.834982 2.990036 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 17:07:54.834037 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:08:02.835622 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:08:18.835193 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:08:50.841436 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:09:33.552851 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 17:09:33.553020 0.012416 udp 10.0.2.22 62617 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 17:09:33.565806 0.000000 udp 10.0.2.22 62618 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 17:25:33.856393 3.001841 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 17:25:40.863749 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:25:48.864595 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:26:04.868207 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:26:36.874032 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:28:33.551942 0.000102 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 17:28:33.552164 0.010707 udp 10.0.2.22 62619 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 17:28:33.563212 0.000000 udp 10.0.2.22 62620 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 17:32:40.881281 3.083372 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 17:32:47.934050 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:32:55.899208 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:33:11.901967 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:33:43.908649 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:39:33.550966 0.011377 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 17:39:33.562522 0.010804 udp 10.0.2.22 62621 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 17:39:33.573768 0.000000 udp 10.0.2.22 62622 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 17:39:47.914758 3.000884 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 17:39:54.921773 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:40:02.922963 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:40:18.925858 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:40:50.932152 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:46:54.948428 3.001653 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 17:47:01.955295 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:47:09.957093 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:47:25.964698 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:47:57.966033 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:54:02.974364 3.000430 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 17:54:09.981069 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:54:17.982311 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:54:33.544949 0.000107 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 17:54:33.545148 0.010095 udp 10.0.2.22 62623 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 17:54:33.555616 0.000000 udp 10.0.2.22 62624 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 17:54:33.984872 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 17:55:05.995163 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:01:09.999571 2.999485 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 18:01:17.004864 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:01:25.006326 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:01:41.009512 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:02:13.015910 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:08:17.022548 3.000410 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 18:08:24.028853 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:08:32.030460 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:08:48.039633 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:09:20.039803 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:09:33.548723 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 18:09:33.548895 0.011528 udp 10.0.2.22 62625 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 18:09:33.560822 0.000000 udp 10.0.2.22 62626 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 18:15:24.045742 3.001922 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 18:15:31.052969 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:15:39.054488 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:15:55.057657 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:16:27.063210 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:22:31.069481 3.001587 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 18:22:38.076943 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:22:46.078261 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:23:02.081739 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:23:34.092625 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:28:33.548292 0.000093 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 18:28:33.548509 0.010211 udp 10.0.2.22 62627 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 18:28:33.559076 0.000000 udp 10.0.2.22 62628 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 18:29:38.093632 3.132269 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 18:29:45.203223 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:29:53.138176 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:30:09.115824 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:30:41.121231 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:36:45.127677 3.156851 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 18:36:52.255925 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:37:00.193131 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:37:16.149344 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:37:48.156694 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:39:33.547118 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 18:39:33.547312 0.010305 udp 10.0.2.22 62629 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 18:39:33.558029 0.000000 udp 10.0.2.22 62630 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 18:43:52.162279 3.160561 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 18:43:59.291203 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:44:07.232357 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:44:23.195551 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:44:55.199167 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:51:07.207224 3.001369 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 18:51:14.214201 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:51:22.215678 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:51:38.219053 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:52:10.225261 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:54:33.551072 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 18:54:33.551224 0.011133 udp 10.0.2.22 62631 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 18:54:33.562711 0.000000 udp 10.0.2.22 62632 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 18:58:14.234878 2.997497 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 18:58:21.240937 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:58:29.239663 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:58:45.246980 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 18:59:17.248732 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:05:21.254575 3.001913 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 19:05:28.262274 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:05:36.263947 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:05:52.276728 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:06:24.282700 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:09:33.545043 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 19:09:33.545192 0.024763 udp 10.0.2.22 62633 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 19:09:33.570318 0.000000 udp 10.0.2.22 62634 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 19:24:22.295548 3.001212 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 19:24:29.302584 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:24:37.304614 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:24:53.307309 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:25:25.313058 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:28:33.543979 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 19:28:33.544178 0.010767 udp 10.0.2.22 62635 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 19:28:33.555280 0.000000 udp 10.0.2.22 62636 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 19:31:29.318976 3.001926 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 19:31:36.326694 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:31:44.328431 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:32:00.331368 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:32:32.337199 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:38:36.343363 3.210077 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 19:38:43.525158 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:38:51.461198 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:39:07.365233 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:39:33.553065 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 19:39:33.553246 0.010141 udp 10.0.2.22 62637 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 19:39:33.563742 0.000000 udp 10.0.2.22 62638 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 19:39:39.373903 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:45:43.377805 3.001028 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 19:45:50.384856 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:45:58.386196 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:46:14.390079 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:46:46.395074 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:52:50.401749 3.000880 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 19:52:57.408519 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:53:05.409903 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:53:21.413238 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:53:53.419055 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 19:54:33.546991 0.000103 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 19:54:33.547184 0.011361 udp 10.0.2.22 62639 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 19:54:33.558978 0.000000 udp 10.0.2.22 62640 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 19:59:57.425126 3.058440 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 20:00:04.459662 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:00:12.444570 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:00:28.447035 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:01:00.453472 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:07:04.459338 3.001264 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 20:07:11.466544 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:07:19.468721 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:07:35.471073 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:08:07.476993 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:09:33.550727 0.000091 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 20:09:33.550900 0.010605 udp 10.0.2.22 62641 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 20:09:33.561843 0.000000 udp 10.0.2.22 62642 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 20:25:09.488380 3.002021 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 20:25:16.496589 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:25:24.498126 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:25:40.501163 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:26:12.507034 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:28:33.549851 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 20:28:33.550000 0.010781 udp 10.0.2.22 62643 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 20:28:33.561220 0.000000 udp 10.0.2.22 62644 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 20:32:16.514342 3.000462 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 20:32:23.520285 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:32:31.521954 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:32:47.524656 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:33:19.531067 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:39:23.536665 3.001895 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 20:39:30.544642 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:39:33.548797 0.000100 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 20:39:33.548980 0.011100 udp 10.0.2.22 62645 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 20:39:33.560457 0.000000 udp 10.0.2.22 62646 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 20:39:38.545678 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:39:54.549019 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:40:26.555219 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:46:30.560856 3.001531 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 20:46:37.578664 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:46:45.579577 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:47:01.582927 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:47:33.588443 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:53:37.594720 3.001991 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 20:53:44.601821 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:53:52.603432 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:54:08.606939 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 20:54:33.550966 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 20:54:33.551080 0.016889 udp 10.0.2.22 62647 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 20:54:33.568370 0.000000 udp 10.0.2.22 62648 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 20:54:40.613202 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:00:44.619361 3.002662 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 21:00:51.626368 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:00:59.638079 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:01:15.640286 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:01:47.647202 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:07:51.651954 3.002733 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 21:07:58.660456 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:08:06.661786 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:08:22.665102 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:08:54.670941 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:09:33.546897 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 21:09:33.547099 0.011383 udp 10.0.2.22 62649 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 21:09:33.558868 0.000000 udp 10.0.2.22 62650 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 21:25:34.680322 3.002902 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 21:25:41.688941 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:25:49.690069 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:26:05.693629 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:26:37.699346 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:28:33.546065 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 21:28:33.546171 0.010117 udp 10.0.2.22 62651 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 21:28:33.556608 0.000000 udp 10.0.2.22 62652 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 21:32:41.705984 3.082422 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 21:32:48.761900 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:32:56.723902 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:33:12.727265 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:33:44.732813 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:39:33.544791 0.010894 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 21:39:33.555779 0.014540 udp 10.0.2.22 62653 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 21:39:33.570627 0.000000 udp 10.0.2.22 62654 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 21:39:48.749437 3.001426 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 21:39:55.756802 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:40:03.758540 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:40:19.760781 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:40:51.767521 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:46:55.773544 3.001655 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 21:47:02.780798 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:47:10.781816 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:47:26.784881 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:47:58.791207 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:54:05.801293 3.001974 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 21:54:12.808989 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:54:20.810516 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:54:33.552301 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 21:54:33.552409 0.010259 udp 10.0.2.22 62655 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 21:54:33.616606 0.000000 udp 10.0.2.22 62656 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 21:54:36.819895 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 21:55:08.819875 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:01:12.825305 3.001807 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 22:01:19.832816 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:01:27.834353 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:01:43.837387 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:02:15.843348 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:08:19.849655 3.001885 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 22:08:26.856960 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:08:34.858330 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:08:50.861246 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:09:22.867354 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:09:33.546152 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 22:09:33.546276 0.021310 udp 10.0.2.22 62657 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 22:09:33.568011 0.000000 udp 10.0.2.22 62658 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 22:15:26.873259 3.001819 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 22:15:33.880987 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:15:41.882672 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:15:57.885087 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:16:29.895611 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:22:33.896874 3.002304 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 22:22:40.904457 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:22:48.906532 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:23:04.909609 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:23:36.915137 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:28:33.551373 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 22:28:33.551466 0.010209 udp 10.0.2.22 62659 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 22:28:33.562007 0.000000 udp 10.0.2.22 62660 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 22:29:40.921507 3.871346 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 22:29:48.749199 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:29:56.658257 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:30:12.462448 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:30:44.067127 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:36:47.956517 3.580032 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 22:36:55.495461 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:37:03.405657 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:37:19.232256 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:37:50.993240 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:39:33.550335 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 22:39:33.550505 0.011285 udp 10.0.2.22 62661 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 22:39:33.562148 0.000000 udp 10.0.2.22 62662 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 22:44:01.008541 3.000559 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 22:44:08.015166 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:44:16.016735 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:44:32.020176 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:45:04.025622 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:51:18.036440 3.001993 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 22:51:25.044092 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:51:33.044791 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:51:49.048238 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:52:21.055526 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:54:33.544724 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 22:54:33.544935 0.012719 udp 10.0.2.22 62663 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 22:54:33.558009 0.000000 udp 10.0.2.22 62664 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 22:58:25.061168 3.000874 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 22:58:32.067710 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:58:40.069281 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:58:56.072494 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 22:59:28.078452 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:05:32.085058 3.038119 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 23:05:39.111803 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:05:47.113305 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:06:03.116539 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:06:35.122162 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:09:33.549050 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 23:09:33.549163 0.011451 udp 10.0.2.22 62665 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 23:09:33.561012 0.000000 udp 10.0.2.22 62666 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 23:24:26.134813 3.033365 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 23:24:33.152376 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:24:41.153961 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:24:57.156890 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:25:29.162896 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:28:33.548013 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 23:28:33.548133 0.022788 udp 10.0.2.22 62667 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 23:28:33.851791 0.000000 udp 10.0.2.22 62668 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 23:31:33.168142 3.002459 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 23:31:40.176180 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:31:48.177722 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:32:04.180860 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:32:36.186909 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:38:43.534542 3.496789 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 23:38:51.822671 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:38:59.785390 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:39:15.656271 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:39:37.700855 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 23:39:37.700968 0.011013 udp 10.0.2.22 62669 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 23:39:37.712349 0.000000 udp 10.0.2.22 62670 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/14 23:39:47.230778 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:45:48.608435 3.002090 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 23:45:55.615651 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:46:03.617579 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:46:19.620791 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:46:51.626730 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:52:55.632512 3.001273 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/14 23:53:02.640363 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:53:10.641838 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:53:26.644664 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:53:58.650289 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/14 23:54:34.943119 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/14 23:54:34.943294 0.011252 udp 10.0.2.22 62671 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/14 23:54:34.954882 0.000000 udp 10.0.2.22 62672 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 00:00:02.656523 3.001806 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 00:00:09.664935 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:00:17.665262 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:00:33.668473 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:01:05.674499 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:07:09.680212 3.002202 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 00:07:16.687839 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:07:24.689950 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:07:40.692767 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:08:12.708603 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:09:34.937685 0.128425 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 00:09:35.066277 0.011653 udp 10.0.2.22 62673 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 00:09:35.078279 0.000000 udp 10.0.2.22 62674 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 00:25:16.743669 3.060137 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 00:25:23.779805 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:25:31.762739 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:25:47.765735 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:26:19.771914 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:28:34.935690 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 00:28:34.935781 0.012121 udp 10.0.2.22 62675 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 00:28:34.948228 0.000000 udp 10.0.2.22 62676 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 00:32:23.777030 3.002115 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 00:32:30.784876 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:32:38.786530 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:32:54.789246 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:33:26.795359 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:39:30.801710 3.000835 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 00:39:34.934918 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 00:39:34.935091 0.010362 udp 10.0.2.22 62677 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 00:39:34.945817 0.000000 udp 10.0.2.22 62678 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 00:39:37.808826 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:39:45.810760 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:40:01.813730 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:40:33.819050 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:46:37.825881 3.001938 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 00:46:44.833655 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:46:52.835577 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:47:08.839343 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:47:40.843368 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:53:44.850898 3.000013 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 00:53:51.856789 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:53:59.860233 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:54:15.861165 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 00:54:34.938728 0.000093 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 00:54:34.938915 0.013469 udp 10.0.2.22 62679 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 00:54:34.952768 0.000000 udp 10.0.2.22 62680 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 00:54:47.867605 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:00:51.873837 3.042376 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 01:00:58.897495 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:01:06.893783 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:01:22.895055 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:01:54.901551 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:07:59.483755 2.996188 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 01:08:06.485564 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:08:14.487075 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:08:30.490127 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:09:02.497978 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:09:35.433981 0.000260 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 01:09:35.434357 0.012169 udp 10.0.2.22 62681 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 01:09:35.446913 0.000000 udp 10.0.2.22 62682 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 01:15:06.502026 3.001562 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 01:15:13.509564 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:15:21.511122 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:15:37.513965 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:16:09.520060 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:22:13.536701 3.015412 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 01:22:20.553416 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:22:28.554985 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:22:44.558470 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:23:16.564121 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:28:35.442864 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 01:28:35.443009 0.011373 udp 10.0.2.22 62683 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 01:28:35.454689 0.000000 udp 10.0.2.22 62684 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 01:29:20.570387 3.001493 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 01:29:27.577573 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:29:35.579168 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:29:51.581985 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:30:23.588551 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:36:27.594230 3.001722 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 01:36:34.601154 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:36:42.602855 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:36:58.605750 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:37:30.611458 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:39:35.441838 0.023114 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 01:39:35.465106 0.023007 udp 10.0.2.22 62685 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 01:39:35.488542 0.000000 udp 10.0.2.22 62686 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 01:43:34.627937 3.115723 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 01:43:41.715300 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:43:49.653058 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:44:05.650336 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:44:37.655841 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:50:41.661905 3.001620 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 01:50:48.668841 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:50:56.672402 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:51:12.673989 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:51:44.679909 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:54:35.435410 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 01:54:35.435615 0.011672 udp 10.0.2.22 62687 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 01:54:35.447682 0.000000 udp 10.0.2.22 62688 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 01:57:48.686589 3.001203 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 01:57:55.708137 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:58:03.699067 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:58:19.702637 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 01:58:51.705120 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:04:55.710546 3.001050 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 02:05:02.717559 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:05:10.719078 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:05:26.722114 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:05:58.728174 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:09:35.439674 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 02:09:35.439823 0.011274 udp 10.0.2.22 62689 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 02:09:35.451467 0.000000 udp 10.0.2.22 62690 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 02:24:10.740643 3.001673 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 02:24:17.748272 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:24:25.749528 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:24:41.752731 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:25:13.758684 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:28:35.440272 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 02:28:35.440380 0.011671 udp 10.0.2.22 62691 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 02:28:35.452421 0.000000 udp 10.0.2.22 62692 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 02:31:17.764928 3.058725 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 02:31:24.800421 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:31:32.783005 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:31:48.786550 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:32:20.802804 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:38:24.808925 3.001329 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 02:38:31.815572 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:38:39.817582 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:38:55.820150 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:39:27.826752 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:39:35.438178 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 02:39:35.438397 0.011234 udp 10.0.2.22 62693 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 02:39:35.450056 0.000000 udp 10.0.2.22 62694 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 02:45:39.833651 3.002191 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 02:45:46.841434 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:45:54.843116 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:46:10.847644 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:46:42.853673 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:52:46.858260 3.015800 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 02:52:53.875449 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:53:01.877198 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:53:17.880199 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:53:49.885677 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 02:54:35.441827 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 02:54:35.441991 0.027801 udp 10.0.2.22 62695 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 02:54:35.470218 0.000000 udp 10.0.2.22 62696 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 02:59:53.892071 3.001576 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 03:00:00.899664 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:00:08.901198 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:00:24.904289 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:00:56.910115 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:07:00.916424 3.001172 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 03:07:07.923242 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:07:15.925439 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:07:31.928225 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:08:03.934315 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:09:35.436204 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 03:09:35.436315 0.010043 udp 10.0.2.22 62697 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 03:09:35.541464 0.000000 udp 10.0.2.22 62698 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 03:25:08.940764 3.001410 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 03:25:15.947676 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:25:23.949201 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:25:39.952286 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:26:11.963811 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:28:35.434589 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 03:28:35.434773 0.011774 udp 10.0.2.22 62699 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 03:28:35.446869 0.000000 udp 10.0.2.22 62700 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 03:32:15.963632 3.165467 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 03:32:23.126266 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:32:31.049650 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:32:46.996388 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:33:19.002296 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:39:23.008880 3.001164 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 03:39:30.019558 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:39:35.436664 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 03:39:35.436770 0.033713 udp 10.0.2.22 62701 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 03:39:35.470875 0.000000 udp 10.0.2.22 62702 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 03:39:38.019594 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:39:54.020221 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:40:26.032875 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:46:30.032651 3.001872 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 03:46:37.039718 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:46:45.041605 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:47:01.043972 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:47:33.060283 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:53:37.065720 3.002092 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 03:53:44.073793 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:53:52.075032 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:54:08.078250 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 03:54:35.437826 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 03:54:35.437947 0.015156 udp 10.0.2.22 62703 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 03:54:35.453742 0.000000 udp 10.0.2.22 62704 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 03:54:40.084476 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:00:44.091532 3.000517 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 04:00:51.097951 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:00:59.098971 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:01:15.102308 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:01:47.108316 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:07:51.113998 3.001208 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 04:07:58.121658 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:08:06.123046 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:08:22.126269 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:08:54.133702 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:09:35.441681 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 04:09:35.441777 0.015239 udp 10.0.2.22 62705 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 04:09:35.457351 0.000000 udp 10.0.2.22 62706 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 04:25:35.144391 3.001938 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 04:25:42.151683 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:25:50.153079 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:26:06.156097 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:26:38.161981 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:28:35.440900 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 04:28:35.441046 0.015706 udp 10.0.2.22 62707 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 04:28:35.496910 0.000000 udp 10.0.2.22 62708 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 04:32:42.167934 3.001984 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 04:32:49.175698 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:32:57.176910 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:33:13.180195 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:33:45.185907 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:39:35.442304 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 04:39:35.442424 0.013965 udp 10.0.2.22 62709 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 04:39:35.456765 0.000000 udp 10.0.2.22 62710 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 04:39:49.192219 3.001603 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 04:39:56.199692 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:40:04.200755 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:40:20.204229 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:40:52.210119 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:46:56.226834 3.000882 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 04:47:03.233523 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:47:11.234822 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:47:27.238067 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:47:59.243830 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:54:05.253683 3.010884 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 04:54:12.270089 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:54:20.271772 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:54:35.433558 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 04:54:35.433721 0.010186 udp 10.0.2.22 62711 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 04:54:35.444267 0.000000 udp 10.0.2.22 62712 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 04:54:36.274544 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 04:55:08.280753 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:01:12.287354 3.000954 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 05:01:19.294267 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:01:27.295856 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:01:43.300091 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:02:15.304744 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:08:19.312081 3.000601 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 05:08:26.318634 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:08:34.319996 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:08:50.617598 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:09:22.338810 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:09:35.442185 0.000207 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 05:09:35.442498 0.011923 udp 10.0.2.22 62713 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 05:09:35.454821 0.000000 udp 10.0.2.22 62714 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 05:15:26.345660 3.000917 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 05:15:33.354027 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:15:41.354009 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:15:57.356740 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:16:29.362789 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:22:33.368785 3.001792 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 05:22:40.375451 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:22:48.377722 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:23:04.383961 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:23:36.388032 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:28:35.436759 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 05:28:35.436921 0.010374 udp 10.0.2.22 62715 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 05:28:35.447775 0.000000 udp 10.0.2.22 62716 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 05:29:40.393483 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:29:46.085124 1.974424 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 2 292 flow=Background 1970/01/15 05:29:52.010585 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:30:00.086409 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:30:15.861752 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:30:55.794256 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:36:54.858219 2.955301 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 05:37:01.765397 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:37:09.653134 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:37:25.467977 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:37:57.035284 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:39:40.568260 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 05:39:40.568364 0.021720 udp 10.0.2.22 62717 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 05:39:40.590471 0.000000 udp 10.0.2.22 62718 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 05:43:57.138239 2.959608 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 05:44:04.046202 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:44:11.939501 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:44:27.723172 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:44:59.298747 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:51:11.499728 3.000968 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 05:51:18.506478 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:51:26.507986 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:51:42.511042 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:52:14.516789 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:54:35.439998 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 05:54:35.440114 0.012370 udp 10.0.2.22 62719 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 05:54:35.452821 0.000000 udp 10.0.2.22 62720 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 05:58:18.523514 3.003537 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 05:58:25.530053 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:58:33.531943 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:58:49.534604 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 05:59:21.540756 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:05:25.548268 3.000213 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 06:05:32.554101 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:05:40.555399 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:05:56.558756 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:06:28.564758 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:09:35.433828 0.000121 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 06:09:35.434047 0.010232 udp 10.0.2.22 62721 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 06:09:35.444704 0.000000 udp 10.0.2.22 62722 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 06:24:23.574753 2.999994 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 06:24:30.580623 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:24:38.582095 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:24:54.584656 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:25:26.591019 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:28:35.435748 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 06:28:35.435853 0.010222 udp 10.0.2.22 62723 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 06:28:35.446426 0.000000 udp 10.0.2.22 62724 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 06:31:30.596977 3.003760 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 06:31:37.604002 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:31:45.605982 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:32:01.608982 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:32:33.615342 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:38:37.622186 3.000588 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 06:38:44.628688 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:38:52.629809 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:39:08.632626 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:39:35.433792 0.000104 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 06:39:35.433995 0.011777 udp 10.0.2.22 62725 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 06:39:35.446207 0.000000 udp 10.0.2.22 62726 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 06:39:40.639333 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:45:44.646511 3.000096 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 06:45:51.653255 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:45:59.653953 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:46:15.656397 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:46:47.662916 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:52:51.669124 3.003212 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 06:52:58.677822 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:53:06.680368 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:53:22.681207 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:53:54.687038 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 06:54:35.437830 0.000199 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 06:54:35.438158 0.011509 udp 10.0.2.22 62727 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 06:54:35.450138 0.000000 udp 10.0.2.22 62728 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 06:59:58.694292 2.999967 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 07:00:05.699847 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:00:13.701878 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:00:29.705177 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:01:01.711689 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:07:05.716875 3.001840 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 07:07:12.723820 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:07:20.725874 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:07:36.729279 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:08:08.734661 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:09:35.439545 0.000113 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 07:09:35.439768 0.013408 udp 10.0.2.22 62729 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 07:09:35.453689 0.000000 udp 10.0.2.22 62730 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 07:25:14.743592 3.000479 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 07:25:21.750733 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:25:29.751988 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:25:45.754789 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:26:17.760695 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:28:35.438979 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 07:28:35.439107 0.012325 udp 10.0.2.22 62731 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 07:28:35.451803 0.000000 udp 10.0.2.22 62732 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 07:32:21.767616 3.000974 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 07:32:28.773937 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:32:36.775966 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:32:52.778616 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:33:24.786603 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:39:28.791395 3.043346 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 07:39:35.446050 0.000186 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 07:39:35.446353 0.012807 udp 10.0.2.22 62733 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 07:39:35.459530 0.000000 udp 10.0.2.22 62734 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 07:39:35.813892 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:39:43.809811 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:39:59.813858 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:40:31.819663 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:46:35.825742 3.001341 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 07:46:42.835136 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:46:50.833663 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:47:06.836361 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:47:38.842585 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:53:42.848795 3.001471 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 07:53:49.855381 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:53:57.857477 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:54:13.863785 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 07:54:35.431907 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 07:54:35.432050 0.011471 udp 10.0.2.22 62735 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 07:54:35.443897 0.000000 udp 10.0.2.22 62736 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 07:54:45.868429 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:00:49.872813 3.001358 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 08:00:56.879979 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:01:04.881196 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:01:20.884558 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:01:52.890684 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:07:56.895829 3.002449 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 08:08:03.903844 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:08:11.904779 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:08:27.908556 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:08:59.923744 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:09:35.435871 0.000188 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 08:09:35.436197 0.011665 udp 10.0.2.22 62737 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 08:09:35.448317 0.000000 udp 10.0.2.22 62738 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 08:15:03.920394 3.001835 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 08:15:10.929157 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:15:18.932418 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:15:34.932785 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:16:06.938351 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:22:10.944953 3.001205 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 08:22:17.951830 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:22:25.953353 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:22:41.956424 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:23:13.962332 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:28:35.434856 0.000082 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 08:28:35.435071 0.014333 udp 10.0.2.22 62739 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 08:28:35.449886 0.000000 udp 10.0.2.22 62740 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 08:29:17.969085 3.000918 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 08:29:24.975946 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:29:32.977389 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:29:48.980306 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:30:20.986329 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:36:24.992633 3.125380 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 08:36:32.100226 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:36:40.043475 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:36:56.014277 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:37:28.020436 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:39:35.433607 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 08:39:35.433715 0.010513 udp 10.0.2.22 62741 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 08:39:35.444604 0.000000 udp 10.0.2.22 62742 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 08:43:32.027568 3.000476 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 08:43:39.033948 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:43:47.035164 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:44:03.038112 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:44:35.044271 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:50:39.050574 3.002367 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 08:50:46.057833 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:50:54.059672 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:51:10.063990 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:51:42.069795 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:54:35.437753 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 08:54:35.437863 0.010217 udp 10.0.2.22 62743 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 08:54:35.448485 0.000000 udp 10.0.2.22 62744 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 08:57:46.075913 2.999705 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 08:57:53.081916 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:58:01.083268 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:58:17.086063 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 08:58:49.092445 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:04:53.098812 3.001770 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 09:05:00.105223 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:05:08.106941 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:05:24.110152 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:05:56.116000 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:09:35.431500 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 09:09:35.431606 0.011293 udp 10.0.2.22 62745 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 09:09:35.443238 0.000000 udp 10.0.2.22 62746 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 09:24:05.124691 3.000909 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 09:24:12.132172 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:24:20.133875 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:24:36.136390 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:25:08.142502 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:28:35.430974 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 09:28:35.431094 0.010355 udp 10.0.2.22 62747 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 09:28:35.441873 0.000000 udp 10.0.2.22 62748 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 09:31:12.150496 2.999922 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 09:31:19.155766 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:31:27.156869 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:31:43.160313 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:32:15.166522 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:38:19.173179 3.001087 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 09:38:26.179688 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:38:34.181700 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:38:50.185514 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:39:22.190481 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:39:35.429924 0.000182 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 09:39:35.430301 0.011439 udp 10.0.2.22 62749 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 09:39:35.442163 0.000000 udp 10.0.2.22 62750 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 09:45:31.204521 3.197600 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 09:45:38.688546 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:45:46.617510 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:46:02.478524 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:46:34.241869 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:52:38.251876 3.042000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 09:52:45.273769 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:52:53.267697 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:53:09.269737 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:53:41.275865 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 09:54:35.433675 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 09:54:35.433808 0.011464 udp 10.0.2.22 62751 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 09:54:35.445709 0.000000 udp 10.0.2.22 62752 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 09:59:45.282208 3.001081 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 09:59:52.289911 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:00:00.290727 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:00:16.293624 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:00:48.299795 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:06:52.305959 3.001312 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 10:06:59.313014 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:07:07.314856 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:07:23.317944 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:07:55.324047 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:09:35.437867 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 10:09:35.437996 0.010378 udp 10.0.2.22 62753 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 10:09:35.448798 0.000000 udp 10.0.2.22 62754 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 10:25:05.337398 3.001603 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 10:25:12.344797 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:25:20.346135 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:25:36.349289 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:26:08.355166 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:28:35.437990 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 10:28:35.438107 0.010245 udp 10.0.2.22 62755 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 10:28:35.448746 0.000000 udp 10.0.2.22 62756 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 10:32:12.362327 3.000322 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 10:32:19.368824 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:32:27.369982 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:32:43.374796 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:33:15.380398 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:39:19.387432 2.999355 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 10:39:26.392278 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:39:34.394003 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:39:35.435256 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 10:39:35.435374 0.010176 udp 10.0.2.22 62757 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 10:39:35.445935 0.000000 udp 10.0.2.22 62758 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 10:39:50.396896 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:40:22.404155 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:46:26.410726 2.999936 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 10:46:33.416458 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:46:41.417971 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:46:57.421180 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:47:29.429679 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:53:33.432812 3.002047 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 10:53:40.440268 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:53:48.442101 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:54:04.445085 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 10:54:35.429795 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 10:54:35.429919 0.012488 udp 10.0.2.22 62759 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 10:54:35.442866 0.000000 udp 10.0.2.22 62760 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 10:54:36.451117 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:00:40.458265 3.000603 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 11:00:47.464455 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:00:55.466178 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:01:11.469017 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:01:43.474976 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:07:47.481169 3.001365 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 11:07:54.488252 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:08:02.489994 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:08:18.492953 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:08:50.509344 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:09:35.433637 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 11:09:35.433844 0.011392 udp 10.0.2.22 62761 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 11:09:35.445655 0.000000 udp 10.0.2.22 62762 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 11:25:33.514024 3.001084 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 11:25:40.521418 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:25:48.522613 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:26:04.525461 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:26:36.531675 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:28:35.432723 0.000176 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 11:28:35.433014 0.010860 udp 10.0.2.22 62763 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 11:28:35.444373 0.000000 udp 10.0.2.22 62764 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 11:32:40.618266 3.002892 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 11:32:47.625260 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:32:55.626659 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:33:11.629816 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:33:43.645778 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:39:35.511780 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 11:39:35.511991 0.011239 udp 10.0.2.22 62765 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 11:39:35.523662 0.000000 udp 10.0.2.22 62766 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 11:39:47.652628 3.001030 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 11:39:54.658970 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:40:02.660680 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:40:18.663847 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:40:50.670666 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:46:54.675915 3.001833 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 11:47:01.683121 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:47:09.683963 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:47:25.687801 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:47:57.693411 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:54:01.700648 3.000395 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 11:54:08.707212 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:54:16.708571 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:54:32.711014 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 11:54:36.265809 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 11:54:36.265909 0.021478 udp 10.0.2.22 62767 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 11:54:36.287830 0.000000 udp 10.0.2.22 62768 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 11:55:05.137809 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:01:08.733890 3.000938 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 12:01:15.741259 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:01:23.745264 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:01:39.745248 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:02:11.752003 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:08:15.757907 3.001497 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 12:08:22.764897 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:08:30.766327 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:08:46.775132 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:09:18.775427 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:09:35.509937 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 12:09:35.510053 0.014402 udp 10.0.2.22 62769 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 12:09:35.524823 0.000000 udp 10.0.2.22 62770 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 12:15:22.782071 3.001193 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 12:15:29.788834 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:15:37.790081 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:15:53.793499 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:16:25.799431 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:22:29.805909 3.001470 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 12:22:36.812949 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:22:44.813984 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:23:00.817659 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:23:32.823731 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:28:35.508611 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 12:28:35.508746 0.014909 udp 10.0.2.22 62771 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 12:28:35.524023 0.000000 udp 10.0.2.22 62772 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 12:29:36.829701 3.001245 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 12:29:43.837053 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:29:51.838326 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:30:07.841581 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:30:39.847688 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:36:43.853990 3.001157 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 12:36:50.861155 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:36:58.862140 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:37:14.865151 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:37:46.872329 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:39:35.509951 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 12:39:35.510067 0.010284 udp 10.0.2.22 62773 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 12:39:35.520776 0.000000 udp 10.0.2.22 62774 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 12:43:50.878793 3.000303 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 12:43:58.051996 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:44:05.986828 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:44:21.899350 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:44:53.915361 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:51:04.922369 3.000137 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 12:51:11.928970 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:51:19.930467 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:51:35.933940 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:52:07.939773 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:54:35.511913 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 12:54:35.512022 0.023182 udp 10.0.2.22 62775 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 12:54:35.535664 0.000000 udp 10.0.2.22 62776 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 12:58:11.945059 3.001892 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 12:58:18.953907 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:58:26.954416 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:58:42.957154 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 12:59:14.963133 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:05:18.969544 3.001600 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 13:05:25.976637 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:05:33.978322 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:05:49.981298 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:06:21.987267 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:09:35.515353 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 13:09:35.515468 0.012978 udp 10.0.2.22 62777 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 13:09:35.528882 0.000000 udp 10.0.2.22 62778 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 13:24:21.000953 3.002471 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 13:24:28.009265 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:24:36.010302 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:24:52.013227 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:25:24.019348 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:28:35.514703 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 13:28:35.514916 0.010135 udp 10.0.2.22 62779 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 13:28:35.525631 0.000000 udp 10.0.2.22 62780 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 13:31:28.026770 3.022859 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 13:31:35.043857 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:31:43.044454 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:31:59.047269 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:32:31.053076 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:38:35.060147 3.173794 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 13:38:42.202844 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:38:50.133408 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:39:06.081384 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:39:35.513713 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 13:39:35.513921 0.013039 udp 10.0.2.22 62781 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 13:39:35.527361 0.000000 udp 10.0.2.22 62782 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 13:39:38.087266 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:45:42.095232 2.999793 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 13:45:49.102027 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:45:57.102358 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:46:13.105077 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:46:45.111627 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:52:49.118228 3.000756 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 13:52:56.124480 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:53:04.126086 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:53:20.129212 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:53:52.146101 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 13:54:35.508196 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 13:54:35.508326 0.031086 udp 10.0.2.22 62783 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 13:54:35.539798 0.000000 udp 10.0.2.22 62784 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 13:59:56.151913 3.060453 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 14:00:03.193557 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:00:11.170225 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:00:27.175834 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:00:59.179891 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:07:03.186427 3.000381 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 14:07:10.192763 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:07:18.194103 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:07:34.197752 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:08:06.203260 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:09:35.511978 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 14:09:35.512102 0.015828 udp 10.0.2.22 62785 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 14:09:35.528328 0.000000 udp 10.0.2.22 62786 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 14:25:14.215616 3.000791 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 14:25:21.221470 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:25:29.223094 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:25:45.225853 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:26:17.231943 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:28:35.510627 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 14:28:35.510791 0.010102 udp 10.0.2.22 62787 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 14:28:35.521292 0.000000 udp 10.0.2.22 62788 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 14:32:21.239240 3.000453 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 14:32:28.245377 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:32:36.247012 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:32:52.250013 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:33:24.255411 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:39:28.264600 2.999209 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 14:39:35.274024 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:39:35.514040 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 14:39:35.514222 0.010843 udp 10.0.2.22 62789 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 14:39:35.525609 0.000000 udp 10.0.2.22 62790 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 14:39:43.273690 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:39:59.273747 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:40:31.280031 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:46:35.287295 3.000010 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 14:46:42.293271 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:46:50.297819 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:47:06.297721 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:47:38.305634 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:53:42.309797 3.001574 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 14:53:49.316640 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:53:57.319140 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:54:13.321827 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 14:54:35.513461 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 14:54:35.513581 0.027074 udp 10.0.2.22 62791 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 14:54:35.541041 0.000000 udp 10.0.2.22 62792 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 14:54:45.327836 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:00:49.333230 3.001951 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 15:00:56.341042 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:01:04.342620 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:01:20.346379 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:01:52.351784 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:07:56.357797 3.001569 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 15:08:03.364683 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:08:11.366791 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:08:27.369853 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:08:59.375166 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:09:35.507452 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 15:09:35.507659 0.011773 udp 10.0.2.22 62793 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 15:09:35.519810 0.000000 udp 10.0.2.22 62794 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 15:15:03.382988 3.000246 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 15:15:10.388935 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:15:18.390759 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:15:34.393713 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:16:06.400475 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:22:10.406117 3.001712 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 15:22:17.413010 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:22:25.414442 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:22:41.417511 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:23:13.423840 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:28:35.506829 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 15:28:35.507001 0.010344 udp 10.0.2.22 62795 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 15:28:35.517684 0.000000 udp 10.0.2.22 62796 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 15:29:17.430157 3.001633 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 15:29:24.437142 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:29:32.438564 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:29:48.442447 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:30:20.448475 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:36:24.455401 4.130119 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 15:36:32.544896 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:36:40.447457 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:36:56.255610 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:37:27.867637 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:39:35.505306 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 15:39:35.505429 0.011800 udp 10.0.2.22 62797 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 15:39:35.517627 0.000000 udp 10.0.2.22 62798 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 15:43:31.487430 3.001726 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 15:43:38.625599 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:43:46.563086 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:44:02.510200 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:44:34.525173 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:50:40.534487 3.001343 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 15:50:47.541888 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:50:55.543205 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:51:11.546348 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:51:43.552207 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:54:35.509787 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 15:54:35.509916 0.010441 udp 10.0.2.22 62799 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 15:54:35.520718 0.000000 udp 10.0.2.22 62800 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 15:57:47.557781 3.002425 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 15:57:54.565803 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:58:02.567136 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:58:18.570378 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 15:58:50.576471 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:04:54.583016 3.000809 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 16:05:01.589964 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:05:09.591167 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:05:25.594489 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:05:57.600146 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:09:35.513791 0.100530 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 16:09:35.614484 0.022367 udp 10.0.2.22 62801 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 16:09:35.637239 0.000000 udp 10.0.2.22 62802 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 16:24:05.607707 3.011370 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 16:24:12.624417 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:24:20.626024 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:24:36.629163 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:25:08.634857 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:28:35.512752 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 16:28:35.512875 0.010849 udp 10.0.2.22 62803 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 16:28:35.524100 0.000000 udp 10.0.2.22 62804 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 16:31:12.641840 3.000645 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 16:31:19.652478 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:31:27.649918 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:31:43.653302 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:32:15.660137 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:38:19.664903 3.002398 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 16:38:26.823077 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:38:34.758999 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:38:50.687196 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:39:22.693206 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:39:35.511745 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 16:39:35.511902 0.022696 udp 10.0.2.22 62805 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 16:39:35.534998 0.000000 udp 10.0.2.22 62806 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 16:45:32.707483 3.002231 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 16:45:39.715130 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:45:47.716584 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:46:03.719905 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:46:35.726561 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:52:39.732595 3.001164 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 16:52:46.738975 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:52:54.740699 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:53:10.743934 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:53:42.750045 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 16:54:35.505271 0.000115 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 16:54:35.505493 0.012164 udp 10.0.2.22 62807 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 16:54:35.518076 0.000000 udp 10.0.2.22 62808 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 16:59:46.756301 3.147592 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 16:59:53.878694 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:00:01.811477 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:00:17.777811 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:00:49.783654 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:06:53.789713 3.001670 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 17:07:00.797041 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:07:08.798549 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:07:24.801777 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:07:56.807878 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:09:35.509547 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 17:09:35.509649 0.010639 udp 10.0.2.22 62809 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 17:09:35.520691 0.000000 udp 10.0.2.22 62810 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 17:25:06.822255 3.000538 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 17:25:13.828621 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:25:21.830516 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:25:37.836047 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:26:09.839694 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:28:35.508961 0.000123 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 17:28:35.509187 0.010256 udp 10.0.2.22 62811 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 17:28:35.519832 0.000000 udp 10.0.2.22 62812 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 17:32:13.845060 3.001581 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 17:32:20.852512 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:32:28.857703 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:32:44.856942 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:33:16.863224 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:39:20.870529 3.000495 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 17:39:27.875976 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:39:35.508173 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 17:39:35.508316 0.011802 udp 10.0.2.22 62813 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 17:39:35.520526 0.000000 udp 10.0.2.22 62814 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 17:39:35.878252 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:39:51.881209 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:40:23.887137 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:46:27.893732 3.000578 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 17:46:34.900555 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:46:42.930539 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:46:58.915206 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:47:31.148973 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:53:34.937799 3.001217 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 17:53:41.944548 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:53:49.945857 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:54:05.948972 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 17:54:35.511772 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 17:54:35.511884 0.013258 udp 10.0.2.22 62815 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 17:54:35.525666 0.000000 udp 10.0.2.22 62816 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 17:54:37.954859 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:00:41.961191 3.001656 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 18:00:48.968596 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:00:56.969973 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:01:12.972827 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:01:44.979043 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:07:48.985107 3.001536 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 18:07:55.992396 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:08:03.993407 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:08:19.997059 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:08:52.003300 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:09:35.505482 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 18:09:35.505726 0.011890 udp 10.0.2.22 62817 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 18:09:35.518082 0.000000 udp 10.0.2.22 62818 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 18:25:35.018014 3.001361 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 18:25:42.025028 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:25:50.026693 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:26:06.029681 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:26:38.035233 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:28:35.505674 0.000103 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 18:28:35.505867 0.010241 udp 10.0.2.22 62819 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 18:28:35.516509 0.000000 udp 10.0.2.22 62820 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 18:32:42.043497 2.999875 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 18:32:49.049259 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:32:57.053690 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:33:13.056094 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:33:45.059800 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:39:35.513764 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 18:39:35.513867 0.010472 udp 10.0.2.22 62821 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 18:39:35.524685 0.000000 udp 10.0.2.22 62822 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 18:39:49.068440 2.998795 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 18:39:56.073348 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:40:04.074735 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:40:20.077646 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:40:52.083765 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:46:56.090236 3.002069 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 18:47:03.097184 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:47:11.098524 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:47:27.102506 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:47:59.108214 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:54:04.116261 3.000362 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 18:54:11.122363 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:54:19.124156 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:54:35.127149 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 18:54:35.507673 0.000110 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 18:54:35.507880 0.011734 udp 10.0.2.22 62823 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 18:54:35.519983 0.000000 udp 10.0.2.22 62824 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 18:55:07.135004 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:01:11.140642 3.000055 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 19:01:18.149086 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:01:26.148090 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:01:42.151162 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:02:14.157013 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:08:18.163924 3.000957 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 19:08:25.170639 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:08:33.171898 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:08:49.185215 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:09:21.190887 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:09:35.511808 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 19:09:35.511955 0.011532 udp 10.0.2.22 62825 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 19:09:35.523886 0.000000 udp 10.0.2.22 62826 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 19:15:25.196606 3.002228 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 19:15:32.204537 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:15:40.205918 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:15:56.209028 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:16:28.215107 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:22:32.230753 3.001948 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 19:22:39.238512 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:22:47.240024 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:23:03.242986 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:23:35.249130 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:28:35.510772 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 19:28:35.510889 0.010689 udp 10.0.2.22 62827 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 19:28:35.522018 0.000000 udp 10.0.2.22 62828 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 19:29:39.255177 3.001170 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 19:29:46.262254 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:29:54.263430 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:30:10.266987 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:30:42.273005 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:36:46.279385 3.001297 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 19:36:53.286902 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:37:01.288177 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:37:17.290923 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:37:49.296817 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:39:35.509880 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 19:39:35.509999 0.010275 udp 10.0.2.22 62829 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 19:39:35.520697 0.000000 udp 10.0.2.22 62830 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 19:43:53.303942 3.000459 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 19:44:00.310819 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:44:08.312513 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:44:24.314705 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:44:56.320939 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:51:08.329443 3.000665 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 19:51:15.336004 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:51:23.337312 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:51:39.341015 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:52:11.346258 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:54:35.503483 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 19:54:35.503659 0.022737 udp 10.0.2.22 62831 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 19:54:35.526799 0.000000 udp 10.0.2.22 62832 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 19:58:15.353685 3.000484 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 19:58:22.359780 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:58:30.361946 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:58:46.364202 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 19:59:18.370444 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:05:22.376672 3.001345 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 20:05:29.383434 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:05:37.385162 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:05:53.388220 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:06:25.393948 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:09:35.508052 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 20:09:35.508177 0.012867 udp 10.0.2.22 62833 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 20:09:35.521485 0.000000 udp 10.0.2.22 62834 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 20:24:23.407528 3.000917 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 20:24:30.414300 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:24:38.415770 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:24:54.418987 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:25:26.424599 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:28:35.507101 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 20:28:35.507223 0.023769 udp 10.0.2.22 62835 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 20:28:35.531415 0.000000 udp 10.0.2.22 62836 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 20:31:30.430327 3.002189 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 20:31:37.438491 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:31:45.439961 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:32:01.442679 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:32:33.448815 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:38:37.456568 2.999709 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 20:38:44.462214 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:38:52.465742 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:39:08.466771 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:39:35.505565 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 20:39:35.505672 0.013559 udp 10.0.2.22 62837 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 20:39:35.519609 0.000000 udp 10.0.2.22 62838 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 20:39:40.472571 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:45:44.479450 3.000963 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 20:45:51.485787 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:45:59.487833 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:46:15.490649 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:46:47.497066 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:52:51.503049 3.201558 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 20:52:58.673602 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:53:06.599220 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:53:22.524678 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:53:54.530049 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 20:54:35.509904 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 20:54:35.510031 0.011393 udp 10.0.2.22 62839 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 20:54:35.521861 0.000000 udp 10.0.2.22 62840 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 20:59:58.536373 3.002127 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 21:00:05.543684 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:00:13.545422 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:00:29.548556 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:01:01.554720 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:07:05.561822 3.000396 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 21:07:12.568079 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:07:20.569388 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:07:36.572367 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:08:08.578535 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:09:35.503351 0.000142 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 21:09:35.503591 0.012445 udp 10.0.2.22 62841 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 21:09:35.516376 0.000000 udp 10.0.2.22 62842 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 21:25:15.587191 3.002146 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 21:25:22.595310 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:25:30.596784 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:25:46.599163 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:26:18.605581 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:28:35.502735 0.000171 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 21:28:35.503040 0.014376 udp 10.0.2.22 62843 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 21:28:35.517962 0.000000 udp 10.0.2.22 62844 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 21:32:22.612267 3.041985 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 21:32:29.638647 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:32:37.630712 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:32:53.634053 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:33:25.639793 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:39:29.646797 3.000770 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 21:39:35.511446 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 21:39:35.511638 0.011377 udp 10.0.2.22 62845 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 21:39:35.523348 0.000000 udp 10.0.2.22 62846 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 21:39:36.653194 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:39:44.654672 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:40:00.657878 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:40:32.663204 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:46:36.670628 3.000956 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 21:46:43.677083 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:46:51.678913 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:47:07.681733 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:47:39.687910 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:53:43.693318 3.002285 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 21:53:50.700534 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:53:58.702676 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:54:14.705645 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 21:54:35.505274 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 21:54:35.505396 0.022089 udp 10.0.2.22 62847 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 21:54:35.527893 0.000000 udp 10.0.2.22 62848 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 21:54:46.711939 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:00:50.718306 3.001351 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 22:00:57.725052 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:01:05.726554 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:01:21.729729 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:01:53.736003 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:07:57.742340 3.000869 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 22:08:04.749293 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:08:12.750751 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:08:28.753648 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:09:00.759848 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:09:35.509699 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 22:09:35.509864 0.025778 udp 10.0.2.22 62849 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 22:09:35.536063 0.000000 udp 10.0.2.22 62850 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 22:15:04.766916 3.000431 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 22:15:11.772832 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:15:19.774389 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:15:35.777866 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:16:07.783675 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:22:11.790230 3.001033 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 22:22:18.797065 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:22:26.798654 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:22:42.802033 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:23:14.807693 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:28:35.508591 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 22:28:35.508698 0.010325 udp 10.0.2.22 62851 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 22:28:35.519410 0.000000 udp 10.0.2.22 62852 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 22:29:18.813286 3.001849 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 22:29:25.820554 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:29:33.822597 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:29:49.825217 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:30:21.831549 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:36:25.837908 3.001206 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 22:36:32.844975 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:36:40.846507 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:36:56.849516 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:37:28.855257 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:39:35.507932 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 22:39:35.508044 0.011510 udp 10.0.2.22 62853 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 22:39:35.520007 0.000000 udp 10.0.2.22 62854 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 22:43:32.861908 3.077666 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 22:43:39.916813 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:43:47.880496 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:44:03.883446 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:44:35.889584 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:50:40.898072 3.000478 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 22:50:47.904180 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:50:55.905329 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:51:11.908466 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:51:43.914802 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:54:35.501928 0.000117 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 22:54:35.502138 0.016597 udp 10.0.2.22 62855 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 22:54:35.519102 0.000000 udp 10.0.2.22 62856 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 22:57:47.922767 2.999776 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 22:57:54.928250 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:58:02.930014 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:58:18.932794 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 22:58:50.939664 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:04:54.944858 3.001225 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 23:05:01.952341 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:05:09.955785 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:05:25.956698 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:05:57.962791 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:09:35.505463 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 23:09:35.505566 0.023638 udp 10.0.2.22 62857 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 23:09:35.529625 0.000000 udp 10.0.2.22 62858 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 23:24:06.971860 3.001032 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 23:24:13.978633 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:24:21.979974 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:24:37.983667 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:25:09.989504 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:28:35.504717 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 23:28:35.504888 0.012353 udp 10.0.2.22 62859 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 23:28:35.517624 0.000000 udp 10.0.2.22 62860 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 23:31:13.995775 3.001075 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 23:31:21.002564 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:31:29.004571 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:31:45.007100 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:32:17.012936 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:38:21.019018 3.001767 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 23:38:28.026562 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:38:36.028554 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:38:52.030946 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:39:24.037067 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:39:35.503796 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 23:39:35.503956 0.013435 udp 10.0.2.22 62861 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 23:39:35.517747 0.000000 udp 10.0.2.22 62862 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 23:45:33.153246 2.998872 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 23:45:40.157799 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:45:48.160084 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:46:04.165669 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:46:36.168425 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:52:40.178430 3.511457 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 23:52:47.652302 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:52:55.562626 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:53:11.375732 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:53:43.202585 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/15 23:54:35.544712 0.000103 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/15 23:54:35.544905 0.010269 udp 10.0.2.22 62863 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/15 23:54:35.555596 0.000000 udp 10.0.2.22 62864 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/15 23:59:47.209427 3.002860 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/15 23:59:54.215881 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:00:02.217831 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:00:18.280276 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:00:50.251879 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:06:54.242804 3.001432 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 00:07:01.250001 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:07:09.251035 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:07:25.257790 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:07:57.261854 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:09:35.531545 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 00:09:35.531724 0.010295 udp 10.0.2.22 62865 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 00:09:35.542385 0.000000 udp 10.0.2.22 62866 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 00:25:07.273904 3.011588 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 00:25:14.291331 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:25:22.292864 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:25:38.295959 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:26:10.302007 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:28:35.530975 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 00:28:35.531102 0.019600 udp 10.0.2.22 62867 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 00:28:35.551118 0.000000 udp 10.0.2.22 62868 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 00:32:14.307971 3.230587 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 00:32:21.503764 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:32:29.432401 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:32:45.329861 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:33:17.335938 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:39:21.343154 3.000521 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 00:39:28.349573 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:39:35.539754 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 00:39:35.539952 0.013822 udp 10.0.2.22 62869 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 00:39:35.554240 0.000000 udp 10.0.2.22 62870 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 00:39:36.350918 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:39:52.353919 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:40:24.360181 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:46:28.365788 3.001935 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 00:46:35.373275 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:46:43.374724 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:46:59.377826 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:47:31.385246 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:53:35.390805 3.000780 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 00:53:42.397438 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:53:50.398601 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:54:06.403140 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 00:54:35.533975 0.000222 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 00:54:35.534373 0.012011 udp 10.0.2.22 62871 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 00:54:35.546853 0.000000 udp 10.0.2.22 62872 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 00:54:38.407794 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:00:42.414258 3.001225 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 01:00:49.421228 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:00:57.496738 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:01:13.436207 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:01:45.443185 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:07:49.448449 3.000679 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 01:07:56.455203 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:08:04.456685 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:08:20.459557 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:08:52.466715 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:09:35.538001 0.000193 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 01:09:35.538309 0.023353 udp 10.0.2.22 62873 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 01:09:35.562102 0.000000 udp 10.0.2.22 62874 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 01:25:35.721864 3.000344 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 01:25:42.729838 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:25:50.729643 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:26:06.732627 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:26:38.739040 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:28:35.777558 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 01:28:35.777664 0.010822 udp 10.0.2.22 62875 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 01:28:35.788901 0.000000 udp 10.0.2.22 62876 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 01:32:42.745019 3.211243 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 01:32:49.928215 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:32:57.864582 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:33:13.767860 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:33:45.772641 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:39:35.775724 0.000154 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 01:39:35.775977 0.010089 udp 10.0.2.22 62877 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 01:39:35.786424 0.000000 udp 10.0.2.22 62878 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 01:39:49.778292 3.001993 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 01:39:56.785850 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:40:04.787750 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:40:20.790717 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:40:52.806679 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:46:56.813207 3.001041 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 01:47:03.820200 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:47:11.821805 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:47:27.824777 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:47:59.830748 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:54:03.837520 3.210356 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 01:54:11.014823 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:54:18.944718 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:54:34.858773 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 01:54:35.780185 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 01:54:35.780365 0.027105 udp 10.0.2.22 62879 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 01:54:35.807895 0.000000 udp 10.0.2.22 62880 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 01:55:06.864672 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:01:10.871697 3.000792 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 02:01:17.878055 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:01:25.879829 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:01:41.882480 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:02:13.898683 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:08:17.905288 3.000987 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 02:08:24.912153 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:08:32.914515 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:08:48.916130 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:09:20.924172 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:09:35.774297 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 02:09:35.774418 0.026643 udp 10.0.2.22 62881 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 02:09:35.801669 0.000000 udp 10.0.2.22 62882 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 02:15:24.928254 3.002208 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 02:15:31.936303 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:15:39.937755 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:15:55.940721 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:16:27.946688 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:22:31.953391 3.000867 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 02:22:38.959873 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:22:46.961500 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:23:02.964392 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:23:34.970637 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:28:35.773012 0.000162 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 02:28:35.773273 0.023709 udp 10.0.2.22 62883 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 02:28:35.797395 0.000000 udp 10.0.2.22 62884 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 02:29:38.977066 3.001400 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 02:29:45.983610 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:29:53.985169 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:30:09.988492 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:30:41.994595 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:36:46.000651 3.024043 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 02:36:53.017897 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:37:01.019382 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:37:17.022658 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:37:49.028344 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:39:35.772149 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 02:39:35.772260 0.010146 udp 10.0.2.22 62885 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 02:39:35.782779 0.000000 udp 10.0.2.22 62886 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 02:43:53.035720 3.000448 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 02:44:00.041960 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:44:08.043736 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:44:24.046314 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:44:56.052669 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:51:07.058536 3.001748 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 02:51:14.066087 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:51:22.067928 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:51:38.074160 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:52:10.086601 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:54:35.776188 0.000152 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 02:54:35.776444 0.022980 udp 10.0.2.22 62887 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 02:54:35.799852 0.000000 udp 10.0.2.22 62888 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 02:58:14.093089 3.001032 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 02:58:21.099994 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:58:29.102182 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:58:45.104293 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 02:59:17.110461 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:05:21.284076 3.004318 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 03:05:28.294261 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:05:36.295898 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:05:52.298584 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:06:24.305494 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:09:35.772224 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 03:09:35.772367 0.013563 udp 10.0.2.22 62889 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 03:09:35.786368 0.000000 udp 10.0.2.22 62890 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 03:24:22.317815 3.001142 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 03:24:29.324568 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:24:37.326197 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:24:53.329010 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:25:25.335216 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:28:35.779133 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 03:28:35.779352 0.015804 udp 10.0.2.22 62891 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 03:28:35.795548 0.000000 udp 10.0.2.22 62892 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 03:31:29.347733 2.996096 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 03:31:36.349886 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:31:44.350016 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:32:00.354002 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:32:32.359179 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:38:36.370700 3.093483 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 03:38:43.443033 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:38:51.384055 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:39:07.387750 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:39:35.778055 0.000092 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 03:39:35.778253 0.010281 udp 10.0.2.22 62893 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 03:39:35.788972 0.000000 udp 10.0.2.22 62894 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 03:39:39.393180 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:45:43.400066 3.002375 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 03:45:50.406307 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:45:58.410132 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:46:14.411322 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:46:46.417090 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:52:50.423966 3.000990 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 03:52:57.431789 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:53:05.433973 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:53:21.435089 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:53:53.440828 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 03:54:35.772073 0.000160 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 03:54:35.772338 0.012148 udp 10.0.2.22 62895 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 03:54:35.784905 0.000000 udp 10.0.2.22 62896 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 03:59:57.450485 2.998499 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 04:00:04.454589 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:00:12.455589 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:00:28.459082 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:01:00.464801 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:07:04.471894 3.001308 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 04:07:11.478380 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:07:19.505511 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:07:35.492846 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:08:07.498774 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:09:35.776873 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 04:09:35.776992 0.012661 udp 10.0.2.22 62897 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 04:09:35.790199 0.000000 udp 10.0.2.22 62898 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 04:25:10.512326 3.002090 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 04:25:17.520105 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:25:25.521709 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:25:41.524484 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:26:13.531841 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:28:35.775165 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 04:28:35.775273 0.013628 udp 10.0.2.22 62899 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 04:28:35.789465 0.000000 udp 10.0.2.22 62900 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 04:32:17.536971 3.001228 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 04:32:24.543880 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:32:32.546886 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:32:48.548253 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:33:20.554377 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:39:24.561527 3.000363 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 04:39:31.568104 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:39:35.773508 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 04:39:35.773705 0.022120 udp 10.0.2.22 62901 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 04:39:35.796180 0.000000 udp 10.0.2.22 62902 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 04:39:39.569786 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:39:55.572294 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:40:27.580898 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:46:31.583927 3.002244 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 04:46:38.591860 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:46:46.593096 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:47:02.596372 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:47:34.605107 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:53:38.610357 3.001905 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 04:53:45.616083 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:53:53.617596 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:54:09.620510 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 04:54:35.795589 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 04:54:35.795696 0.024978 udp 10.0.2.22 62903 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 04:54:35.821077 0.000000 udp 10.0.2.22 62904 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 04:54:41.646640 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:00:45.653774 3.000229 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 05:00:52.660343 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:01:00.661589 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:01:16.665160 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:01:48.670674 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:07:52.676107 3.001778 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 05:07:59.683775 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:08:07.685025 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:08:23.688342 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:08:55.693709 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:09:35.773837 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 05:09:35.773965 0.010312 udp 10.0.2.22 62905 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 05:09:35.784723 0.000000 udp 10.0.2.22 62906 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 05:25:35.705034 3.011453 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 05:25:42.722510 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:25:50.723079 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:26:06.726488 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:26:38.732753 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:28:35.771050 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 05:28:35.771191 0.013407 udp 10.0.2.22 62907 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 05:28:35.785063 0.000000 udp 10.0.2.22 62908 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 05:32:42.740960 3.001461 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 05:32:49.745860 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:32:57.747803 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:33:13.750794 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:33:45.833201 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:39:35.770031 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 05:39:35.770159 0.013147 udp 10.0.2.22 62909 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 05:39:35.783695 0.000000 udp 10.0.2.22 62910 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 05:39:49.773122 3.000686 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 05:39:56.780188 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:40:04.784845 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:40:20.784535 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:40:52.791051 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:46:56.797112 3.001569 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 05:47:03.803618 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:47:11.805170 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:47:27.808345 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:47:59.816606 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:54:03.822307 3.001519 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 05:54:10.828199 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:54:18.829670 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:54:34.832870 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 05:54:35.774365 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 05:54:35.774476 0.011599 udp 10.0.2.22 62911 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 05:54:35.786505 0.000000 udp 10.0.2.22 62912 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 05:55:06.841028 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:01:10.845113 3.001053 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 06:01:17.852191 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:01:25.854036 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:01:41.856379 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:02:13.862665 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:08:17.869606 3.000605 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 06:08:24.875859 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:08:32.877559 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:08:48.880501 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:09:20.886848 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:09:35.767763 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 06:09:35.767862 0.013588 udp 10.0.2.22 62913 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 06:09:35.781816 0.000000 udp 10.0.2.22 62914 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 06:15:24.899293 2.994760 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 06:15:31.900008 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:15:39.902402 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:15:55.904522 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:16:27.910413 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:22:31.916897 3.002955 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 06:22:38.923774 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:22:46.925772 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:23:02.928466 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:23:34.934764 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:28:35.777215 0.000206 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 06:28:35.777482 0.011622 udp 10.0.2.22 62915 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 06:28:35.789828 0.000000 udp 10.0.2.22 62916 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 06:29:38.941027 3.001093 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 06:29:45.952570 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:29:53.949630 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:30:09.952005 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:30:41.958518 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:36:45.966089 3.000067 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 06:36:52.971984 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:37:00.973590 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:37:16.976487 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:37:48.982431 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:39:35.782121 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 06:39:35.782298 0.013270 udp 10.0.2.22 62917 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 06:39:35.795978 0.000000 udp 10.0.2.22 62918 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 06:43:52.989247 3.000722 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 06:44:00.185797 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:44:08.120813 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:44:24.010193 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:44:56.016811 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:51:00.023501 3.000541 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 06:51:07.030097 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:51:15.031728 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:51:31.034261 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:52:03.982564 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:54:35.770094 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 06:54:35.770215 0.011016 udp 10.0.2.22 62919 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 06:54:35.781601 0.000000 udp 10.0.2.22 62920 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 06:58:07.056946 3.001190 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 06:58:14.063938 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:58:22.065481 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:58:38.068244 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 06:59:10.074383 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:05:14.081539 3.000937 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 07:05:21.088342 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:05:29.090292 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:05:45.092130 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:06:17.098322 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:09:35.775763 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 07:09:35.775886 0.012456 udp 10.0.2.22 62921 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 07:09:35.788809 0.000000 udp 10.0.2.22 62922 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 07:24:17.114908 3.000245 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 07:24:24.121499 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:24:32.122669 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:24:48.125166 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:25:20.131562 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:28:35.773290 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 07:28:35.773406 0.022126 udp 10.0.2.22 62923 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 07:28:35.795893 0.000000 udp 10.0.2.22 62924 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 07:31:24.138225 3.001206 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 07:31:31.145010 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:31:39.146803 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:31:55.149761 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:32:27.155146 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:38:31.164621 2.998696 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 07:38:38.168962 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:38:46.172126 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:39:02.173832 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:39:34.182338 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:39:35.771776 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 07:39:35.771879 0.011124 udp 10.0.2.22 62925 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 07:39:35.783379 0.000000 udp 10.0.2.22 62926 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 07:45:38.187635 3.000470 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 07:45:45.194112 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:45:53.194515 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:46:09.197956 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:46:41.203711 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:52:45.210369 3.006780 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 07:52:52.216962 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:53:00.218804 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:53:16.221951 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:53:48.227987 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 07:54:35.781581 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 07:54:35.781701 0.022346 udp 10.0.2.22 62927 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 07:54:35.804474 0.000000 udp 10.0.2.22 62928 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 07:59:52.235279 2.999561 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 07:59:59.240966 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:00:07.244066 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:00:23.245209 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:00:55.251889 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:06:59.258512 3.000779 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 08:07:06.265451 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:07:14.267077 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:07:30.273299 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:08:02.276977 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:09:35.770235 0.000190 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 08:09:35.770530 0.014211 udp 10.0.2.22 62929 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 08:09:35.785172 0.000000 udp 10.0.2.22 62930 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 08:25:10.286403 3.001412 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 08:25:17.293861 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:25:25.295269 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:25:41.298362 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:26:13.304356 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:28:35.770269 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 08:28:35.770394 0.011642 udp 10.0.2.22 62931 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 08:28:35.782464 0.000000 udp 10.0.2.22 62932 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 08:32:17.310704 3.003314 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 08:32:24.317917 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:32:32.318966 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:32:48.322282 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:33:20.328238 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:39:24.335295 2.999918 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 08:39:31.342367 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:39:35.768222 0.000203 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 08:39:35.768639 0.011354 udp 10.0.2.22 62933 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 08:39:35.780513 0.000000 udp 10.0.2.22 62934 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 08:39:39.343049 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:39:55.346028 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:40:27.358534 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:46:31.358571 3.123889 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 08:46:38.462956 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:46:46.403858 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:47:02.380238 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:47:34.388332 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:53:38.392155 3.001595 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 08:53:45.399657 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:53:53.401710 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:54:09.404052 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 08:54:35.772139 0.000192 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 08:54:35.772446 0.021952 udp 10.0.2.22 62935 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 08:54:35.794752 0.000000 udp 10.0.2.22 62936 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 08:54:41.410339 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:00:45.417204 3.000628 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 09:00:52.423544 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:01:00.425071 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:01:16.427756 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:01:48.434055 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:07:52.440391 3.167350 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 09:07:59.570175 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:08:07.512049 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:08:23.461985 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:08:55.469767 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:09:35.776117 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 09:09:35.776247 0.022333 udp 10.0.2.22 62937 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 09:09:35.798934 0.000000 udp 10.0.2.22 62938 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 09:25:37.481936 3.000743 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 09:25:44.488822 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:25:52.490142 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:26:08.492927 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:26:40.499127 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:28:35.775088 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 09:28:35.775283 0.012213 udp 10.0.2.22 62939 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 09:28:35.787856 0.000000 udp 10.0.2.22 62940 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 09:32:44.505755 3.001173 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 09:32:51.513140 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:32:59.513840 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:33:15.517407 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:33:47.525440 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:39:35.773919 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 09:39:35.774143 0.013898 udp 10.0.2.22 62941 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 09:39:35.788400 0.000000 udp 10.0.2.22 62942 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 09:39:51.530292 3.000454 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 09:39:58.536667 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:40:06.538006 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:40:22.541095 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:40:54.548067 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:46:58.553254 3.001428 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 09:47:05.560591 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:47:13.568206 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:47:29.566831 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:48:01.570943 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:54:05.577597 3.001240 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 09:54:12.584606 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:54:20.585947 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:54:35.772409 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 09:54:35.772536 0.029064 udp 10.0.2.22 62943 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 09:54:35.802104 0.000000 udp 10.0.2.22 62944 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 09:54:36.594381 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 09:55:08.595106 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:01:12.602301 3.000689 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 10:01:19.608689 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:01:27.609935 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:01:43.613010 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:02:15.619356 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:08:19.625022 3.001384 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 10:08:26.632313 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:08:34.634155 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:08:50.637166 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:09:22.643003 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:09:35.771485 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 10:09:35.771696 0.019246 udp 10.0.2.22 62945 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 10:09:35.791349 0.000000 udp 10.0.2.22 62946 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 10:15:26.648931 3.001727 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 10:15:33.656531 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:15:41.658439 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:15:57.661273 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:16:29.667410 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:22:33.673246 3.001374 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 10:22:40.680427 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:22:48.681338 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:23:04.685003 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:23:36.690946 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:28:35.770898 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 10:28:35.771012 0.012013 udp 10.0.2.22 62947 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 10:28:35.783371 0.000000 udp 10.0.2.22 62948 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 10:29:40.696951 3.001868 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 10:29:47.703969 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:29:55.705303 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:30:11.708751 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:30:43.714969 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:36:47.721973 3.000729 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 10:36:54.728391 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:37:02.730060 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:37:18.733028 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:37:50.739061 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:39:35.770470 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 10:39:35.770603 0.013023 udp 10.0.2.22 62949 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 10:39:35.784075 0.000000 udp 10.0.2.22 62950 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 10:43:54.744723 3.005108 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 10:44:01.753868 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:44:09.753848 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:44:25.756836 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:44:57.762790 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:51:01.769548 3.001121 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 10:51:08.778970 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:51:16.778944 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:51:32.780988 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:52:04.786941 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:54:35.773503 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 10:54:35.773613 0.011472 udp 10.0.2.22 62951 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 10:54:35.785543 0.000000 udp 10.0.2.22 62952 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 10:58:08.793180 3.000780 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 10:58:15.800115 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:58:23.801982 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:58:39.804186 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 10:59:11.810869 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:05:15.818400 3.000181 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 11:05:22.823985 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:05:30.825584 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:05:46.828936 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:06:18.834801 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:09:35.768346 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 11:09:35.768461 0.015133 udp 10.0.2.22 62953 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 11:09:35.783976 0.000000 udp 10.0.2.22 62954 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 11:24:16.847632 3.001409 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 11:24:23.854796 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:24:31.856161 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:24:47.859364 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:25:19.865572 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:28:35.767162 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 11:28:35.767264 0.009947 udp 10.0.2.22 62955 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 11:28:35.777776 0.000000 udp 10.0.2.22 62956 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 11:31:23.871726 3.000799 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 11:31:30.878614 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:31:38.880466 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:31:54.882925 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:32:26.889412 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:38:30.896318 3.000707 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 11:38:37.902624 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:38:45.904455 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:39:01.907040 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:39:33.913074 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:39:35.765641 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 11:39:35.765737 0.012062 udp 10.0.2.22 62957 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 11:39:35.778161 0.000000 udp 10.0.2.22 62958 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 11:45:37.920049 3.000682 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 11:45:45.054718 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:45:52.998479 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:46:08.941285 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:46:40.947201 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:52:44.953712 3.001361 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 11:52:51.960696 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:52:59.961899 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:53:15.965067 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:53:47.971332 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 11:54:35.770266 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 11:54:35.770386 0.012151 udp 10.0.2.22 62959 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 11:54:35.782942 0.000000 udp 10.0.2.22 62960 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 11:59:51.978166 3.000979 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 11:59:58.984336 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:00:07.477005 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:00:23.290111 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:00:55.005033 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:06:59.011280 3.001502 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 12:07:06.018635 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:07:14.020257 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:07:30.023140 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:08:02.028946 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:09:35.774113 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 12:09:35.774215 0.023034 udp 10.0.2.22 62961 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 12:09:35.797626 0.000000 udp 10.0.2.22 62962 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 12:25:09.039537 3.000602 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 12:25:16.045227 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:25:24.047402 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:25:40.050524 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:26:12.056332 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:28:35.772515 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 12:28:35.772631 0.011998 udp 10.0.2.22 62963 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 12:28:35.784968 0.000000 udp 10.0.2.22 62964 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 12:32:16.063791 3.000885 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 12:32:23.069913 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:32:31.071921 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:32:47.074398 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:33:19.080341 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:39:23.087736 3.109100 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 12:39:30.171584 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:39:35.866014 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 12:39:35.866196 0.021318 udp 10.0.2.22 62965 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 12:39:35.887917 0.000000 udp 10.0.2.22 62966 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 12:39:38.194341 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:39:54.118418 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:40:26.133928 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:46:30.141290 3.000735 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 12:46:37.147967 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:46:45.149093 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:47:01.152321 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:47:33.158168 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:53:37.164067 3.002079 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 12:53:44.171949 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:53:52.178009 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:54:08.176134 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 12:54:36.050446 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 12:54:36.050567 0.010677 udp 10.0.2.22 62967 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 12:54:36.061662 0.000000 udp 10.0.2.22 62968 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 12:54:40.434645 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:00:44.198923 3.000642 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 13:00:51.206269 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:00:59.207205 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:01:15.213865 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:01:47.215675 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:07:51.223053 3.000773 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 13:07:58.229834 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:08:06.231819 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:08:22.234305 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:08:54.240336 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:09:35.770362 0.000121 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 13:09:35.770589 0.011381 udp 10.0.2.22 62969 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 13:09:35.782378 0.000000 udp 10.0.2.22 62970 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 13:25:35.252414 3.001453 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 13:25:42.259738 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:25:50.261500 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:26:06.264503 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:26:38.270939 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:28:35.769212 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 13:28:35.769339 0.010757 udp 10.0.2.22 62971 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 13:28:35.780434 0.000000 udp 10.0.2.22 62972 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 13:32:42.276113 3.001718 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 13:32:49.283210 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:32:57.284862 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:33:13.288301 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:33:45.294074 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:39:35.767949 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 13:39:35.768124 0.009759 udp 10.0.2.22 62973 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 13:39:35.778233 0.000000 udp 10.0.2.22 62974 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 13:39:49.300243 3.001950 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 13:39:56.307307 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:40:04.309921 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:40:20.312055 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:40:52.318228 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:46:56.324722 3.002098 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 13:47:03.332032 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:47:11.333768 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:47:27.336064 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:47:59.342018 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:54:03.348801 3.001062 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 13:54:10.355107 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:54:18.356951 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:54:34.360138 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 13:54:35.773735 0.000165 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 13:54:35.774006 0.012211 udp 10.0.2.22 62975 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 13:54:35.786622 0.000000 udp 10.0.2.22 62976 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 13:55:06.366132 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:01:10.372278 3.001279 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 14:01:17.379920 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:01:25.380704 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:01:41.383911 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:02:13.389875 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:08:17.397183 3.000475 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 14:08:24.403656 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:08:32.404815 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:08:48.407902 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:09:20.413923 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:09:35.766042 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 14:09:35.766158 0.010171 udp 10.0.2.22 62977 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 14:09:35.776717 0.000000 udp 10.0.2.22 62978 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 14:15:24.421634 3.001220 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 14:15:31.427338 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:15:39.428996 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:15:55.432029 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:16:27.437801 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:22:31.443401 3.002476 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 14:22:38.451865 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:22:46.452839 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:23:02.455838 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:23:34.461979 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:28:35.765040 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 14:28:35.765212 0.009934 udp 10.0.2.22 62979 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 14:28:35.775481 0.000000 udp 10.0.2.22 62980 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 14:29:38.511614 2.991176 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 14:29:45.485053 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:29:53.495602 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:30:09.479646 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:30:41.487997 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:36:45.492060 3.001417 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 14:36:52.499296 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:37:00.503346 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:37:16.503310 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:37:48.514604 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:39:35.763681 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 14:39:35.763869 0.010373 udp 10.0.2.22 62981 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 14:39:35.774582 0.000000 udp 10.0.2.22 62982 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 14:43:52.515344 3.001810 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 14:43:59.522777 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:44:07.524606 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:44:23.538059 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:44:55.543748 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:50:59.552231 2.999101 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 14:51:06.557033 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:51:14.558802 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:51:30.561627 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:52:02.567977 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:54:35.768113 0.000182 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 14:54:35.768419 0.011457 udp 10.0.2.22 62983 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 14:54:35.780651 0.000000 udp 10.0.2.22 62984 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 14:58:06.573954 3.001106 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 14:58:13.581581 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:58:21.582638 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:58:37.585580 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 14:59:09.591583 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:05:13.598231 3.001099 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 15:05:20.605016 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:05:28.606529 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:05:44.609448 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:06:16.615471 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:09:35.775012 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 15:09:35.775133 0.010980 udp 10.0.2.22 62985 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 15:09:35.786493 0.000000 udp 10.0.2.22 62986 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 15:24:18.623513 3.001578 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 15:24:25.631298 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:24:33.632915 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:24:49.635333 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:25:21.642008 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:28:35.771121 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 15:28:35.771234 0.011829 udp 10.0.2.22 62987 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 15:28:35.783455 0.000000 udp 10.0.2.22 62988 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 15:31:25.649061 3.000479 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 15:31:32.655103 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:31:40.657380 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:31:56.660345 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:32:28.666543 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:38:32.673297 3.000007 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 15:38:39.679678 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:38:47.680157 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:39:03.683978 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:39:35.689863 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:39:35.769995 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 15:39:35.770111 0.010300 udp 10.0.2.22 62989 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 15:39:35.780835 0.000000 udp 10.0.2.22 62990 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 15:45:39.698751 2.998970 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 15:45:46.703009 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:45:54.709203 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:46:10.708236 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:46:42.713817 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:52:46.722146 2.999557 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 15:52:53.727370 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:53:01.728998 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:53:17.731917 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:53:49.737861 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 15:54:35.764117 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 15:54:35.764232 0.011553 udp 10.0.2.22 62991 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 15:54:35.776194 0.000000 udp 10.0.2.22 62992 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 15:59:53.743276 3.123466 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 16:00:00.845099 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:00:08.780194 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:00:24.765862 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:00:56.771703 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:07:00.778629 3.000763 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 16:07:07.785135 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:07:15.786884 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:07:31.790456 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:08:03.795414 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:09:35.767999 0.000183 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 16:09:35.768287 0.011610 udp 10.0.2.22 62993 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 16:09:35.780334 0.000000 udp 10.0.2.22 62994 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 16:25:12.808655 3.000201 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 16:25:19.815325 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:25:27.816695 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:25:43.819717 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:26:15.825904 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:28:35.766971 0.000157 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 16:28:35.767236 0.010280 udp 10.0.2.22 62995 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 16:28:35.777885 0.000000 udp 10.0.2.22 62996 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 16:32:19.832576 3.001084 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 16:32:26.839202 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:32:34.841666 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:32:50.843817 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:33:22.849928 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:39:26.856689 3.001211 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 16:39:33.864311 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:39:35.766109 0.000114 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 16:39:35.766327 0.011523 udp 10.0.2.22 62997 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 16:39:35.778269 0.000000 udp 10.0.2.22 62998 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 16:39:41.864469 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:39:57.868252 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:40:30.070912 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:46:33.890536 3.001221 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 16:46:40.897181 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:46:48.898795 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:47:04.901935 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:47:36.907790 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:53:40.913639 3.001534 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 16:53:47.920962 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:53:55.922244 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:54:11.925955 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 16:54:35.769770 0.000297 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 16:54:35.770196 0.021470 udp 10.0.2.22 62999 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 16:54:35.792080 0.000000 udp 10.0.2.22 63000 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 16:54:43.931905 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:00:47.937604 3.001529 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 17:00:54.944467 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:01:02.946361 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:01:18.949364 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:01:50.955246 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:07:54.961541 3.001458 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 17:08:01.968909 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:08:09.970560 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:08:25.973715 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:08:57.979587 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:09:35.764077 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 17:09:35.764225 0.011483 udp 10.0.2.22 63001 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 17:09:35.776188 0.000000 udp 10.0.2.22 63002 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 17:15:01.985553 3.001636 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 17:15:08.992988 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:15:16.994414 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:15:32.997827 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:16:05.360040 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:22:09.020229 3.000842 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 17:22:16.027065 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:22:24.028309 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:22:40.031560 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:23:12.037348 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:28:35.763159 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 17:28:35.763269 0.010588 udp 10.0.2.22 63003 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 17:28:35.774230 0.000000 udp 10.0.2.22 63004 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 17:29:16.043937 3.001281 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 17:29:23.229191 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:29:31.193846 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:29:47.065454 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:30:19.072359 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:36:23.077839 3.136073 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 17:36:30.185975 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:36:38.127761 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:36:54.099383 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:37:26.105814 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:39:35.762242 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 17:39:35.762350 0.010184 udp 10.0.2.22 63005 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 17:39:35.772925 0.000000 udp 10.0.2.22 63006 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 17:43:30.112994 3.000125 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 17:43:37.119081 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:43:45.120609 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:44:01.123343 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:44:33.129666 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:50:37.138318 2.998845 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 17:50:44.143013 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:50:52.144580 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:51:08.147233 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:51:40.153239 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:54:35.765603 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 17:54:35.765758 0.011956 udp 10.0.2.22 63007 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 17:54:35.778123 0.000000 udp 10.0.2.22 63008 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 17:57:44.159961 3.001048 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 17:57:51.167747 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:57:59.168505 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:58:15.171304 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 17:58:47.187666 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:04:51.193059 3.002539 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 18:04:58.200960 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:05:06.202439 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:05:22.208544 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:05:54.211605 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:09:35.769996 0.000143 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 18:09:35.770256 0.023084 udp 10.0.2.22 63009 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 18:09:35.793718 0.000000 udp 10.0.2.22 63010 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 18:24:04.221855 3.000892 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 18:24:11.228524 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:24:19.240197 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:24:35.243138 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:25:07.249040 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:28:35.768927 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 18:28:35.769046 0.010623 udp 10.0.2.22 63011 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 18:28:35.780014 0.000000 udp 10.0.2.22 63012 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 18:31:11.265127 2.991912 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 18:31:18.269044 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:31:26.267436 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:31:42.268102 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:32:14.274898 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:38:18.280705 2.999985 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 18:38:25.287881 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:38:33.288226 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:38:49.302361 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:39:21.311886 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:39:35.768712 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 18:39:35.768849 0.011340 udp 10.0.2.22 63013 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 18:39:35.780656 0.000000 udp 10.0.2.22 63014 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 18:45:25.332356 3.001265 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 18:45:32.327594 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:45:40.325627 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:45:56.327510 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:46:28.331038 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:52:32.341305 2.997563 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 18:52:39.344438 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:52:47.346065 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:53:03.351699 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:53:35.362696 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:54:35.762143 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 18:54:35.762269 0.011933 udp 10.0.2.22 63015 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 18:54:35.774629 0.000000 udp 10.0.2.22 63016 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 18:59:39.361926 3.003764 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 18:59:46.371588 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 18:59:54.370083 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:00:10.373602 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:00:42.379039 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:06:46.385623 3.001254 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 19:06:53.392374 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:07:01.393978 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:07:17.396793 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:07:49.403009 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:09:35.765652 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 19:09:35.765826 0.012087 udp 10.0.2.22 63017 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 19:09:35.778289 0.000000 udp 10.0.2.22 63018 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 19:25:02.410749 3.001935 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 19:25:09.418239 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:25:17.419969 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:25:33.422822 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:26:05.428787 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:28:35.765063 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 19:28:35.765180 0.010915 udp 10.0.2.22 63019 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 19:28:35.776565 0.000000 udp 10.0.2.22 63020 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 19:32:09.435412 3.001136 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 19:32:16.442428 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:32:24.443811 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:32:40.447140 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:33:12.452876 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:39:16.458663 3.003218 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 19:39:23.466960 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:39:31.467860 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:39:35.764158 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 19:39:35.764269 0.012377 udp 10.0.2.22 63021 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 19:39:35.777064 0.000000 udp 10.0.2.22 63022 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 19:39:47.470808 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:40:19.476867 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:46:23.483605 3.000972 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 19:46:30.490039 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:46:38.491724 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:46:54.494692 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:47:26.500718 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:53:30.506594 3.001704 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 19:53:37.514159 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:53:45.515137 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:54:01.518640 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:54:33.524524 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 19:54:35.768124 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 19:54:35.768246 0.014707 udp 10.0.2.22 63023 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 19:54:35.783370 0.000000 udp 10.0.2.22 63024 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 20:00:37.530576 3.001596 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 20:00:44.538049 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:00:52.540111 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:01:08.542623 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:01:40.548700 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:07:44.554521 3.001837 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 20:07:51.562061 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:07:59.563086 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:08:15.566649 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:08:47.572485 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:09:35.762134 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 20:09:35.762249 0.011510 udp 10.0.2.22 63025 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 20:09:35.774145 0.000000 udp 10.0.2.22 63026 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 20:25:33.581074 3.001959 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 20:25:40.589195 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:25:48.590701 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:26:04.593755 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:26:36.599817 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:28:35.761051 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 20:28:35.761238 0.010330 udp 10.0.2.22 63027 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 20:28:35.771889 0.000000 udp 10.0.2.22 63028 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 20:32:40.606979 3.000128 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 20:32:47.612848 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:32:55.614655 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:33:11.617538 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:33:43.623879 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:39:35.760174 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 20:39:35.760289 0.010377 udp 10.0.2.22 63029 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 20:39:35.770983 0.000000 udp 10.0.2.22 63030 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 20:39:47.629765 3.001569 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 20:39:54.636911 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:40:02.638659 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:40:18.641758 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:40:50.647430 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:46:54.654675 3.000977 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 20:47:01.661473 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:47:09.662906 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:47:25.665323 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:47:57.671471 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:54:01.677593 3.002724 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 20:54:08.684853 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:54:16.686450 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:54:32.689464 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 20:54:35.763434 0.000116 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 20:54:35.763649 0.011343 udp 10.0.2.22 63031 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 20:54:35.775321 0.000000 udp 10.0.2.22 63032 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 20:55:04.695397 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:01:08.701117 3.014886 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 21:01:15.718882 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:01:23.720363 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:01:39.723684 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:02:11.729667 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:08:15.736262 3.000913 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 21:08:22.742877 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:08:30.744453 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:08:46.747445 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:09:18.753526 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:09:35.769180 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 21:09:35.769292 0.021636 udp 10.0.2.22 63033 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 21:09:35.791383 0.000000 udp 10.0.2.22 63034 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 21:15:22.759812 3.183176 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 21:15:29.912241 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:15:37.845011 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:15:53.781349 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:16:25.787427 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:22:29.794388 3.000839 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 21:22:36.800760 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:22:44.802525 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:23:00.805223 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:23:32.810806 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:28:35.766987 0.000093 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 21:28:35.767180 0.012914 udp 10.0.2.22 63035 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 21:28:35.780486 0.000000 udp 10.0.2.22 63036 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 21:29:36.817841 3.001139 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 21:29:43.824199 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:29:51.827762 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:30:07.829687 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:30:39.835262 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:36:43.841101 3.001958 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 21:36:50.848749 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:36:58.850510 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:37:14.853307 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:37:46.859636 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:39:35.765632 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 21:39:35.765790 0.010183 udp 10.0.2.22 63037 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 21:39:35.776351 0.000000 udp 10.0.2.22 63038 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 21:43:50.864929 3.002047 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 21:43:57.872788 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:44:05.874205 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:44:21.877264 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:44:53.883445 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:50:57.889268 3.001420 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 21:51:04.896697 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:51:12.898478 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:51:28.901190 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:52:01.313158 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:54:35.760170 0.000074 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 21:54:35.760303 0.030193 udp 10.0.2.22 63039 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 21:54:35.790889 0.000000 udp 10.0.2.22 63040 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 21:58:04.923913 3.000499 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 21:58:11.931589 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:58:19.931677 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:58:35.935199 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 21:59:07.941155 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:05:12.150018 2.999502 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 22:05:19.155328 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:05:27.244278 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:05:43.169503 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:06:15.175814 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:09:35.763646 0.000123 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 22:09:35.763908 0.012272 udp 10.0.2.22 63041 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 22:09:35.776562 0.000000 udp 10.0.2.22 63042 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 22:24:18.187457 3.000755 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 22:24:25.192554 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:24:33.194238 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:24:49.197592 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:25:21.202935 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:28:35.763015 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 22:28:35.763184 0.015288 udp 10.0.2.22 63043 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 22:28:35.778875 0.000000 udp 10.0.2.22 63044 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 22:31:25.210330 3.001304 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 22:31:32.216658 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:31:40.218013 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:31:56.221235 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:32:28.227086 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:38:32.235347 2.999487 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 22:38:39.240894 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:38:47.242052 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:39:03.245002 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:39:35.251080 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:39:35.761994 0.000184 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 22:39:35.762288 0.010146 udp 10.0.2.22 63045 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 22:39:35.772856 0.000000 udp 10.0.2.22 63046 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 22:45:39.258689 3.000358 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 22:45:46.264570 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:45:54.266283 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:46:10.268952 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:46:42.275803 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:52:46.281697 3.001320 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 22:52:53.288432 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:53:01.290139 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:53:17.292959 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:53:49.298676 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 22:54:35.766155 0.000192 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 22:54:35.766464 0.014130 udp 10.0.2.22 63047 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 22:54:35.780961 0.000000 udp 10.0.2.22 63048 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 22:59:53.306399 3.015199 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 23:00:00.322724 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:00:08.323961 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:00:24.327236 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:00:56.333264 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:07:00.339077 3.001496 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 23:07:07.346567 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:07:15.347851 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:07:31.350863 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:08:03.356841 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:09:35.760000 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 23:09:35.760115 0.013873 udp 10.0.2.22 63049 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 23:09:35.774435 0.000000 udp 10.0.2.22 63050 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 23:25:08.365480 3.065256 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 23:25:15.413487 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:25:23.382461 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:25:39.385008 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:26:11.391625 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:28:35.759262 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 23:28:35.759375 0.011634 udp 10.0.2.22 63051 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 23:28:35.771369 0.000000 udp 10.0.2.22 63052 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 23:32:15.398246 3.000943 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 23:32:22.404726 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:32:30.406293 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:32:46.409161 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:33:19.076811 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:39:22.441262 3.001739 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 23:39:29.448697 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:39:35.768283 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 23:39:35.768458 0.022056 udp 10.0.2.22 63053 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 23:39:35.790966 0.000000 udp 10.0.2.22 63054 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 23:39:37.450934 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:39:53.453152 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:40:25.459338 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:46:29.465582 3.001569 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 23:46:36.473061 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:46:44.475816 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:47:00.477720 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:47:32.483294 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:53:36.518321 3.489804 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/16 23:53:43.984132 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:53:51.903986 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:54:08.534109 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/16 23:54:36.520593 0.000097 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/16 23:54:36.520784 0.012345 udp 10.0.2.22 63055 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/16 23:54:36.533712 0.000000 udp 10.0.2.22 63056 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/16 23:54:40.249819 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:00:46.257496 3.001371 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 00:00:53.264598 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:01:01.266223 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:01:17.269374 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:01:49.275631 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:07:58.288191 3.002076 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 00:08:05.295933 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:08:13.307470 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:08:29.310433 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:09:01.316275 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:09:36.506991 0.000132 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 00:09:36.507221 0.011527 udp 10.0.2.22 63057 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 00:09:36.519121 0.000000 udp 10.0.2.22 63058 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 00:15:30.329859 3.000191 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 00:15:37.335844 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:15:45.337306 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:16:01.340212 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:16:33.346105 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:22:37.352308 3.001747 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 00:22:44.359706 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:22:52.364615 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:23:08.364528 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:23:40.370277 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:24:36.500913 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 00:24:36.501103 0.010320 udp 10.0.2.22 63059 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 00:24:36.511782 0.000000 udp 10.0.2.22 63060 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 00:29:44.375999 3.001808 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 00:29:51.383752 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:29:59.386950 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:30:15.388145 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:30:47.394563 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:36:51.400465 3.002063 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 00:36:58.407810 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:37:06.409168 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:37:22.412161 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:37:54.418240 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:39:36.505167 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 00:39:36.505380 0.011451 udp 10.0.2.22 63061 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 00:39:36.517190 0.000000 udp 10.0.2.22 63062 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 00:43:58.424406 3.001387 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 00:44:05.431290 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:44:13.433096 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:44:29.436049 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:45:01.441992 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:51:05.449356 3.000556 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 00:51:12.455915 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:51:20.456980 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:51:36.459953 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:52:08.466122 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:54:36.499349 0.000144 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 00:54:36.499585 0.010340 udp 10.0.2.22 63063 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 00:54:36.510286 0.000000 udp 10.0.2.22 63064 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 00:58:12.472461 3.001493 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 00:58:19.479663 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:58:27.483459 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:58:43.483695 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 00:59:15.490199 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:05:19.496185 3.001362 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 01:05:26.503475 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:05:34.504555 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:05:50.508084 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:06:22.513975 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:09:36.502707 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 01:09:36.502877 0.012840 udp 10.0.2.22 63065 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 01:09:36.516097 0.000000 udp 10.0.2.22 63066 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 01:24:21.527506 3.002241 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 01:24:28.535697 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:24:36.537041 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:24:52.539880 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:25:24.545964 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:28:36.501956 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 01:28:36.502156 0.010209 udp 10.0.2.22 63067 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 01:28:36.512709 0.000000 udp 10.0.2.22 63068 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 01:31:28.552358 3.001294 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 01:31:35.559643 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:31:43.560821 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:31:59.564231 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:32:31.569730 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:38:35.576602 3.000930 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 01:38:42.583620 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:38:50.584875 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:39:06.588196 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:39:36.502792 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 01:39:36.502888 0.011411 udp 10.0.2.22 63069 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 01:39:36.514730 0.000000 udp 10.0.2.22 63070 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 01:39:38.593867 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:45:42.600686 3.001006 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 01:45:49.607373 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:45:57.608947 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:46:13.611969 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:46:45.617932 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:52:49.623545 3.001579 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 01:52:56.631125 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:53:04.632760 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:53:20.635504 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:53:52.642041 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 01:54:36.504933 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 01:54:36.505095 0.010854 udp 10.0.2.22 63071 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 01:54:36.516334 0.000000 udp 10.0.2.22 63072 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 01:59:56.647630 3.001951 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 02:00:03.655139 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:00:11.656881 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:00:27.659926 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:00:59.665996 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:07:03.672037 3.001572 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 02:07:10.682224 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:07:18.680674 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:07:34.683261 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:08:06.689823 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:09:36.499284 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 02:09:36.499445 0.010979 udp 10.0.2.22 63073 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 02:09:36.510770 0.000000 udp 10.0.2.22 63074 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 02:25:13.699148 3.001724 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 02:25:20.706481 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:25:28.708038 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:25:44.710953 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:26:16.717314 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:28:36.498235 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 02:28:36.498403 0.028458 udp 10.0.2.22 63075 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 02:28:36.527222 0.000000 udp 10.0.2.22 63076 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 02:32:20.723277 3.001416 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 02:32:27.730475 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:32:35.732106 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:32:51.735105 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:33:23.741180 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:39:27.746350 3.002390 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 02:39:35.624992 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:39:37.346014 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 02:39:37.346117 0.010928 udp 10.0.2.22 63077 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 02:39:37.357434 0.000000 udp 10.0.2.22 63078 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 02:39:43.527160 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:39:59.336286 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:40:30.934912 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:46:34.781504 3.001031 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 02:46:41.788393 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:46:49.789950 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:47:05.796317 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:47:37.799110 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:53:41.805737 3.000790 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 02:53:48.812469 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:53:56.814141 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:54:13.599211 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 02:54:36.989792 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 02:54:36.989905 0.025737 udp 10.0.2.22 63079 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 02:54:37.016023 0.000000 udp 10.0.2.22 63080 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 02:54:45.221617 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:00:52.844264 3.001942 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 03:00:59.852042 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:01:07.854028 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:01:23.856111 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:01:55.865630 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:07:59.868537 3.001934 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 03:08:06.876119 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:08:14.877850 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:08:30.880643 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:09:02.886676 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:09:36.505101 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 03:09:36.505196 0.022383 udp 10.0.2.22 63081 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 03:09:36.527939 0.000000 udp 10.0.2.22 63082 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 03:15:06.892528 3.001459 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 03:15:13.900079 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:15:21.901081 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:15:37.904455 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:16:09.910570 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:22:13.917501 3.001009 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 03:22:20.923763 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:22:28.925170 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:22:44.928473 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:23:16.934508 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:28:36.505214 0.000085 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 03:28:36.505386 0.024409 udp 10.0.2.22 63083 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 03:28:36.530233 0.000000 udp 10.0.2.22 63084 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 03:29:20.940733 3.003740 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 03:29:27.948051 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:29:35.949674 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:29:51.952443 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:30:23.958554 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:36:27.964545 3.001886 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 03:36:34.972174 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:36:42.973487 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:36:58.976480 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:37:30.983036 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:39:36.503162 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 03:39:36.503302 0.010253 udp 10.0.2.22 63085 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 03:39:36.513898 0.000000 udp 10.0.2.22 63086 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 03:43:34.987987 3.002045 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 03:43:42.000995 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:43:49.997909 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:44:06.002712 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:44:38.006411 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:50:45.017108 3.001361 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 03:50:52.024349 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:51:00.025707 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:51:16.028807 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:51:48.034637 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:54:36.497214 0.000221 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 03:54:36.497530 0.010158 udp 10.0.2.22 63087 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 03:54:36.508029 0.000000 udp 10.0.2.22 63088 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 03:57:55.045141 3.004659 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 03:58:02.052455 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:58:10.054096 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:58:26.057029 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 03:58:58.065988 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:05:04.072879 3.001019 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 04:05:11.079604 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:05:19.080994 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:05:35.083915 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:06:07.089857 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:09:36.500868 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 04:09:36.501091 0.010521 udp 10.0.2.22 63089 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 04:09:36.511985 0.000000 udp 10.0.2.22 63090 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 04:24:15.097766 3.000510 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 04:24:22.104455 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:24:30.105680 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:24:46.108821 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:25:18.115087 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:28:36.499961 0.000109 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 04:28:36.500156 0.011675 udp 10.0.2.22 63091 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 04:28:36.512225 0.000000 udp 10.0.2.22 63092 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 04:31:22.120813 3.003118 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 04:31:29.128019 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:31:37.129860 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:31:53.132858 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:32:25.138990 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:38:29.144565 3.153678 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 04:38:36.278647 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:38:44.211506 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:39:00.166596 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:39:32.172770 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:39:37.985663 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 04:39:37.985766 0.010102 udp 10.0.2.22 63093 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 04:39:37.996246 0.000000 udp 10.0.2.22 63094 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 04:45:39.192883 3.001752 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 04:45:46.200358 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:45:54.202187 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:46:10.204717 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:46:42.211791 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:52:46.218407 3.000338 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 04:52:53.224514 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:53:01.225651 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:53:17.229040 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:53:49.235063 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 04:54:36.502637 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 04:54:36.502754 0.010241 udp 10.0.2.22 63095 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 04:54:36.513362 0.000000 udp 10.0.2.22 63096 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 04:59:53.242368 3.000318 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 05:00:00.248424 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:00:08.250291 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:00:24.252848 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:00:56.258866 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:07:00.265442 3.001092 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 05:07:07.272396 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:07:15.274048 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:07:31.277042 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:08:03.283063 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:09:36.497038 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 05:09:36.497239 0.012245 udp 10.0.2.22 63097 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 05:09:36.509885 0.000000 udp 10.0.2.22 63098 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 05:25:09.290707 3.001779 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 05:25:16.298632 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:25:24.299927 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:25:40.302627 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:26:12.308862 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:28:36.506171 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 05:28:36.506353 0.010279 udp 10.0.2.22 63099 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 05:28:36.517019 0.000000 udp 10.0.2.22 63100 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 05:32:16.316007 3.000264 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 05:32:23.322300 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:32:31.323646 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:32:47.326660 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:33:19.396182 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:39:23.347899 3.002314 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 05:39:30.356092 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:39:36.505051 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 05:39:36.505155 0.014195 udp 10.0.2.22 63101 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 05:39:36.519705 0.000000 udp 10.0.2.22 63102 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 05:39:38.357704 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:39:54.361017 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:40:26.366785 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:46:30.372011 3.002335 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 05:46:37.380008 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:46:45.383209 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:47:01.384401 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:47:33.391319 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:53:37.396612 3.002224 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 05:53:44.404647 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:53:52.405806 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:54:08.408358 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 05:54:36.499123 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 05:54:36.499228 0.010249 udp 10.0.2.22 63103 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 05:54:36.509792 0.000000 udp 10.0.2.22 63104 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 05:54:40.414573 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:00:44.420922 3.001311 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 06:00:51.427996 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:00:59.429990 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:01:15.432461 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:01:47.438600 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:07:51.445577 3.000666 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 06:07:58.452262 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:08:06.453050 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:08:22.456782 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:08:54.462792 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:09:36.502931 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 06:09:36.503105 0.010298 udp 10.0.2.22 63105 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 06:09:36.513731 0.000000 udp 10.0.2.22 63106 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 06:25:36.475463 3.002242 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 06:25:43.483013 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:25:51.484798 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:26:07.487709 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:26:39.493930 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:28:36.506462 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 06:28:36.506568 0.010357 udp 10.0.2.22 63107 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 06:28:36.517310 0.000000 udp 10.0.2.22 63108 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 06:32:43.504546 2.996636 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 06:32:50.507351 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:32:58.511908 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:33:14.511599 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:33:46.518069 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:39:36.500926 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 06:39:36.501085 0.011815 udp 10.0.2.22 63109 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 06:39:36.513239 0.000000 udp 10.0.2.22 63110 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 06:39:50.528873 2.996582 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 06:39:57.531385 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:40:05.532484 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:40:21.535187 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:40:53.541739 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:46:57.547562 3.001574 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 06:47:04.555146 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:47:12.556764 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:47:28.560380 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:48:00.565785 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:54:04.571566 3.001402 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 06:54:11.579191 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:54:19.581327 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:54:35.583757 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 06:54:36.505095 0.000109 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 06:54:36.505306 0.010418 udp 10.0.2.22 63111 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 06:54:36.516040 0.000000 udp 10.0.2.22 63112 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 06:55:07.589646 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:01:11.595070 3.002562 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 07:01:18.602774 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:01:26.604582 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:01:42.607787 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:02:14.613749 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:08:18.619717 3.001557 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 07:08:25.627018 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:08:33.628682 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:08:49.631606 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:09:21.637646 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:09:36.499072 0.000118 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 07:09:36.499315 0.010924 udp 10.0.2.22 63113 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 07:09:36.510582 0.000000 udp 10.0.2.22 63114 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 07:15:25.644373 3.001306 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 07:15:32.651705 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:15:40.652474 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:15:56.655213 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:16:28.661898 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:22:32.667570 3.004544 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 07:22:39.675246 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:22:47.676822 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:23:03.679341 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:23:35.685469 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:28:36.498067 0.000090 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 07:28:36.498269 0.015859 udp 10.0.2.22 63115 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 07:28:36.514544 0.000000 udp 10.0.2.22 63116 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 07:29:39.691604 3.001559 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 07:29:46.704216 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:29:54.700583 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:30:10.703783 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:30:42.714705 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:36:46.900526 3.000235 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 07:36:53.905344 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:37:01.905878 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:37:17.907854 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:37:49.913764 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:39:36.497106 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 07:39:36.497215 0.010276 udp 10.0.2.22 63117 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 07:39:36.507867 0.000000 udp 10.0.2.22 63118 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 07:43:54.921268 3.001544 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 07:44:01.928606 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:44:09.935623 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:44:25.933296 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:44:57.949872 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:51:09.956353 3.001958 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 07:51:16.964112 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:51:24.967844 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:51:40.968629 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:52:12.984517 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:54:36.501014 0.000097 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 07:54:36.501217 0.011257 udp 10.0.2.22 63119 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 07:54:36.512800 0.000000 udp 10.0.2.22 63120 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 07:58:16.990062 3.084253 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 07:58:24.043455 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:58:32.009114 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:58:48.012704 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 07:59:20.018590 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:05:24.025390 3.001004 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 08:05:31.034151 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:05:39.033039 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:05:55.037955 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:06:27.042563 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:09:36.494439 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 08:09:36.494628 0.010189 udp 10.0.2.22 63121 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 08:09:36.505134 0.000000 udp 10.0.2.22 63122 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 08:24:23.052353 3.001777 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 08:24:30.059937 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:24:38.061191 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:24:54.064160 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:25:26.070156 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:28:36.503857 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 08:28:36.504016 0.014872 udp 10.0.2.22 63123 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 08:28:36.519215 0.000000 udp 10.0.2.22 63124 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 08:31:30.077144 3.000831 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 08:31:37.083827 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:31:46.226605 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:32:02.032876 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:32:33.648178 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:38:37.110606 3.001474 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 08:38:44.117687 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:38:52.119000 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:39:08.122270 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:39:36.502676 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 08:39:36.502848 0.010245 udp 10.0.2.22 63125 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 08:39:36.513425 0.000000 udp 10.0.2.22 63126 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 08:39:40.128157 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:45:44.133742 3.001469 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 08:45:51.141756 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:45:59.143083 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:46:15.145623 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:46:47.152173 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:52:51.159577 3.000406 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 08:52:58.172605 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:53:06.167121 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:53:22.170023 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:53:54.176045 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 08:54:36.498532 0.000113 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 08:54:36.498740 0.013064 udp 10.0.2.22 63127 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 08:54:36.512271 0.000000 udp 10.0.2.22 63128 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 08:59:58.182381 3.001356 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 09:00:05.189585 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:00:13.191027 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:00:29.196974 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:01:01.200308 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:07:05.207039 3.001100 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 09:07:12.213315 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:07:20.225130 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:07:36.228186 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:08:08.234111 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:09:36.500953 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 09:09:36.501048 0.000000 udp 10.0.2.22 63129 -> 8.8.8.8 53 INT 0 1 74 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 09:18:36.497709 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 09:18:36.497817 0.000000 udp 10.0.2.22 63130 -> 8.8.8.8 53 INT 0 1 74 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 09:19:36.503443 0.000000 udp 10.0.2.22 63131 -> 8.8.8.8 53 INT 0 1 74 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 09:19:41.040270 0.035163 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 09:20:36.499826 0.000000 udp 10.0.2.22 63132 -> 8.8.8.8 53 INT 0 1 74 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 09:20:41.046264 0.035253 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 09:21:36.496147 0.000000 udp 10.0.2.22 63133 -> 8.8.8.8 53 INT 0 1 74 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 09:21:41.042913 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 09:22:36.502216 0.000000 udp 10.0.2.22 63134 -> 8.8.8.8 53 INT 0 1 74 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 09:22:41.038860 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 09:23:36.498698 0.000000 udp 10.0.2.22 63135 -> 8.8.8.8 53 INT 0 1 74 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 09:23:41.045155 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 09:24:36.494621 0.000000 udp 10.0.2.22 63136 -> 8.8.8.8 53 INT 0 1 74 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 09:24:41.041654 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 09:25:14.241445 3.001983 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/17 09:25:21.249797 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:25:29.251181 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:25:36.501247 0.000000 udp 10.0.2.22 63137 -> 8.8.8.8 53 INT 0 1 74 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 09:25:41.047897 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 09:25:45.253837 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:26:17.259989 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:26:36.497671 0.000000 udp 10.0.2.22 63138 -> 8.8.8.8 53 INT 0 1 74 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 09:26:41.044322 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 09:27:36.505381 0.000000 udp 10.0.2.22 63139 -> 8.8.8.8 53 INT 0 1 74 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 09:27:41.040315 0.000077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 09:28:36.500153 0.000000 udp 10.0.2.22 63140 -> 8.8.8.8 53 INT 0 1 74 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 09:28:41.046578 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 09:29:36.496582 0.000000 udp 10.0.2.22 63141 -> 8.8.8.8 53 INT 0 1 74 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 09:29:41.042879 0.000112 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 09:30:36.503917 0.000000 udp 10.0.2.22 63142 -> 8.8.8.8 53 INT 0 1 74 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 09:30:41.038894 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 09:31:36.498987 0.000000 udp 10.0.2.22 63143 -> 8.8.8.8 53 INT 0 1 74 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 09:31:41.045272 0.000196 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 09:32:21.265326 3.002409 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 INT 0 3 438 flow=Background 1970/01/17 09:32:28.273093 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:32:36.274822 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:32:36.495218 0.249784 udp 10.0.2.22 63144 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 09:32:36.745369 0.000000 udp 10.0.2.22 63145 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 09:32:41.041725 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 09:32:52.277859 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:33:24.283775 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:39:28.290245 3.001670 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 09:39:35.300981 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:39:43.298707 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:39:59.301800 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:40:31.307933 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:45:36.496729 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 09:45:36.496845 0.027002 udp 10.0.2.22 63146 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 09:45:36.524207 0.000000 udp 10.0.2.22 63147 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 09:46:35.313676 3.002136 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 09:46:42.321376 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:46:50.322587 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:47:06.325578 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:47:38.336455 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:53:42.338778 3.001210 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 09:53:49.345629 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:53:57.346486 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:54:13.349845 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 09:54:45.355739 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:00:36.500581 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 10:00:36.500738 0.011426 udp 10.0.2.22 63148 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 10:00:36.512470 0.000000 udp 10.0.2.22 63149 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 10:00:49.375885 2.997698 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 10:00:56.379302 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:01:04.380846 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:01:20.383950 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:01:52.390262 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:07:56.395935 3.001359 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 10:08:03.403101 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:08:11.407369 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:08:27.407708 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:08:59.413743 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:15:03.419778 3.001558 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 10:15:10.426930 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:15:18.428531 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:15:34.431722 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:16:06.437725 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:22:10.444091 3.001726 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 10:22:17.451941 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:22:25.452270 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:22:36.498475 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 10:22:36.498626 0.013080 udp 10.0.2.22 63150 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 10:22:36.512025 0.000000 udp 10.0.2.22 63151 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 10:22:41.456672 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:23:13.462707 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:29:17.468018 3.037726 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 10:29:24.484229 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:29:32.481010 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:29:48.482420 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:30:20.485172 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:32:36.500970 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 10:32:36.501175 0.010193 udp 10.0.2.22 63152 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 10:32:36.511679 0.000000 udp 10.0.2.22 63153 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 10:36:24.491935 3.000980 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 10:36:31.498712 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:36:39.500292 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:36:55.503650 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:37:27.509816 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:43:31.515491 3.001552 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 10:43:38.522838 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:43:46.524339 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:44:02.527707 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:44:34.533305 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:45:36.502579 0.000090 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 10:45:36.502762 0.013940 udp 10.0.2.22 63154 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 10:45:36.517046 0.000000 udp 10.0.2.22 63155 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 10:50:38.539345 3.014307 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 10:50:45.557218 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:50:53.558483 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:51:09.561277 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:51:41.567345 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:57:45.573150 3.001981 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 10:57:52.580507 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:58:00.582487 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:58:16.585197 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 10:58:48.591904 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:00:36.498010 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 11:00:36.498177 0.021898 udp 10.0.2.22 63156 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 11:00:36.520445 0.000000 udp 10.0.2.22 63157 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 11:04:52.597589 3.001395 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 11:04:59.604866 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:05:07.606398 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:05:23.609579 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:05:55.614982 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:22:36.494069 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 11:22:36.494179 0.078036 udp 10.0.2.22 63158 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 11:22:36.572605 0.000000 udp 10.0.2.22 63159 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 11:24:10.624077 2.999881 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 11:24:17.629880 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:24:25.631566 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:24:41.633673 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:25:13.640993 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:31:17.646733 3.001365 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 11:31:24.653684 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:31:32.655239 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:31:48.664377 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:32:20.664061 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:32:36.497038 0.000106 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 11:32:36.497258 0.010262 udp 10.0.2.22 63160 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 11:32:36.507891 0.000000 udp 10.0.2.22 63161 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 11:38:24.671339 3.000277 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 11:38:31.677927 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:38:39.679141 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:38:55.682378 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:39:27.688302 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:45:36.498706 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 11:45:36.498854 0.011339 udp 10.0.2.22 63162 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 11:45:36.510521 0.000000 udp 10.0.2.22 63163 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 11:45:40.696859 3.002002 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 11:45:47.704742 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:45:55.706022 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:46:11.709065 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:46:43.714987 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:52:47.721698 3.001201 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 11:52:54.728553 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:53:02.733343 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:53:18.733429 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:53:50.739309 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 11:59:54.745545 3.001164 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 12:00:01.752298 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:00:09.754148 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:00:25.758655 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:00:36.495413 0.000108 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 12:00:36.495625 0.011501 udp 10.0.2.22 63164 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 12:00:36.507523 0.000000 udp 10.0.2.22 63165 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 12:00:57.773535 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:07:01.778640 3.002088 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 12:07:08.786632 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:07:16.787958 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:07:32.791202 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:08:04.802997 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:22:36.500497 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 12:22:36.500594 0.012240 udp 10.0.2.22 63166 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 12:22:36.513173 0.000000 udp 10.0.2.22 63167 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 12:25:10.809937 2.999044 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 12:25:17.812398 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:25:25.813214 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:25:41.816728 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:26:13.832599 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:32:17.838547 3.001987 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 12:32:24.846321 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:32:32.847951 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:32:36.496517 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 12:32:36.496617 0.021536 udp 10.0.2.22 63168 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 12:32:36.518555 0.000000 udp 10.0.2.22 63169 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 12:32:48.850837 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:33:20.856826 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:39:24.863699 3.000690 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 12:39:31.870473 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:39:39.871823 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:39:55.874738 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:40:27.880829 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:45:36.494188 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 12:45:36.494355 0.012019 udp 10.0.2.22 63170 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 12:45:36.506685 0.000000 udp 10.0.2.22 63171 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 12:46:31.887175 3.001188 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 12:46:38.898678 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:46:46.896397 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:47:02.898699 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:47:34.904776 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:53:38.910728 3.001712 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 12:53:45.918465 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:53:53.919968 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:54:09.922686 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 12:54:41.928751 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:00:36.498714 0.000104 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 13:00:36.498910 0.015004 udp 10.0.2.22 63172 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 13:00:36.514265 0.000000 udp 10.0.2.22 63173 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 13:00:45.934850 3.001643 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 13:00:52.942483 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:01:00.946237 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:01:16.946908 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:01:48.952809 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:07:52.959057 3.001436 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 13:07:59.966150 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:08:07.967801 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:08:23.973945 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:08:55.976821 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:22:36.496744 0.049077 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 13:22:36.545939 0.011118 udp 10.0.2.22 63174 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 13:22:36.557596 0.000000 udp 10.0.2.22 63175 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 13:25:36.988042 3.006532 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 13:25:43.995805 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:25:51.997637 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:26:08.000510 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:26:40.006533 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:32:36.499031 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 13:32:36.499135 0.010749 udp 10.0.2.22 63176 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 13:32:36.510194 0.000000 udp 10.0.2.22 63177 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 13:32:44.012775 3.001467 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 13:32:51.019988 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:32:59.021878 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:33:15.026770 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:33:47.030412 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:39:51.036482 3.003778 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 13:39:58.044191 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:40:06.045861 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:40:22.048556 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:40:54.066580 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:45:36.500460 0.000082 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 13:45:36.500626 0.012375 udp 10.0.2.22 63178 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 13:45:36.513307 0.000000 udp 10.0.2.22 63179 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 13:46:58.070472 3.003230 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 13:47:05.077993 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:47:13.079466 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:47:29.082414 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:48:01.095088 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:54:05.095009 3.000986 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 13:54:12.102078 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:54:20.103168 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:54:36.106666 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 13:55:08.112349 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:00:36.494264 0.093051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 14:00:36.587437 0.012994 udp 10.0.2.22 63180 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 14:00:36.600795 0.000000 udp 10.0.2.22 63181 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 14:01:12.118312 3.001821 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 14:01:19.125813 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:01:27.127437 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:01:43.131122 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:02:15.136418 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:08:19.143760 3.000323 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 14:08:26.149385 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:08:34.151444 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:08:50.154391 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:09:22.162309 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:15:26.166718 3.001313 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 14:15:33.174144 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:15:41.176072 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:15:57.181291 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:16:29.184596 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:22:33.191348 3.000889 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 14:22:36.492442 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 14:22:36.492540 0.016886 udp 10.0.2.22 63182 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 14:22:36.509741 0.000000 udp 10.0.2.22 63183 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 14:22:40.197734 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:22:48.198926 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:23:04.202435 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:23:36.208392 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:29:40.213579 3.002326 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 14:29:47.221036 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:29:55.223634 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:30:11.226305 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:30:43.232349 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:32:36.494903 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 14:32:36.495002 0.010735 udp 10.0.2.22 63184 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 14:32:36.506074 0.000000 udp 10.0.2.22 63185 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 14:36:47.248325 3.001602 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 14:36:54.255249 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:37:02.257043 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:37:18.261249 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:37:50.266245 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:43:54.274859 2.998997 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 14:44:01.279777 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:44:09.281486 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:44:25.284306 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:44:57.289981 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:45:36.496907 0.000092 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 14:45:36.497083 0.011643 udp 10.0.2.22 63186 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 14:45:36.509077 0.000000 udp 10.0.2.22 63187 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 14:51:09.298346 3.000881 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 14:51:16.304946 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:51:24.310414 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:51:40.310972 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:52:12.315986 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:58:16.347788 2.995739 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 14:58:23.349240 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:58:31.350676 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:58:47.364364 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 14:59:19.369825 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:00:36.503698 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 15:00:36.503809 0.012179 udp 10.0.2.22 63188 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 15:00:36.516322 0.000000 udp 10.0.2.22 63189 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 15:05:23.375563 3.001433 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 15:05:30.382945 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:05:38.385030 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:05:54.388487 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:06:26.394671 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:22:36.498505 0.090404 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 15:22:36.589001 0.022794 udp 10.0.2.22 63190 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 15:22:36.612199 0.000000 udp 10.0.2.22 63191 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 15:24:23.404889 3.001489 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 15:24:30.412527 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:24:38.413644 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:24:54.416842 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:25:26.425714 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:31:30.429003 3.001344 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 15:31:37.436508 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:31:45.437780 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:32:01.440671 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:32:33.446334 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:32:36.490831 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 15:32:36.491001 0.010253 udp 10.0.2.22 63192 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 15:32:36.501564 0.000000 udp 10.0.2.22 63193 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 15:38:37.452719 3.001826 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 15:38:44.459934 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:38:52.462092 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:39:08.464479 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:39:40.470851 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:45:36.492392 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 15:45:36.492568 0.012204 udp 10.0.2.22 63194 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 15:45:36.505111 0.000000 udp 10.0.2.22 63195 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 15:45:44.476700 3.001492 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 15:45:51.483495 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:45:59.485547 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:46:15.488544 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:46:47.494056 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:52:51.504991 3.077447 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 15:52:58.557562 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:53:06.519695 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:53:22.522705 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:53:54.528557 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 15:59:58.534420 3.001863 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 16:00:05.541981 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:00:13.543694 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:00:29.546443 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:00:36.496769 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 16:00:36.496912 0.011949 udp 10.0.2.22 63196 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 16:00:36.509221 0.000000 udp 10.0.2.22 63197 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 16:01:01.559832 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:07:05.559322 3.001025 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 16:07:12.566189 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:07:20.567697 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:07:36.570573 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:08:08.576400 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:22:36.494259 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 16:22:36.494416 0.022840 udp 10.0.2.22 63198 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 16:22:36.517587 0.000000 udp 10.0.2.22 63199 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 16:25:15.586161 3.001262 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 16:25:22.593213 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:25:30.594801 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:25:46.597685 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:26:18.605218 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:32:22.609836 3.001868 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 16:32:29.617061 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:32:36.497037 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 16:32:36.497210 0.010080 udp 10.0.2.22 63200 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 16:32:36.507622 0.000000 udp 10.0.2.22 63201 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 16:32:37.618888 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:32:53.621811 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:33:25.627695 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:39:29.633236 3.003457 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 16:39:36.645787 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:39:44.642755 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:40:00.645754 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:40:32.651749 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:45:36.498455 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 16:45:36.498556 0.011532 udp 10.0.2.22 63202 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 16:45:36.510407 0.000000 udp 10.0.2.22 63203 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 16:46:36.657352 3.002018 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 16:46:43.665008 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:46:51.666668 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:47:07.669680 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:47:39.679914 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:53:43.681655 3.001688 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 16:53:50.689081 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:53:58.693436 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:54:14.695896 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 16:54:46.699659 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:00:36.495916 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 17:00:36.496098 0.011570 udp 10.0.2.22 63204 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 17:00:36.508057 0.000000 udp 10.0.2.22 63205 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 17:00:50.706265 3.001059 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 17:00:57.715081 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:01:05.715847 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:01:21.717444 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:01:53.723086 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:07:57.729718 3.001587 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 17:08:04.736942 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:08:12.738506 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:08:28.740921 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:09:00.747732 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:15:04.752798 3.002483 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 17:15:11.760780 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:15:19.765884 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:15:35.765685 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:16:07.771396 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:22:11.777636 3.001539 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 17:22:18.784848 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:22:26.796549 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:22:36.490471 0.000092 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 17:22:36.490639 0.022538 udp 10.0.2.22 63206 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 17:22:36.513574 0.000000 udp 10.0.2.22 63207 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 17:22:42.799697 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:23:14.805802 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:29:18.811588 3.001154 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 17:29:25.818849 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:29:33.820251 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:29:49.826944 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:30:21.831430 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:32:36.493246 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 17:32:36.493445 0.010510 udp 10.0.2.22 63208 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 17:32:36.504309 0.000000 udp 10.0.2.22 63209 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 17:36:25.835447 3.001608 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 17:36:32.843174 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:36:40.844463 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:36:56.847597 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:37:28.856194 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:43:32.858884 3.002105 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 17:43:39.866811 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:43:47.868301 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:44:03.871501 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:44:35.877315 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:45:36.496097 0.000160 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 17:45:36.496370 0.021742 udp 10.0.2.22 63210 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 17:45:36.518448 0.000000 udp 10.0.2.22 63211 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 17:50:39.883631 3.216671 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 17:50:47.068526 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:50:54.990820 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:51:10.905013 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:51:42.911937 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:57:46.916951 3.001987 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 17:57:53.925104 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:58:01.926421 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:58:17.932260 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 17:58:49.935616 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:00:36.504563 0.000085 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 18:00:36.504743 0.040182 udp 10.0.2.22 63212 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 18:00:36.545501 0.000000 udp 10.0.2.22 63213 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 18:04:53.940727 3.002413 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 18:05:00.948642 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:05:08.950194 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:05:24.955744 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:05:56.959268 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:22:36.496400 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 18:22:36.496506 0.011732 udp 10.0.2.22 63214 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 18:22:36.508549 0.000000 udp 10.0.2.22 63215 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 18:24:05.968116 3.001058 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 18:24:12.974751 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:24:20.976703 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:24:36.979422 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:25:08.987992 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:31:12.991520 3.001595 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 18:31:19.998878 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:31:28.000417 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:31:44.003213 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:32:16.009419 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:32:36.489192 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 18:32:36.489346 0.010268 udp 10.0.2.22 63216 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 18:32:36.500083 0.000000 udp 10.0.2.22 63217 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 18:38:20.015882 3.001460 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 18:38:27.023257 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:38:35.024551 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:38:51.027724 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:39:23.033826 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:45:32.047380 3.001249 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 18:45:36.490422 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 18:45:36.490595 0.011671 udp 10.0.2.22 63218 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 18:45:36.502573 0.000000 udp 10.0.2.22 63219 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 18:45:39.054349 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:45:47.056014 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:46:03.058657 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:46:35.064634 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:52:39.070893 3.013473 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 18:52:46.088265 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:52:54.089915 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:53:10.092576 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:53:42.098844 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 18:59:46.106541 3.000086 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 18:59:53.112203 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:00:01.113989 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:00:17.116748 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:00:36.494671 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 19:00:36.494850 0.011940 udp 10.0.2.22 63220 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 19:00:36.507114 0.000000 udp 10.0.2.22 63221 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 19:00:49.122635 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:06:53.128745 3.001532 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 19:07:00.136185 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:07:08.137750 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:07:24.140744 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:07:56.146643 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:22:36.492295 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 19:22:36.492460 0.055396 udp 10.0.2.22 63222 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 19:22:36.548259 0.000000 udp 10.0.2.22 63223 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 19:25:06.163489 3.003315 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 19:25:13.167720 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:25:21.169198 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:25:37.177482 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:26:09.178296 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:32:13.184335 3.001491 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 19:32:20.191778 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:32:28.192896 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:32:36.494812 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 19:32:36.494930 0.010552 udp 10.0.2.22 63224 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 19:32:36.505834 0.000000 udp 10.0.2.22 63225 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 19:32:44.196724 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:33:16.202088 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:39:20.209402 3.000338 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 19:39:27.215763 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:39:35.217501 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:39:51.220727 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:40:23.226531 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:45:36.497032 0.058022 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 19:45:36.555256 0.011961 udp 10.0.2.22 63226 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 19:45:36.567604 0.000000 udp 10.0.2.22 63227 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 19:46:27.233627 3.000119 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 19:46:34.239859 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:46:42.246197 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:46:58.245965 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:47:30.260163 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:53:34.266378 3.001450 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 19:53:41.276880 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:53:49.275100 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:54:05.278256 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 19:54:37.283903 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:00:36.490319 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 20:00:36.490422 0.013838 udp 10.0.2.22 63228 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 20:00:36.504616 0.000000 udp 10.0.2.22 63229 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 20:00:41.290927 3.000591 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 20:00:48.353765 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:00:56.308905 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:01:12.312073 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:01:44.318109 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:07:48.336715 2.989053 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 20:07:55.331800 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:08:03.335671 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:08:19.336157 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:08:51.341904 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:22:36.488736 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 20:22:36.488896 0.022352 udp 10.0.2.22 63230 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 20:22:36.511662 0.000000 udp 10.0.2.22 63231 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 20:25:34.357203 3.001144 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 20:25:41.364214 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:25:49.366101 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:26:05.368613 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:26:37.374913 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:32:36.491077 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 20:32:36.491251 0.010446 udp 10.0.2.22 63232 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 20:32:36.502034 0.000000 udp 10.0.2.22 63233 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 20:32:41.381581 3.001452 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 20:32:48.388638 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:32:56.390490 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:33:12.392597 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:33:44.398826 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:39:48.404479 3.002031 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 20:39:55.412167 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:40:03.413605 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:40:19.416659 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:40:51.426949 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:45:36.492246 0.000103 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 20:45:36.492435 0.023339 udp 10.0.2.22 63234 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 20:45:36.516124 0.000000 udp 10.0.2.22 63235 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 20:46:55.428939 3.001397 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 20:47:02.436038 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:47:10.437662 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:47:26.440568 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:47:58.446586 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:54:02.462652 3.011575 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 20:54:09.479901 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:54:17.481680 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:54:33.484689 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 20:55:05.490643 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:00:36.496639 0.000121 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 21:00:36.496861 0.011921 udp 10.0.2.22 63236 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 21:00:36.509156 0.000000 udp 10.0.2.22 63237 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 21:01:09.496829 3.001494 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 21:01:16.503902 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:01:24.505430 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:01:40.508664 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:02:12.514493 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:08:16.520819 3.001248 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 21:08:23.528015 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:08:31.529478 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:08:47.552498 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:09:19.558558 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:15:23.564928 3.017336 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 21:15:30.581803 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:15:38.584114 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:15:54.586466 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:16:26.592513 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:22:30.603355 3.000468 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 21:22:36.496238 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 21:22:36.496386 0.011787 udp 10.0.2.22 63238 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 21:22:36.508551 0.000000 udp 10.0.2.22 63239 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 21:22:37.605322 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:22:45.607380 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:23:01.610573 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:23:33.616638 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:29:37.623646 2.999995 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 21:29:44.629477 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:29:52.631670 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:30:08.634608 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:30:40.640421 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:32:36.497468 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 21:32:36.497584 0.010048 udp 10.0.2.22 63240 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 21:32:36.507957 0.000000 udp 10.0.2.22 63241 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 21:36:44.646102 3.002120 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 21:36:51.653889 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:36:59.655122 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:37:15.658688 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:37:47.665795 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:43:51.670837 3.001012 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 21:43:58.678012 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:44:06.679501 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:44:22.682507 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:44:54.688670 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:45:36.488459 0.000075 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 21:45:36.488611 0.018143 udp 10.0.2.22 63242 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 21:45:36.507062 0.000000 udp 10.0.2.22 63243 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 21:51:04.702939 3.003200 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 21:51:11.710505 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:51:19.722176 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:51:35.725007 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:52:07.730924 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:58:11.744616 2.994374 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 21:58:18.745507 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:58:26.745616 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:58:42.748973 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 21:59:14.755223 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:00:36.492449 0.000104 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 22:00:36.492647 0.025902 udp 10.0.2.22 63244 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 22:00:36.518897 0.000000 udp 10.0.2.22 63245 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 22:05:18.760906 3.001853 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 22:05:25.770164 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:05:33.769799 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:05:49.775051 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:06:21.779159 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:22:36.490573 0.177698 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 22:22:36.668414 0.021646 udp 10.0.2.22 63246 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 22:22:36.690446 0.000000 udp 10.0.2.22 63247 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 22:24:20.793876 3.000669 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 22:24:27.800518 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:24:35.804218 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:24:51.805887 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:25:23.810703 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:31:27.816880 3.001557 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 22:31:34.824028 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:31:42.826045 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:31:58.829036 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:32:30.834871 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:32:36.492694 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 22:32:36.492830 0.012541 udp 10.0.2.22 63248 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 22:32:36.505729 0.000000 udp 10.0.2.22 63249 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 22:38:34.841580 3.001174 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 22:38:41.848458 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:38:49.849376 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:39:05.852939 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:39:37.858912 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:45:36.494398 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 22:45:36.494571 0.056318 udp 10.0.2.22 63250 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 22:45:36.551474 0.000000 udp 10.0.2.22 63251 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 22:45:41.865300 3.001281 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 22:45:48.872267 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:45:56.873657 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:46:12.876945 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:46:44.882975 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:52:48.890772 2.999856 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 22:52:55.896314 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:53:03.897746 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:53:19.900617 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:53:51.906879 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 22:59:55.992386 2.982236 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 23:00:03.070001 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:00:11.012532 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:00:26.995307 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:00:36.498803 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 23:00:36.498958 0.021623 udp 10.0.2.22 63252 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 23:00:36.520978 0.000000 udp 10.0.2.22 63253 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 23:00:59.000805 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:07:03.018130 3.000446 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 23:07:10.024276 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:07:18.025369 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:07:34.028922 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:08:06.034916 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:22:36.496828 0.000117 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 23:22:36.497045 0.011550 udp 10.0.2.22 63254 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 23:22:36.508963 0.000000 udp 10.0.2.22 63255 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 23:25:14.045869 3.001562 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 23:25:21.052908 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:25:29.054284 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:25:45.057554 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:26:17.064169 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:32:21.069440 3.001785 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 23:32:28.076897 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:32:36.078628 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:32:36.499278 0.000115 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 23:32:36.499487 0.010279 udp 10.0.2.22 63256 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 23:32:36.510085 0.000000 udp 10.0.2.22 63257 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 23:32:52.081403 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:33:24.087331 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:39:28.094495 3.000460 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 23:39:35.101105 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:39:43.102415 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:39:59.105547 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:40:31.111689 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:45:36.500402 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/17 23:45:36.500509 0.023061 udp 10.0.2.22 63258 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/17 23:45:36.523865 0.000000 udp 10.0.2.22 63259 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/17 23:46:35.117545 3.001588 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 23:46:42.124743 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:46:50.126312 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:47:06.129555 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:47:38.138357 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:53:42.141490 3.001681 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/17 23:53:49.158822 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:53:57.160561 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:54:13.163625 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/17 23:54:45.169311 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:00:36.505568 0.000111 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 00:00:36.505807 0.011548 udp 10.0.2.22 63260 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 00:00:36.517799 0.000000 udp 10.0.2.22 63261 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 00:00:49.177707 3.003003 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 00:00:56.184582 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:01:04.184484 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:01:20.187614 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:01:52.193813 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:07:56.199384 3.001713 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 00:08:03.206833 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:08:11.208167 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:08:27.211450 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:08:59.217111 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:15:03.223466 3.001614 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 00:15:10.230743 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:15:18.232431 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:15:34.235200 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:16:06.241647 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:22:10.247457 3.001400 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 00:22:17.254880 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:22:25.256024 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:22:36.502321 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 00:22:36.502428 0.012719 udp 10.0.2.22 63262 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 00:22:36.515474 0.000000 udp 10.0.2.22 63263 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 00:22:41.259107 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:23:13.508391 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:29:17.280744 3.002179 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 00:29:24.288854 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:29:32.290240 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:29:48.294574 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:30:20.301028 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:32:36.504805 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 00:32:36.504960 0.010368 udp 10.0.2.22 63264 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 00:32:36.515663 0.000000 udp 10.0.2.22 63265 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 00:36:24.305796 3.001162 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 00:36:31.312658 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:36:39.314175 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:36:55.317070 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:37:27.324778 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:43:31.328985 3.001722 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 00:43:38.336257 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:43:46.338382 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:44:02.341201 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:44:34.347189 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:45:36.496774 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 00:45:36.496923 0.022313 udp 10.0.2.22 63266 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 00:45:36.519597 0.000000 udp 10.0.2.22 63267 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 00:50:38.353833 3.000905 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 00:50:45.363921 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:50:53.362248 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:51:09.367782 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:51:41.372170 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:57:45.387243 3.022550 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 00:57:52.404705 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:58:00.413594 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:58:16.412935 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 00:58:48.415165 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:00:36.500917 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 01:00:36.501086 0.018496 udp 10.0.2.22 63268 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 01:00:36.519940 0.000000 udp 10.0.2.22 63269 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 01:04:52.421231 3.001700 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 01:04:59.433970 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:05:07.430108 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:05:23.433013 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:05:55.439004 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:22:36.498463 0.038783 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 01:22:36.537337 0.016054 udp 10.0.2.22 63270 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 01:22:36.553770 0.000000 udp 10.0.2.22 63271 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 01:24:04.448972 3.000166 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 01:24:11.454906 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:24:19.463350 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:24:35.459649 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:25:07.466056 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:31:11.472270 3.000898 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 01:31:18.478941 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:31:26.480556 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:31:42.482917 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:32:14.489461 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:32:36.501193 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 01:32:36.501389 0.010202 udp 10.0.2.22 63272 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 01:32:36.511890 0.000000 udp 10.0.2.22 63273 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 01:38:18.495884 3.001360 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 01:38:25.502852 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:38:33.504531 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:38:49.507464 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:39:21.513494 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:45:25.519468 3.001420 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 01:45:32.526746 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:45:36.502548 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 01:45:36.502656 0.011170 udp 10.0.2.22 63274 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 01:45:36.514121 0.000000 udp 10.0.2.22 63275 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 01:45:40.528256 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:45:56.531260 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:46:28.537786 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:52:32.549031 2.996181 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 01:52:39.550785 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:52:47.555087 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:53:03.555250 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:53:35.571255 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:59:39.577586 3.001349 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 01:59:46.584632 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 01:59:54.585968 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:00:10.592963 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:00:36.505745 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 02:00:36.505850 0.021429 udp 10.0.2.22 63276 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 02:00:36.527663 0.000000 udp 10.0.2.22 63277 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 02:00:42.596485 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:06:46.601111 3.001830 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 02:06:53.608672 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:07:01.620169 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:07:17.623186 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:07:49.629241 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:22:36.504552 0.000112 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 02:22:36.504820 0.012325 udp 10.0.2.22 63278 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 02:22:36.517492 0.000000 udp 10.0.2.22 63279 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 02:25:03.637733 3.002586 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 02:25:10.645782 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:25:18.647861 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:25:34.655075 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:26:06.656527 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:32:10.663021 3.000641 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 02:32:17.670088 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:32:25.671342 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:32:36.497292 0.000164 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 02:32:36.497512 0.010356 udp 10.0.2.22 63280 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 02:32:36.508191 0.000000 udp 10.0.2.22 63281 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 02:32:41.674459 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:33:13.680426 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:39:17.686107 3.002223 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 02:39:24.693511 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:39:32.695186 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:39:48.698253 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:40:20.704619 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:45:36.498566 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 02:45:36.498680 0.011907 udp 10.0.2.22 63282 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 02:45:36.510914 0.000000 udp 10.0.2.22 63283 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 02:46:24.710404 3.001865 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 02:46:31.717945 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:46:39.718752 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:46:55.722492 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:47:27.728707 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:53:31.736494 2.999317 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 02:53:38.741516 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:53:46.743206 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:54:02.755973 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 02:54:34.762451 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:00:36.502364 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 03:00:36.502515 0.026321 udp 10.0.2.22 63284 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 03:00:36.529140 0.000000 udp 10.0.2.22 63285 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 03:00:38.768762 3.002047 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 03:00:45.775248 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:00:53.777788 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:01:09.780445 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:01:41.786369 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:07:45.796058 2.997928 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 03:07:52.800314 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:08:00.801376 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:08:16.804282 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:08:48.810555 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:22:36.500271 0.000085 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 03:22:36.500441 0.014594 udp 10.0.2.22 63286 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 03:22:36.515334 0.000000 udp 10.0.2.22 63287 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 03:25:33.817694 3.002118 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 03:25:40.825170 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:25:48.826779 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:26:04.830185 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:26:36.836298 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:32:36.502965 0.000087 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 03:32:36.503109 0.011145 udp 10.0.2.22 63288 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 03:32:36.514567 0.000000 udp 10.0.2.22 63289 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 03:32:40.843372 3.000276 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 03:32:47.849772 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:32:55.850513 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:33:11.855230 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:33:43.860175 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:39:47.864907 3.002834 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 03:39:54.873031 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:40:02.874710 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:40:18.878176 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:40:50.883306 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:45:36.494222 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 03:45:36.494401 0.023069 udp 10.0.2.22 63290 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 03:45:36.517911 0.000000 udp 10.0.2.22 63291 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 03:46:54.894413 2.997841 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 03:47:01.897222 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:47:09.905421 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:47:25.901625 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:47:57.911753 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:54:01.914081 3.000947 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 03:54:08.921547 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:54:16.922783 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:54:32.925872 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 03:55:04.931763 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:00:36.498435 0.000103 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 04:00:36.498636 0.023769 udp 10.0.2.22 63292 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 04:00:36.522754 0.000000 udp 10.0.2.22 63293 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 04:01:08.937272 3.002489 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 04:01:15.944947 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:01:23.946569 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:01:39.949945 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:02:11.956040 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:08:15.962119 3.001488 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 04:08:22.969068 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:08:30.973689 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:08:46.973905 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:09:18.983568 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:15:22.985080 3.002412 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 04:15:29.993459 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:15:37.994766 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:15:53.998006 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:16:26.003094 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:22:30.009638 3.001474 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 04:22:36.501688 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 04:22:36.501858 0.027028 udp 10.0.2.22 63294 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 04:22:36.529283 0.000000 udp 10.0.2.22 63295 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 04:22:37.021959 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:22:45.018608 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:23:01.022093 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:23:33.027724 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:29:37.033243 3.002146 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 04:29:44.132840 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:29:52.070228 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:30:08.058736 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:30:40.061607 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:32:36.554060 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 04:32:36.554207 0.010195 udp 10.0.2.22 63296 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 04:32:36.564731 0.000000 udp 10.0.2.22 63297 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 04:36:44.078672 3.000971 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 04:36:51.084915 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:36:59.086645 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:37:15.089807 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:37:47.095198 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:43:51.101235 3.002113 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 04:43:58.108948 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:44:06.110604 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:44:22.113360 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:44:54.119928 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:45:36.500442 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 04:45:36.500547 0.011879 udp 10.0.2.22 63298 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 04:45:36.512786 0.000000 udp 10.0.2.22 63299 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 04:50:58.125598 3.005957 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 04:51:05.136256 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:51:13.134505 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:51:29.137828 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:52:01.143719 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:58:05.152118 2.998902 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 04:58:12.157683 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:58:20.163576 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:58:36.164223 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 04:59:08.167874 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:00:36.494342 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 05:00:36.494447 0.022230 udp 10.0.2.22 63300 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 05:00:36.517070 0.000000 udp 10.0.2.22 63301 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 05:05:12.174012 3.001349 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 05:05:19.180979 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:05:27.182340 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:05:43.185752 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:06:15.194447 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:22:36.502505 0.000102 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 05:22:36.502695 0.012628 udp 10.0.2.22 63302 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 05:22:36.515707 0.000000 udp 10.0.2.22 63303 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 05:24:18.201320 3.001586 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 05:24:25.208589 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:24:33.210147 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:24:49.213091 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:25:21.223758 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:31:25.224696 3.002095 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 05:31:32.232711 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:31:40.234341 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:31:56.237259 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:32:28.243397 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:32:36.495231 0.000109 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 05:32:36.495440 0.010436 udp 10.0.2.22 63304 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 05:32:36.506218 0.000000 udp 10.0.2.22 63305 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 05:38:32.250028 3.000701 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 05:38:39.256521 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:38:47.258125 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:39:03.260962 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:39:35.267020 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:45:36.496653 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 05:45:36.496763 0.011655 udp 10.0.2.22 63306 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 05:45:36.508740 0.000000 udp 10.0.2.22 63307 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 05:45:39.273300 3.001691 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 05:45:46.280604 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:45:54.282252 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:46:10.285115 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:46:42.291256 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:52:46.297551 3.001572 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 05:52:53.304418 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:53:01.305907 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:53:17.309119 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:53:49.315055 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 05:59:53.321973 3.065176 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 06:00:00.364112 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:00:08.340220 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:00:24.344912 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:00:36.500707 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 06:00:36.500810 0.011742 udp 10.0.2.22 63308 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 06:00:36.512861 0.000000 udp 10.0.2.22 63309 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 06:00:56.350013 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:07:00.355167 3.001382 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 06:07:07.362602 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:07:15.364004 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:07:31.367174 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:08:03.373060 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:22:36.498606 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 06:22:36.498780 0.011308 udp 10.0.2.22 63310 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 06:22:36.510417 0.000000 udp 10.0.2.22 63311 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 06:25:12.392781 2.994539 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 06:25:19.393244 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:25:27.398246 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:25:43.398464 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:26:15.403124 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:32:19.409273 3.001503 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 06:32:26.419997 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:32:34.418064 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:32:36.501074 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 06:32:36.501175 0.011328 udp 10.0.2.22 63312 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 06:32:36.512831 0.000000 udp 10.0.2.22 63313 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 06:32:50.420932 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:33:22.426970 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:39:26.433186 3.001760 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 06:39:33.440414 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:39:41.442090 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:39:57.446984 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:40:29.450839 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:45:36.492409 0.170795 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 06:45:36.663299 0.012674 udp 10.0.2.22 63314 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 06:45:36.676393 0.000000 udp 10.0.2.22 63315 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 06:46:33.461225 3.018606 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 06:46:40.491821 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:46:48.476427 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:47:04.478857 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:47:36.484556 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:53:40.491899 3.000979 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 06:53:47.498589 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:53:55.499996 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:54:11.503087 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 06:54:43.508810 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:00:36.496782 0.000132 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 07:00:36.497015 0.022395 udp 10.0.2.22 63316 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 07:00:36.519767 0.000000 udp 10.0.2.22 63317 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 07:00:47.514875 3.001746 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 07:00:54.525593 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:01:02.523717 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:01:18.527071 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:01:50.532925 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:07:54.538546 3.002141 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 07:08:01.546233 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:08:09.548358 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:08:25.550916 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:08:57.556909 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:22:36.495317 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 07:22:36.495475 0.014017 udp 10.0.2.22 63318 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 07:22:36.509823 0.000000 udp 10.0.2.22 63319 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 07:25:36.565175 3.002470 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 07:25:43.573230 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:25:51.574797 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:26:07.577794 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:26:39.584032 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:32:36.497445 0.000017 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 07:32:36.497462 0.018673 udp 10.0.2.22 63320 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 07:32:36.516648 0.000000 udp 10.0.2.22 63321 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 07:32:43.590807 3.000482 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 07:32:50.597482 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:32:58.598743 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:33:14.601919 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:33:46.608305 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:39:50.614698 3.000232 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 07:39:57.621323 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:40:05.623110 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:40:21.625792 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:40:53.632039 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:45:36.498435 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 07:45:36.498623 0.014395 udp 10.0.2.22 63322 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 07:45:36.513375 0.000000 udp 10.0.2.22 63323 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 07:46:57.637669 3.002262 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 07:47:04.648344 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:47:12.646639 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:47:28.649794 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:48:00.655541 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:54:04.662099 3.001200 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 07:54:11.669191 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:54:19.670823 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:54:35.674263 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 07:55:07.689681 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:00:36.492425 0.108691 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 08:00:36.601244 0.037942 udp 10.0.2.22 63324 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 08:00:36.639597 0.000000 udp 10.0.2.22 63325 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 08:01:11.695870 3.001702 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 08:01:18.718775 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:01:26.714525 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:01:42.718003 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:02:14.723918 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:08:18.729852 3.001122 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 08:08:25.737308 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:08:33.738479 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:08:49.741819 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:09:21.747750 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:15:25.753759 3.001344 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 08:15:32.761064 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:15:40.762322 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:15:56.765188 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:16:28.773850 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:22:32.787829 3.039764 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 08:22:36.513377 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 08:22:36.513514 0.011244 udp 10.0.2.22 63326 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 08:22:36.525067 0.000000 udp 10.0.2.22 63327 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 08:22:39.817095 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:22:47.816746 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:23:03.820060 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:23:35.826233 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:29:39.832698 3.000419 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 08:29:46.839140 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:29:54.840637 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:30:10.843294 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:30:42.849759 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:32:36.493036 0.000107 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 08:32:36.493232 0.011492 udp 10.0.2.22 63328 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 08:32:36.505092 0.000000 udp 10.0.2.22 63329 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 08:36:46.855490 3.001830 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 08:36:53.862554 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:37:01.864857 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:37:17.867866 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:37:49.873761 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:43:53.879132 3.002025 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 08:44:00.887162 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:44:08.888416 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:44:24.891713 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:44:56.897722 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:45:36.494329 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 08:45:36.494517 0.028500 udp 10.0.2.22 63330 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 08:45:36.523366 0.000000 udp 10.0.2.22 63331 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 08:51:00.903082 3.002709 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 08:51:07.910753 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:51:15.912545 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:51:31.915664 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:52:03.931711 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:58:07.939263 3.003020 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 08:58:14.945940 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:58:22.956534 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:58:38.959734 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 08:59:10.965277 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:00:36.498895 0.000110 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 09:00:36.499101 0.022488 udp 10.0.2.22 63332 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 09:00:36.521990 0.000000 udp 10.0.2.22 63333 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 09:05:14.971258 3.001869 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 09:05:21.979342 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:05:29.980376 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:05:45.983757 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:06:17.990041 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:22:36.496653 0.021577 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 09:22:36.518331 0.024091 udp 10.0.2.22 63334 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 09:22:36.542774 0.000000 udp 10.0.2.22 63335 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 09:24:18.004698 3.002239 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 09:24:25.012311 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:24:33.013792 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:24:49.016696 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:25:21.022877 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:31:25.035153 2.999120 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 09:31:32.036542 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:31:40.038222 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:31:56.042140 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:32:28.046980 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:32:36.499111 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 09:32:36.499303 0.012018 udp 10.0.2.22 63336 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 09:32:36.511628 0.000000 udp 10.0.2.22 63337 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 09:38:32.053172 3.001583 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 09:38:39.060341 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:38:47.062272 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:39:03.064847 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:39:35.070734 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:45:36.500653 0.000115 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 09:45:36.500887 0.011457 udp 10.0.2.22 63338 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 09:45:36.512729 0.000000 udp 10.0.2.22 63339 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 09:45:39.077291 3.001353 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 09:45:46.084354 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:45:54.095213 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:46:10.098835 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:46:42.104700 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:52:46.111262 3.001255 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 09:52:53.118429 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:53:01.120290 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:53:17.122951 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:53:49.130020 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 09:59:53.134927 3.002913 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 10:00:00.142255 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:00:08.144226 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:00:24.150278 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:00:36.494363 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 10:00:36.494541 0.011650 udp 10.0.2.22 63340 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 10:00:36.506536 0.000000 udp 10.0.2.22 63341 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 10:00:56.162857 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:07:00.169749 3.000986 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 10:07:07.176206 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:07:15.177775 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:07:31.180753 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:08:03.186658 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:22:36.492341 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 10:22:36.492506 0.024386 udp 10.0.2.22 63342 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 10:22:36.517237 0.000000 udp 10.0.2.22 63343 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 10:25:11.203043 2.997271 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 10:25:18.206851 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:25:26.206504 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:25:42.212545 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:26:14.215229 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:32:18.222354 3.000706 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 10:32:25.228764 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:32:33.230128 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:32:36.495185 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 10:32:36.495287 0.012891 udp 10.0.2.22 63344 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 10:32:36.508544 0.000000 udp 10.0.2.22 63345 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 10:32:49.233922 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:33:21.239578 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:39:25.246175 3.000912 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 10:39:32.252941 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:39:40.254461 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:39:56.257293 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:40:28.263305 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:45:36.496752 0.000084 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 10:45:36.496964 0.013662 udp 10.0.2.22 63346 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 10:45:36.511006 0.000000 udp 10.0.2.22 63347 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 10:46:32.269272 3.001784 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 10:46:39.286141 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:46:47.278832 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:47:03.281829 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:47:35.287279 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:53:39.294399 3.000595 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 10:53:46.303975 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:53:54.302271 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:54:10.305126 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 10:54:42.311505 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:00:36.490412 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 11:00:36.490518 0.011354 udp 10.0.2.22 63348 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 11:00:36.568982 0.000000 udp 10.0.2.22 63349 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 11:00:46.317031 3.001882 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 11:00:53.324756 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:01:01.326167 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:01:17.329285 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:01:49.335192 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:07:53.341388 3.001407 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 11:08:00.348706 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:08:08.350250 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:08:24.353082 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:08:56.359357 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:22:36.498486 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 11:22:36.498641 0.015510 udp 10.0.2.22 63350 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 11:22:36.514548 0.000000 udp 10.0.2.22 63351 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 11:25:38.372807 3.001261 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 11:25:45.380218 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:25:53.381602 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:26:09.384974 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:26:41.391443 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:32:36.491032 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 11:32:36.491251 0.011067 udp 10.0.2.22 63352 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 11:32:36.502646 0.000000 udp 10.0.2.22 63353 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 11:32:45.397231 3.001119 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 11:32:52.403991 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:33:00.405419 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:33:16.408315 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:33:48.414418 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:39:52.421743 3.000560 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 11:39:59.428264 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:40:07.429287 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:40:23.432299 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:40:55.438388 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:45:36.492436 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 11:45:36.492616 0.012693 udp 10.0.2.22 63354 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 11:45:36.505675 0.000000 udp 10.0.2.22 63355 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 11:46:59.445514 3.010678 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 11:47:06.461833 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:47:14.463844 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:47:30.466329 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:48:02.472372 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:54:06.478979 3.000887 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 11:54:13.485477 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:54:21.487159 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:54:37.490363 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 11:55:09.496447 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:00:36.496792 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 12:00:36.496959 0.022132 udp 10.0.2.22 63356 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 12:00:36.519455 0.000000 udp 10.0.2.22 63357 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 12:01:13.504213 2.999753 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 12:01:20.509932 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:01:28.511261 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:01:44.514170 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:02:16.520287 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:08:20.525494 3.002571 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 12:08:27.533566 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:08:35.534892 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:08:51.538444 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:09:23.545900 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:15:27.550139 3.001154 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 12:15:34.557962 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:15:42.559280 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:15:58.562167 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:16:30.568720 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:22:34.574483 3.001614 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 12:22:36.494183 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 12:22:36.494351 0.011505 udp 10.0.2.22 63358 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 12:22:36.506158 0.000000 udp 10.0.2.22 63359 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 12:22:41.581862 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:22:49.583087 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:23:05.589775 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:23:37.592152 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:29:41.597927 3.002100 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 12:29:48.605669 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:29:56.607177 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:30:12.610133 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:30:44.616182 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:32:36.497217 0.000207 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 12:32:36.497546 0.010091 udp 10.0.2.22 63360 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 12:32:36.507918 0.000000 udp 10.0.2.22 63361 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 12:36:48.621526 3.001666 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 12:36:55.629193 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:37:03.630971 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:37:19.633486 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:37:51.640462 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:43:55.646239 3.001873 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 12:44:02.653807 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:44:10.654994 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:44:26.658297 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:44:58.663611 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:45:36.499004 0.000120 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 12:45:36.499218 0.011514 udp 10.0.2.22 63362 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 12:45:36.511107 0.000000 udp 10.0.2.22 63363 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 12:51:02.670566 3.024613 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 12:51:09.687713 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:51:17.689321 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:51:33.692095 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:52:05.697928 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:58:09.704597 3.001139 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 12:58:16.711806 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:58:24.712966 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:58:40.716289 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 12:59:12.724185 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:00:36.492413 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 13:00:36.492514 0.012012 udp 10.0.2.22 63364 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 13:00:36.504890 0.000000 udp 10.0.2.22 63365 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 13:05:16.727098 3.002298 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 13:05:23.735270 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:05:31.736907 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:05:47.739947 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:06:19.746110 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:22:36.490530 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 13:22:36.490656 0.011973 udp 10.0.2.22 63366 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 13:22:36.502974 0.000000 udp 10.0.2.22 63367 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 13:24:16.757620 3.000984 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 13:24:23.764833 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:24:31.766213 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:24:47.769122 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:25:19.775241 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:31:23.781052 3.001613 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 13:31:30.788587 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:31:38.790138 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:31:54.792455 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:32:26.799410 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:32:36.492753 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 13:32:36.492864 0.010165 udp 10.0.2.22 63368 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 13:32:36.503395 0.000000 udp 10.0.2.22 63369 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 13:38:30.805221 3.001202 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 13:38:37.812387 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:38:45.813480 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:39:01.816950 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:39:33.822639 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:45:36.494166 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 13:45:36.494317 0.010763 udp 10.0.2.22 63370 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 13:45:36.505514 0.000000 udp 10.0.2.22 63371 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 13:45:37.828451 3.002167 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 13:45:44.836441 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:45:52.837917 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:46:08.840996 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:46:40.846959 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:52:44.862947 3.001618 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 13:52:51.870490 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:52:59.872014 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:53:15.874426 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:53:47.891275 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 13:59:51.896542 3.003578 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 13:59:58.904472 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:00:06.906151 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:00:22.919156 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:00:36.488573 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 14:00:36.488732 0.011332 udp 10.0.2.22 63372 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 14:00:36.500419 0.000000 udp 10.0.2.22 63373 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 14:00:54.924443 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:06:58.930617 3.002246 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 14:07:05.938244 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:07:13.939736 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:07:29.943060 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:08:01.948897 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:22:36.496470 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 14:22:36.496622 0.017040 udp 10.0.2.22 63374 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 14:22:36.513988 0.000000 udp 10.0.2.22 63375 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 14:25:08.958069 3.002140 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 14:25:15.965861 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:25:23.967049 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:25:39.970009 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:26:11.976145 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:32:15.982599 3.001563 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 14:32:22.989888 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:32:30.991187 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:32:36.489014 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 14:32:36.489115 0.010147 udp 10.0.2.22 63376 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 14:32:36.499550 0.000000 udp 10.0.2.22 63377 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 14:32:46.994252 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:33:21.209151 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:39:23.015833 3.001920 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 14:39:30.023654 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:39:38.024731 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:39:54.027992 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:40:26.033634 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:45:36.490181 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 14:45:36.490342 0.021219 udp 10.0.2.22 63378 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 14:45:36.511906 0.000000 udp 10.0.2.22 63379 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 14:46:30.041094 3.000422 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 14:46:37.047445 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:46:45.049103 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:47:01.052251 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:47:33.058263 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:53:37.065851 2.999754 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 14:53:44.071514 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:53:52.073124 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:54:08.076005 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 14:54:40.085696 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:00:36.497847 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 15:00:36.497953 0.011919 udp 10.0.2.22 63380 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 15:00:36.510255 0.000000 udp 10.0.2.22 63381 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 15:00:44.087733 3.002064 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 15:00:51.095847 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:00:59.097006 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:01:15.102092 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:01:47.106243 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:07:51.123077 2.990624 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 15:07:58.119771 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:08:06.125809 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:08:22.123854 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:08:54.131825 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:22:36.492254 0.021208 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 15:22:36.513616 0.019605 udp 10.0.2.22 63382 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 15:22:36.533762 0.000000 udp 10.0.2.22 63383 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 15:25:35.148540 2.995111 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 15:25:42.153164 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:25:50.150854 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:26:06.153878 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:26:38.160019 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:32:36.494555 0.000078 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 15:32:36.494756 0.010227 udp 10.0.2.22 63384 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 15:32:36.505344 0.000000 udp 10.0.2.22 63385 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 15:32:42.165919 3.008496 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 15:32:49.173221 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:32:57.174723 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:33:13.177993 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:33:45.183745 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:39:49.189978 3.001375 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 15:39:56.201945 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:40:04.200466 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:40:20.201835 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:40:52.208059 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:45:36.496627 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 15:45:36.496817 0.011338 udp 10.0.2.22 63386 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 15:45:36.508485 0.000000 udp 10.0.2.22 63387 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 15:46:56.214002 3.001200 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 15:47:03.221592 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:47:11.222768 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:47:27.226057 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:47:59.232095 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:54:03.237725 3.004387 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 15:54:10.245190 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:54:18.246574 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:54:34.249934 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 15:55:06.256961 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:00:36.490664 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 16:00:36.490784 0.022744 udp 10.0.2.22 63388 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 16:00:36.513908 0.000000 udp 10.0.2.22 63389 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 16:01:10.261762 3.001820 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 16:01:17.268942 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:01:25.270696 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:01:41.273650 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:02:13.279902 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:08:17.286751 3.002593 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 16:08:24.294660 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:08:32.294633 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:08:48.297610 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:09:20.303084 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:15:24.309132 3.006570 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 16:15:31.319385 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:15:39.318555 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:15:55.321404 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:16:27.327876 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:22:31.333889 3.056775 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 16:22:36.544949 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 16:22:36.545047 0.013896 udp 10.0.2.22 63390 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 16:22:36.559255 0.000000 udp 10.0.2.22 63391 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 16:22:38.404120 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:22:46.364761 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:23:02.365770 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:23:34.382231 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:29:38.387929 3.001717 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 16:29:45.395135 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:29:53.396551 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:30:09.399344 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:30:41.405835 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:32:36.493990 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 16:32:36.494102 0.010236 udp 10.0.2.22 63392 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 16:32:36.504656 0.000000 udp 10.0.2.22 63393 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 16:36:45.414995 2.998542 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 16:36:52.419818 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:37:00.420224 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:37:16.423719 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:37:48.429539 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:43:52.436858 3.043408 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 16:43:59.847703 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:44:07.769714 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:44:23.625510 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:44:55.475872 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:45:36.492319 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 16:45:36.492558 0.022799 udp 10.0.2.22 63394 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 16:45:36.515683 0.000000 udp 10.0.2.22 63395 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 16:50:59.480087 3.000743 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 16:51:06.486903 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:51:14.488451 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:51:30.491548 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:52:02.497681 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:58:06.503024 3.001751 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 16:58:13.510864 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:58:21.512234 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:58:37.515376 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 16:59:09.521210 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:00:36.496779 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 17:00:36.496937 0.011569 udp 10.0.2.22 63396 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 17:00:36.508905 0.000000 udp 10.0.2.22 63397 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 17:05:13.528348 3.000845 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 17:05:20.534792 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:05:28.536363 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:05:44.542624 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:06:16.545266 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:22:36.494043 0.071681 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 17:22:36.565919 0.012790 udp 10.0.2.22 63398 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 17:22:36.579046 0.000000 udp 10.0.2.22 63399 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 17:24:17.552903 3.002225 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 17:24:24.559650 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:24:32.563061 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:24:48.564088 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:25:20.570295 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:31:24.576233 3.001764 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 17:31:31.583820 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:31:39.584888 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:31:55.592231 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:32:27.594321 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:32:36.487448 0.000129 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 17:32:36.487796 0.010270 udp 10.0.2.22 63400 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 17:32:36.498438 0.000000 udp 10.0.2.22 63401 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 17:38:31.600147 3.005601 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 17:38:38.609882 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:38:46.609241 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:39:02.611634 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:39:34.618343 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:45:36.488416 0.000094 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 17:45:36.488611 0.011520 udp 10.0.2.22 63402 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 17:45:36.500450 0.000000 udp 10.0.2.22 63403 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 17:45:38.624292 3.001690 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 17:45:45.631622 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:45:53.633171 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:46:09.636288 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:46:41.642041 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:52:45.648218 3.001644 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 17:52:52.655332 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:53:00.657106 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:53:16.659735 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:53:48.666521 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 17:59:52.672910 3.000874 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 17:59:59.679648 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:00:07.680419 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:00:23.683772 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:00:36.492209 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 18:00:36.492389 0.015317 udp 10.0.2.22 63404 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 18:00:36.508011 0.000000 udp 10.0.2.22 63405 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 18:00:55.690228 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:06:59.695896 3.001863 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 18:07:06.705850 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:07:14.705180 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:07:30.708198 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:08:02.714136 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:22:36.490085 0.009818 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 18:22:36.500009 0.051471 udp 10.0.2.22 63406 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 18:22:36.551850 0.000000 udp 10.0.2.22 63407 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 18:25:12.729034 3.000226 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 18:25:19.735048 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:25:27.736451 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:25:43.739863 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:26:15.748156 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:32:19.753338 3.016114 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 18:32:26.759023 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:32:34.760723 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:32:36.492653 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 18:32:36.492757 0.010597 udp 10.0.2.22 63408 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 18:32:36.503676 0.000000 udp 10.0.2.22 63409 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 18:32:50.763690 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:33:22.769035 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:39:26.778894 2.998349 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 18:39:33.782401 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:39:41.784197 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:39:57.787392 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:40:29.796645 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:45:36.494564 0.000183 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 18:45:36.494853 0.011457 udp 10.0.2.22 63410 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 18:45:36.506692 0.000000 udp 10.0.2.22 63411 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 18:46:33.799974 3.000699 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 18:46:40.807743 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:46:48.809029 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:47:04.811442 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:47:36.817045 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:53:40.827122 2.997428 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 18:53:47.830739 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:53:55.832289 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:54:11.835261 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 18:54:43.841579 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:00:36.488529 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 19:00:36.488697 0.056320 udp 10.0.2.22 63412 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 19:00:36.545513 0.000000 udp 10.0.2.22 63413 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 19:00:47.847854 3.001565 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 19:00:54.854919 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:01:02.856948 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:01:18.859273 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:01:50.865693 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:07:54.875523 3.004492 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 19:08:01.878990 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:08:09.880526 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:08:25.883410 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:08:57.890645 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:22:36.486363 0.014283 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 19:22:36.500719 0.011466 udp 10.0.2.22 63414 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 19:22:36.512543 0.000000 udp 10.0.2.22 63415 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 19:25:40.908944 3.000800 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 19:25:47.911347 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:25:55.917947 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:26:11.916127 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:26:43.922138 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:32:36.488967 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 19:32:36.489074 0.010221 udp 10.0.2.22 63416 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 19:32:36.499653 0.000000 udp 10.0.2.22 63417 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 19:32:47.928381 3.001389 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 19:32:54.935011 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:33:02.936973 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:33:18.939929 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:33:50.945888 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:39:54.951659 3.002325 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 19:40:01.959239 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:40:09.960724 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:40:25.964094 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:40:57.970025 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:45:36.490387 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 19:45:36.490593 0.018911 udp 10.0.2.22 63418 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 19:45:36.509862 0.000000 udp 10.0.2.22 63419 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 19:47:01.976376 3.001509 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 19:47:08.983721 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:47:16.985832 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:47:32.988250 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:48:04.994424 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:54:08.999545 3.001832 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 19:54:16.007286 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:54:24.012848 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:54:40.012086 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 19:55:12.018371 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:00:36.494456 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 20:00:36.494617 0.011525 udp 10.0.2.22 63420 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 20:00:36.506463 0.000000 udp 10.0.2.22 63421 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 20:01:16.023745 3.001979 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 20:01:23.034524 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:01:31.032940 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:01:47.035570 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:02:19.041581 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:08:23.047731 3.002179 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 20:08:30.055160 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:08:38.056873 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:08:54.060101 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:09:26.065952 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:15:30.072440 3.000635 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 20:15:37.079072 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:15:45.080748 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:16:01.083956 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:16:33.090181 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:22:36.492268 0.000088 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 20:22:36.492453 0.011905 udp 10.0.2.22 63422 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 20:22:36.504694 0.000000 udp 10.0.2.22 63423 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 20:22:37.096857 3.000693 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 20:22:44.103104 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:22:52.105075 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:23:08.107979 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:23:40.113744 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:29:44.120220 3.002310 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 20:29:51.127358 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:29:59.130604 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:30:15.131347 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:30:47.138022 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:32:36.484716 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 20:32:36.484879 0.010115 udp 10.0.2.22 63424 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 20:32:36.495276 0.000000 udp 10.0.2.22 63425 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 20:36:51.146285 2.998847 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 20:36:58.151226 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:37:06.152816 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:37:22.155213 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:37:54.181842 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:43:58.187811 3.002122 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 20:44:05.195162 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:44:13.196822 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:44:29.199880 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:45:01.205993 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:45:36.486620 0.000083 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 20:45:36.486787 0.011844 udp 10.0.2.22 63426 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 20:45:36.498971 0.000000 udp 10.0.2.22 63427 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 20:51:05.211980 3.001828 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 20:51:12.219147 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:51:20.220802 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:51:36.223588 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:52:08.229884 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:58:12.236519 3.000896 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 20:58:19.243051 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:58:27.244775 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:58:43.247820 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 20:59:15.253866 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:00:36.490799 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 21:00:36.490957 0.023108 udp 10.0.2.22 63428 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 21:00:36.514409 0.000000 udp 10.0.2.22 63429 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 21:05:19.259592 3.006463 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 21:05:26.267006 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:05:34.277761 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:05:50.271972 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:06:22.277784 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:22:36.488471 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 21:22:36.488627 0.012689 udp 10.0.2.22 63430 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 21:22:36.501696 0.000000 udp 10.0.2.22 63431 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 21:24:19.289719 3.000932 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 21:24:26.296857 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:24:34.298233 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:24:50.300854 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:25:22.306741 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:31:26.313074 3.001404 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 21:31:33.320341 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:31:41.321712 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:31:57.324778 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:32:29.334048 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:32:36.490671 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 21:32:36.490841 0.010183 udp 10.0.2.22 63432 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 21:32:36.501301 0.000000 udp 10.0.2.22 63433 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 21:38:33.337494 3.000851 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 21:38:40.343979 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:38:48.345765 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:39:04.348811 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:39:36.355021 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:45:36.492460 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 21:45:36.492616 0.011318 udp 10.0.2.22 63434 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 21:45:36.504220 0.000000 udp 10.0.2.22 63435 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 21:45:40.361162 3.001206 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 21:45:47.368183 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:45:55.369643 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:46:11.372671 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:46:43.379221 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:52:47.390028 3.002292 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 21:52:54.396883 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:53:02.393636 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:53:18.396577 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:53:50.403181 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 21:59:54.413934 2.997023 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 22:00:01.416151 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:00:09.417928 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:00:25.422236 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:00:36.486504 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 22:00:36.486609 0.023165 udp 10.0.2.22 63436 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 22:00:36.510126 0.000000 udp 10.0.2.22 63437 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 22:00:57.426518 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:07:01.435554 2.998867 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 22:07:08.439946 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:07:16.442875 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:07:32.444547 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:08:04.450818 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:22:36.484128 0.027389 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 22:22:36.511650 0.011637 udp 10.0.2.22 63438 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 22:22:36.523645 0.000000 udp 10.0.2.22 63439 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 22:25:11.459830 3.001778 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 22:25:18.467166 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:25:26.468652 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:25:42.471783 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:26:14.477992 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:32:18.483581 3.001663 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 22:32:25.491150 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:32:33.492380 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:32:36.487127 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 22:32:36.487237 0.010025 udp 10.0.2.22 63440 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 22:32:36.497771 0.000000 udp 10.0.2.22 63441 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 22:32:49.495372 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:33:21.501717 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:39:25.507404 3.002035 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 22:39:32.514849 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:39:40.516623 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:39:56.519833 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:40:28.525374 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:45:36.488526 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 22:45:36.488635 0.026920 udp 10.0.2.22 63442 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 22:45:36.515907 0.000000 udp 10.0.2.22 63443 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 22:46:32.532675 3.000454 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 22:46:39.538882 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:46:47.540740 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:47:03.543606 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:47:35.549565 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:53:39.555217 3.002450 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 22:53:46.563191 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:53:54.564535 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:54:10.567793 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 22:54:42.573759 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:00:36.496746 0.000156 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 23:00:36.497068 0.021912 udp 10.0.2.22 63444 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 23:00:36.519351 0.000000 udp 10.0.2.22 63445 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 23:00:46.579447 3.002421 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 23:00:53.587158 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:01:01.588784 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:01:17.591432 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:01:49.597923 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:07:53.603034 3.003440 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 23:08:00.611014 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:08:08.612485 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:08:24.618823 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:08:56.621575 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:22:36.490474 0.038352 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 23:22:36.528971 0.011377 udp 10.0.2.22 63446 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 23:22:36.561094 0.000000 udp 10.0.2.22 63447 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 23:25:37.632484 3.005527 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 23:25:44.640196 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:25:52.647293 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:26:08.646470 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:26:40.653868 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:32:36.492858 0.000090 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 23:32:36.493048 0.010968 udp 10.0.2.22 63448 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 23:32:36.504310 0.000000 udp 10.0.2.22 63449 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 23:32:44.657894 3.001091 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 23:32:51.664902 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:32:59.666448 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:33:15.668927 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:33:47.675660 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:39:51.685784 2.997177 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 23:39:58.694611 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:40:06.690007 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:40:22.693570 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:40:54.699331 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:45:36.484495 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/18 23:45:36.484594 0.016366 udp 10.0.2.22 63450 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/18 23:45:36.501282 0.000000 udp 10.0.2.22 63451 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/18 23:46:58.704383 3.002628 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 23:47:05.712237 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:47:13.714384 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:47:29.717505 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:48:01.723303 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:54:05.734629 2.997879 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/18 23:54:12.742386 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:54:20.738138 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:54:36.741071 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/18 23:55:08.747314 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:00:36.488400 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 00:00:36.488592 0.012008 udp 10.0.2.22 63452 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 00:00:36.500917 0.000000 udp 10.0.2.22 63453 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 00:01:12.753131 3.001752 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 00:01:19.760206 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:01:27.763791 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:01:43.764992 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:02:15.771968 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:08:19.977837 3.002515 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 00:08:26.984843 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:08:34.986573 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:08:50.989141 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:09:22.995267 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:15:27.001523 3.001515 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 00:15:34.008806 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:15:42.010536 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:15:58.013454 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:16:30.019689 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:22:34.025474 3.001576 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 00:22:36.686795 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 00:22:36.686943 0.011361 udp 10.0.2.22 63454 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 00:22:36.698625 0.000000 udp 10.0.2.22 63455 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 00:22:41.032799 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:22:49.034266 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:23:05.037278 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:23:37.043304 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:29:41.049339 3.001580 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 00:29:48.056755 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:29:56.058310 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:30:12.061380 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:30:44.067370 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:32:36.689217 0.000275 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 00:32:36.689657 0.010166 udp 10.0.2.22 63456 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 00:32:36.700127 0.000000 udp 10.0.2.22 63457 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 00:36:48.072832 3.002427 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 00:36:55.081001 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:37:03.082431 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:37:19.085155 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:37:51.091475 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:43:55.097903 3.001237 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 00:44:02.106049 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:44:10.106386 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:44:26.112567 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:44:58.117997 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:45:36.690398 0.000096 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 00:45:36.690585 0.012854 udp 10.0.2.22 63458 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 00:45:36.703783 0.000000 udp 10.0.2.22 63459 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 00:51:23.131307 3.001812 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 00:51:30.139155 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:51:38.140428 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:51:54.144017 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:52:26.149648 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:58:38.157289 3.001315 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 00:58:45.165825 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:58:53.165825 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:59:09.168671 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 00:59:41.174956 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:00:36.684825 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 01:00:36.684931 0.012050 udp 10.0.2.22 63460 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 01:00:36.697408 0.000000 udp 10.0.2.22 63461 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 01:05:48.191332 3.125652 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 01:05:55.291868 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:06:03.223024 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:06:19.218486 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:06:51.233585 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:22:36.682994 0.000090 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 01:22:36.683167 0.012900 udp 10.0.2.22 63462 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 01:22:36.696409 0.000000 udp 10.0.2.22 63463 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 01:24:37.248726 3.001566 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 01:24:44.257866 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:24:52.257534 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:25:08.260632 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:25:40.266563 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:31:44.273943 3.000315 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 01:31:51.280103 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:31:59.281487 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:32:15.284566 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:32:36.685162 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 01:32:36.685263 0.013833 udp 10.0.2.22 63464 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 01:32:36.699463 0.000000 udp 10.0.2.22 63465 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 01:32:47.290765 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:38:51.297904 3.000330 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 01:38:58.303925 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:39:06.305698 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:39:22.310357 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:39:54.314685 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:45:36.686764 0.000076 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 01:45:36.686957 0.013313 udp 10.0.2.22 63466 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 01:45:36.700657 0.000000 udp 10.0.2.22 63467 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 01:45:58.320771 3.001386 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 01:46:05.328276 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:46:13.329391 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:46:29.332490 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:47:01.342145 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:53:05.344698 3.001420 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 01:53:12.352605 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:53:20.353483 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:53:36.356342 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 01:54:08.362377 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:00:12.369216 3.000734 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 02:00:19.376013 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:00:27.377529 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:00:36.691034 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 02:00:36.691185 0.011501 udp 10.0.2.22 63468 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 02:00:36.703036 0.000000 udp 10.0.2.22 63469 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 02:00:43.380221 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:01:15.386513 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:07:20.394200 3.001417 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 02:07:27.401488 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:07:35.403162 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:07:51.405474 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:08:23.412303 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:22:36.688873 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 02:22:36.688975 0.012540 udp 10.0.2.22 63470 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 02:22:36.701879 0.000000 udp 10.0.2.22 63471 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 02:25:19.425505 3.031920 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 02:25:26.442587 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:25:34.444698 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:25:50.447308 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:26:22.453191 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:32:26.461242 3.002044 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 02:32:33.466660 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:32:36.691501 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 02:32:36.691727 0.011544 udp 10.0.2.22 63472 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 02:32:36.703603 0.000000 udp 10.0.2.22 63473 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 02:32:41.468693 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:32:57.471150 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:33:29.478255 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:39:33.482555 3.002031 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 02:39:40.490568 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:39:48.491849 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:40:04.495067 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:40:36.501112 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:45:36.682265 0.000098 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 02:45:36.682448 0.011564 udp 10.0.2.22 63474 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 02:45:36.694354 0.000000 udp 10.0.2.22 63475 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 02:46:40.506870 3.002064 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 02:46:47.514427 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:46:55.517602 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:47:11.521738 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:47:43.524858 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:53:47.539683 2.993438 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 02:53:54.538497 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:54:02.547532 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:54:18.543748 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 02:54:50.548974 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:00:36.686877 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 03:00:36.686999 0.025719 udp 10.0.2.22 63476 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 03:00:36.713050 0.000000 udp 10.0.2.22 63477 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 03:00:59.562152 3.001531 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 03:01:06.569785 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:01:14.571305 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:01:30.574068 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:02:02.581110 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:08:09.590550 3.004782 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 03:08:16.598196 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:08:24.599790 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:08:40.602459 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:09:12.608844 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:15:16.615032 3.040782 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 03:15:23.638367 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:15:31.633434 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:15:47.639851 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:16:19.642393 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:22:23.648317 3.003561 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 03:22:30.655786 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:22:36.690898 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 03:22:36.691003 0.021439 udp 10.0.2.22 63478 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 03:22:36.712804 0.000000 udp 10.0.2.22 63479 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 03:22:38.658111 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:22:54.661271 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:23:26.676472 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:29:30.681922 3.001605 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 03:29:37.699755 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:29:45.691219 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:30:01.694435 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:30:33.700242 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:32:36.687457 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 03:32:36.687675 0.010172 udp 10.0.2.22 63480 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 03:32:36.698176 0.000000 udp 10.0.2.22 63481 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 03:36:37.707000 3.000983 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 03:36:44.713884 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:36:52.715679 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:37:08.718338 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:37:40.724203 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:43:44.731182 3.000730 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 03:43:51.742117 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:43:59.739618 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:44:15.742436 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:44:47.748399 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:45:36.688821 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 03:45:36.688989 0.011237 udp 10.0.2.22 63482 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 03:45:36.700546 0.000000 udp 10.0.2.22 63483 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 03:51:10.761997 3.001315 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 03:51:17.769124 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:51:25.770660 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:51:41.774016 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:52:13.781886 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:58:27.790441 3.001547 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 03:58:34.797650 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:58:42.798936 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:58:58.802018 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 03:59:30.808172 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:00:36.682843 0.000100 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 04:00:36.683041 0.026183 udp 10.0.2.22 63484 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 04:00:36.709609 0.000000 udp 10.0.2.22 63485 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 04:05:38.820239 3.001476 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 04:05:45.827152 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:05:53.828532 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:06:09.836231 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:06:41.837916 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:22:36.690715 0.050914 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 04:22:36.741722 0.012298 udp 10.0.2.22 63486 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 04:22:36.754428 0.000000 udp 10.0.2.22 63487 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 04:24:29.845904 3.002124 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 04:24:36.853065 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:24:44.854520 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:25:00.858213 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:25:32.863563 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:31:36.869745 3.001938 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 04:31:43.877738 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:31:51.878867 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:32:07.881315 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:32:36.683479 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 04:32:36.683588 0.010889 udp 10.0.2.22 63488 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 04:32:36.694838 0.000000 udp 10.0.2.22 63489 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 04:32:39.888064 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:38:43.894724 3.086002 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 04:38:50.959326 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:38:58.914140 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:39:14.915793 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:39:46.924070 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:45:36.684695 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 04:45:36.684869 0.013069 udp 10.0.2.22 63490 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 04:45:36.698296 0.000000 udp 10.0.2.22 63491 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 04:45:50.927389 3.002020 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 04:45:57.935133 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:46:05.936772 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:46:21.939633 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:46:53.945841 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:52:57.951376 3.002279 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 04:53:04.959305 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:53:12.961105 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:53:28.964145 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 04:54:00.974375 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:00:04.979218 3.048976 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 05:00:12.007212 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:00:19.994698 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:00:35.997925 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:00:36.688642 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 05:00:36.688796 0.012659 udp 10.0.2.22 63492 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 05:00:36.701758 0.000000 udp 10.0.2.22 63493 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 05:01:08.004121 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:07:12.009677 3.001592 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 05:07:19.018600 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:07:27.018749 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:07:43.021903 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:08:15.028002 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:22:36.688146 0.062783 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 05:22:36.751036 0.012335 udp 10.0.2.22 63494 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 05:22:36.763711 0.000000 udp 10.0.2.22 63495 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 05:25:18.041111 3.001756 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 05:25:25.048545 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:25:33.060505 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:25:49.063373 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:26:21.069280 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:32:25.076328 3.000419 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 05:32:32.082836 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:32:36.689618 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 05:32:36.689791 0.014717 udp 10.0.2.22 63496 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 05:32:36.704870 0.000000 udp 10.0.2.22 63497 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 05:32:40.084349 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:32:56.087204 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:33:28.093108 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:39:32.098744 3.002417 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 05:39:39.106299 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:39:47.110131 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:40:03.111015 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:40:35.117059 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:45:36.680849 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 05:45:36.680960 0.012558 udp 10.0.2.22 63498 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 05:45:36.693803 0.000000 udp 10.0.2.22 63499 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 05:46:39.123137 3.001716 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 05:46:46.130769 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:46:54.132063 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:47:10.135229 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:47:42.141417 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:53:46.147036 3.001920 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 05:53:53.154750 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:54:01.158643 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:54:17.162854 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 05:54:49.165216 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:00:36.684736 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 06:00:36.684907 0.011556 udp 10.0.2.22 63500 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 06:00:36.696760 0.000000 udp 10.0.2.22 63501 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 06:00:59.180010 3.001756 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 06:01:06.194135 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:01:14.188825 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:01:30.191740 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:02:02.203782 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:08:08.207423 3.001083 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 06:08:15.214028 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:08:23.215204 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:08:39.218495 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:09:11.224511 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:15:15.241532 2.992036 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 06:15:22.238061 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:15:30.239837 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:15:46.242548 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:16:18.249063 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:22:22.255463 3.000917 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 06:22:29.262008 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:22:36.682882 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 06:22:36.683014 0.025731 udp 10.0.2.22 63502 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 06:22:36.709118 0.000000 udp 10.0.2.22 63503 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 06:22:37.263309 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:22:53.266471 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:23:25.272435 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:29:29.279169 3.000924 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 06:29:36.286078 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:29:44.287363 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:30:00.290448 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:30:32.302948 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:32:36.685559 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 06:32:36.685673 0.010347 udp 10.0.2.22 63504 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 06:32:36.696326 0.000000 udp 10.0.2.22 63505 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 06:36:36.302233 3.001767 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 06:36:43.309865 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:36:51.311238 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:37:07.314502 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:37:39.330368 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:43:43.336551 3.001612 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 06:43:50.343746 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:43:58.345879 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:44:14.348183 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:44:46.354775 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:45:36.686845 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 06:45:36.686999 0.011438 udp 10.0.2.22 63506 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 06:45:36.698742 0.000000 udp 10.0.2.22 63507 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 06:50:54.370753 3.074097 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 06:51:01.423356 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:51:09.385096 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:51:25.389807 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:51:57.394094 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:58:01.400449 3.001613 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 06:58:08.408121 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:58:16.408876 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:58:32.412685 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 06:59:04.418298 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:00:36.681073 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 07:00:36.681221 0.019972 udp 10.0.2.22 63508 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 07:00:36.701746 0.000000 udp 10.0.2.22 63509 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 07:05:08.424512 3.001396 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 07:05:15.431642 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:05:23.432858 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:05:39.435896 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:06:11.442531 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:22:36.688634 0.098114 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 07:22:36.786812 0.010159 udp 10.0.2.22 63510 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 07:22:36.797510 0.000000 udp 10.0.2.22 63511 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 07:24:16.454733 3.001573 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 07:24:23.462296 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:24:31.463794 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:24:47.466856 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:25:19.473062 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:31:23.479046 3.001222 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 07:31:30.485938 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:31:38.487779 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:31:54.490262 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:32:26.496611 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:32:36.681629 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 07:32:36.681738 0.014167 udp 10.0.2.22 63512 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 07:32:36.696246 0.000000 udp 10.0.2.22 63513 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 07:38:30.503467 3.000419 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 07:38:37.519889 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:38:45.521515 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:39:01.524248 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:39:33.530741 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:45:36.683086 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 07:45:36.683193 0.016953 udp 10.0.2.22 63514 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 07:45:36.700488 0.000000 udp 10.0.2.22 63515 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 07:45:40.542013 3.000464 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 07:45:47.548234 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:45:55.549919 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:46:11.552867 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:46:43.558944 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:52:47.565694 3.000678 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 07:52:54.576282 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:53:02.577218 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:53:18.578247 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:53:50.583613 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 07:59:54.589588 3.000274 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 08:00:01.596214 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:00:09.598003 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:00:25.600814 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:00:36.686925 0.000104 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 08:00:36.687133 0.021462 udp 10.0.2.22 63516 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 08:00:36.708967 0.000000 udp 10.0.2.22 63517 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 08:00:57.606973 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:07:01.612952 3.001470 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 08:07:08.620387 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:07:16.622195 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:07:32.624601 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:08:04.630915 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:22:36.684780 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 08:22:36.684943 0.012557 udp 10.0.2.22 63518 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 08:22:36.697806 0.000000 udp 10.0.2.22 63519 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 08:25:09.637943 3.000868 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 08:25:16.644572 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:25:24.646052 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:25:40.649138 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:26:12.655098 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:32:16.682543 3.000213 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 08:32:23.688715 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:32:31.690028 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:32:36.687368 0.000155 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 08:32:36.687622 0.012354 udp 10.0.2.22 63520 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 08:32:36.700298 0.000000 udp 10.0.2.22 63521 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 08:32:47.692414 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:33:19.699101 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:39:23.704013 3.002687 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 08:39:30.712223 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:39:38.714484 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:39:54.716834 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:40:26.723133 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:45:36.678876 0.000081 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 08:45:36.679066 0.012497 udp 10.0.2.22 63522 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 08:45:36.691934 0.000000 udp 10.0.2.22 63523 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 08:46:30.728445 3.001993 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 08:46:37.736277 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:46:45.738020 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:47:01.740599 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:47:33.747215 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:53:37.754123 3.098257 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 08:53:44.825219 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:53:52.772033 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:54:08.774581 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 08:54:40.780506 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:00:36.682929 0.000068 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 09:00:36.683084 0.013631 udp 10.0.2.22 63524 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 09:00:36.697080 0.000000 udp 10.0.2.22 63525 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 09:00:44.787214 3.001473 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 09:00:51.794399 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:00:59.795830 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:01:15.799026 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:01:47.804664 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:07:51.810656 3.002037 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 09:07:58.818378 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:08:06.820176 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:08:22.822594 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:08:54.829051 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:22:36.680209 0.000106 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 09:22:36.680409 0.013048 udp 10.0.2.22 63526 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 09:22:36.693790 0.000000 udp 10.0.2.22 63527 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 09:25:35.841477 3.001022 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 09:25:42.848031 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:25:50.849960 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:26:06.852665 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:26:38.858998 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:32:36.683435 0.000093 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 09:32:36.683619 0.012030 udp 10.0.2.22 63528 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 09:32:36.695961 0.000000 udp 10.0.2.22 63529 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 09:32:42.870440 2.995647 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 09:32:49.872591 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:32:57.875925 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:33:13.876504 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:33:45.882667 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:39:49.889468 3.000967 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 09:39:56.898309 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:40:04.897643 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:40:20.900666 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:40:52.906894 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:45:36.684224 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 09:45:36.684340 0.011231 udp 10.0.2.22 63530 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 09:45:36.695919 0.000000 udp 10.0.2.22 63531 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 09:46:56.913165 3.001353 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 09:47:03.920176 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:47:11.921819 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:47:27.924551 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:47:59.930854 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:54:05.939660 3.001540 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 09:54:12.947974 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:54:20.948414 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:54:36.951596 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 09:55:08.957672 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:00:36.678872 0.000085 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 10:00:36.679037 0.069279 udp 10.0.2.22 63532 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 10:00:36.748689 0.000000 udp 10.0.2.22 63533 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 10:01:12.963637 3.001503 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 10:01:19.971157 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:01:27.972687 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:01:43.975666 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:02:15.986653 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:08:19.987679 3.001403 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 10:08:26.995074 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:08:34.996659 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:08:50.999614 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:09:23.005096 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:15:27.011357 3.001709 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 10:15:34.018874 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:15:42.020223 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:15:58.023514 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:16:30.029643 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:22:34.035543 3.001546 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 10:22:36.686819 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 10:22:36.686923 0.011245 udp 10.0.2.22 63534 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 10:22:36.698535 0.000000 udp 10.0.2.22 63535 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 10:22:41.042743 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:22:49.044777 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:23:05.047437 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:23:37.053289 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:29:41.062761 2.999555 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 10:29:48.066742 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:29:56.068135 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:30:12.071212 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:30:44.077090 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:32:36.679274 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 10:32:36.679378 0.011607 udp 10.0.2.22 63536 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 10:32:36.691280 0.000000 udp 10.0.2.22 63537 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 10:36:48.083367 3.001668 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 10:36:55.090817 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:37:03.092338 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:37:19.095258 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:37:51.101627 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:43:57.110797 3.001203 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 10:44:04.123385 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:44:12.119132 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:44:28.122584 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:45:00.128203 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:45:36.680757 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 10:45:36.680918 0.015837 udp 10.0.2.22 63538 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 10:45:36.697079 0.000000 udp 10.0.2.22 63539 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 10:51:13.144658 2.998929 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 10:51:20.144632 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:51:28.151644 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:51:44.149093 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:52:16.155325 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:58:20.161850 3.001062 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 10:58:27.168294 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:58:35.170531 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:58:51.173431 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 10:59:23.188932 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:00:36.684712 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 11:00:36.684818 0.011785 udp 10.0.2.22 63540 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 11:00:36.696960 0.000000 udp 10.0.2.22 63541 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 11:05:27.194774 3.001831 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 11:05:34.202759 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:05:42.204012 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:05:58.206797 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:06:30.213019 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:22:36.682643 0.165667 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 11:22:36.848431 0.010788 udp 10.0.2.22 63542 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 11:22:36.859559 0.000000 udp 10.0.2.22 63543 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 11:24:25.221330 3.001740 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 11:24:32.228568 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:24:40.230022 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:24:56.236769 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:25:28.239184 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:31:32.249432 2.998283 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 11:31:39.253079 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:31:47.257596 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:32:03.257076 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:32:35.263376 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:32:36.684960 0.000065 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 11:32:36.685108 0.012449 udp 10.0.2.22 63544 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 11:32:36.697883 0.000000 udp 10.0.2.22 63545 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 11:38:39.269534 3.001178 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 11:38:46.276685 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:38:54.278176 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:39:10.280991 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:39:42.287179 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:45:36.676838 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 11:45:36.676947 0.014452 udp 10.0.2.22 63546 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 11:45:36.691735 0.000000 udp 10.0.2.22 63547 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 11:45:46.293985 3.001053 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 11:45:53.300540 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:46:01.302191 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:46:17.305379 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:46:49.311170 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:52:53.317234 3.001624 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 11:53:00.324512 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:53:08.326206 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:53:24.329119 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 11:53:56.335386 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:00:00.341797 3.012290 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 12:00:07.357401 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:00:15.350012 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:00:31.353344 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:00:36.680993 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 12:00:36.681151 0.012195 udp 10.0.2.22 63548 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 12:00:36.693712 0.000000 udp 10.0.2.22 63549 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 12:01:03.358760 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:07:07.364937 3.001715 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 12:07:14.372719 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:07:22.373900 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:07:38.377222 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:08:10.383106 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:22:36.678692 0.053874 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 12:22:36.732707 0.010257 udp 10.0.2.22 63550 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 12:22:36.743322 0.000000 udp 10.0.2.22 63551 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 12:25:15.390742 3.000277 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 12:25:22.396919 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:25:30.398360 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:25:46.401373 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:26:18.407242 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:32:22.413282 3.001678 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 12:32:29.420676 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:32:36.681551 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 12:32:36.681640 0.021720 udp 10.0.2.22 63552 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 12:32:36.703720 0.000000 udp 10.0.2.22 63553 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 12:32:37.425968 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:32:53.425233 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:33:25.432581 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:39:29.445001 2.995557 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 12:39:36.447956 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:39:44.446228 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:40:00.449475 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:40:32.455213 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:45:36.682892 0.000061 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 12:45:36.683007 0.048218 udp 10.0.2.22 63554 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 12:45:36.731591 0.000000 udp 10.0.2.22 63555 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 12:46:36.462098 3.000998 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 12:46:43.468677 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:46:51.470345 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:47:07.473377 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:47:39.479371 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:53:43.485123 3.001992 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 12:53:50.496260 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:53:58.494427 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:54:14.497280 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 12:54:46.510697 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:00:36.681673 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 13:00:36.681800 0.022553 udp 10.0.2.22 63556 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 13:00:36.704744 0.000000 udp 10.0.2.22 63557 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 13:00:50.516826 2.994158 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 13:00:57.516611 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:01:05.518211 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:01:21.521115 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:01:53.527119 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:07:57.533102 3.001937 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 13:08:04.540504 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:08:12.542749 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:08:28.545252 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:09:00.551175 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:15:04.556799 3.001940 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 13:15:11.564232 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:15:19.566002 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:15:35.568972 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:16:07.576026 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:22:11.583412 2.999417 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 13:22:18.588574 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:22:26.590006 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:22:36.684889 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 13:22:36.684999 0.011124 udp 10.0.2.22 63558 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 13:22:36.696469 0.000000 udp 10.0.2.22 63559 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 13:22:42.600741 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:23:14.599214 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:29:18.604195 3.002465 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 13:29:25.612480 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:29:33.613822 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:29:49.616838 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:30:22.981064 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:32:36.677221 0.000231 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 13:32:36.677579 0.021002 udp 10.0.2.22 63560 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 13:32:36.698970 0.000000 udp 10.0.2.22 63561 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 13:36:25.639513 3.001273 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 13:36:32.646619 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:36:40.648426 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:36:56.651074 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:37:28.657157 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:43:32.664607 3.000035 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 13:43:39.670576 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:43:47.672262 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:44:03.674762 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:44:35.681033 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:45:36.678896 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 13:45:36.678995 0.011924 udp 10.0.2.22 63562 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 13:45:36.691251 0.000000 udp 10.0.2.22 63563 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 13:50:39.686030 3.002577 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 13:50:46.694316 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:50:54.695976 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:51:10.702069 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:51:42.704405 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:57:46.711208 3.001831 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 13:57:53.718963 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:58:01.719962 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:58:17.722482 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 13:58:49.728916 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:00:36.682335 0.000098 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 14:00:36.682527 0.011492 udp 10.0.2.22 63564 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 14:00:36.694346 0.000000 udp 10.0.2.22 63565 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 14:04:53.734713 3.001922 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 14:05:00.742010 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:05:08.756328 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:05:24.753602 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:05:56.752856 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:22:36.680684 0.026991 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 14:22:36.707824 0.010212 udp 10.0.2.22 63566 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 14:22:36.718359 0.000000 udp 10.0.2.22 63567 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 14:24:10.771912 3.007075 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 14:24:17.778033 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:24:25.777433 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:24:41.780224 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:25:13.785927 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:31:17.793362 3.000528 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 14:31:24.799635 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:31:32.801258 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:31:48.804307 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:32:20.810865 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:32:36.683113 0.000069 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 14:32:36.683263 0.011622 udp 10.0.2.22 63568 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 14:32:36.695176 0.000000 udp 10.0.2.22 63569 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 14:38:24.816433 3.001680 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 14:38:31.823861 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:38:39.825792 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:38:55.828318 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:39:27.834396 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:45:36.685041 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 14:45:36.685139 0.011317 udp 10.0.2.22 63570 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 14:45:36.696839 0.000000 udp 10.0.2.22 63571 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 14:45:40.842979 3.001496 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 14:45:47.850863 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:45:55.852048 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:46:11.855287 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:46:43.861161 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:52:47.866854 3.001990 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 14:52:54.874589 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:53:02.876298 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:53:18.878908 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:53:50.885210 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 14:59:54.891337 3.001367 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 15:00:01.898592 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:00:09.900235 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:00:25.903419 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:00:36.678699 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 15:00:36.678856 0.012412 udp 10.0.2.22 63572 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 15:00:36.691575 0.000000 udp 10.0.2.22 63573 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 15:00:57.908976 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:07:01.915673 3.001174 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 15:07:08.922798 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:07:16.924255 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:07:32.927178 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:08:04.940749 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:22:36.676883 0.000066 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 15:22:36.677005 0.010503 udp 10.0.2.22 63574 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 15:22:36.687847 0.000000 udp 10.0.2.22 63575 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 15:25:10.941021 3.001470 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 15:25:17.948388 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:25:25.949975 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:25:41.955622 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:26:13.958945 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:32:17.965380 3.001158 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 15:32:24.972323 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:32:32.973519 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:32:36.679139 0.000053 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 15:32:36.679237 0.011428 udp 10.0.2.22 63576 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 15:32:36.691005 0.000000 udp 10.0.2.22 63577 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 15:32:48.977027 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:33:20.986668 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:39:24.988508 3.002097 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 15:39:32.000624 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:39:39.998033 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:39:56.000339 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:40:28.006960 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:45:36.680175 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 15:45:36.680332 0.011987 udp 10.0.2.22 63578 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 15:45:36.692659 0.000000 udp 10.0.2.22 63579 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 15:46:32.012469 3.003289 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 15:46:39.020559 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:46:47.025427 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:47:03.024838 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:47:35.030804 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:53:39.037138 3.001441 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 15:53:46.044550 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:53:54.045856 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:54:10.048702 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 15:54:42.055074 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:00:36.674206 0.000062 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 16:00:36.674317 0.021811 udp 10.0.2.22 63580 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 16:00:36.696480 0.000000 udp 10.0.2.22 63581 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 16:00:46.060125 3.002392 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 16:00:53.070209 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:01:01.069774 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:01:17.073916 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:01:49.078573 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:07:53.085562 3.000839 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 16:08:00.092192 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:08:08.094051 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:08:24.096766 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:08:56.102776 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:22:36.682637 0.000057 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 16:22:36.682740 0.011423 udp 10.0.2.22 63582 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 16:22:36.694474 0.000000 udp 10.0.2.22 63583 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 16:25:37.114692 3.001579 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 16:25:44.122251 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:25:52.123950 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:26:08.126656 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:26:40.132599 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:32:36.675109 0.000064 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 16:32:36.675220 0.022976 udp 10.0.2.22 63584 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 16:32:36.698535 0.000000 udp 10.0.2.22 63585 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 16:32:44.139887 3.000635 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 16:32:51.146199 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:32:59.150977 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:33:15.152168 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:33:47.156706 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:39:51.162837 3.001452 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 16:39:58.170167 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:40:06.172032 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:40:22.174605 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:40:54.180581 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:45:36.680468 0.000080 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 16:45:36.680638 0.011548 udp 10.0.2.22 63586 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 16:45:36.692559 0.000000 udp 10.0.2.22 63587 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 16:46:58.186774 3.001147 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 16:47:05.196543 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:47:13.195242 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:47:29.198470 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:48:01.204385 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:54:07.213690 3.020319 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 16:54:14.230743 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:54:22.232191 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:54:38.235639 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 16:55:10.241564 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:00:36.684301 0.026743 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 17:00:36.711210 0.011645 udp 10.0.2.22 63588 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 17:00:36.723268 0.000000 udp 10.0.2.22 63589 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 17:01:14.248008 3.007122 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 17:01:21.261510 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:01:29.256635 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:01:45.259549 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:02:17.265495 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:08:21.272056 3.001210 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 17:08:28.278795 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:08:36.280141 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:08:52.283229 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:09:24.289273 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:15:28.295406 3.011367 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 17:15:35.312951 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:15:43.314435 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:15:59.317148 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:16:31.323249 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:22:35.329122 3.001798 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 17:22:36.678670 0.000049 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 17:22:36.678758 0.010658 udp 10.0.2.22 63590 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 17:22:36.689725 0.000000 udp 10.0.2.22 63591 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 17:22:42.336913 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:22:50.338411 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:23:06.341286 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:23:38.347342 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:29:42.353184 3.007956 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 17:29:49.367669 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:29:57.362280 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:30:13.365157 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:30:45.371341 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:32:36.681494 0.000153 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 17:32:36.681754 0.011851 udp 10.0.2.22 63592 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 17:32:36.693942 0.000000 udp 10.0.2.22 63593 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 17:36:49.378960 3.145223 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 17:36:56.496620 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:37:04.431167 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:37:20.399253 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:37:52.405111 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:43:57.412727 3.001852 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 17:44:04.419898 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:44:12.421708 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:44:28.424506 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:45:00.430547 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:45:36.682810 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 17:45:36.682973 0.021364 udp 10.0.2.22 63594 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 17:45:36.704663 0.000000 udp 10.0.2.22 63595 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 17:51:13.439597 3.001722 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 17:51:20.446845 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:51:28.448395 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:51:44.451331 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:52:16.457816 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:58:20.464771 3.000314 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 17:58:27.471248 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:58:35.472530 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:58:51.475640 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 17:59:23.483974 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:00:36.676992 0.000058 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 18:00:36.677114 0.016797 udp 10.0.2.22 63596 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 18:00:36.694273 0.000000 udp 10.0.2.22 63597 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 18:05:27.487932 3.001225 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 18:05:34.495225 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:05:42.496432 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:05:58.499311 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:06:30.505060 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:22:36.674610 0.000104 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 18:22:36.674803 0.011858 udp 10.0.2.22 63598 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 18:22:36.686997 0.000000 udp 10.0.2.22 63599 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 18:24:25.513841 3.018585 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 18:24:32.531066 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:24:40.532603 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:24:56.535648 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:25:28.541728 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:31:32.546910 3.002661 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 18:31:39.554962 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:31:47.556534 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:32:03.559731 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:32:35.566907 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:32:36.677251 0.000251 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 18:32:36.677603 0.021779 udp 10.0.2.22 63600 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 18:32:36.699761 0.000000 udp 10.0.2.22 63601 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 18:38:39.573550 3.000239 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 18:38:46.579203 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:38:54.580467 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:39:10.584019 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:39:42.596677 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:45:36.678186 0.000089 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 18:45:36.678376 0.011487 udp 10.0.2.22 63602 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 18:45:36.690214 0.000000 udp 10.0.2.22 63603 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 18:45:46.595637 3.002034 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 18:45:53.602407 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:46:01.604382 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:46:17.614854 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:46:49.613519 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:52:53.619417 3.002049 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 18:53:00.627214 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:53:08.628378 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:53:24.631834 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 18:53:56.637338 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:00:00.644161 3.000767 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 19:00:07.650536 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:00:15.651813 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:00:31.655130 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:00:36.672730 0.000140 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 19:00:36.672981 0.012404 udp 10.0.2.22 63604 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 19:00:36.685728 0.000000 udp 10.0.2.22 63605 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 19:01:03.661674 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:07:07.667283 3.001638 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 19:07:14.674832 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:07:22.675817 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:07:38.679275 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:08:10.685702 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:22:36.682748 0.000095 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 19:22:36.682941 0.010632 udp 10.0.2.22 63606 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 19:22:36.693936 0.000000 udp 10.0.2.22 63607 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 19:25:16.692971 3.001500 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 19:25:23.700808 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:25:31.702386 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:25:47.705449 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:26:19.712010 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:32:23.717093 3.001757 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 19:32:30.724297 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:32:36.673107 0.000090 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 19:32:36.673347 0.012015 udp 10.0.2.22 63608 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 19:32:36.685704 0.000000 udp 10.0.2.22 63609 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 19:32:38.726288 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:32:54.729177 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:33:26.735122 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:39:30.741171 3.001818 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 19:39:37.748650 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:39:45.750239 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:40:01.753138 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:40:33.765753 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:45:36.674354 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 19:45:36.674520 0.011251 udp 10.0.2.22 63610 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 19:45:36.686051 0.000000 udp 10.0.2.22 63611 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 19:46:37.764766 3.001997 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 19:46:44.772523 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:46:52.774536 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:47:08.777225 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:47:40.783249 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:53:44.789203 3.001738 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 19:53:51.796378 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:53:59.798161 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:54:15.800849 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 19:54:47.807084 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:00:36.678725 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 20:00:36.678894 0.022386 udp 10.0.2.22 63612 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 20:00:36.701740 0.000000 udp 10.0.2.22 63613 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 20:00:51.812650 3.003135 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 20:00:58.820776 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:01:06.822118 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:01:22.824982 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:01:54.831138 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:07:58.837278 3.001263 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 20:08:05.844494 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:08:13.846586 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:08:29.848964 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:09:01.855004 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:15:05.861979 3.000634 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 20:15:12.868683 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:15:20.870920 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:15:36.872799 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:16:08.878991 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:22:12.885071 3.001588 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 20:22:19.892438 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:22:27.894484 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:22:36.676805 0.000086 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 20:22:36.676988 0.010332 udp 10.0.2.22 63614 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 20:22:36.687678 0.000000 udp 10.0.2.22 63615 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 20:22:43.901635 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:23:15.902958 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:29:19.909083 3.001573 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 20:29:27.111194 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:29:35.034678 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:29:50.931219 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:30:22.936913 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:32:36.679534 0.000059 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 20:32:36.679679 0.018575 udp 10.0.2.22 63616 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 20:32:36.698586 0.000000 udp 10.0.2.22 63617 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 20:36:26.944550 3.207672 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 20:36:34.122938 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:36:42.050207 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:36:57.964863 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:37:29.970949 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:43:33.977016 3.001378 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 20:43:40.984654 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:43:48.986026 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:44:04.989414 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:44:36.998235 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:45:36.680800 0.000060 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 20:45:36.680905 0.015644 udp 10.0.2.22 63618 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 20:45:36.696926 0.000000 udp 10.0.2.22 63619 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 20:50:41.001237 3.001456 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 20:50:48.008148 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:50:56.009948 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:51:12.012740 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:51:44.018857 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:57:48.029697 3.000459 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 20:57:55.039012 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:58:03.037752 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:58:19.036818 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 20:58:51.042860 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:00:36.674910 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 21:00:36.675022 0.015058 udp 10.0.2.22 63620 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 21:00:36.690441 0.000000 udp 10.0.2.22 63621 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 21:04:55.049250 3.001248 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 21:05:02.056220 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:05:10.058561 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:05:26.278082 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:05:58.076885 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:22:36.673738 0.013545 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 21:22:36.687521 0.010745 udp 10.0.2.22 63622 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 21:22:36.698635 0.000000 udp 10.0.2.22 63623 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 21:24:07.085528 3.001328 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 21:24:14.092904 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:24:22.094263 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:24:38.107214 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:25:10.113069 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:31:14.119075 3.001764 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 21:31:21.126667 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:31:29.128294 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:31:45.131025 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:32:17.137153 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:32:36.674863 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 21:32:36.675022 0.011350 udp 10.0.2.22 63624 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 21:32:36.686646 0.000000 udp 10.0.2.22 63625 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 21:38:21.146715 2.998271 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 21:38:28.195844 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:38:36.162045 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:38:52.165401 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:39:24.171396 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:45:32.183060 3.001457 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 21:45:36.676879 0.000073 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 21:45:36.677051 0.013135 udp 10.0.2.22 63626 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 21:45:36.690541 0.000000 udp 10.0.2.22 63627 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 21:45:39.190301 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:45:47.191629 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:46:03.194756 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:46:35.200868 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:52:39.207037 3.001584 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 21:52:46.214527 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:52:54.215929 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:53:10.218946 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:53:42.225020 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 21:59:46.231297 3.001044 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 21:59:53.238196 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:00:01.239738 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:00:17.242787 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:00:36.680464 0.000111 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 22:00:36.680678 0.021767 udp 10.0.2.22 63628 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 22:00:36.702795 0.000000 udp 10.0.2.22 63629 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 22:00:49.248807 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:06:53.255216 3.001339 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 22:07:00.262264 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:07:08.275834 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:07:24.267764 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:07:56.272737 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:22:36.678998 0.135161 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 22:22:36.814277 0.011435 udp 10.0.2.22 63630 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 22:22:36.826071 0.000000 udp 10.0.2.22 63631 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 22:25:06.286521 3.001597 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 22:25:13.293543 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:25:21.295192 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:25:37.299233 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:26:09.314102 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:32:13.320440 3.001511 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 22:32:20.327708 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:32:28.329213 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:32:36.671350 0.000052 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 22:32:36.671446 0.011434 udp 10.0.2.22 63632 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 22:32:36.683167 0.000000 udp 10.0.2.22 63633 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 22:32:44.333849 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:33:16.338488 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:39:20.344689 3.001246 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 22:39:27.351831 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:39:35.354133 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:39:51.357332 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:40:23.364472 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:45:36.672188 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 22:45:36.672293 0.012307 udp 10.0.2.22 63634 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 22:45:36.684961 0.000000 udp 10.0.2.22 63635 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 22:46:27.368441 3.006177 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 22:46:34.375782 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:46:42.377428 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:46:58.381946 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:47:30.385713 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:53:34.392873 3.000982 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 22:53:41.399422 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:53:49.401582 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:54:05.404062 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 22:54:37.410858 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:00:36.678527 0.000111 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 23:00:36.678744 0.011435 udp 10.0.2.22 63636 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 23:00:36.690555 0.000000 udp 10.0.2.22 63637 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 23:00:41.416523 3.001618 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 23:00:48.423605 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:00:56.428592 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:01:12.427898 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:01:44.434457 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:07:48.442232 2.999427 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 23:07:55.447551 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:08:03.448972 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:08:19.452248 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:08:51.458123 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:22:36.674450 0.000047 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 23:22:36.674610 0.012263 udp 10.0.2.22 63638 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 23:22:36.687169 0.000000 udp 10.0.2.22 63639 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 23:25:34.473882 3.000608 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 23:25:41.480877 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:25:49.509049 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:26:05.529107 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:26:37.490468 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:32:36.677748 0.000072 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 23:32:36.677902 0.011723 udp 10.0.2.22 63640 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 23:32:36.690018 0.000000 udp 10.0.2.22 63641 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 23:32:41.496431 3.001972 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 23:32:48.504165 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:32:56.505831 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:33:12.508919 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:33:44.515410 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:39:48.522674 3.010921 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 23:39:55.538353 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:40:03.540469 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:40:19.542379 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:40:51.550316 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:45:36.678734 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/19 23:45:36.678902 0.012218 udp 10.0.2.22 63642 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/19 23:45:36.691458 0.000000 udp 10.0.2.22 63643 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/19 23:46:55.554536 3.001946 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 23:47:02.562175 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:47:10.563713 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:47:26.567119 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:47:58.572927 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:54:02.578302 3.002303 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/19 23:54:09.586151 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:54:17.587929 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:54:33.590406 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/19 23:55:05.597159 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:00:36.672168 0.000055 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 00:00:36.672263 0.022500 udp 10.0.2.22 63644 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/20 00:00:36.695142 0.000000 udp 10.0.2.22 63645 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/20 00:01:09.602957 3.001375 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 00:01:16.610079 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:01:24.613801 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:01:40.614397 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:02:12.620450 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:08:16.626672 3.075269 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 00:08:23.682435 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:08:31.649065 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:08:47.650588 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:09:19.654034 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:15:23.661237 3.001289 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 00:15:30.669017 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:15:38.669999 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:15:54.672421 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:16:26.678993 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:22:30.684401 3.001627 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 00:22:36.670734 0.000067 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 00:22:36.670886 0.010109 udp 10.0.2.22 63646 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/20 00:22:36.681325 0.000000 udp 10.0.2.22 63647 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/20 00:22:37.692272 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:22:45.693405 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:23:01.696623 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:23:33.702030 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:29:37.717823 3.001972 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 00:29:44.726175 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:29:53.553755 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:30:09.375553 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:30:40.988161 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:32:36.673876 0.000044 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 00:32:36.673983 0.011463 udp 10.0.2.22 63648 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/20 00:32:36.685784 0.000000 udp 10.0.2.22 63649 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/20 00:36:44.752722 3.001131 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 00:36:51.759881 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:36:59.761314 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:37:15.763848 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:37:47.770384 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:43:51.912719 2.995505 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 00:43:58.914089 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:44:06.916453 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:44:22.923621 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:44:54.924309 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:45:36.745296 0.000070 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 00:45:36.745417 0.014607 udp 10.0.2.22 63650 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/20 00:45:36.760389 0.000000 udp 10.0.2.22 63651 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/20 00:51:05.941008 3.011468 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 00:51:12.958221 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:51:20.960093 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:51:36.962633 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:52:08.968590 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:58:12.975650 3.000768 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 00:58:19.982265 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:58:27.983261 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:58:43.986551 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 00:59:15.992502 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:00:36.678855 0.000079 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 01:00:36.679057 0.022532 udp 10.0.2.22 63652 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/20 01:00:36.701963 0.000000 udp 10.0.2.22 63653 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/20 01:05:19.998733 3.005183 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 01:05:27.005934 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:05:35.007832 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:05:51.010843 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:06:23.016514 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:22:36.786966 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 01:22:36.787063 0.011176 udp 10.0.2.22 63654 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/20 01:22:36.798606 0.000000 udp 10.0.2.22 63655 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/20 01:24:22.180706 3.002014 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 01:24:29.188317 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:24:37.189909 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:24:53.192914 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:25:25.198867 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:31:29.205552 3.000918 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 01:31:36.212318 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:31:44.213819 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:32:00.217055 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:32:32.222712 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:32:36.779323 0.150469 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 01:32:36.930125 0.014137 udp 10.0.2.22 63656 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/20 01:32:36.944682 0.000000 udp 10.0.2.22 63657 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/20 01:38:36.229184 3.001533 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 01:38:43.235814 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:38:51.237840 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:39:07.240645 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:39:39.246706 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:45:36.781004 0.000164 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 01:45:36.781272 0.011791 udp 10.0.2.22 63658 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/20 01:45:36.793417 0.000000 udp 10.0.2.22 63659 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/20 01:45:43.262774 3.001750 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 01:45:50.270270 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:45:58.271983 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:46:14.275236 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:46:46.280886 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:52:50.297066 3.001396 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 01:52:57.308286 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:53:05.547824 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:53:21.395520 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:53:53.324880 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 01:59:57.331125 3.001571 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 02:00:04.338041 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:00:13.171615 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:00:28.982137 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:00:37.307746 0.000051 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 02:00:37.307855 0.021991 udp 10.0.2.22 63660 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/20 02:00:37.330219 0.000000 udp 10.0.2.22 63661 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/20 02:01:00.598088 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:07:04.364468 3.001915 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 02:07:11.373965 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:07:19.373854 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:07:35.376568 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:08:07.384471 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:22:36.782830 0.000050 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 02:22:36.782929 0.014099 udp 10.0.2.22 63662 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/20 02:22:36.797592 0.000000 udp 10.0.2.22 63663 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/20 02:25:15.403644 3.001429 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 02:25:22.410890 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:25:30.412550 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:25:46.415267 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:26:18.421485 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:32:22.427750 3.001091 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 02:32:37.560902 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:32:44.796766 0.000046 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 02:32:44.796864 0.011324 udp 10.0.2.22 63664 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/20 02:32:44.808520 0.000000 udp 10.0.2.22 63665 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/20 02:32:45.450600 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:33:01.242341 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:33:32.809922 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:39:31.769602 3.530596 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 2 292 flow=Background 1970/01/20 02:39:37.276483 3.942982 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 2 292 flow=Background 1970/01/20 02:39:49.110259 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:40:04.892152 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:40:38.833835 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:45:38.951583 0.000054 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 02:45:38.951720 0.011971 udp 10.0.2.22 63666 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/20 02:45:38.964011 0.000000 udp 10.0.2.22 63667 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/20 02:46:37.857133 2.957318 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 02:46:44.766810 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:46:52.657053 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:47:08.431741 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:47:40.764118 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:53:43.539491 3.001447 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 02:53:50.546817 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:53:58.548115 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:54:14.551343 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 02:54:46.557125 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:00:36.780299 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 03:00:36.780470 0.011697 udp 10.0.2.22 63668 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/20 03:00:36.792507 0.000000 udp 10.0.2.22 63669 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/20 03:00:50.563086 3.001843 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 03:00:57.570573 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:01:05.572115 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:01:21.575054 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:01:53.585115 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:07:57.586558 3.002363 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 03:08:04.594560 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:08:12.596023 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:08:28.599011 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:09:00.605023 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:15:04.611781 3.000939 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 03:15:11.619027 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:15:19.620323 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:15:35.623269 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:16:07.629231 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:22:11.634369 3.004241 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 03:22:18.642945 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:22:26.644270 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:22:36.778851 0.000048 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 03:22:36.778949 0.012495 udp 10.0.2.22 63670 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/20 03:22:36.791776 0.000000 udp 10.0.2.22 63671 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/20 03:22:42.647000 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:23:14.653017 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:29:18.658940 3.001916 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 03:29:25.833003 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:29:33.761946 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:29:49.686494 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:30:21.687113 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:32:36.782089 0.000148 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 03:32:36.782351 0.012437 udp 10.0.2.22 63672 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/20 03:32:36.795150 0.000000 udp 10.0.2.22 63673 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/20 03:36:25.693248 3.001508 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 03:36:32.700402 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:36:40.701994 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:36:56.704650 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:37:28.711178 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:43:32.717885 3.000818 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 03:43:39.724296 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:43:47.730501 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:44:03.729170 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:44:35.745026 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:45:36.782900 0.000045 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 03:45:36.782992 0.011037 udp 10.0.2.22 63674 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/20 03:45:36.794350 0.000000 udp 10.0.2.22 63675 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/20 03:50:40.753216 3.101840 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 03:50:47.829509 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:50:55.773474 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:51:11.774151 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:51:43.780441 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:57:47.787269 3.000974 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 03:57:54.793351 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:58:02.795152 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:58:18.798135 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 03:58:50.804243 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:00:36.787264 0.000128 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 04:00:36.787498 0.012042 udp 10.0.2.22 63676 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/20 04:00:36.799901 0.000000 udp 10.0.2.22 63677 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/20 04:04:54.810779 3.001286 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 04:05:01.817808 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:05:09.819552 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:05:25.821989 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:05:57.828563 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:22:36.784725 0.006589 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 04:22:36.791485 0.011536 udp 10.0.2.22 63678 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/20 04:22:36.803372 0.000000 udp 10.0.2.22 63679 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/20 04:24:07.838503 3.001413 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 04:24:14.845973 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:24:22.847198 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:24:38.850291 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:25:10.856249 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:31:14.862291 3.001359 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 04:31:21.869571 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:31:29.871282 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:31:45.874095 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:32:18.017829 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:32:36.787476 0.000056 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 04:32:36.787585 0.011512 udp 10.0.2.22 63680 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/20 04:32:36.799449 0.000000 udp 10.0.2.22 63681 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/20 04:38:21.895951 3.002255 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 04:38:28.903194 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:38:36.905056 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:38:52.908530 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:39:24.914085 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:45:33.927675 3.001506 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 04:45:36.778758 0.000063 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 04:45:36.778926 0.021228 udp 10.0.2.22 63682 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/20 04:45:36.800462 0.000000 udp 10.0.2.22 63683 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/20 04:45:40.934768 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:45:48.935914 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:46:04.939355 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:46:36.945389 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:52:40.951574 3.001436 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 04:52:47.958885 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:52:55.959814 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:53:11.962943 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:53:43.968939 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 04:59:47.975603 3.001354 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 04:59:54.982633 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 05:00:02.984345 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 05:00:18.987786 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 05:00:36.787874 0.000071 arp 10.0.2.22 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/20 05:00:36.788026 0.011860 udp 10.0.2.22 63684 <-> 8.8.8.8 53 CON 0 0 2 388 flow=From-Botnet-V1-DNS 1970/01/20 05:00:36.800208 0.000000 udp 10.0.2.22 63685 -> 194.165.17.4 123 INT 0 1 62 flow=From-Botnet-V1-UDP-Attempt 1970/01/20 05:00:50.993140 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 05:06:54.999243 3.001801 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 3 438 flow=Background 1970/01/20 05:07:02.006614 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 05:07:10.008402 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 05:07:26.011385 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background 1970/01/20 05:07:58.017262 0.000000 udp fe80::705a:530f:1701:e8a5 546 -> ff02::1:2 547 REQ 0 1 146 flow=Background